PASS self-check: fixed OA/SA fixture, exact name-only predictions, explicit retained-file origin policy