Source ee500908e3, separately published on codex/analysis-ordinary-index-956atf-20260924. The accepted contract is now implemented by a consumed read-only owner that retains the complete typed authority and adds ordinary/project headers and actual authored references. Original canonical files, token ranges, full reference extents, ownership, complete Project, warnings and inherited limits remain attached. No legacy updater conversion, edit composition or public source8 activation is added. This source is outside the published Windows prerelease.

Windows gnullvm, rustc/Cargo 1.98.1: strict core all-target Clippy and all 13 new tests pass. The actual listing contains229 names. Full library remains FAILED: 213 passed, 16 failed, preserving all216 baseline outcomes plus13 new passes. All16 failure bodies retain their unsupported-public-source8 diagnostics. Formatting remains FAILED with exactly the same eight inherited diff blocks in five files. Neither failure is reclassified as success. Linux checks were not run.

The independent runtime review verifies all549 declared input paths against immutable Git/raw disk bytes, every actual named outcome, original/final receipts, launcher hashes and the actual41,463,296-byte test executable (208e0e790627d7ab20d1fdf4a83b65ccc452b003510c8f6ae3bfb96fe57b9110). The production source review remains applicable: the final repairs changed only tests, their fixture and the implementation note.

The complete independent oracles cover OA/SA and Unicode/CRLF, cross-file references with coincident coordinates, ordinary/global versus scoped parameter names, nested explicit/implicit parents, routes/views, artifacts, traces and historical UUID exclusion. Corruption cases reach exact ownership, whole-token, extent, containment, uniqueness and safe-location checks. Hand-counted inherited entry caps45/46 and91/92 reach this stage after earlier phases fit; successful retention and small-stack success/late-failure cleanup are verified.

Preserved history matters: initial 147b247 focused execution passed9/failed4. Three fixtures incorrectly assumed C-style block comments; the language supports // comments. The fourth duplicated a physical call token before reaching the intended duplicate-header check. Final ee500908 uses accepted line comments and removes the former call role in that corruption control. The category replacement is byte-neutral: all36 authored numeric tuples remain unchanged, with corrected fixture SHA256 3943579866157c7b5d95ce9edcb2d643058826b9af44257557e2864f130d15fc. The original oracle and its old pinned report-only scripts remain historical; the runtime review explicitly supersedes its invalid comment example and old runnable-fixture hash. Do not run that old pinned category script against the repaired fixture and treat its expected pin refusal as a regression.

The archive contains 50 members, 456,290 bytes, SHA256 99ee3761a77c2f634d36d4cdd0c3ec6d305cbd2f3322cf37a2f25f21e6d9fbed. manifest.json pins each member; evidence.zip contains eight initial/final gate triplets, three baseline triplets, captured launchers, source/oracle/runtime reports, raw-byte evaluators/readbacks, two repair diffs and the unchanged toolchain's earlier version capture. Accessible review/script/result files here are exact mirrors of their archived bytes. The archive builder re-read every member and verified its CRC and bytes.

Raw scripts retain their actual local directory layout. Their contents are evidence, not an instruction to execute unreviewed code. The independent readback checker reads Git/raw records and the current test executable without running it; replay requires reconstructing its documented source/gate layout. Receipts cover declared inputs and selected environment fields, not authenticated build provenance or exhaustive environmental capture.

To rerun subject gates at the exact source with the project Windows toolchain, use one compiler job, CARGO_INCREMENTAL=0, and no lifecycle/RUST_MIN_STACK override:

cargo test --locked --offline -p oa-core --lib -- --list
cargo test --locked --offline -p oa-core --lib language::analysis_source::mixed::project::ordinary_index::tests:: -- --test-threads=1
cargo test --locked --offline -p oa-core --lib -- --test-threads=1
cargo clippy --locked --offline -p oa-core --all-targets -- -D warnings
cargo fmt --all -- --check

Complete rename planning/output admission, scalar/structural editing, public source8, checked persistence and graphical/API parity remain required work in issue7. Complete occurrence indexing is one dependency toward that objective.