Supersedes the earlier candidate proof below for current head f1b3fc5094, tree 224f8796663973ed3a5966fcdee09cfb2c1667c9, base 831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99.
Operator explicitly approved a test-only US-097 verification enabler after prior head's PR CI passed and push CI failed one live audit JSON read. Controlled actual registered administrator-command RED proves incomplete in-flight observation fails strict parsing; completed malformed export still fails. Strict reads serialize on the actual fixture-owned log writer; original ownership settlement precedes direct assertions; initial baselines and revoked-inspection predicate also serialize. Native callback pumping is exercised from pending delivery/zero success exports through exact issued authority/count and central command stages. Existing five-second observation and separate inherited five-second settlement bounds retained, not combined or raised. No production/shared-parser/Gradle/CI/heap/gameplay changes or malformed-data suppression.
Final affected proof: 94 native + 50 persistence, zero failures/errors/skips. Own frozen ./gradlew clean check jar --no-daemon passed at 2026-10-07T22:51:24Z: 2358 tests (447 API / 1859 native / 52 tools), zero failures/errors/skips, 15 tasks executed, 17m10s; all646 input hashes unchanged. Manifest SHA-256 f382090bdd37ef0dd1642ee33fd840cfd825a3d30302555c5640073439a438c4; only one test file differs from previous published head 6dc706b. All40 Tail safety cases and20 admin identity/equipment cases have zero listener SEVERE. Scoped read-only test/implementation review finds no blocker, not plugin security clearance.
CI execution plan separately approved: temporarily enable only identity15 worker3 for new-head push/PR checks, then restore pause; resources/MTU/partition/other registrations unchanged. Both actual current-head gates required; no merge/check bypass or blind retry. FS-SEC-13–16/conditional10/platform/scanner/release/deployment clearance remains separate. Stop after approved US-097 source/wiki publication.
Historical candidate evidence
Approved scope
US-097: FS-SEC-11/12 only, through registered learned Revive and administrator /fstickadmin revive selection. Generation/operation-bound durable delivery fences and conditional cleanup prevent revoked/legacy reference upgrades and delayed/reentrant inventory loss. Preserve existing age/permission/cooldown rules, ordinary target state, character progress, transfer and normal entry. No configuration, dependency, runner/tooling or deployment changes.
Verification
Verified commit 6dc706b6ff32f6d063a20903eac1c53dd700e6d8; tree b2279a842f8c4958ecc12f72dc491a068d30a14e; base 831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99.
Meaningful both-route registered RED: occupied destination (2), revoked/legacy authority (6), cancellation/commit races (4), finalized-PvP projection (2 new route failures plus existing coin/death continuation). Retained failed full-gate evidence exposed the real projection invariant regression; zero-escrow reference projection fixes it without changing saved coin/reward rules.
This branch's fresh ./gradlew clean check jar --no-daemon: 2,355 tests pass (447 API / 1,856 native / 52 tools), zero failures/errors/skips, Java 25 / declared Purpur 26.2 build 2618 / existing native 1 GiB. All 646 frozen input hashes unchanged.
Manifest SHA-256 2167f44a6a401e1272bc9e5bf3a8c2e85d09a12c0de07eac37c2f393e8110c3b; evidence retained at /tmp/us097-evidence-o3hyYT/full-second*. All 668 retained severity/first-cause signatures match the initial full run; comparison to clean base attributes 20 removed diagnostics solely to scoped strict view-port corrections. This is not blanket native/security clearance.
Integration and holds
Required current-head PR checks/reviews still gate merge; empty protection rules do not waive them. Coordinator must fetch and prove merged-tree equality before story completion. Merge may trigger the existing release workflow, but final-plugin security/scanner/platform advisory disposition, other findings, exact-source successful CI/release and published artifacts remain separate. No Fantasy Stick GitOps pin, push, deployment or next story is selected.
## Current verified audit-observation enabler
Supersedes the earlier candidate proof below for current head f1b3fc50942078d381cd15ff4a51c0fd53cc8767, tree `224f8796663973ed3a5966fcdee09cfb2c1667c9`, base `831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99`.
Operator explicitly approved a test-only US-097 verification enabler after prior head's PR CI passed and push CI failed one live audit JSON read. Controlled actual registered administrator-command RED proves incomplete in-flight observation fails strict parsing; completed malformed export still fails. Strict reads serialize on the actual fixture-owned log writer; original ownership settlement precedes direct assertions; initial baselines and revoked-inspection predicate also serialize. Native callback pumping is exercised from pending delivery/zero success exports through exact issued authority/count and central command stages. Existing five-second observation and separate inherited five-second settlement bounds retained, not combined or raised. No production/shared-parser/Gradle/CI/heap/gameplay changes or malformed-data suppression.
Final affected proof: 94 native + 50 persistence, zero failures/errors/skips. Own frozen `./gradlew clean check jar --no-daemon` passed at 2026-10-07T22:51:24Z: **2358 tests (447 API / 1859 native / 52 tools)**, zero failures/errors/skips, 15 tasks executed, 17m10s; all646 input hashes unchanged. Manifest SHA-256 `f382090bdd37ef0dd1642ee33fd840cfd825a3d30302555c5640073439a438c4`; only one test file differs from previous published head `6dc706b`. All40 Tail safety cases and20 admin identity/equipment cases have zero listener SEVERE. Scoped read-only test/implementation review finds no blocker, not plugin security clearance.
CI execution plan separately approved: temporarily enable only identity15 worker3 for new-head push/PR checks, then restore pause; resources/MTU/partition/other registrations unchanged. Both actual current-head gates required; no merge/check bypass or blind retry. FS-SEC-13–16/conditional10/platform/scanner/release/deployment clearance remains separate. Stop after approved US-097 source/wiki publication.
## Historical candidate evidence
## Approved scope
[US-097](https://git.garvis.dev/dmg/somc-okf/src/branch/main/user-stories/purpur-fantasy-stick/us-097-preserve-tail-revival-authority-and-items.md): FS-SEC-11/12 only, through registered learned Revive and administrator `/fstickadmin revive` selection. Generation/operation-bound durable delivery fences and conditional cleanup prevent revoked/legacy reference upgrades and delayed/reentrant inventory loss. Preserve existing age/permission/cooldown rules, ordinary target state, character progress, transfer and normal entry. No configuration, dependency, runner/tooling or deployment changes.
## Verification
- Verified commit `6dc706b6ff32f6d063a20903eac1c53dd700e6d8`; tree `b2279a842f8c4958ecc12f72dc491a068d30a14e`; base `831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99`.
- Meaningful both-route registered RED: occupied destination (2), revoked/legacy authority (6), cancellation/commit races (4), finalized-PvP projection (2 new route failures plus existing coin/death continuation). Retained failed full-gate evidence exposed the real projection invariant regression; zero-escrow reference projection fixes it without changing saved coin/reward rules.
- Affected GREEN: 71 native + 50 persistence tests; 40 story-specific native cases, zero listener SEVERE.
- This branch's fresh `./gradlew clean check jar --no-daemon`: **2,355 tests pass (447 API / 1,856 native / 52 tools), zero failures/errors/skips**, Java 25 / declared Purpur 26.2 build 2618 / existing native 1 GiB. All 646 frozen input hashes unchanged.
- Manifest SHA-256 `2167f44a6a401e1272bc9e5bf3a8c2e85d09a12c0de07eac37c2f393e8110c3b`; evidence retained at `/tmp/us097-evidence-o3hyYT/full-second*`. All 668 retained severity/first-cause signatures match the initial full run; comparison to clean base attributes 20 removed diagnostics solely to scoped strict view-port corrections. This is not blanket native/security clearance.
## Integration and holds
Required current-head PR checks/reviews still gate merge; empty protection rules do not waive them. Coordinator must fetch and prove merged-tree equality before story completion. Merge may trigger the existing release workflow, but final-plugin security/scanner/platform advisory disposition, other findings, exact-source successful CI/release and published artifacts remain separate. No Fantasy Stick GitOps pin, push, deployment or next story is selected.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Current verified audit-observation enabler
Supersedes the earlier candidate proof below for current head
f1b3fc5094, tree224f8796663973ed3a5966fcdee09cfb2c1667c9, base831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99.Operator explicitly approved a test-only US-097 verification enabler after prior head's PR CI passed and push CI failed one live audit JSON read. Controlled actual registered administrator-command RED proves incomplete in-flight observation fails strict parsing; completed malformed export still fails. Strict reads serialize on the actual fixture-owned log writer; original ownership settlement precedes direct assertions; initial baselines and revoked-inspection predicate also serialize. Native callback pumping is exercised from pending delivery/zero success exports through exact issued authority/count and central command stages. Existing five-second observation and separate inherited five-second settlement bounds retained, not combined or raised. No production/shared-parser/Gradle/CI/heap/gameplay changes or malformed-data suppression.
Final affected proof: 94 native + 50 persistence, zero failures/errors/skips. Own frozen
./gradlew clean check jar --no-daemonpassed at 2026-10-07T22:51:24Z: 2358 tests (447 API / 1859 native / 52 tools), zero failures/errors/skips, 15 tasks executed, 17m10s; all646 input hashes unchanged. Manifest SHA-256f382090bdd37ef0dd1642ee33fd840cfd825a3d30302555c5640073439a438c4; only one test file differs from previous published head6dc706b. All40 Tail safety cases and20 admin identity/equipment cases have zero listener SEVERE. Scoped read-only test/implementation review finds no blocker, not plugin security clearance.CI execution plan separately approved: temporarily enable only identity15 worker3 for new-head push/PR checks, then restore pause; resources/MTU/partition/other registrations unchanged. Both actual current-head gates required; no merge/check bypass or blind retry. FS-SEC-13–16/conditional10/platform/scanner/release/deployment clearance remains separate. Stop after approved US-097 source/wiki publication.
Historical candidate evidence
Approved scope
US-097: FS-SEC-11/12 only, through registered learned Revive and administrator
/fstickadmin reviveselection. Generation/operation-bound durable delivery fences and conditional cleanup prevent revoked/legacy reference upgrades and delayed/reentrant inventory loss. Preserve existing age/permission/cooldown rules, ordinary target state, character progress, transfer and normal entry. No configuration, dependency, runner/tooling or deployment changes.Verification
6dc706b6ff32f6d063a20903eac1c53dd700e6d8; treeb2279a842f8c4958ecc12f72dc491a068d30a14e; base831c0ff3f6efdd8ac7ecd402aaf157fedcd80a99../gradlew clean check jar --no-daemon: 2,355 tests pass (447 API / 1,856 native / 52 tools), zero failures/errors/skips, Java 25 / declared Purpur 26.2 build 2618 / existing native 1 GiB. All 646 frozen input hashes unchanged.2167f44a6a401e1272bc9e5bf3a8c2e85d09a12c0de07eac37c2f393e8110c3b; evidence retained at/tmp/us097-evidence-o3hyYT/full-second*. All 668 retained severity/first-cause signatures match the initial full run; comparison to clean base attributes 20 removed diagnostics solely to scoped strict view-port corrections. This is not blanket native/security clearance.Integration and holds
Required current-head PR checks/reviews still gate merge; empty protection rules do not waive them. Coordinator must fetch and prove merged-tree equality before story completion. Merge may trigger the existing release workflow, but final-plugin security/scanner/platform advisory disposition, other findings, exact-source successful CI/release and published artifacts remain separate. No Fantasy Stick GitOps pin, push, deployment or next story is selected.