E0_Application_Fidelity_Audit_CODEX.md
Memory Rebuild Docs/Flattening/Reviews/Stage 6 Reviews/Stage 6 E0 Red Teaming/E0_Application_Fidelity_Audit_CODEX.md
ELNOR REPO READER TEXT MIRROR Original path: Memory Rebuild Docs/Flattening/Reviews/Stage 6 Reviews/Stage 6 E0 Red Teaming/E0_Application_Fidelity_Audit_CODEX.md Source repo: /Users/OpenClaw1/Elnor/Elnor Specs Git branch: main Git commit: dbaa25962edc11ab30e8d4ca1715f9ae5bf77331 Generated: 2026-06-09T01:23:58.539Z --- # E0 / DOC80 Core — Application-Fidelity & Regression Audit (CODEX) ## Start / Repo Access Repo access confirmed. I read the local working tree at `/Users/OpenClaw1/Elnor/Elnor Specs`, on branch `main`, with `origin` set to `https://github.com/wbrody/Elnor-Specs.git`. Files read: - `Memory Rebuild Docs/Stage_6_Charters/E0_DOC80_Core/E0_CODEX_Application_Audit_Prompt.md` - `Memory Rebuild Docs/Stage_6_Charters/E0_DOC80_Core/Charter_Draft.md` - `Memory Rebuild Docs/Flattening/Reviews/Stage 6 Reviews/Stage 6 E0 Red Teaming/DOC80 S6 E0 RT Adj Card R2.md` - `Memory Rebuild Docs/Flattening/Reviews/Stage 6 Reviews/Stage 6 E0 Red Teaming/DOC80 S6 E0 RT Adj Card R3.md` - `Memory Rebuild Docs/Stage_6_Charters/E0_DOC80_Core/E0_Application_Report.md` - `Memory Rebuild Docs/Stage_6_Charters/E0_DOC80_Core/E0_Application_Commission_Claude_Code.md` - `Memory Rebuild Docs/DOC80 Target Baseline/Skeletal Spec/DOC80_Skeletal_Target_Baseline.md` - `Memory Rebuild Docs/DOC80 Target Baseline/Owner Map/DOC80_Owner_Map.md` - `Memory Rebuild Docs/DOC80 Target Baseline/Import Graph/DOC80_Import_Graph.md` - `Memory Rebuild Docs/DOC80 Target Baseline/Retired Names/DOC80_Retired_Names.md` - `Memory Rebuild Docs/Flattening/Supersession Matrix/Supersession_Matrix.md` - `Memory Rebuild Docs/Memory Rebuild Review Packs/DOC80_Memory_Control_Plane_PreSpec_Review_Pack_v1_0_2026-05-25/12_ABC_Consolidated_Structural_Patch_R0_2.md` - `OP-A and Operations and Trackers/OPA_V4.md` - Additional cross-check only: `Memory Rebuild Docs/Flattening/Execution Ledger/Architect Decision Queue/Architect_Decision_Queue.md` Raw count of edits verified: **64 locked edit units**: **52 R2 accepted/AWM/ACCEPT-AS-FIX grouped units** from the R2 master index, plus **R3 §22 full replacement**, plus **11 R3 non-egress lock-patch items**. ## 1. Summary + Verdict **Verdict: `FIXES_NEEDED_BEFORE_RATIFY`.** The applied draft is broadly faithful: the high-risk contracts are present, including the ABC 17-kind `ContextProductKind` union, the nine-kind `MemoryFlowKind` union, `SemanticProjectionContract`, R3 §22 `E0EgressAttestation`, and all 11 R3 non-egress items. However, the independent regression pass found defects that the Application Report marked as PASS. Edit-unit count: **64 checked**. Status: **61 LANDED**, **3 PARTIAL**, **0 MISSING**, **0 GARBLED**, **0 DUPLICATED**, **0 REJECT_LEAKED**. Separate soundness findings: **1 section-order bug**. Regression checks: **§15.5(c) FAIL**, **§15.5(d) FAIL**, with one additional proof-spine consistency bug tied to the nine-flow MFC patch. Defects needing patch before ratification: - `PARTIAL_EDIT / SOUNDNESS_BUG`: §4.3 still says "six `MemoryFlowKind` values" and the B8 table omits erasure/restamp/restore proof-failure rows. R2 requires the nine-flow MFC layer (`R2`:138-145); draft contradicts it (`Charter_Draft.md`:830-841). - `PARTIAL_EDIT / REGRESSION_FAIL`: §16.2 deferrals do not all have §15.4 gate rows and §17.4 matrix rows, despite the mandatory §15.5(d) gate (`R2`:447-470,496; draft:1420-1443,1478-1506,1592-1618). - `PARTIAL_EDIT / REGRESSION_FAIL`: lint-status tagging is incomplete. R2 requires coined tokens marked proposed and §15.5(c) requires every new lint name to be `[canonical]` or `[proposed]` (`R2`:411,496); many draft lint lists omit status tags or only use a broad prose default (`Charter_Draft.md`:114,184,424,640,785,824,869,1518-1534). - `SOUNDNESS_BUG`: §16.4 appears before §16.3, violating the commission's "no out-of-order sections" check (`Charter_Draft.md`:1510,1514). ## 2. Edit-Fidelity Table | item id | expected per card | draft location §+line | status | note | |---|---|---:|---|---| | UR-29 | Erasure-state distinction lints, no lifecycle engine | §1.4 line 54 | LANDED | Per-event MFCs are not modeled as a lifecycle engine. | | UR-40 | Membership eligibility is necessary, not sufficient | §4.1 line 744 | LANDED | Policy/scope gate remains independent. | | UR-10 | ReasonCode namespace mechanics | §2.1 line 124 | LANDED | Namespace state, owner, pattern, legacy/retired rules present. | | UR-37 | DOC25 producer scoped to parse/materialization/ingestion | §2.1 line 178 | LANDED | Source-revocation codes route to DOC82; Owner Map update deferred. | | UR-11 | DomainProfile per-axis vector/fallback | §2.2 line 190 | LANDED | Scalar rank replaced by axes. | | UR-13 | Derived cache eligibility | §2.3 line 250 | LANDED | `kv_cache_eligible` derived, not asserted. | | UR-14/UR-14b | Richer warrant trigger entry | §2.4 line 304 | LANDED | Allowed producers/consumers and lifecycle present. | | UR-22 | Warrant-degradation carveout | §2.4 line 304 | LANDED | Authority/static/user-locked carveouts present. | | F28 | `embedding_generation_id` NAMED-only | §8.1 line 1076 | LANDED | Comparability invariant present. | | UR-01 | 17-kind `ContextProductKind` + ABC §9.3 registry entry | §3.1 line 363 | LANDED | Enum count independently parsed as 17; ABC source at `12_ABC...md`:1691-1708. | | A3/A10 | 17-row registry seed table, no owner guesses | §3.1.1 line 430 | LANDED | All owner cells are `⚠owner-confirm@E3/E4/E7`. | | UR-02 | `FinalPromptTruthRef` NAMED-only hook | §3.5 line 693 | LANDED | DOC11 body ownership preserved. | | UR-03/04 | MFC union with nine flow kinds and EC paths | §3.3 line 565; §4.3 line 841 | PARTIAL | Union landed, but downstream proof-spine prose/table still reflects six original flows. | | UR-15 + ADJ-1 | Per-product request grammar + ABC §9.4 disposition enum | §3.2 line 493 | LANDED | `requested_products` retyped. | | UR-16 | Registry/assembly boundary | §3.1 line 408 | LANDED | Required inputs are refs; assembly bodies DOC84. | | UR-19 | `ReproducibilityKey` + registry-version inputs | §3.1.2 line 468 | LANDED | N2 inputs present. | | UR-20 | Trace correlation fields | §3.4 line 646 | LANDED | Session/turn/request/parent trace fields present. | | ADJ-2 | Context-product instance spine to DOC85 | §3.4 line 646 | LANDED | DOC8 phantom avoided. | | F11 | `PromptShellLearningContract` / `PromptShellExposure` | §2.3 line 250; §3.8 line 730 | LANDED | Exposure is proof-shaped. | | F30 | `DebugModeContract` NAMED-only | §3.9 line 734 | LANDED | Scoped to non-learning guarantee. | | N1/UR-42/UR-07 | `MemoryDestructionLedger` seam | §3.7 line 724 | LANDED | EC durable write path, consumers/surfaces separated. | | UR-05 | Edge-level membership proof | §4.1 line 744 | LANDED | Array proof + set hashes present. | | UR-06 | Render outcome derived from failed checks | §4.2 line 787 | LANDED | Outcome invariant present. | | UR-07 | Proof retention classes | §4.4 line 849 | LANDED | Erasure/restamp/restore marked durable-audit. | | F13 | Closed RenderSafetyCheck vocabulary | §4.2 line 787 | LANDED | Closed E0 check vocabulary present. | | UR-18 | Bitemporal carrier, linkable not collapsed | §8.2 line 1092 | LANDED | Envelope vs assertion axes distinguished. | | F19/F20 | MME/MPG Stage-7 handoffs | §5.1 line 877; §5.2 line 887 | LANDED | NAMED-only handoffs present. | | UR-41 | Embedding un-merge routed through review | §8.1 line 1076 | LANDED | No silent split on model migration. | | UR-12 | External dependency pins | §7 line 967 | LANDED | ExternalDependencyRecord posture present. | | UR-17 | ECSeamContract + EC pins | §7.1 line 997 | LANDED | EC §1/§3/§4/§7/§8 pins present at lines 1010-1020. | | UR-30 | Classification table + audit replay class | §6 line 907 | LANDED | Audit class column present. | | UR-08/09 | 5-plane revocation cascade + polarity | §12.1 line 1280 | LANDED | No sixth plane, no promotion-time invariant. | | UR-31 | `SemanticProjectionContract` | §3.6 line 701 | LANDED | Umbrella + axes present. | | UR-47/48 | Monotonicity laws + negative-fixture column | §12.1 line 1280 | LANDED | Stage-8 fixture column present. | | UR-23 | Health fields | §9.1 line 1126 | LANDED | Freshness/severity/source refs present. | | UR-24 | Quota bound fields | §10.2 line 1200 | LANDED | Unit/window/default/hard max/exhaustion present. | | UR-25 | Background execution strategy | §10.3 line 1234 | LANDED | Strategy replaces boolean. | | UR-26/27/28b | Schema version, branded IDs, conventions | §8.5 line 1108 | LANDED | No meta-schema bodies added. | | §12.1 invariants | Effective-state, suppression, portability, boundary re-eval | §12.1 line 1280 | LANDED | Invariant table present. | | UR-33 | AC-004/AC-005 hardening | §14 line 1369 | LANDED | Completion criteria present. | | UR-34 | Placement + gate rows | §13 line 1343; §15.4 lines 1431-1432 | LANDED | `IngestionCostBudget` / `WarrantConsequenceRegistry` rows present. | | UR-35 | §18 golden scenario | §18 line 1621 | LANDED | 15-step phase order present. | | UR-46 | Named-lint inventory | §16.3 line 1514 | PARTIAL | Inventory exists, but lint-status tags are incomplete and section is out of order. | | UR-36 | Preservation matrix | §17.4 line 1592 | LANDED | Matrix exists but see UR-32 / §15.5(d) failure for missing deferral rows. | | UR-32 | Cross-charter gate table | §15.4 line 1420 | PARTIAL | Table exists but does not cover all §16.2 deferrals. | | UR-38 | Restore shared vocab / §19 / §20 | §1.6 line 72; §19 line 1637; §20 line 1652 | LANDED | Baseline §4 is placed at §1.6 with note. | | ADJ-3 | Family-wide acceptance standard | §15.6 line 1460 | LANDED | Standard present. | | UR-21 | Section-number disambiguation | §1.6 line 74; §22 line 1672 | LANDED | Placement notes present. | | UR-39 | Skeletal §10.7 mislabel correction | §17.2 line 1557 | LANDED | Fold-in table points to §12.1. | | F35 | Cross-artifact drift sweep recorded | §15.3 line 1410 | LANDED | Discharge checklist present. | | A6/A9 | `RegistryEntryLifecycleState` + `E0DurableRecord` | §1.6.1 line 78; §1.6.2 line 100 | LANDED | `candidate` state present. | | §15.5 | Post-patch regression gate | §15.5 line 1445 | LANDED | Gate text present; independent run finds failures. | | R3 §(a) | Full §22 egress replacement | §22 line 1670 | LANDED | R3 version, not R2 version, is present. | | R3 #1 | MemoryDestructionLedger EC-owned | §3.7 line 724; §15.4 line 1437; §16.2 line 1494 | LANDED | EC write path corrected. | | R3 #2 | `initiating_member_ref` on `BaseMFC`; remove `executor` | §3.3 lines 579,624,640 | LANDED | `restore.executor_equals_ec` replaced. | | R3 #3 | PromptShellExposure proof-shaped | §3.8 line 730 | LANDED | Boolean rejected in prose and lint. | | R3 #4 | `RegistryEntryLifecycleState += candidate` | §1.6.1 line 88 | LANDED | Runtime-emission rule present. | | R3 #5 | `SourceRevocationCascade.affected_set_manifest_ref` | §12.1 line 1313 | LANDED | Field and lint present. | | R3 #6 | `E0DurableRecord` illustrative | §1.6.2 lines 100-112 | LANDED | "Illustrative, not exhaustive" present. | | R3 #7 | EC §4 in Import-Graph sweep | §7.1 lines 1010-1020; §7.4 line 1043 | LANDED | EC §4 pin present in draft; import graph update remains discharge. | | R3 #8 | Legal-hold clearance for redaction | §3.3 line 615; lint line 640 | LANDED | Redaction included with hard destruction. | | R3 #9 | Restore re-evaluation invariant | §12.1 line 1301; §3.3 line 623 | LANDED | Hard-destruction restore blocked. | | R3 #10 | N8 unification to `E0EgressAttestation` | §3.3 lines 599-609; §22 line 1678 | LANDED | Export/delegation MFCs carry destination and attestation ref. | | R3 #11 | Reword no-manual-tracking sentence | §16.2 line 1508 | LANDED | "No out-of-band memory" wording present. | ## 3. Independent §15.5 Results | check | result | evidence | |---|---|---| | (a) `ContextProductKind` reads 17 everywhere | PASS | Draft union parses to 17 values at §3.1 lines 375-380; ABC source lists the same 17 at `12_ABC...md`:1691-1708. Remaining "14" occurrences are SM-060/discharge/fold-in contexts (`Charter_Draft.md`:367,371,1474,1584,1588-1590). | | (b) MFC union has all nine flow kinds and issued variants carry refs | PASS WITH SOUNDNESS NOTE | Draft union parses to nine values at §3.3 lines 575-578 and has issued variants through line 628. However §4.3 still says "six" at line 841; see defect F1. | | (c) every new lint name tagged `[canonical]` or `[proposed]` | **FAIL** | R2 requires proposed/canonical status (`R2`:411,496). Many draft lint lists omit tags, e.g. §1.6 line 114, §2.1 line 184, §3.1 line 424, §3.3 line 640, §4.1 line 785, §4.2 line 824, §4.4 line 869, §16.3 lines 1518-1534. Application Report claimed PASS; draft disagrees. | | (d) every §16.2 deferral has §15.4 and §17.4 rows | **FAIL** | §16.2 lists deferrals at lines 1484-1506. §15.4 lines 1426-1443 lacks rows for several of them; §17.4 lines 1598-1615 also lacks several. Application Report claimed PASS; draft disagrees. | | (e) `SemanticProjectionContract` and §18 present | PASS | §3.6 lines 701-722; §18 lines 1621-1633. | | (f) §1.6 / §19 / §20 restored | PASS | §1.6 line 72, §19 line 1637, §20 line 1652. | | (g) no retired/invented name reintroduced | PASS | Retired names appear only in explicit lineage/discharge contexts, e.g. `NonAssertionExtractionOutcome` / `SourceBoundSynthesisProjection` in retired-name compliance at line 1590. No `ContextArtifact` rename leaked. | | (h) OPA §6.Z obligations + ADQ-406/407/408 referenced | PASS | Gate rows at lines 1433,1435,1436; matrix row at line 1610. OPA V4 has §6.Z rows at lines 826-848 and R3 §6.Z3 egress rows at lines 933-974. | ## 4. Rejects/Defers Check + Forks Check ### Rejects / Defers - CONFIRMED: rejected `ContextProduct -> ContextArtifact` rename is absent. The draft uses `ContextProduct` and has only a comment that it replaces the prior descriptor (`Charter_Draft.md`:382). - CONFIRMED: rejected full lifecycle/erasure engine is absent; the draft explicitly says Erasure/Restamp/Restore MFCs are per-event certificates, not an engine (`Charter_Draft.md`:60). - CONFIRMED: rejected `MemorySchemaMigrationPlan` body is absent; it appears only as a rejected/deferred concept (`Charter_Draft.md`:1112). - CONFIRMED: `PromptShellExposure`, `FinalPromptTruthRef`, `MemoryMutationEnvelope`, `MemoryProvenanceGraph`, and `ResumeProjection` remain NAMED-only / deferred as intended. - DEFER_DROPPED/PARTIAL: the deferral register itself is present, but several deferrals are not mirrored into §15.4 and §17.4 as §15.5(d) requires. See defect F2. ### Forks - CONFIRMED: UR-37 DOC25 producer is scoped to parse/materialization/ingestion, with source-revocation routed to DOC82 (`Charter_Draft.md`:178). - CONFIRMED: UR-38 restored baseline §4/§19/§20 through §1.6, §19, §20 (`Charter_Draft.md`:72,1637,1652). - CONFIRMED: N3 keeps five cascade planes, no sixth plane, no promotion-time invariant (`Charter_Draft.md`:1310). - CONFIRMED: 17-row registry table does not guess owners; uncertain cells are `⚠owner-confirm@E3/E4/E7` (`Charter_Draft.md`:430-453). - CONFIRMED: `DebugModeContract` is F30-scoped and non-learning only (`Charter_Draft.md`:734-736). - CONFIRMED: verdict token/status and §15.5 gate are present (`Charter_Draft.md`:1,4,1445). - CONFIRMED: §22 is folded as the R3 Critical binding (`Charter_Draft.md`:1670-1818). - NOTE: the Application Report says "six confirmed architect forks"; the commission lists seven. The draft itself reflects all seven, so this is a report-count issue, not a draft defect. ## 5. Architect-Decision Items `ARCHITECT_DECISION_PENDING` items present in the draft: 1. `IngestionCostBudget` external-doc placement: DOC25/E4 vs DOC82/E4 source-evidence seam. Present at §16.1 line 1472. 2. `WarrantConsequenceRegistry` placement: DOC82/E3 vs DOC80 core registry. Present at §16.1 line 1473. 3. `ADQ-222` Phase-1 sharing / V5 networking gate remains open, explicitly nonblocking for Stage 6 but conditional for Stage 7 schema-body work. Present at §1.3 line 52 and §16.2 line 1505; ADQ ledger confirms `open: 1` at `Architect_Decision_Queue.md`:16,76. These are surfaced as open flags or deferrals, not silently resolved. ## 6. Internal-Soundness Findings + Paste-Ready Fixes ### F1 — PARTIAL_EDIT / SOUNDNESS_BUG: §4.3 still says six MFC flows Evidence: R2 adds `erasure`, `policy_restamp`, and `restore` to `MemoryFlowKind` (`R2`:138-145). Draft union has nine values at §3.3 lines 575-578, but §4.3 says "the six `MemoryFlowKind` values" at line 841 and the B8 table at lines 830-839 lacks erasure/restamp/restore proof-failure rows. Paste-ready fix: INSERT AFTER `Charter_Draft.md` §4.3 table row `learning signal with no packet proof`: ```md | erasure with no certificate | `ErasureMFC` (§3.3) | `erasure.without_memory_flow_certificate` [proposed] | | hard destruction or redaction without legal-hold clearance | `ErasureMFC.legal_hold_clearance_ref` | `erasure.hard_destruction_without_legal_hold_clearance_ref` [proposed]; `erasure.redaction_under_legal_hold_without_clearance` [proposed] | | policy restamp with no certificate or over original ceiling | `RestampMFC` (§3.3) | `restamp.without_memory_flow_certificate` [proposed]; `restamp.exceeds_original_ceiling` [proposed] | | restore with no certificate, hard-destruction restore, or revoked/held material reintroduced | `RestoreMFC` (§3.3) | `restore.without_memory_flow_certificate` [proposed]; `restore.of_hard_destruction` [proposed]; `restore.reintroduces_revoked_or_held_material` [proposed] | | executed-prompt render missing final-prompt truth | `RenderMFC.final_prompt_truth_ref` + `FinalPromptTruthRef` (§3.5) | `proof.executed_prompt_render_missing_final_prompt_truth` [proposed] | ``` REPLACE the §4.3 proof-spine invariant paragraph at `Charter_Draft.md`:841 with: ```md **Proof-spine invariants.** (a) Every privileged flow (the nine `MemoryFlowKind` values) terminates in at least one proof artifact or withheld certificate. (b) Every proof artifact names a `coordination_trace_ref` so it is auditable (§3.4). (c) A failed proof blocks the effect and surfaces a `ReasonCode`; it is never a silent pass. (d) Learning is downstream of `ContextPacketProof` and `FinalPromptTruthRef` where final-prompt survival is required — the proof is a *precondition*, not a *byproduct*. ``` ### F2 — PARTIAL_EDIT / REGRESSION_FAIL: deferral/gate/matrix triangle is incomplete Evidence: R2 §7 lists deferrals with §15.4 / §17.4 pickup triggers (`R2`:447-470), and §15.5(d) requires every deferral to have both a §15.4 row and §17.4 row (`R2`:496). Draft §16.2 lists deferrals at lines 1484-1506, but §15.4 lines 1426-1443 and §17.4 lines 1598-1615 do not cover all of them. Paste-ready fix: INSERT the following rows before the end of the §15.4 table: ```md | `MemoryMutationEnvelope` field body | §5.1 / §16.2 | Stage 7 / durable-mutation charters | Stage 7 envelope body drafted before durable mutation schemas depend on its fields | DOC80/EC | **yes** | | `MemoryProvenanceGraph` field body | §5.2 / §16.2 | Stage 7 / lineage-consuming charters | Stage 7 provenance body or explicit member handoff drafted | DOC80 + consuming members | **yes** | | `ResumeProjection` / `ResumeCard` body | §5.3 / §16.2 | E7/E8/E10 | Delivery/UI body and render surface drafted | DOC84/DOC86 | **yes** | | DOC81 policy-axis enum values | §2.2 / §16.2 | E1/E2 | DOC81 owns and drafts axis semantics | DOC81 | **yes** | | DOC84 `RenderSafetyProof` executed body | §4.2 / §16.2 | E7/E8 | DOC84 executed proof body drafted against E0 contract | DOC84 | **yes** | | Lint / fixture / migration meta-schemas | §8.5 / §16.2 | Stage 7/8/9 | Meta-schema ownership and fixture/lint manifests assigned | Stage 7/8/9 | conditional | | §20 per-member obligation instances | §20 / §16.2 | E1-E10 / E_org | Member-specific obligation rows filled in each charter | each member | **yes** | | DOC25 ReasonCode-producer grounding | §2.1 / §16.2 | Owner Map / OP-A discharge | DOC25 scoped producer grounding recorded in Owner Map / OP-A | architect/DOC25 | **yes** | | §19/§20 final bodies | §19-§20 / §16.2 | E0 ratification | Architect accepts or patches first-draft amendment and member-obligation bodies | DOC80 | **yes** | | Seven ABC §21 Owner Map rows | §13.2 / §16.2 | E3/E4/E7-E8 | Owner Map rows added or explicitly deferred by each owning charter | DOC82/DOC25/DOC84 | **yes** | | AC-004 / AC-005 completion | §14 / §16.2 | future completion | Completion criteria met or explicitly deferred in owner charter | DOC80+DOC25+DOC73 / EC | conditional | | BETTER_IDEA UR-43/44/45 | §16.4 / §16.2 | Stage 7+ | Later charter accepts, rejects, or re-defers each better-idea item | DOC84/DOC86 | no | | ADQ-222 Phase-1 sharing schemas | §1.3 / §16.2 | Stage 7 if architect says draft now | Architect decision recorded before schema bodies are drafted | architect / Stage 7 | conditional | | `WarrantConsequenceRegistry` core-registry alternative | §16.1 / §16.2 | E3 | Architect confirms DOC82 vs DOC80-core placement | architect / DOC82 | conditional | ``` INSERT matching §17.4 preservation rows before the "No deferral is lost" sentence: ```md | `MemoryMutationEnvelope` field body | defers | §5.1 → Stage 7 + §15.4 | NAMED-only now; field body later | | `MemoryProvenanceGraph` field body | defers | §5.2 → Stage 7 + §15.4 | durable lineage graph body later | | `ResumeProjection` / `ResumeCard` body | defers | §5.3 → DOC84/DOC86 + §15.4 | canonical names land; body later | | DOC81 policy-axis enum values | defers | §2.2 → DOC81 + §15.4 | DOC81 owns axis semantics | | DOC84 `RenderSafetyProof` executed body | defers | §4.2 → DOC84 + §15.4 | E0 owns contract only | | Lint / fixture / migration meta-schemas | defers | §8.5 / §16.3 → Stage 7/8/9 + §15.4 | UR-28 rejected from E0, not lost | | §20 per-member obligation instances | defers | §20 → each member + §15.4 | member charters fill instances | | Seven ABC §21 Owner Map rows | defers | §13.2 → E3/E4/E7-E8 + §15.4 | E0 assigns landing; owner charters add rows | | AC-004 / AC-005 completion | defers | §14 → future completion + §15.4 | completion criteria preserved | | `WarrantConsequenceRegistry` core-registry alternative | architect review | §16.1 item 2 + §15.4 | placement must be confirmed, not silently resolved | ``` ### F3 — PARTIAL_EDIT / REGRESSION_FAIL: lint provenance tags are incomplete Evidence: R2 requires coined tokens marked proposed (`R2`:411) and §15.5(c) requires every new lint name to be `[canonical]` or `[proposed]` (`R2`:496). The draft has untagged lint lists throughout, e.g. §1.6 line 114, §2.1 line 184, §3.1 line 424, §3.3 line 640, §4.1 line 785, §4.2 line 824, §4.4 line 869, and §16.3 lines 1518-1534. Paste-ready fix: INSERT AFTER the opening paragraph of §16.3 (`Charter_Draft.md`:1516): ```md **Lint-status rule for this charter.** This §16.3 inventory is the authoritative lint-status table. Every lint token listed below is `[proposed]` unless it appears in the explicit canonical set here or is individually tagged `[canonical]` at its local definition. Canonical tokens currently recognized in E0 are: `learning.utility_without_final_prompt_proof`; `erasure.retired_used_as_erased`; `erasure.legal_hold_bypassed_without_adq_resolution`; `projection.used_as_canonical_truth`; `projection.owner_missing`; `projection.missing_invalidation_policy`; `projection.missing_source_refs`; `revocation.support_edge_survives_revoked_source`; `revocation.membership_survives_revoked_source_without_restamp`; `revocation.carryover_capsule_survives_revoked_source`; `revocation.learning_credit_after_revocation`; `revocation.learning_signal_survives_revoked_source`; `revocation.inspector_leaks_revoked_source`; `revocation.published_view_not_invalidated_after_revocation`; `policy.bare_render_action`; `policy.export_stamp_without_destination`; `learning.writeback_without_ec_execution`. Local section lint lists inherit this status table; any new lint added after ratification MUST carry an inline `[canonical]` or `[proposed]` tag. ``` Then either add inline `[proposed]` tags to the local lists, or update §15.5(c) to say "status is explicit in §16.3's lint-status table." Without one of those changes, the current §15.5(c) check remains failed. ### F4 — SOUNDNESS_BUG: §16 subsection order is not intact Evidence: §16.4 appears before §16.3 (`Charter_Draft.md`:1510,1514). The commission requires "No duplicate, orphaned, or out-of-order sections; section numbering intact end to end." Paste-ready fix: MOVE the current §16.3 "Lint and fixture roll-up" block (`Charter_Draft.md`:1514-1536) so it immediately follows §16.2 (`Charter_Draft.md`:1508). Leave its heading as `### §16.3 Lint and fixture roll-up for Stage 9 / Stage 8`. Then place the current §16.4 BETTER_IDEA annex after the lint block, keeping its heading as `### §16.4 BETTER_IDEA annex (non-blocking; deferred)`. ## 7. Discharge Checklist Do not fail this audit for these; they are expected post-ratification or next-patch discharge items. They must still be touched: - `Supersession_Matrix.md` SM-060: update fixed registry wording from 14 to 17 (`Supersession_Matrix.md`:70). - `DOC80_Owner_Map.md`: update ContextProduct registry row from 14 to 17 (`DOC80_Owner_Map.md`:125); replace `CognitiveDiff + Resume card` with `ResumeProjection` / `ResumeCard` (`DOC80_Owner_Map.md`:159); add rows for Erasure/Restamp/Restore MFC variants and `MemoryDestructionLedger` with EC durable write path. - `DOC80_Import_Graph.md`: add/confirm EC §1/§3/§4/§7/§8 ECSeamContract pins as import edges; current graph root row names EC generally but not the §4 pin (`DOC80_Import_Graph.md`:63). - `DOC80_Retired_Names.md`: SM-060 still says fixed registry of 14 kinds (`DOC80_Retired_Names.md`:30); update to 17 and add do-not-reintroduce handling for the invented draft kind names. - Source Registry: record ABC R0.2 §9.2 / §9.3 / §9.4 as authoritative for the 17 kinds, registry entry, and disposition enum. - `STAGE_6_CHARTER_INPUT_INDEX.md`: add ADQ-313 to E0 section if not already done. - `E0_Red_Team_Review_Prompt.md`: fix stale synthesis path if still present. - `Architect_Decision_Queue.md`: after ratification, mark ADQ-203/208/210/211/310/313/403/404 and ADQ-207/312 resolved/consumed per E0; ADQ-222 remains open and nonblocking for Stage 6. - `OPA_V4.md`: §6.Z and §6.Z3 entries exist (`OPA_V4.md`:826-848,933-974), but still need per-owner folding / count reconciliation per OPA header note (`OPA_V4.md`:10). - `SPEC_STATE.md`: update DOC80 after ratification. ## 8. DESIGN_ADVISORY Annex None. I did not perform a design review or re-adjudicate locked architecture. All findings above are fidelity, regression, or internal-soundness issues against the locked cards and applied draft.