From a2422e9b5eb3381eee9033e9299fce5766ca56b1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:33:20 -0700
Subject: [PATCH 001/258] test(reference-host): define durable repository
 contract

---
 src/referenceHostSyntheticRepository.test.ts | 42 ++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 src/referenceHostSyntheticRepository.test.ts

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
new file mode 100644
index 00000000..fa3b1b72
--- /dev/null
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -0,0 +1,42 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/synthetic-document-repository.mjs',
+);
+
+describe('reference-host synthetic durable repository contract', () => {
+  it('ships one executable reference-only repository fixture outside the published runtime', () => {
+    expect(existsSync(fixturePath)).toBe(true);
+  });
+
+  it('keeps the host persistence fixture source-independent and network-free', () => {
+    if (!existsSync(fixturePath)) return;
+    const source = readFileSync(fixturePath, 'utf8');
+
+    expect(source).not.toMatch(/(?:from|import\()\s*['"][^'"]*src\//u);
+    expect(source).not.toMatch(/\b(?:fetch|XMLHttpRequest|WebSocket)\b/u);
+    expect(source).toContain('REFERENCE_ONLY');
+    expect(source).toContain('If-Match');
+  });
+
+  it('proves ambiguous failure cannot advance the validator and stale writes conflict', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
+      encoding: 'utf8',
+    });
+
+    expect(JSON.parse(output)).toEqual({
+      afterAmbiguousValidator: '"v1"',
+      conflictCurrentValidator: '"v2"',
+      finalDocument: 'Buyer draft v2',
+      finalValidator: '"v2"',
+      initialValidator: '"v1"',
+      savedValidator: '"v2"',
+    });
+  });
+});

From d0f948a7da4aded1e85b9e1c46404ac4cf26237c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:34:15 -0700
Subject: [PATCH 002/258] feat(reference-host): add synthetic strong-validator
 repository

---
 .../synthetic-document-repository.mjs         | 197 ++++++++++++++++++
 1 file changed, 197 insertions(+)
 create mode 100644 examples/reference-host/synthetic-document-repository.mjs

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
new file mode 100644
index 00000000..f849e8e7
--- /dev/null
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -0,0 +1,197 @@
+const MAX_DOCUMENT_ID_CODE_UNITS = 256;
+const MAX_DOCUMENT_CODE_UNITS = 65_536;
+
+/** Marker used by repository contracts to prevent this fixture being mistaken for a production adapter. */
+export const REFERENCE_ONLY = true;
+
+/** Stable failure raised by the synthetic reference persistence adapter. */
+export class ReferencePersistenceError extends Error {
+  constructor(code) {
+    super(`Reference persistence ${code}.`);
+    this.name = 'ReferencePersistenceError';
+    this.code = code;
+    Object.freeze(this);
+  }
+}
+
+function requireBoundedString(value, maximumCodeUnits, code) {
+  if (
+    typeof value !== 'string' ||
+    value.length === 0 ||
+    value.length > maximumCodeUnits
+  ) {
+    throw new ReferencePersistenceError(code);
+  }
+  return value;
+}
+
+function validatorForVersion(version) {
+  return `"v${version}"`;
+}
+
+function frozenRead(document, validator) {
+  return Object.freeze({ document, validator });
+}
+
+function frozenSave(status, validator) {
+  return Object.freeze({ status, validator });
+}
+
+function frozenConflict(currentValidator) {
+  return Object.freeze({ status: 'conflict', currentValidator });
+}
+
+/**
+ * Create an in-memory host-owned reference repository with exact If-Match semantics.
+ *
+ * This adapter is synthetic acquisition/support evidence only. Buyers must replace
+ * it with an authorized atomic durable store. Ambiguous or failed operations never
+ * mutate the document or advance the strong validator.
+ */
+export function createSyntheticDocumentRepository(options) {
+  if (
+    typeof options !== 'object' ||
+    options === null ||
+    Object.getPrototypeOf(options) !== Object.prototype
+  ) {
+    throw new ReferencePersistenceError('invalid_options');
+  }
+
+  const documentId = requireBoundedString(
+    options.documentId,
+    MAX_DOCUMENT_ID_CODE_UNITS,
+    'invalid_document_id',
+  );
+  let document = requireBoundedString(
+    options.initialDocument,
+    MAX_DOCUMENT_CODE_UNITS,
+    'invalid_document',
+  );
+  let version = 1;
+  let validator = validatorForVersion(version);
+
+  function assertDocumentId(candidate) {
+    if (candidate !== documentId) {
+      throw new ReferencePersistenceError('document_not_found');
+    }
+  }
+
+  function read(candidateDocumentId) {
+    assertDocumentId(candidateDocumentId);
+    return frozenRead(document, validator);
+  }
+
+  function save(request) {
+    if (
+      typeof request !== 'object' ||
+      request === null ||
+      Object.getPrototypeOf(request) !== Object.prototype
+    ) {
+      throw new ReferencePersistenceError('invalid_request');
+    }
+
+    assertDocumentId(request.documentId);
+    const nextDocument = requireBoundedString(
+      request.document,
+      MAX_DOCUMENT_CODE_UNITS,
+      'invalid_document',
+    );
+    const ifMatch = requireBoundedString(
+      request.ifMatch,
+      256,
+      'invalid_if_match',
+    );
+    const outcome = request.outcome ?? 'saved';
+    if (
+      outcome !== 'saved' &&
+      outcome !== 'ambiguous_failure' &&
+      outcome !== 'failure'
+    ) {
+      throw new ReferencePersistenceError('invalid_outcome');
+    }
+
+    if (outcome === 'ambiguous_failure') {
+      throw new ReferencePersistenceError('ambiguous_failure');
+    }
+    if (outcome === 'failure') {
+      throw new ReferencePersistenceError('failure');
+    }
+    if (ifMatch !== validator) {
+      return frozenConflict(validator);
+    }
+
+    document = nextDocument;
+    version += 1;
+    validator = validatorForVersion(version);
+    return frozenSave('saved', validator);
+  }
+
+  return Object.freeze({ read, save });
+}
+
+function runSelfTest() {
+  const repository = createSyntheticDocumentRepository({
+    documentId: 'buyer-document',
+    initialDocument: 'Buyer draft v1',
+  });
+  const initial = repository.read('buyer-document');
+
+  let ambiguousFailureObserved = false;
+  try {
+    repository.save({
+      documentId: 'buyer-document',
+      document: 'Uncertain write',
+      ifMatch: initial.validator,
+      outcome: 'ambiguous_failure',
+    });
+  } catch (error) {
+    ambiguousFailureObserved =
+      error instanceof ReferencePersistenceError &&
+      error.code === 'ambiguous_failure';
+  }
+  if (!ambiguousFailureObserved) {
+    throw new Error('Synthetic ambiguous-failure evidence was not observed.');
+  }
+
+  const afterAmbiguous = repository.read('buyer-document');
+  if (
+    afterAmbiguous.document !== initial.document ||
+    afterAmbiguous.validator !== initial.validator
+  ) {
+    throw new Error('Ambiguous failure advanced synthetic durable state.');
+  }
+
+  const saved = repository.save({
+    documentId: 'buyer-document',
+    document: 'Buyer draft v2',
+    ifMatch: initial.validator,
+  });
+  if (saved.status !== 'saved') {
+    throw new Error('Synthetic save did not report success.');
+  }
+
+  const conflict = repository.save({
+    documentId: 'buyer-document',
+    document: 'Stale overwrite',
+    ifMatch: initial.validator,
+  });
+  if (conflict.status !== 'conflict') {
+    throw new Error('Synthetic stale If-Match write did not conflict.');
+  }
+
+  const finalState = repository.read('buyer-document');
+  process.stdout.write(
+    `${JSON.stringify({
+      afterAmbiguousValidator: afterAmbiguous.validator,
+      conflictCurrentValidator: conflict.currentValidator,
+      finalDocument: finalState.document,
+      finalValidator: finalState.validator,
+      initialValidator: initial.validator,
+      savedValidator: saved.validator,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--self-test')) {
+  runSelfTest();
+}

From a37cd8cd21ba0a569f85c666555689a44d2c0026 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:34:46 -0700
Subject: [PATCH 003/258] test(reference-host): define delayed proposal
 revision gate

---
 src/referenceHostDelayedProposal.test.ts | 40 ++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 src/referenceHostDelayedProposal.test.ts

diff --git a/src/referenceHostDelayedProposal.test.ts b/src/referenceHostDelayedProposal.test.ts
new file mode 100644
index 00000000..7580cf81
--- /dev/null
+++ b/src/referenceHostDelayedProposal.test.ts
@@ -0,0 +1,40 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/delayed-proposal.mjs',
+);
+
+describe('reference-host delayed proposal contract', () => {
+  it('ships one deterministic local proposal fixture outside the published runtime', () => {
+    expect(existsSync(fixturePath)).toBe(true);
+  });
+
+  it('keeps proposal generation provider-free and network-free', () => {
+    if (!existsSync(fixturePath)) return;
+    const source = readFileSync(fixturePath, 'utf8');
+
+    expect(source).not.toMatch(/(?:from|import\()\s*['"][^'"]*src\//u);
+    expect(source).not.toMatch(/\b(?:fetch|XMLHttpRequest|WebSocket)\b/u);
+    expect(source).toContain('REFERENCE_ONLY');
+    expect(source).toContain('expectedRevision');
+  });
+
+  it('conflicts stale delayed proposals instead of overwriting newer content', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
+      encoding: 'utf8',
+    });
+
+    expect(JSON.parse(output)).toEqual({
+      acceptedDocument: 'Accepted proposal',
+      acceptedStatus: 'applied',
+      staleDocument: 'User typed newer text',
+      staleStatus: 'conflict',
+    });
+  });
+});

From 9333fd2fbeec7a3f7e35a727d0125fb4aa1da473 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:35:07 -0700
Subject: [PATCH 004/258] feat(reference-host): add revision-bound delayed
 proposal fixture

---
 examples/reference-host/delayed-proposal.mjs | 124 +++++++++++++++++++
 1 file changed, 124 insertions(+)
 create mode 100644 examples/reference-host/delayed-proposal.mjs

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
new file mode 100644
index 00000000..64bb47cd
--- /dev/null
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -0,0 +1,124 @@
+const MAX_REVISION_CODE_UNITS = 256;
+const MAX_PROPOSAL_CODE_UNITS = 65_536;
+
+/** Marker used by repository contracts to prevent this fixture being mistaken for a production model adapter. */
+export const REFERENCE_ONLY = true;
+
+function requireBoundedString(value, maximumCodeUnits, label) {
+  if (
+    typeof value !== 'string' ||
+    value.length === 0 ||
+    value.length > maximumCodeUnits
+  ) {
+    throw new TypeError(`${label} is invalid.`);
+  }
+  return value;
+}
+
+/**
+ * Produce one deterministic asynchronous proposal bound to the revision captured by the host.
+ *
+ * This fixture deliberately contains no provider SDK, credential, prompt log, or remote call.
+ * Real hosts replace proposal generation with an approved model boundary while preserving the
+ * expectedRevision conflict gate before applying untrusted proposal data.
+ */
+export async function createDelayedProposal({ expectedRevision, replacement }) {
+  const boundedRevision = requireBoundedString(
+    expectedRevision,
+    MAX_REVISION_CODE_UNITS,
+    'expectedRevision',
+  );
+  const boundedReplacement = requireBoundedString(
+    replacement,
+    MAX_PROPOSAL_CODE_UNITS,
+    'replacement',
+  );
+
+  await Promise.resolve();
+  return Object.freeze({
+    expectedRevision: boundedRevision,
+    replacement: boundedReplacement,
+  });
+}
+
+/**
+ * Apply one untrusted proposal only when the host's current revision still matches its capture.
+ */
+export function applyDelayedProposal({ proposal, currentRevision, apply }) {
+  if (
+    typeof proposal !== 'object' ||
+    proposal === null ||
+    typeof apply !== 'function'
+  ) {
+    throw new TypeError('proposal application is invalid.');
+  }
+  const boundedCurrentRevision = requireBoundedString(
+    currentRevision,
+    MAX_REVISION_CODE_UNITS,
+    'currentRevision',
+  );
+  const expectedRevision = requireBoundedString(
+    proposal.expectedRevision,
+    MAX_REVISION_CODE_UNITS,
+    'expectedRevision',
+  );
+  const replacement = requireBoundedString(
+    proposal.replacement,
+    MAX_PROPOSAL_CODE_UNITS,
+    'replacement',
+  );
+
+  if (expectedRevision !== boundedCurrentRevision) {
+    return Object.freeze({ status: 'conflict' });
+  }
+
+  apply(replacement);
+  return Object.freeze({ status: 'applied' });
+}
+
+async function runSelfTest() {
+  let staleDocument = 'Original draft';
+  let staleRevision = 'revision-v1';
+  const staleProposalPromise = createDelayedProposal({
+    expectedRevision: staleRevision,
+    replacement: 'Stale proposal',
+  });
+
+  staleDocument = 'User typed newer text';
+  staleRevision = 'revision-v2';
+  const staleProposal = await staleProposalPromise;
+  const staleResult = applyDelayedProposal({
+    proposal: staleProposal,
+    currentRevision: staleRevision,
+    apply(replacement) {
+      staleDocument = replacement;
+    },
+  });
+
+  let acceptedDocument = 'Current draft';
+  const acceptedRevision = 'revision-v3';
+  const acceptedProposal = await createDelayedProposal({
+    expectedRevision: acceptedRevision,
+    replacement: 'Accepted proposal',
+  });
+  const acceptedResult = applyDelayedProposal({
+    proposal: acceptedProposal,
+    currentRevision: acceptedRevision,
+    apply(replacement) {
+      acceptedDocument = replacement;
+    },
+  });
+
+  process.stdout.write(
+    `${JSON.stringify({
+      acceptedDocument,
+      acceptedStatus: acceptedResult.status,
+      staleDocument,
+      staleStatus: staleResult.status,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--self-test')) {
+  await runSelfTest();
+}

From e85f636166cf6452582710b2bf0af3732439de47 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:35:51 -0700
Subject: [PATCH 005/258] docs(reference-host): add ownership and replacement
 guide

---
 examples/reference-host/README.md | 57 +++++++++++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 examples/reference-host/README.md

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
new file mode 100644
index 00000000..7f049fea
--- /dev/null
+++ b/examples/reference-host/README.md
@@ -0,0 +1,57 @@
+# Inkspan reference host
+
+Status: Active PR / partial reference-host implementation
+
+This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining SSR/package/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
+
+The current slice contains two executable, deterministic fixtures:
+
+- `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict.
+- `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
+
+Both fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection, and are exercised by repository tests. They are deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+
+## Copy this, replace that
+
+| Reference element | Buyer action |
+| --- | --- |
+| synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy and returns a new strong validator only after confirmed success. |
+| deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
+| synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
+| reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
+
+## Ownership map
+
+```mermaid
+flowchart LR
+    User[Author / reviewer] --> Host[Embedding host]
+    Host --> Inkspan[Inkspan editor + deterministic evidence]
+    Host --> Repo[Host document repository]
+    Host --> Provider[Host collaboration provider]
+    Host --> Model[Host-approved model gateway]
+    Inkspan --> Proposal[Untrusted proposal data]
+    Proposal --> Host
+    Repo -->|strong validator / conflict| Host
+
+    classDef host stroke-width:2px;
+    class Host,Repo,Provider,Model host;
+```
+
+Inkspan owns deterministic editor/revision/autosave/conversion/package behavior. The host owns authenticated transport, authorization, tenancy, durable persistence, collaboration-provider lifecycle, credentials, model policy, retention, deployment, and durable audit. A successful local editor operation, Yjs update, model response, or status check is not durable authorization or persistence evidence.
+
+## Executable fixture checks
+
+From a clean repository checkout with the supported Node runtime, these reference-only fixtures can be exercised directly:
+
+```sh
+node examples/reference-host/synthetic-document-repository.mjs --self-test
+node examples/reference-host/delayed-proposal.mjs --self-test
+```
+
+The root test suite independently invokes those commands and asserts the expected conflict/no-silent-advancement behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+
+## Deliberate omissions in this partial slice
+
+Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, Inkspan autosave-state UI composition, host-created Yjs lifecycle/reconnect evidence, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+
+Do not use the synthetic repository, synthetic identifiers, or deterministic proposal fixture as a production persistence, authentication, collaboration, or model implementation.

From c00f0803476a0426b6f527a740e34083393b76d4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 11:36:26 -0700
Subject: [PATCH 006/258] test(reference-host): enforce package ownership
 boundary

---
 src/referenceHostPackagingBoundary.test.ts | 35 ++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 src/referenceHostPackagingBoundary.test.ts

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
new file mode 100644
index 00000000..acc494e9
--- /dev/null
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -0,0 +1,35 @@
+import { readdirSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const referenceHostDirectory = resolve(process.cwd(), 'examples/reference-host');
+
+function repositoryFile(path: string): string {
+  return readFileSync(resolve(process.cwd(), path), 'utf8');
+}
+
+describe('reference-host package authority boundary', () => {
+  it('keeps every reference-host file outside the npm publish inventory', () => {
+    const packageMetadata = JSON.parse(repositoryFile('package.json')) as {
+      files: string[];
+    };
+
+    expect(packageMetadata.files.some((path) => path.startsWith('examples'))).toBe(
+      false,
+    );
+  });
+
+  it('rejects source-relative and workspace-alias imports in executable reference files', () => {
+    const executableFiles = readdirSync(referenceHostDirectory).filter((path) =>
+      path.endsWith('.mjs'),
+    );
+
+    expect(executableFiles.length).toBeGreaterThan(0);
+    for (const file of executableFiles) {
+      const source = readFileSync(resolve(referenceHostDirectory, file), 'utf8');
+      expect(source).not.toMatch(/(?:from|import\()\s*['"][^'"]*src\//u);
+      expect(source).not.toContain('workspace:');
+    }
+  });
+});

From 8cca314c0b118912ea99a671c6103be1a9ed50b1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:35:52 -0700
Subject: [PATCH 007/258] test(reference-host): define autosave lifecycle
 presentation contract

---
 src/referenceHostAutosaveViewModel.test.ts | 47 ++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 src/referenceHostAutosaveViewModel.test.ts

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
new file mode 100644
index 00000000..d9170a01
--- /dev/null
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -0,0 +1,47 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/autosave-view-model.mjs',
+);
+
+describe('reference-host autosave presentation contract', () => {
+  it('ships one host-owned autosave view-model fixture outside the published runtime', () => {
+    expect(existsSync(fixturePath)).toBe(true);
+  });
+
+  it('maps programmatic lifecycle state to localization keys without exposing validators', () => {
+    if (!existsSync(fixturePath)) return;
+    const source = readFileSync(fixturePath, 'utf8');
+
+    expect(source).not.toMatch(/(?:from|import\()\s*['"][^'"]*src\//u);
+    expect(source).not.toMatch(/\b(?:fetch|XMLHttpRequest|WebSocket)\b/u);
+    expect(source).toContain('REFERENCE_ONLY');
+    expect(source).toContain('messageKey');
+    expect(source).toContain('blockedReason');
+    expect(source).not.toContain('document body');
+  });
+
+  it('derives clean, saving, queued, conflict, failed, retrying, recovered, closing, and closed states', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
+      encoding: 'utf8',
+    });
+
+    expect(JSON.parse(output)).toEqual({
+      clean: 'clean',
+      closed: 'closed',
+      closing: 'closing',
+      conflict: 'conflict',
+      failed: 'failed',
+      queued: 'queued',
+      recovered: 'recovered',
+      retrying: 'retrying',
+      saving: 'saving',
+    });
+  });
+});

From 530a79d089be5f4c400fa94c9479a020cf7fe611 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:36:30 -0700
Subject: [PATCH 008/258] feat(reference-host): compose autosave lifecycle
 presentation

---
 .../reference-host/autosave-view-model.mjs    | 167 ++++++++++++++++++
 1 file changed, 167 insertions(+)
 create mode 100644 examples/reference-host/autosave-view-model.mjs

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
new file mode 100644
index 00000000..2a10b1cc
--- /dev/null
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -0,0 +1,167 @@
+const AUTOSAVE_STATES = new Set([
+  'idle',
+  'saving',
+  'blocked',
+  'closing',
+  'closed',
+]);
+const BLOCKED_REASONS = new Set(['conflict', 'failure']);
+const RECOVERY_PHASES = new Set(['none', 'retrying', 'recovered']);
+
+/** Marker used by repository contracts to prevent this host fixture becoming runtime authority. */
+export const REFERENCE_ONLY = true;
+
+function requireNullableString(value, label) {
+  if (value !== null && typeof value !== 'string') {
+    throw new TypeError(`${label} is invalid.`);
+  }
+  return value;
+}
+
+function readSnapshot(snapshot) {
+  if (
+    typeof snapshot !== 'object' ||
+    snapshot === null ||
+    !AUTOSAVE_STATES.has(snapshot.state) ||
+    (snapshot.blockedReason !== null &&
+      !BLOCKED_REASONS.has(snapshot.blockedReason))
+  ) {
+    throw new TypeError('autosave snapshot is invalid.');
+  }
+
+  if (
+    (snapshot.state === 'blocked' && snapshot.blockedReason === null) ||
+    (snapshot.state !== 'blocked' && snapshot.blockedReason !== null)
+  ) {
+    throw new TypeError('autosave snapshot lifecycle is inconsistent.');
+  }
+
+  return Object.freeze({
+    state: snapshot.state,
+    blockedReason: snapshot.blockedReason,
+    activeStrongEntityTag: requireNullableString(
+      snapshot.activeStrongEntityTag,
+      'activeStrongEntityTag',
+    ),
+    pendingStrongEntityTag: requireNullableString(
+      snapshot.pendingStrongEntityTag,
+      'pendingStrongEntityTag',
+    ),
+    lastSavedStrongEntityTag: requireNullableString(
+      snapshot.lastSavedStrongEntityTag,
+      'lastSavedStrongEntityTag',
+    ),
+  });
+}
+
+function readRecoveryPhase(recoveryPhase) {
+  if (!RECOVERY_PHASES.has(recoveryPhase)) {
+    throw new TypeError('recoveryPhase is invalid.');
+  }
+  return recoveryPhase;
+}
+
+function presentation(viewState) {
+  return Object.freeze({
+    viewState,
+    messageKey: `referenceHost.autosave.${viewState}`,
+    busy: viewState === 'saving' || viewState === 'queued' || viewState === 'retrying',
+    canRetry: viewState === 'conflict' || viewState === 'failed',
+  });
+}
+
+/**
+ * Convert one Inkspan autosave lifecycle snapshot into host-owned presentation metadata.
+ *
+ * The result intentionally excludes local and durable validators. Hosts localize
+ * `messageKey` and keep authenticated recovery controls outside Inkspan.
+ */
+export function createAutosaveViewModel({ snapshot, recoveryPhase = 'none' }) {
+  const current = readSnapshot(snapshot);
+  const phase = readRecoveryPhase(recoveryPhase);
+
+  if (current.state === 'blocked') {
+    return presentation(
+      current.blockedReason === 'conflict' ? 'conflict' : 'failed',
+    );
+  }
+  if (current.state === 'closing') return presentation('closing');
+  if (current.state === 'closed') return presentation('closed');
+  if (current.state === 'saving' && phase === 'retrying') {
+    return presentation('retrying');
+  }
+  if (current.state === 'saving' && current.pendingStrongEntityTag !== null) {
+    return presentation('queued');
+  }
+  if (current.state === 'saving') return presentation('saving');
+  if (phase === 'recovered') return presentation('recovered');
+  return presentation('clean');
+}
+
+function snapshot({
+  state,
+  blockedReason = null,
+  activeStrongEntityTag = null,
+  pendingStrongEntityTag = null,
+  lastSavedStrongEntityTag = null,
+}) {
+  return Object.freeze({
+    state,
+    blockedReason,
+    activeStrongEntityTag,
+    pendingStrongEntityTag,
+    lastSavedStrongEntityTag,
+  });
+}
+
+function runSelfTest() {
+  const states = {
+    clean: createAutosaveViewModel({
+      snapshot: snapshot({ state: 'idle' }),
+    }).viewState,
+    saving: createAutosaveViewModel({
+      snapshot: snapshot({
+        state: 'saving',
+        activeStrongEntityTag: '"local-active"',
+      }),
+    }).viewState,
+    queued: createAutosaveViewModel({
+      snapshot: snapshot({
+        state: 'saving',
+        activeStrongEntityTag: '"local-active"',
+        pendingStrongEntityTag: '"local-pending"',
+      }),
+    }).viewState,
+    conflict: createAutosaveViewModel({
+      snapshot: snapshot({ state: 'blocked', blockedReason: 'conflict' }),
+    }).viewState,
+    failed: createAutosaveViewModel({
+      snapshot: snapshot({ state: 'blocked', blockedReason: 'failure' }),
+    }).viewState,
+    retrying: createAutosaveViewModel({
+      snapshot: snapshot({
+        state: 'saving',
+        activeStrongEntityTag: '"local-retry"',
+      }),
+      recoveryPhase: 'retrying',
+    }).viewState,
+    recovered: createAutosaveViewModel({
+      snapshot: snapshot({
+        state: 'idle',
+        lastSavedStrongEntityTag: '"local-saved"',
+      }),
+      recoveryPhase: 'recovered',
+    }).viewState,
+    closing: createAutosaveViewModel({
+      snapshot: snapshot({ state: 'closing' }),
+    }).viewState,
+    closed: createAutosaveViewModel({
+      snapshot: snapshot({ state: 'closed' }),
+    }).viewState,
+  };
+  process.stdout.write(`${JSON.stringify(states)}\n`);
+}
+
+if (process.argv.includes('--self-test')) {
+  runSelfTest();
+}

From f4dd07faf8fe8bc8a6e1426b164a5498379a7c8f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:37:12 -0700
Subject: [PATCH 009/258] test(reference-host): define collaboration lifecycle
 ownership contract

---
 ...eferenceHostCollaborationLifecycle.test.ts | 52 +++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 src/referenceHostCollaborationLifecycle.test.ts

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
new file mode 100644
index 00000000..dcb21af2
--- /dev/null
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -0,0 +1,52 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host collaboration lifecycle contract', () => {
+  it('ships one host-owned collaboration lifecycle fixture outside the published runtime', () => {
+    expect(existsSync(fixturePath)).toBe(true);
+  });
+
+  it('keeps provider creation and teardown host-owned and provider-neutral', () => {
+    if (!existsSync(fixturePath)) return;
+    const source = readFileSync(fixturePath, 'utf8');
+
+    expect(source).not.toMatch(/(?:from|import\()\s*['"][^'"]*src\//u);
+    expect(source).not.toMatch(/\b(?:fetch|XMLHttpRequest|WebSocket|process\.env)\b/u);
+    expect(source).toContain('REFERENCE_ONLY');
+    expect(source).toContain('providerFactory');
+    expect(source).toContain('reconnect');
+    expect(source).toContain('dispose');
+  });
+
+  it('disconnects and destroys replaced providers and tears down the host document exactly once', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
+      encoding: 'utf8',
+    });
+
+    expect(JSON.parse(output)).toEqual({
+      events: [
+        'document:create',
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:create:2',
+        'provider:connect:2',
+        'provider:disconnect:2',
+        'provider:destroy:2',
+        'document:destroy',
+      ],
+      providerGeneration: 2,
+      status: 'disposed',
+    });
+  });
+});

From 8f8a55ed8bdaa302531650e7a2f8bace1af3a675 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:37:40 -0700
Subject: [PATCH 010/258] feat(reference-host): demonstrate host collaboration
 lifecycle

---
 .../collaboration-provider-lifecycle.mjs      | 187 ++++++++++++++++++
 1 file changed, 187 insertions(+)
 create mode 100644 examples/reference-host/collaboration-provider-lifecycle.mjs

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
new file mode 100644
index 00000000..128a6233
--- /dev/null
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -0,0 +1,187 @@
+const MAX_CONTEXT_CODE_UNITS = 256;
+
+/** Marker used by repository contracts to keep this lifecycle example out of runtime authority. */
+export const REFERENCE_ONLY = true;
+
+function requireContextString(value, label) {
+  if (
+    typeof value !== 'string' ||
+    value.length === 0 ||
+    value.length > MAX_CONTEXT_CODE_UNITS
+  ) {
+    throw new TypeError(`${label} is invalid.`);
+  }
+  return value;
+}
+
+function requireFactory(value, label) {
+  if (typeof value !== 'function') {
+    throw new TypeError(`${label} is invalid.`);
+  }
+  return value;
+}
+
+function requireDocument(value) {
+  if (
+    typeof value !== 'object' ||
+    value === null ||
+    typeof value.destroy !== 'function'
+  ) {
+    throw new TypeError('documentFactory returned an invalid document.');
+  }
+  return value;
+}
+
+function requireProvider(value) {
+  if (
+    typeof value !== 'object' ||
+    value === null ||
+    typeof value.connect !== 'function' ||
+    typeof value.disconnect !== 'function' ||
+    typeof value.destroy !== 'function'
+  ) {
+    throw new TypeError('providerFactory returned an invalid provider.');
+  }
+  return value;
+}
+
+/**
+ * Create one provider-neutral collaboration lifecycle owned entirely by the host.
+ *
+ * The host supplies the document/provider factories and authorized room/actor
+ * context. Inkspan receives the resulting stable document/provider references;
+ * it does not create, reconnect, disconnect, or destroy either resource.
+ */
+export function createHostCollaborationLifecycle({
+  documentFactory,
+  providerFactory,
+  roomId,
+  actorId,
+}) {
+  const createDocument = requireFactory(documentFactory, 'documentFactory');
+  const createProvider = requireFactory(providerFactory, 'providerFactory');
+  const boundedRoomId = requireContextString(roomId, 'roomId');
+  const boundedActorId = requireContextString(actorId, 'actorId');
+  const document = requireDocument(createDocument());
+
+  let providerGeneration = 0;
+  let provider = null;
+  let connected = false;
+  let disposed = false;
+
+  function makeProvider() {
+    providerGeneration += 1;
+    provider = requireProvider(
+      createProvider({
+        document,
+        roomId: boundedRoomId,
+        actorId: boundedActorId,
+        generation: providerGeneration,
+      }),
+    );
+    connected = false;
+  }
+
+  function requireLive() {
+    if (disposed) {
+      throw new Error('collaboration lifecycle is disposed.');
+    }
+  }
+
+  function connect() {
+    requireLive();
+    if (connected) return false;
+    provider.connect();
+    connected = true;
+    return true;
+  }
+
+  function teardownProvider() {
+    if (provider === null) return;
+    if (connected) {
+      provider.disconnect();
+      connected = false;
+    }
+    provider.destroy();
+    provider = null;
+  }
+
+  function reconnect() {
+    requireLive();
+    teardownProvider();
+    makeProvider();
+    connect();
+    return getSnapshot();
+  }
+
+  function dispose() {
+    if (disposed) return false;
+    teardownProvider();
+    document.destroy();
+    disposed = true;
+    return true;
+  }
+
+  function getSnapshot() {
+    return Object.freeze({
+      status: disposed ? 'disposed' : connected ? 'connected' : 'disconnected',
+      providerGeneration,
+    });
+  }
+
+  makeProvider();
+
+  return Object.freeze({
+    document,
+    connect,
+    reconnect,
+    dispose,
+    getSnapshot,
+  });
+}
+
+function runSelfTest() {
+  const events = [];
+  let providerCounter = 0;
+  const lifecycle = createHostCollaborationLifecycle({
+    documentFactory() {
+      events.push('document:create');
+      return {
+        destroy() {
+          events.push('document:destroy');
+        },
+      };
+    },
+    providerFactory() {
+      providerCounter += 1;
+      const generation = providerCounter;
+      events.push(`provider:create:${generation}`);
+      return {
+        connect() {
+          events.push(`provider:connect:${generation}`);
+        },
+        disconnect() {
+          events.push(`provider:disconnect:${generation}`);
+        },
+        destroy() {
+          events.push(`provider:destroy:${generation}`);
+        },
+      };
+    },
+    roomId: 'reference-room',
+    actorId: 'reference-actor',
+  });
+
+  lifecycle.connect();
+  lifecycle.reconnect();
+  lifecycle.dispose();
+  lifecycle.dispose();
+
+  process.stdout.write(
+    `${JSON.stringify({ events, ...lifecycle.getSnapshot() })}\n`,
+  );
+}
+
+if (process.argv.includes('--self-test')) {
+  runSelfTest();
+}

From 25c847da5a06a1688a1d9bb6101cdbd44fe13c63 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:38:41 -0700
Subject: [PATCH 011/258] test(reference-host): derive recovery UX from Inkspan
 transitions

---
 src/referenceHostAutosaveViewModel.test.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index d9170a01..a7edb47c 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -14,7 +14,7 @@ describe('reference-host autosave presentation contract', () => {
     expect(existsSync(fixturePath)).toBe(true);
   });
 
-  it('maps programmatic lifecycle state to localization keys without exposing validators', () => {
+  it('maps programmatic lifecycle transitions to localization keys without exposing validators', () => {
     if (!existsSync(fixturePath)) return;
     const source = readFileSync(fixturePath, 'utf8');
 
@@ -23,6 +23,8 @@ describe('reference-host autosave presentation contract', () => {
     expect(source).toContain('REFERENCE_ONLY');
     expect(source).toContain('messageKey');
     expect(source).toContain('blockedReason');
+    expect(source).toContain('observe');
+    expect(source).not.toContain('recoveryPhase');
     expect(source).not.toContain('document body');
   });
 

From d68bee4b5a4691522d84ba3901241626f40a6d62 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:39:10 -0700
Subject: [PATCH 012/258] fix(reference-host): derive autosave recovery from
 snapshots

---
 .../reference-host/autosave-view-model.mjs    | 177 ++++++++++--------
 1 file changed, 101 insertions(+), 76 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 2a10b1cc..432fb1a5 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -6,7 +6,6 @@ const AUTOSAVE_STATES = new Set([
   'closed',
 ]);
 const BLOCKED_REASONS = new Set(['conflict', 'failure']);
-const RECOVERY_PHASES = new Set(['none', 'retrying', 'recovered']);
 
 /** Marker used by repository contracts to prevent this host fixture becoming runtime authority. */
 export const REFERENCE_ONLY = true;
@@ -54,48 +53,63 @@ function readSnapshot(snapshot) {
   });
 }
 
-function readRecoveryPhase(recoveryPhase) {
-  if (!RECOVERY_PHASES.has(recoveryPhase)) {
-    throw new TypeError('recoveryPhase is invalid.');
-  }
-  return recoveryPhase;
-}
-
 function presentation(viewState) {
   return Object.freeze({
     viewState,
     messageKey: `referenceHost.autosave.${viewState}`,
-    busy: viewState === 'saving' || viewState === 'queued' || viewState === 'retrying',
+    busy:
+      viewState === 'saving' ||
+      viewState === 'queued' ||
+      viewState === 'retrying',
+    blocked: viewState === 'conflict' || viewState === 'failed',
     canRetry: viewState === 'conflict' || viewState === 'failed',
   });
 }
 
 /**
- * Convert one Inkspan autosave lifecycle snapshot into host-owned presentation metadata.
+ * Create one host-owned projection of Inkspan autosave lifecycle transitions.
  *
- * The result intentionally excludes local and durable validators. Hosts localize
- * `messageKey` and keep authenticated recovery controls outside Inkspan.
+ * `observe()` consumes only programmatic queue/session snapshots. A blocked to
+ * saving transition is presented as retrying, and its next idle transition is
+ * presented as recovered. The projection never returns local or durable
+ * validators; hosts localize `messageKey` and keep authenticated recovery
+ * controls outside Inkspan.
  */
-export function createAutosaveViewModel({ snapshot, recoveryPhase = 'none' }) {
-  const current = readSnapshot(snapshot);
-  const phase = readRecoveryPhase(recoveryPhase);
-
-  if (current.state === 'blocked') {
-    return presentation(
-      current.blockedReason === 'conflict' ? 'conflict' : 'failed',
-    );
-  }
-  if (current.state === 'closing') return presentation('closing');
-  if (current.state === 'closed') return presentation('closed');
-  if (current.state === 'saving' && phase === 'retrying') {
-    return presentation('retrying');
-  }
-  if (current.state === 'saving' && current.pendingStrongEntityTag !== null) {
-    return presentation('queued');
+export function createAutosaveViewModel() {
+  let recovering = false;
+
+  function observe(snapshot) {
+    const current = readSnapshot(snapshot);
+
+    if (current.state === 'blocked') {
+      recovering = true;
+      return presentation(
+        current.blockedReason === 'conflict' ? 'conflict' : 'failed',
+      );
+    }
+    if (current.state === 'closing') {
+      recovering = false;
+      return presentation('closing');
+    }
+    if (current.state === 'closed') {
+      recovering = false;
+      return presentation('closed');
+    }
+    if (current.state === 'saving' && recovering) {
+      return presentation('retrying');
+    }
+    if (current.state === 'saving' && current.pendingStrongEntityTag !== null) {
+      return presentation('queued');
+    }
+    if (current.state === 'saving') return presentation('saving');
+    if (recovering) {
+      recovering = false;
+      return presentation('recovered');
+    }
+    return presentation('clean');
   }
-  if (current.state === 'saving') return presentation('saving');
-  if (phase === 'recovered') return presentation('recovered');
-  return presentation('clean');
+
+  return Object.freeze({ observe });
 }
 
 function snapshot({
@@ -115,51 +129,62 @@ function snapshot({
 }
 
 function runSelfTest() {
-  const states = {
-    clean: createAutosaveViewModel({
-      snapshot: snapshot({ state: 'idle' }),
-    }).viewState,
-    saving: createAutosaveViewModel({
-      snapshot: snapshot({
-        state: 'saving',
-        activeStrongEntityTag: '"local-active"',
-      }),
-    }).viewState,
-    queued: createAutosaveViewModel({
-      snapshot: snapshot({
-        state: 'saving',
-        activeStrongEntityTag: '"local-active"',
-        pendingStrongEntityTag: '"local-pending"',
-      }),
-    }).viewState,
-    conflict: createAutosaveViewModel({
-      snapshot: snapshot({ state: 'blocked', blockedReason: 'conflict' }),
-    }).viewState,
-    failed: createAutosaveViewModel({
-      snapshot: snapshot({ state: 'blocked', blockedReason: 'failure' }),
-    }).viewState,
-    retrying: createAutosaveViewModel({
-      snapshot: snapshot({
-        state: 'saving',
-        activeStrongEntityTag: '"local-retry"',
-      }),
-      recoveryPhase: 'retrying',
-    }).viewState,
-    recovered: createAutosaveViewModel({
-      snapshot: snapshot({
-        state: 'idle',
-        lastSavedStrongEntityTag: '"local-saved"',
-      }),
-      recoveryPhase: 'recovered',
-    }).viewState,
-    closing: createAutosaveViewModel({
-      snapshot: snapshot({ state: 'closing' }),
-    }).viewState,
-    closed: createAutosaveViewModel({
-      snapshot: snapshot({ state: 'closed' }),
-    }).viewState,
-  };
-  process.stdout.write(`${JSON.stringify(states)}\n`);
+  const steady = createAutosaveViewModel();
+  const clean = steady.observe(snapshot({ state: 'idle' })).viewState;
+  const saving = steady.observe(
+    snapshot({
+      state: 'saving',
+      activeStrongEntityTag: '"local-active"',
+    }),
+  ).viewState;
+  const queued = steady.observe(
+    snapshot({
+      state: 'saving',
+      activeStrongEntityTag: '"local-active"',
+      pendingStrongEntityTag: '"local-pending"',
+    }),
+  ).viewState;
+
+  const recovery = createAutosaveViewModel();
+  const conflict = recovery.observe(
+    snapshot({ state: 'blocked', blockedReason: 'conflict' }),
+  ).viewState;
+  const retrying = recovery.observe(
+    snapshot({
+      state: 'saving',
+      activeStrongEntityTag: '"local-retry"',
+    }),
+  ).viewState;
+  const recovered = recovery.observe(
+    snapshot({
+      state: 'idle',
+      lastSavedStrongEntityTag: '"local-saved"',
+    }),
+  ).viewState;
+
+  const failed = createAutosaveViewModel().observe(
+    snapshot({ state: 'blocked', blockedReason: 'failure' }),
+  ).viewState;
+  const closing = createAutosaveViewModel().observe(
+    snapshot({ state: 'closing' }),
+  ).viewState;
+  const closed = createAutosaveViewModel().observe(
+    snapshot({ state: 'closed' }),
+  ).viewState;
+
+  process.stdout.write(
+    `${JSON.stringify({
+      clean,
+      closed,
+      closing,
+      conflict,
+      failed,
+      queued,
+      recovered,
+      retrying,
+      saving,
+    })}\n`,
+  );
 }
 
 if (process.argv.includes('--self-test')) {

From 508576ce8e8175b06ab9d82ac079a2354cc90d35 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 12:39:44 -0700
Subject: [PATCH 013/258] docs(reference-host): align guide with executable
 fixtures

---
 examples/reference-host/README.md | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 7f049fea..88baac85 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -4,12 +4,14 @@ Status: Active PR / partial reference-host implementation
 
 This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining SSR/package/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains two executable, deterministic fixtures:
+The current slice contains four executable, deterministic fixtures:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
+- `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
+- `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates, reconnects, disconnects, and destroys its collaboration provider and final document lifecycle. The deterministic fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
 
-Both fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection, and are exercised by repository tests. They are deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+All fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. They are deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
 ## Copy this, replace that
 
@@ -17,6 +19,8 @@ Both fixtures are marked `REFERENCE_ONLY`, require no service, database, credent
 | --- | --- |
 | synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
+| autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
+| collaboration lifecycle fixture | Replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving host-owned reconnect, teardown, credential, and room-authorization policy. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -46,12 +50,14 @@ From a clean repository checkout with the supported Node runtime, these referenc
 ```sh
 node examples/reference-host/synthetic-document-repository.mjs --self-test
 node examples/reference-host/delayed-proposal.mjs --self-test
+node examples/reference-host/autosave-view-model.mjs --self-test
+node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected conflict/no-silent-advancement behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, and teardown behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, Inkspan autosave-state UI composition, host-created Yjs lifecycle/reconnect evidence, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, a real host-created `Y.Doc` plus provider lifecycle/reconnect journey, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
 
-Do not use the synthetic repository, synthetic identifiers, or deterministic proposal fixture as a production persistence, authentication, collaboration, or model implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, or collaboration lifecycle fixture as a production persistence, authentication, collaboration, or model implementation.

From 675c89765b95b1327e73a0e1bdd80fd75832ca36 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:03:04 -0700
Subject: [PATCH 014/258] test(reference-host): reject persistence accessors

---
 src/referenceHostSyntheticRepository.test.ts | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index fa3b1b72..5a7bce33 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -39,4 +39,20 @@ describe('reference-host synthetic durable repository contract', () => {
       savedValidator: '"v2"',
     });
   });
+
+  it('fails closed without invoking caller-owned option or save-request accessors', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--hostile-accessor-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      optionErrorCode: 'invalid_options',
+      optionGetterCalls: 0,
+      requestErrorCode: 'invalid_request',
+      requestGetterCalls: 0,
+    });
+  });
 });

From 733937d0b6821ac21c7b69ae3d644ab8549158a1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:03:48 -0700
Subject: [PATCH 015/258] fix(reference-host): contain persistence accessors

---
 .../synthetic-document-repository.mjs         | 138 +++++++++++++++---
 1 file changed, 115 insertions(+), 23 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index f849e8e7..28c4f9b5 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -25,6 +25,44 @@ function requireBoundedString(value, maximumCodeUnits, code) {
   return value;
 }
 
+function readPlainDataRecord(source, requiredKeys, optionalKeys, code) {
+  try {
+    if (
+      typeof source !== 'object' ||
+      source === null ||
+      Object.getPrototypeOf(source) !== Object.prototype
+    ) {
+      throw new ReferencePersistenceError(code);
+    }
+
+    const values = Object.create(null);
+    for (const key of requiredKeys) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (
+        descriptor === undefined ||
+        !Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ) {
+        throw new ReferencePersistenceError(code);
+      }
+      values[key] = descriptor.value;
+    }
+    for (const key of optionalKeys) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (descriptor === undefined) continue;
+      if (!Object.prototype.hasOwnProperty.call(descriptor, 'value')) {
+        throw new ReferencePersistenceError(code);
+      }
+      values[key] = descriptor.value;
+    }
+    return values;
+  } catch (error) {
+    if (error instanceof ReferencePersistenceError && error.code === code) {
+      throw error;
+    }
+    throw new ReferencePersistenceError(code);
+  }
+}
+
 function validatorForVersion(version) {
   return `"v${version}"`;
 }
@@ -46,24 +84,24 @@ function frozenConflict(currentValidator) {
  *
  * This adapter is synthetic acquisition/support evidence only. Buyers must replace
  * it with an authorized atomic durable store. Ambiguous or failed operations never
- * mutate the document or advance the strong validator.
+ * mutate the document or advance the strong validator. Configuration and save
+ * request fields are snapshotted from own data properties without invoking
+ * caller-owned accessors.
  */
 export function createSyntheticDocumentRepository(options) {
-  if (
-    typeof options !== 'object' ||
-    options === null ||
-    Object.getPrototypeOf(options) !== Object.prototype
-  ) {
-    throw new ReferencePersistenceError('invalid_options');
-  }
-
+  const configuration = readPlainDataRecord(
+    options,
+    ['documentId', 'initialDocument'],
+    [],
+    'invalid_options',
+  );
   const documentId = requireBoundedString(
-    options.documentId,
+    configuration.documentId,
     MAX_DOCUMENT_ID_CODE_UNITS,
     'invalid_document_id',
   );
   let document = requireBoundedString(
-    options.initialDocument,
+    configuration.initialDocument,
     MAX_DOCUMENT_CODE_UNITS,
     'invalid_document',
   );
@@ -82,26 +120,25 @@ export function createSyntheticDocumentRepository(options) {
   }
 
   function save(request) {
-    if (
-      typeof request !== 'object' ||
-      request === null ||
-      Object.getPrototypeOf(request) !== Object.prototype
-    ) {
-      throw new ReferencePersistenceError('invalid_request');
-    }
+    const candidate = readPlainDataRecord(
+      request,
+      ['documentId', 'document', 'ifMatch'],
+      ['outcome'],
+      'invalid_request',
+    );
 
-    assertDocumentId(request.documentId);
+    assertDocumentId(candidate.documentId);
     const nextDocument = requireBoundedString(
-      request.document,
+      candidate.document,
       MAX_DOCUMENT_CODE_UNITS,
       'invalid_document',
     );
     const ifMatch = requireBoundedString(
-      request.ifMatch,
+      candidate.ifMatch,
       256,
       'invalid_if_match',
     );
-    const outcome = request.outcome ?? 'saved';
+    const outcome = candidate.outcome ?? 'saved';
     if (
       outcome !== 'saved' &&
       outcome !== 'ambiguous_failure' &&
@@ -192,6 +229,61 @@ function runSelfTest() {
   );
 }
 
-if (process.argv.includes('--self-test')) {
+function runHostileAccessorSelfTest() {
+  let optionGetterCalls = 0;
+  let optionErrorCode = null;
+  const hostileOptions = { initialDocument: 'Buyer draft v1' };
+  Object.defineProperty(hostileOptions, 'documentId', {
+    enumerable: true,
+    get() {
+      optionGetterCalls += 1;
+      return 'buyer-document';
+    },
+  });
+  try {
+    createSyntheticDocumentRepository(hostileOptions);
+  } catch (error) {
+    optionErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  const repository = createSyntheticDocumentRepository({
+    documentId: 'buyer-document',
+    initialDocument: 'Buyer draft v1',
+  });
+  const initial = repository.read('buyer-document');
+  let requestGetterCalls = 0;
+  let requestErrorCode = null;
+  const hostileRequest = {
+    documentId: 'buyer-document',
+    ifMatch: initial.validator,
+  };
+  Object.defineProperty(hostileRequest, 'document', {
+    enumerable: true,
+    get() {
+      requestGetterCalls += 1;
+      return 'Hostile write';
+    },
+  });
+  try {
+    repository.save(hostileRequest);
+  } catch (error) {
+    requestErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      optionErrorCode,
+      optionGetterCalls,
+      requestErrorCode,
+      requestGetterCalls,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--hostile-accessor-self-test')) {
+  runHostileAccessorSelfTest();
+} else if (process.argv.includes('--self-test')) {
   runSelfTest();
 }

From 0e0503bbc8125c2b13258cf4d43d598aabfaf534 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:04:28 -0700
Subject: [PATCH 016/258] test(reference-host): reject proposal accessors

---
 src/referenceHostDelayedProposal.test.ts | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/referenceHostDelayedProposal.test.ts b/src/referenceHostDelayedProposal.test.ts
index 7580cf81..4079832c 100644
--- a/src/referenceHostDelayedProposal.test.ts
+++ b/src/referenceHostDelayedProposal.test.ts
@@ -37,4 +37,22 @@ describe('reference-host delayed proposal contract', () => {
       staleStatus: 'conflict',
     });
   });
+
+  it('rejects accessor-backed untrusted proposal inputs without invoking them', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--hostile-accessor-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      applicationError: 'proposal application is invalid.',
+      applicationGetterCalls: 0,
+      creationError: 'proposal creation is invalid.',
+      creationGetterCalls: 0,
+      proposalError: 'proposal application is invalid.',
+      proposalGetterCalls: 0,
+    });
+  });
 });

From d98401e445949537909d146acf3da1d75c234b07 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:04:53 -0700
Subject: [PATCH 017/258] fix(reference-host): contain proposal accessors

---
 examples/reference-host/delayed-proposal.mjs | 142 +++++++++++++++++--
 1 file changed, 129 insertions(+), 13 deletions(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index 64bb47cd..68062df2 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -15,21 +15,55 @@ function requireBoundedString(value, maximumCodeUnits, label) {
   return value;
 }
 
+function readPlainDataRecord(source, keys, message) {
+  try {
+    if (
+      typeof source !== 'object' ||
+      source === null ||
+      Object.getPrototypeOf(source) !== Object.prototype
+    ) {
+      throw new TypeError(message);
+    }
+
+    const values = Object.create(null);
+    for (const key of keys) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (
+        descriptor === undefined ||
+        !Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ) {
+        throw new TypeError(message);
+      }
+      values[key] = descriptor.value;
+    }
+    return values;
+  } catch (error) {
+    if (error instanceof TypeError && error.message === message) throw error;
+    throw new TypeError(message);
+  }
+}
+
 /**
  * Produce one deterministic asynchronous proposal bound to the revision captured by the host.
  *
  * This fixture deliberately contains no provider SDK, credential, prompt log, or remote call.
  * Real hosts replace proposal generation with an approved model boundary while preserving the
- * expectedRevision conflict gate before applying untrusted proposal data.
+ * expectedRevision conflict gate before applying untrusted proposal data. Candidate fields are
+ * snapshotted from own data properties without invoking caller-owned accessors.
  */
-export async function createDelayedProposal({ expectedRevision, replacement }) {
+export async function createDelayedProposal(source) {
+  const input = readPlainDataRecord(
+    source,
+    ['expectedRevision', 'replacement'],
+    'proposal creation is invalid.',
+  );
   const boundedRevision = requireBoundedString(
-    expectedRevision,
+    input.expectedRevision,
     MAX_REVISION_CODE_UNITS,
     'expectedRevision',
   );
   const boundedReplacement = requireBoundedString(
-    replacement,
+    input.replacement,
     MAX_PROPOSAL_CODE_UNITS,
     'replacement',
   );
@@ -43,17 +77,25 @@ export async function createDelayedProposal({ expectedRevision, replacement }) {
 
 /**
  * Apply one untrusted proposal only when the host's current revision still matches its capture.
+ * Top-level application metadata and model proposal fields must be own data properties so
+ * validation never executes accessor-backed untrusted proposal data.
  */
-export function applyDelayedProposal({ proposal, currentRevision, apply }) {
-  if (
-    typeof proposal !== 'object' ||
-    proposal === null ||
-    typeof apply !== 'function'
-  ) {
+export function applyDelayedProposal(source) {
+  const application = readPlainDataRecord(
+    source,
+    ['proposal', 'currentRevision', 'apply'],
+    'proposal application is invalid.',
+  );
+  if (typeof application.apply !== 'function') {
     throw new TypeError('proposal application is invalid.');
   }
+  const proposal = readPlainDataRecord(
+    application.proposal,
+    ['expectedRevision', 'replacement'],
+    'proposal application is invalid.',
+  );
   const boundedCurrentRevision = requireBoundedString(
-    currentRevision,
+    application.currentRevision,
     MAX_REVISION_CODE_UNITS,
     'currentRevision',
   );
@@ -72,7 +114,7 @@ export function applyDelayedProposal({ proposal, currentRevision, apply }) {
     return Object.freeze({ status: 'conflict' });
   }
 
-  apply(replacement);
+  application.apply(replacement);
   return Object.freeze({ status: 'applied' });
 }
 
@@ -119,6 +161,80 @@ async function runSelfTest() {
   );
 }
 
-if (process.argv.includes('--self-test')) {
+async function runHostileAccessorSelfTest() {
+  let creationGetterCalls = 0;
+  let creationError = null;
+  const hostileCreation = { replacement: 'Hostile proposal' };
+  Object.defineProperty(hostileCreation, 'expectedRevision', {
+    enumerable: true,
+    get() {
+      creationGetterCalls += 1;
+      return 'revision-v1';
+    },
+  });
+  try {
+    await createDelayedProposal(hostileCreation);
+  } catch (error) {
+    creationError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  const validProposal = await createDelayedProposal({
+    expectedRevision: 'revision-v1',
+    replacement: 'Valid proposal',
+  });
+  let applicationGetterCalls = 0;
+  let applicationError = null;
+  const hostileApplication = {
+    proposal: validProposal,
+    currentRevision: 'revision-v1',
+  };
+  Object.defineProperty(hostileApplication, 'apply', {
+    enumerable: true,
+    get() {
+      applicationGetterCalls += 1;
+      return () => undefined;
+    },
+  });
+  try {
+    applyDelayedProposal(hostileApplication);
+  } catch (error) {
+    applicationError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  let proposalGetterCalls = 0;
+  let proposalError = null;
+  const hostileProposal = { replacement: 'Hostile proposal' };
+  Object.defineProperty(hostileProposal, 'expectedRevision', {
+    enumerable: true,
+    get() {
+      proposalGetterCalls += 1;
+      return 'revision-v1';
+    },
+  });
+  try {
+    applyDelayedProposal({
+      proposal: hostileProposal,
+      currentRevision: 'revision-v1',
+      apply() {},
+    });
+  } catch (error) {
+    proposalError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      applicationError,
+      applicationGetterCalls,
+      creationError,
+      creationGetterCalls,
+      proposalError,
+      proposalGetterCalls,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--hostile-accessor-self-test')) {
+  await runHostileAccessorSelfTest();
+} else if (process.argv.includes('--self-test')) {
   await runSelfTest();
 }

From c0c2d1a424d56885301b2585ed103d3104bdec72 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:05:49 -0700
Subject: [PATCH 018/258] test(reference-host): reject autosave accessors

---
 src/referenceHostAutosaveViewModel.test.ts | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index a7edb47c..fe372237 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -46,4 +46,18 @@ describe('reference-host autosave presentation contract', () => {
       saving: 'saving',
     });
   });
+
+  it('rejects accessor-backed lifecycle snapshots without invoking them', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--hostile-accessor-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'autosave snapshot is invalid.',
+      getterCalls: 0,
+    });
+  });
 });

From da17ddb1f4202522ef17405fe638a8b95495998d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:06:14 -0700
Subject: [PATCH 019/258] fix(reference-host): contain autosave accessors

---
 .../reference-host/autosave-view-model.mjs    | 77 +++++++++++++++++--
 1 file changed, 69 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 432fb1a5..0b0ec377 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -6,6 +6,13 @@ const AUTOSAVE_STATES = new Set([
   'closed',
 ]);
 const BLOCKED_REASONS = new Set(['conflict', 'failure']);
+const SNAPSHOT_KEYS = [
+  'state',
+  'blockedReason',
+  'activeStrongEntityTag',
+  'pendingStrongEntityTag',
+  'lastSavedStrongEntityTag',
+];
 
 /** Marker used by repository contracts to prevent this host fixture becoming runtime authority. */
 export const REFERENCE_ONLY = true;
@@ -17,10 +24,37 @@ function requireNullableString(value, label) {
   return value;
 }
 
-function readSnapshot(snapshot) {
+function snapshotData(source) {
+  try {
+    if (typeof source !== 'object' || source === null) {
+      throw new TypeError('autosave snapshot is invalid.');
+    }
+    const values = Object.create(null);
+    for (const key of SNAPSHOT_KEYS) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (
+        descriptor === undefined ||
+        !Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ) {
+        throw new TypeError('autosave snapshot is invalid.');
+      }
+      values[key] = descriptor.value;
+    }
+    return values;
+  } catch (error) {
+    if (
+      error instanceof TypeError &&
+      error.message === 'autosave snapshot is invalid.'
+    ) {
+      throw error;
+    }
+    throw new TypeError('autosave snapshot is invalid.');
+  }
+}
+
+function readSnapshot(source) {
+  const snapshot = snapshotData(source);
   if (
-    typeof snapshot !== 'object' ||
-    snapshot === null ||
     !AUTOSAVE_STATES.has(snapshot.state) ||
     (snapshot.blockedReason !== null &&
       !BLOCKED_REASONS.has(snapshot.blockedReason))
@@ -69,10 +103,11 @@ function presentation(viewState) {
 /**
  * Create one host-owned projection of Inkspan autosave lifecycle transitions.
  *
- * `observe()` consumes only programmatic queue/session snapshots. A blocked to
- * saving transition is presented as retrying, and its next idle transition is
- * presented as recovered. The projection never returns local or durable
- * validators; hosts localize `messageKey` and keep authenticated recovery
+ * `observe()` consumes only programmatic queue/session snapshots. Snapshot fields
+ * must be own data properties so presentation never invokes caller-owned accessors.
+ * A blocked to saving transition is presented as retrying, and its next idle
+ * transition is presented as recovered. The projection never returns local or
+ * durable validators; hosts localize `messageKey` and keep authenticated recovery
  * controls outside Inkspan.
  */
 export function createAutosaveViewModel() {
@@ -187,6 +222,32 @@ function runSelfTest() {
   );
 }
 
-if (process.argv.includes('--self-test')) {
+function runHostileAccessorSelfTest() {
+  let getterCalls = 0;
+  let error = null;
+  const hostile = {
+    blockedReason: null,
+    activeStrongEntityTag: null,
+    pendingStrongEntityTag: null,
+    lastSavedStrongEntityTag: null,
+  };
+  Object.defineProperty(hostile, 'state', {
+    enumerable: true,
+    get() {
+      getterCalls += 1;
+      return 'idle';
+    },
+  });
+  try {
+    createAutosaveViewModel().observe(hostile);
+  } catch (failure) {
+    error = failure instanceof Error ? failure.message : 'unexpected error';
+  }
+  process.stdout.write(`${JSON.stringify({ error, getterCalls })}\n`);
+}
+
+if (process.argv.includes('--hostile-accessor-self-test')) {
+  runHostileAccessorSelfTest();
+} else if (process.argv.includes('--self-test')) {
   runSelfTest();
 }

From b59080031a6d570050e14a3c83f45f924c514c98 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:06:39 -0700
Subject: [PATCH 020/258] test(reference-host): reject collaboration accessors

---
 ...referenceHostCollaborationLifecycle.test.ts | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index dcb21af2..3f5cf6ad 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -49,4 +49,22 @@ describe('reference-host collaboration lifecycle contract', () => {
       status: 'disposed',
     });
   });
+
+  it('rejects accessor-backed lifecycle options and resource methods without invoking them', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--hostile-accessor-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      documentError: 'documentFactory returned an invalid document.',
+      documentGetterCalls: 0,
+      optionsError: 'collaboration options are invalid.',
+      optionsGetterCalls: 0,
+      providerError: 'providerFactory returned an invalid provider.',
+      providerGetterCalls: 0,
+    });
+  });
 });

From c2a10b12b8686627c757cd4a96c166de69498864 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:07:05 -0700
Subject: [PATCH 021/258] fix(reference-host): contain collaboration accessors

---
 .../collaboration-provider-lifecycle.mjs      | 211 ++++++++++++++----
 1 file changed, 172 insertions(+), 39 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 128a6233..97ccc982 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -21,28 +21,71 @@ function requireFactory(value, label) {
   return value;
 }
 
-function requireDocument(value) {
-  if (
-    typeof value !== 'object' ||
-    value === null ||
-    typeof value.destroy !== 'function'
-  ) {
-    throw new TypeError('documentFactory returned an invalid document.');
+function readOwnDataRecord(source, keys, message) {
+  try {
+    if (typeof source !== 'object' || source === null) {
+      throw new TypeError(message);
+    }
+    const values = Object.create(null);
+    for (const key of keys) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (
+        descriptor === undefined ||
+        !Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ) {
+        throw new TypeError(message);
+      }
+      values[key] = descriptor.value;
+    }
+    return values;
+  } catch (error) {
+    if (error instanceof TypeError && error.message === message) throw error;
+    throw new TypeError(message);
   }
-  return value;
 }
 
-function requireProvider(value) {
-  if (
-    typeof value !== 'object' ||
-    value === null ||
-    typeof value.connect !== 'function' ||
-    typeof value.disconnect !== 'function' ||
-    typeof value.destroy !== 'function'
-  ) {
-    throw new TypeError('providerFactory returned an invalid provider.');
+function findDataMethod(source, key, message) {
+  try {
+    if ((typeof source !== 'object' && typeof source !== 'function') || source === null) {
+      throw new TypeError(message);
+    }
+    let cursor = source;
+    while (cursor !== null) {
+      const descriptor = Object.getOwnPropertyDescriptor(cursor, key);
+      if (descriptor !== undefined) {
+        if (
+          !Object.prototype.hasOwnProperty.call(descriptor, 'value') ||
+          typeof descriptor.value !== 'function'
+        ) {
+          throw new TypeError(message);
+        }
+        return descriptor.value;
+      }
+      cursor = Object.getPrototypeOf(cursor);
+    }
+    throw new TypeError(message);
+  } catch (error) {
+    if (error instanceof TypeError && error.message === message) throw error;
+    throw new TypeError(message);
   }
-  return value;
+}
+
+function requireDocument(value) {
+  const message = 'documentFactory returned an invalid document.';
+  return Object.freeze({
+    value,
+    destroy: findDataMethod(value, 'destroy', message),
+  });
+}
+
+function requireProvider(value) {
+  const message = 'providerFactory returned an invalid provider.';
+  return Object.freeze({
+    value,
+    connect: findDataMethod(value, 'connect', message),
+    disconnect: findDataMethod(value, 'disconnect', message),
+    destroy: findDataMethod(value, 'destroy', message),
+  });
 }
 
 /**
@@ -50,28 +93,31 @@ function requireProvider(value) {
  *
  * The host supplies the document/provider factories and authorized room/actor
  * context. Inkspan receives the resulting stable document/provider references;
- * it does not create, reconnect, disconnect, or destroy either resource.
+ * it does not create, reconnect, disconnect, or destroy either resource. Option
+ * fields and resource methods are captured from data descriptors so lifecycle
+ * validation never executes accessor-backed host objects.
  */
-export function createHostCollaborationLifecycle({
-  documentFactory,
-  providerFactory,
-  roomId,
-  actorId,
-}) {
-  const createDocument = requireFactory(documentFactory, 'documentFactory');
-  const createProvider = requireFactory(providerFactory, 'providerFactory');
-  const boundedRoomId = requireContextString(roomId, 'roomId');
-  const boundedActorId = requireContextString(actorId, 'actorId');
-  const document = requireDocument(createDocument());
+export function createHostCollaborationLifecycle(source) {
+  const options = readOwnDataRecord(
+    source,
+    ['documentFactory', 'providerFactory', 'roomId', 'actorId'],
+    'collaboration options are invalid.',
+  );
+  const createDocument = requireFactory(options.documentFactory, 'documentFactory');
+  const createProvider = requireFactory(options.providerFactory, 'providerFactory');
+  const boundedRoomId = requireContextString(options.roomId, 'roomId');
+  const boundedActorId = requireContextString(options.actorId, 'actorId');
+  const documentResource = requireDocument(createDocument());
+  const document = documentResource.value;
 
   let providerGeneration = 0;
-  let provider = null;
+  let providerResource = null;
   let connected = false;
   let disposed = false;
 
   function makeProvider() {
     providerGeneration += 1;
-    provider = requireProvider(
+    providerResource = requireProvider(
       createProvider({
         document,
         roomId: boundedRoomId,
@@ -91,19 +137,19 @@ export function createHostCollaborationLifecycle({
   function connect() {
     requireLive();
     if (connected) return false;
-    provider.connect();
+    providerResource.connect.call(providerResource.value);
     connected = true;
     return true;
   }
 
   function teardownProvider() {
-    if (provider === null) return;
+    if (providerResource === null) return;
     if (connected) {
-      provider.disconnect();
+      providerResource.disconnect.call(providerResource.value);
       connected = false;
     }
-    provider.destroy();
-    provider = null;
+    providerResource.destroy.call(providerResource.value);
+    providerResource = null;
   }
 
   function reconnect() {
@@ -117,7 +163,7 @@ export function createHostCollaborationLifecycle({
   function dispose() {
     if (disposed) return false;
     teardownProvider();
-    document.destroy();
+    documentResource.destroy.call(document);
     disposed = true;
     return true;
   }
@@ -182,6 +228,93 @@ function runSelfTest() {
   );
 }
 
-if (process.argv.includes('--self-test')) {
+function runHostileAccessorSelfTest() {
+  let optionsGetterCalls = 0;
+  let optionsError = null;
+  const hostileOptions = {
+    providerFactory() {
+      return { connect() {}, disconnect() {}, destroy() {} };
+    },
+    roomId: 'reference-room',
+    actorId: 'reference-actor',
+  };
+  Object.defineProperty(hostileOptions, 'documentFactory', {
+    enumerable: true,
+    get() {
+      optionsGetterCalls += 1;
+      return () => ({ destroy() {} });
+    },
+  });
+  try {
+    createHostCollaborationLifecycle(hostileOptions);
+  } catch (error) {
+    optionsError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  let documentGetterCalls = 0;
+  let documentError = null;
+  try {
+    createHostCollaborationLifecycle({
+      documentFactory() {
+        const hostileDocument = {};
+        Object.defineProperty(hostileDocument, 'destroy', {
+          enumerable: true,
+          get() {
+            documentGetterCalls += 1;
+            return () => undefined;
+          },
+        });
+        return hostileDocument;
+      },
+      providerFactory() {
+        return { connect() {}, disconnect() {}, destroy() {} };
+      },
+      roomId: 'reference-room',
+      actorId: 'reference-actor',
+    });
+  } catch (error) {
+    documentError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  let providerGetterCalls = 0;
+  let providerError = null;
+  try {
+    createHostCollaborationLifecycle({
+      documentFactory() {
+        return { destroy() {} };
+      },
+      providerFactory() {
+        const hostileProvider = { disconnect() {}, destroy() {} };
+        Object.defineProperty(hostileProvider, 'connect', {
+          enumerable: true,
+          get() {
+            providerGetterCalls += 1;
+            return () => undefined;
+          },
+        });
+        return hostileProvider;
+      },
+      roomId: 'reference-room',
+      actorId: 'reference-actor',
+    });
+  } catch (error) {
+    providerError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      documentError,
+      documentGetterCalls,
+      optionsError,
+      optionsGetterCalls,
+      providerError,
+      providerGetterCalls,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--hostile-accessor-self-test')) {
+  runHostileAccessorSelfTest();
+} else if (process.argv.includes('--self-test')) {
   runSelfTest();
 }

From 33148388e5cb7f421290f896ab75619585d5dad8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:08:09 -0700
Subject: [PATCH 022/258] test(reference-host): contain teardown failures

---
 ...eferenceHostCollaborationLifecycle.test.ts | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index 3f5cf6ad..c8b1b9d0 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -67,4 +67,25 @@ describe('reference-host collaboration lifecycle contract', () => {
       providerGetterCalls: 0,
     });
   });
+
+  it('attempts provider and document cleanup after teardown failure without leaking private causes', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--cleanup-failure-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'collaboration lifecycle teardown failed.',
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy',
+      ],
+      leakedPrivateCause: false,
+      status: 'disposed',
+    });
+  });
 });

From 43864c63af32a8d5b265fab8168492034e82f8a4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:08:40 -0700
Subject: [PATCH 023/258] fix(reference-host): finish cleanup after teardown
 failure

---
 .../collaboration-provider-lifecycle.mjs      | 90 +++++++++++++++++--
 1 file changed, 82 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 97ccc982..99732ce9 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -1,4 +1,5 @@
 const MAX_CONTEXT_CODE_UNITS = 256;
+const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
 
 /** Marker used by repository contracts to keep this lifecycle example out of runtime authority. */
 export const REFERENCE_ONLY = true;
@@ -88,6 +89,10 @@ function requireProvider(value) {
   });
 }
 
+function teardownFailure() {
+  return new Error(TEARDOWN_FAILURE);
+}
+
 /**
  * Create one provider-neutral collaboration lifecycle owned entirely by the host.
  *
@@ -95,7 +100,8 @@ function requireProvider(value) {
  * context. Inkspan receives the resulting stable document/provider references;
  * it does not create, reconnect, disconnect, or destroy either resource. Option
  * fields and resource methods are captured from data descriptors so lifecycle
- * validation never executes accessor-backed host objects.
+ * validation never executes accessor-backed host objects. Cleanup failures are
+ * payload-redacted and do not prevent remaining teardown attempts.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -143,13 +149,24 @@ export function createHostCollaborationLifecycle(source) {
   }
 
   function teardownProvider() {
-    if (providerResource === null) return;
+    const resource = providerResource;
+    if (resource === null) return;
+    providerResource = null;
+    let failed = false;
     if (connected) {
-      providerResource.disconnect.call(providerResource.value);
       connected = false;
+      try {
+        resource.disconnect.call(resource.value);
+      } catch {
+        failed = true;
+      }
     }
-    providerResource.destroy.call(providerResource.value);
-    providerResource = null;
+    try {
+      resource.destroy.call(resource.value);
+    } catch {
+      failed = true;
+    }
+    if (failed) throw teardownFailure();
   }
 
   function reconnect() {
@@ -162,9 +179,19 @@ export function createHostCollaborationLifecycle(source) {
 
   function dispose() {
     if (disposed) return false;
-    teardownProvider();
-    documentResource.destroy.call(document);
+    let failed = false;
+    try {
+      teardownProvider();
+    } catch {
+      failed = true;
+    }
+    try {
+      documentResource.destroy.call(document);
+    } catch {
+      failed = true;
+    }
     disposed = true;
+    if (failed) throw teardownFailure();
     return true;
   }
 
@@ -313,7 +340,54 @@ function runHostileAccessorSelfTest() {
   );
 }
 
-if (process.argv.includes('--hostile-accessor-self-test')) {
+function runCleanupFailureSelfTest() {
+  const privateCause = 'private-provider-disconnect-cause';
+  const events = [];
+  const lifecycle = createHostCollaborationLifecycle({
+    documentFactory() {
+      return {
+        destroy() {
+          events.push('document:destroy');
+        },
+      };
+    },
+    providerFactory() {
+      return {
+        connect() {
+          events.push('provider:connect');
+        },
+        disconnect() {
+          events.push('provider:disconnect');
+          throw new Error(privateCause);
+        },
+        destroy() {
+          events.push('provider:destroy');
+        },
+      };
+    },
+    roomId: 'reference-room',
+    actorId: 'reference-actor',
+  });
+  lifecycle.connect();
+  let error = null;
+  try {
+    lifecycle.dispose();
+  } catch (failure) {
+    error = failure instanceof Error ? failure.message : 'unexpected error';
+  }
+  process.stdout.write(
+    `${JSON.stringify({
+      error,
+      events,
+      leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+      status: lifecycle.getSnapshot().status,
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--cleanup-failure-self-test')) {
+  runCleanupFailureSelfTest();
+} else if (process.argv.includes('--hostile-accessor-self-test')) {
   runHostileAccessorSelfTest();
 } else if (process.argv.includes('--self-test')) {
   runSelfTest();

From da4f2b4ad816c2b38d53b5f250a7eb139cb9b6e4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:13:57 -0700
Subject: [PATCH 024/258] test(reference-host): require real host-created Y.Doc
 lifecycle

---
 src/referenceHostCollaborationLifecycle.test.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index c8b1b9d0..44811a7b 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -26,7 +26,7 @@ describe('reference-host collaboration lifecycle contract', () => {
     expect(source).toContain('dispose');
   });
 
-  it('disconnects and destroys replaced providers and tears down the host document exactly once', () => {
+  it('reuses one real host-created Y.Doc across provider reconnects and tears it down exactly once', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
       encoding: 'utf8',
@@ -45,8 +45,11 @@ describe('reference-host collaboration lifecycle contract', () => {
         'provider:destroy:2',
         'document:destroy',
       ],
+      hostDocumentIsYjs: true,
       providerGeneration: 2,
+      sameDocumentAcrossReconnect: true,
       status: 'disposed',
+      yjsText: 'Buyer draft',
     });
   });
 

From d34c5266b1408bf16add11e40a044fc287fb868a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:14:38 -0700
Subject: [PATCH 025/258] feat(reference-host): exercise host-created Y.Doc
 lifecycle

---
 .../collaboration-provider-lifecycle.mjs      | 35 +++++++++++++++----
 1 file changed, 28 insertions(+), 7 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 99732ce9..33f607e9 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -1,3 +1,5 @@
+import { Doc } from 'yjs';
+
 const MAX_CONTEXT_CODE_UNITS = 256;
 const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
 
@@ -216,18 +218,29 @@ export function createHostCollaborationLifecycle(source) {
 function runSelfTest() {
   const events = [];
   let providerCounter = 0;
+  let firstProviderDocument = null;
+  let sameDocumentAcrossReconnect = true;
   const lifecycle = createHostCollaborationLifecycle({
     documentFactory() {
       events.push('document:create');
-      return {
-        destroy() {
-          events.push('document:destroy');
-        },
-      };
+      const document = new Doc();
+      document.getText('document').insert(0, 'Buyer draft');
+      document.on('destroy', () => {
+        events.push('document:destroy');
+      });
+      return document;
     },
-    providerFactory() {
+    providerFactory({ document }) {
       providerCounter += 1;
       const generation = providerCounter;
+      if (!(document instanceof Doc)) {
+        throw new TypeError('reference host must supply a Y.Doc.');
+      }
+      if (firstProviderDocument === null) {
+        firstProviderDocument = document;
+      } else if (document !== firstProviderDocument) {
+        sameDocumentAcrossReconnect = false;
+      }
       events.push(`provider:create:${generation}`);
       return {
         connect() {
@@ -247,11 +260,19 @@ function runSelfTest() {
 
   lifecycle.connect();
   lifecycle.reconnect();
+  const hostDocumentIsYjs = lifecycle.document instanceof Doc;
+  const yjsText = lifecycle.document.getText('document').toString();
   lifecycle.dispose();
   lifecycle.dispose();
 
   process.stdout.write(
-    `${JSON.stringify({ events, ...lifecycle.getSnapshot() })}\n`,
+    `${JSON.stringify({
+      events,
+      hostDocumentIsYjs,
+      ...lifecycle.getSnapshot(),
+      sameDocumentAcrossReconnect,
+      yjsText,
+    })}\n`,
   );
 }
 

From a0eb8afa86c236f4bac3ba24679772dc8a7f1256 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:15:08 -0700
Subject: [PATCH 026/258] docs(reference-host): record real Y.Doc lifecycle
 evidence

---
 examples/reference-host/README.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 88baac85..0ac2e811 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -9,7 +9,7 @@ The current slice contains four executable, deterministic fixtures:
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
-- `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates, reconnects, disconnects, and destroys its collaboration provider and final document lifecycle. The deterministic fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
+- `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
 
 All fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. They are deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
@@ -20,7 +20,7 @@ All fixtures are marked `REFERENCE_ONLY`, require no service, database, credenti
 | synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
-| collaboration lifecycle fixture | Replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving host-owned reconnect, teardown, credential, and room-authorization policy. |
+| collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -41,7 +41,7 @@ flowchart LR
     class Host,Repo,Provider,Model host;
 ```
 
-Inkspan owns deterministic editor/revision/autosave/conversion/package behavior. The host owns authenticated transport, authorization, tenancy, durable persistence, collaboration-provider lifecycle, credentials, model policy, retention, deployment, and durable audit. A successful local editor operation, Yjs update, model response, or status check is not durable authorization or persistence evidence.
+Inkspan owns deterministic editor/revision/autosave/conversion/package behavior. The host owns authenticated transport, authorization, tenancy, durable persistence, `Y.Doc` and collaboration-provider lifecycle, credentials, model policy, retention, deployment, and durable audit. A successful local editor operation, Yjs update, model response, or status check is not durable authorization or persistence evidence.
 
 ## Executable fixture checks
 
@@ -54,10 +54,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, and teardown behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, real host-created `Y.Doc`, reconnect, and teardown behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, a real host-created `Y.Doc` plus provider lifecycle/reconnect journey, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, or collaboration lifecycle fixture as a production persistence, authentication, collaboration, or model implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, or deterministic collaboration provider as a production persistence, authentication, collaboration, or model implementation.

From a11a759f5c1c459100468a4b551b856cd2718234 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:17:55 -0700
Subject: [PATCH 027/258] test(reference-host): require initialization unwind

---
 src/referenceHostCollaborationLifecycle.test.ts | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index 44811a7b..48c817bb 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -71,6 +71,21 @@ describe('reference-host collaboration lifecycle contract', () => {
     });
   });
 
+  it('unwinds the acquired host document when initial provider construction fails', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--initialization-failure-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'collaboration lifecycle initialization failed.',
+      events: ['document:create', 'provider:create', 'document:destroy'],
+      leakedPrivateCause: false,
+    });
+  });
+
   it('attempts provider and document cleanup after teardown failure without leaking private causes', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 091e73d26c62a1e8d69d06c14e635fe2a8dc2ea0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:18:51 -0700
Subject: [PATCH 028/258] fix(reference-host): unwind failed collaboration
 initialization

---
 .../collaboration-provider-lifecycle.mjs      | 74 +++++++++++++++++--
 1 file changed, 66 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 33f607e9..e0396ad0 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -1,11 +1,14 @@
 import { Doc } from 'yjs';
 
 const MAX_CONTEXT_CODE_UNITS = 256;
+const INITIALIZATION_FAILURE = 'collaboration lifecycle initialization failed.';
 const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
 
 /** Marker used by repository contracts to keep this lifecycle example out of runtime authority. */
 export const REFERENCE_ONLY = true;
 
+class ResourceValidationError extends TypeError {}
+
 function requireContextString(value, label) {
   if (
     typeof value !== 'string' ||
@@ -50,7 +53,7 @@ function readOwnDataRecord(source, keys, message) {
 function findDataMethod(source, key, message) {
   try {
     if ((typeof source !== 'object' && typeof source !== 'function') || source === null) {
-      throw new TypeError(message);
+      throw new ResourceValidationError(message);
     }
     let cursor = source;
     while (cursor !== null) {
@@ -60,16 +63,18 @@ function findDataMethod(source, key, message) {
           !Object.prototype.hasOwnProperty.call(descriptor, 'value') ||
           typeof descriptor.value !== 'function'
         ) {
-          throw new TypeError(message);
+          throw new ResourceValidationError(message);
         }
         return descriptor.value;
       }
       cursor = Object.getPrototypeOf(cursor);
     }
-    throw new TypeError(message);
+    throw new ResourceValidationError(message);
   } catch (error) {
-    if (error instanceof TypeError && error.message === message) throw error;
-    throw new TypeError(message);
+    if (error instanceof ResourceValidationError && error.message === message) {
+      throw error;
+    }
+    throw new ResourceValidationError(message);
   }
 }
 
@@ -91,6 +96,10 @@ function requireProvider(value) {
   });
 }
 
+function initializationFailure() {
+  return new Error(INITIALIZATION_FAILURE);
+}
+
 function teardownFailure() {
   return new Error(TEARDOWN_FAILURE);
 }
@@ -102,8 +111,9 @@ function teardownFailure() {
  * context. Inkspan receives the resulting stable document/provider references;
  * it does not create, reconnect, disconnect, or destroy either resource. Option
  * fields and resource methods are captured from data descriptors so lifecycle
- * validation never executes accessor-backed host objects. Cleanup failures are
- * payload-redacted and do not prevent remaining teardown attempts.
+ * validation never executes accessor-backed host objects. Initial provider
+ * failures unwind an already-created document, and cleanup failures are
+ * payload-redacted without preventing remaining teardown attempts.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -204,7 +214,20 @@ export function createHostCollaborationLifecycle(source) {
     });
   }
 
-  makeProvider();
+  try {
+    makeProvider();
+  } catch (error) {
+    let cleanupFailed = false;
+    try {
+      documentResource.destroy.call(document);
+    } catch {
+      cleanupFailed = true;
+    }
+    if (error instanceof ResourceValidationError && !cleanupFailed) {
+      throw error;
+    }
+    throw initializationFailure();
+  }
 
   return Object.freeze({
     document,
@@ -361,6 +384,39 @@ function runHostileAccessorSelfTest() {
   );
 }
 
+function runInitializationFailureSelfTest() {
+  const privateCause = 'private-provider-construction-cause';
+  const events = [];
+  let error = null;
+  try {
+    createHostCollaborationLifecycle({
+      documentFactory() {
+        events.push('document:create');
+        return {
+          destroy() {
+            events.push('document:destroy');
+          },
+        };
+      },
+      providerFactory() {
+        events.push('provider:create');
+        throw new Error(privateCause);
+      },
+      roomId: 'reference-room',
+      actorId: 'reference-actor',
+    });
+  } catch (failure) {
+    error = failure instanceof Error ? failure.message : 'unexpected error';
+  }
+  process.stdout.write(
+    `${JSON.stringify({
+      error,
+      events,
+      leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+    })}\n`,
+  );
+}
+
 function runCleanupFailureSelfTest() {
   const privateCause = 'private-provider-disconnect-cause';
   const events = [];
@@ -408,6 +464,8 @@ function runCleanupFailureSelfTest() {
 
 if (process.argv.includes('--cleanup-failure-self-test')) {
   runCleanupFailureSelfTest();
+} else if (process.argv.includes('--initialization-failure-self-test')) {
+  runInitializationFailureSelfTest();
 } else if (process.argv.includes('--hostile-accessor-self-test')) {
   runHostileAccessorSelfTest();
 } else if (process.argv.includes('--self-test')) {

From a135bbf90b22991e4deecbe8e037365cae080534 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:32:22 -0700
Subject: [PATCH 029/258] test(reference-host): require public presentation
 asset wiring

---
 src/referenceHostPresentationAssets.test.ts | 38 +++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 src/referenceHostPresentationAssets.test.ts

diff --git a/src/referenceHostPresentationAssets.test.ts b/src/referenceHostPresentationAssets.test.ts
new file mode 100644
index 00000000..be11a40a
--- /dev/null
+++ b/src/referenceHostPresentationAssets.test.ts
@@ -0,0 +1,38 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+function repositoryFile(path: string): string {
+  return readFileSync(resolve(process.cwd(), path), 'utf8');
+}
+
+describe('reference-host public presentation assets', () => {
+  it('wires editor styles plus the complete multilingual font option through public package subpaths', () => {
+    const source = repositoryFile('examples/reference-host/presentation-full.css');
+
+    expect(source).toBe(
+      "@import '@contextualwisdomlab/cwl-editor/styles.css';\n" +
+        "@import '@contextualwisdomlab/cwl-editor/fonts.css';\n",
+    );
+  });
+
+  it('wires editor styles plus the smaller Latin font option through public package subpaths', () => {
+    const source = repositoryFile('examples/reference-host/presentation-latin.css');
+
+    expect(source).toBe(
+      "@import '@contextualwisdomlab/cwl-editor/styles.css';\n" +
+        "@import '@contextualwisdomlab/cwl-editor/fonts-latin.css';\n",
+    );
+  });
+
+  it('keeps every referenced presentation entrypoint in the published package export map', () => {
+    const packageMetadata = JSON.parse(repositoryFile('package.json')) as {
+      exports: Record<string, unknown>;
+    };
+
+    expect(packageMetadata.exports).toHaveProperty('./styles.css');
+    expect(packageMetadata.exports).toHaveProperty('./fonts.css');
+    expect(packageMetadata.exports).toHaveProperty('./fonts-latin.css');
+  });
+});

From 32e9e69a20f8810320a92e778de55b9852267c24 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:32:39 -0700
Subject: [PATCH 030/258] feat(reference-host): wire full multilingual
 presentation assets

---
 examples/reference-host/presentation-full.css | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 examples/reference-host/presentation-full.css

diff --git a/examples/reference-host/presentation-full.css b/examples/reference-host/presentation-full.css
new file mode 100644
index 00000000..34f8fdd9
--- /dev/null
+++ b/examples/reference-host/presentation-full.css
@@ -0,0 +1,2 @@
+@import '@contextualwisdomlab/cwl-editor/styles.css';
+@import '@contextualwisdomlab/cwl-editor/fonts.css';

From d021fcda5dfa7beba0cbf886c01a288eefc0b731 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:33:41 -0700
Subject: [PATCH 031/258] feat(reference-host): wire Latin presentation assets

---
 examples/reference-host/presentation-latin.css | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 examples/reference-host/presentation-latin.css

diff --git a/examples/reference-host/presentation-latin.css b/examples/reference-host/presentation-latin.css
new file mode 100644
index 00000000..17f95d3e
--- /dev/null
+++ b/examples/reference-host/presentation-latin.css
@@ -0,0 +1,2 @@
+@import '@contextualwisdomlab/cwl-editor/styles.css';
+@import '@contextualwisdomlab/cwl-editor/fonts-latin.css';

From b2a7eba206e01074c6623067d75feef9fb403c71 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 13:34:35 -0700
Subject: [PATCH 032/258] docs(reference-host): document public presentation
 options

---
 examples/reference-host/README.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 0ac2e811..01e7928a 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -4,14 +4,16 @@ Status: Active PR / partial reference-host implementation
 
 This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining SSR/package/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains four executable, deterministic fixtures:
+The current slice contains four executable, deterministic fixtures plus two public-package presentation entrypoints:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
+- `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
+- `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 
-All fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. They are deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+All executable fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. The presentation entrypoints reference only public package subpaths. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
 ## Copy this, replace that
 
@@ -21,6 +23,7 @@ All fixtures are marked `REFERENCE_ONLY`, require no service, database, credenti
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
+| presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -54,10 +57,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, real host-created `Y.Doc`, reconnect, and teardown behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, real host-created `Y.Doc`, reconnect, teardown, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, package CSS and both font options, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, or deterministic collaboration provider as a production persistence, authentication, collaboration, or model implementation.

From f198c8774bcf82efe8d646273707893f84982258 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:36:01 -0700
Subject: [PATCH 033/258] test(reference-host): require retry restore and fork
 recovery

---
 src/referenceHostSyntheticRepository.test.ts | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 5a7bce33..7ee1ffd4 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -24,7 +24,7 @@ describe('reference-host synthetic durable repository contract', () => {
     expect(source).toContain('If-Match');
   });
 
-  it('proves ambiguous failure cannot advance the validator and stale writes conflict', () => {
+  it('proves failure-safe retry, restore, fork isolation, and stale-write conflict semantics', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(process.execPath, [fixturePath, '--self-test'], {
       encoding: 'utf8',
@@ -32,15 +32,22 @@ describe('reference-host synthetic durable repository contract', () => {
 
     expect(JSON.parse(output)).toEqual({
       afterAmbiguousValidator: '"v1"',
+      afterFailureValidator: '"v2"',
       conflictCurrentValidator: '"v2"',
-      finalDocument: 'Buyer draft v2',
-      finalValidator: '"v2"',
+      forkDocument: 'Buyer draft v1',
+      forkFinalDocument: 'Fork-only edit',
+      forkInitialValidator: '"v1"',
+      forkSavedValidator: '"v2"',
       initialValidator: '"v1"',
+      restoredValidator: '"v4"',
+      retrySavedValidator: '"v3"',
       savedValidator: '"v2"',
+      sourceDocumentAfterFork: 'Buyer draft v1',
+      sourceValidatorAfterFork: '"v4"',
     });
   });
 
-  it('fails closed without invoking caller-owned option or save-request accessors', () => {
+  it('fails closed without invoking caller-owned option, save, or fork-request accessors', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(
       process.execPath,
@@ -49,6 +56,8 @@ describe('reference-host synthetic durable repository contract', () => {
     );
 
     expect(JSON.parse(output)).toEqual({
+      forkErrorCode: 'invalid_fork_request',
+      forkGetterCalls: 0,
       optionErrorCode: 'invalid_options',
       optionGetterCalls: 0,
       requestErrorCode: 'invalid_request',

From 35dbe4f0b073feb4788a41d6ee83dd9a920f0b0c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:39:30 -0700
Subject: [PATCH 034/258] feat(reference-host): prove retry restore and fork
 recovery

---
 .../synthetic-document-repository.mjs         | 141 +++++++++++++++++-
 1 file changed, 134 insertions(+), 7 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 28c4f9b5..9da48775 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -84,9 +84,11 @@ function frozenConflict(currentValidator) {
  *
  * This adapter is synthetic acquisition/support evidence only. Buyers must replace
  * it with an authorized atomic durable store. Ambiguous or failed operations never
- * mutate the document or advance the strong validator. Configuration and save
- * request fields are snapshotted from own data properties without invoking
- * caller-owned accessors.
+ * mutate the document or advance the strong validator. A confirmed fork requires
+ * the current strong validator and starts an independent repository at a fresh
+ * validator so source and fork cannot silently share revision authority.
+ * Configuration, save, and fork request fields are snapshotted from own data
+ * properties without invoking caller-owned accessors.
  */
 export function createSyntheticDocumentRepository(options) {
   const configuration = readPlainDataRecord(
@@ -163,7 +165,42 @@ export function createSyntheticDocumentRepository(options) {
     return frozenSave('saved', validator);
   }
 
-  return Object.freeze({ read, save });
+  function fork(request) {
+    const candidate = readPlainDataRecord(
+      request,
+      ['documentId', 'forkDocumentId', 'ifMatch'],
+      [],
+      'invalid_fork_request',
+    );
+
+    assertDocumentId(candidate.documentId);
+    const forkDocumentId = requireBoundedString(
+      candidate.forkDocumentId,
+      MAX_DOCUMENT_ID_CODE_UNITS,
+      'invalid_fork_document_id',
+    );
+    const ifMatch = requireBoundedString(
+      candidate.ifMatch,
+      256,
+      'invalid_if_match',
+    );
+    if (ifMatch !== validator) {
+      return frozenConflict(validator);
+    }
+    if (forkDocumentId === documentId) {
+      throw new ReferencePersistenceError('invalid_fork_document_id');
+    }
+
+    return Object.freeze({
+      status: 'forked',
+      repository: createSyntheticDocumentRepository({
+        documentId: forkDocumentId,
+        initialDocument: document,
+      }),
+    });
+  }
+
+  return Object.freeze({ fork, read, save });
 }
 
 function runSelfTest() {
@@ -216,15 +253,83 @@ function runSelfTest() {
     throw new Error('Synthetic stale If-Match write did not conflict.');
   }
 
-  const finalState = repository.read('buyer-document');
+  let failureObserved = false;
+  try {
+    repository.save({
+      documentId: 'buyer-document',
+      document: 'Buyer draft v3',
+      ifMatch: saved.validator,
+      outcome: 'failure',
+    });
+  } catch (error) {
+    failureObserved =
+      error instanceof ReferencePersistenceError && error.code === 'failure';
+  }
+  if (!failureObserved) {
+    throw new Error('Synthetic failure evidence was not observed.');
+  }
+
+  const afterFailure = repository.read('buyer-document');
+  if (
+    afterFailure.document !== 'Buyer draft v2' ||
+    afterFailure.validator !== saved.validator
+  ) {
+    throw new Error('Failure advanced synthetic durable state.');
+  }
+
+  const retried = repository.save({
+    documentId: 'buyer-document',
+    document: 'Buyer draft v3',
+    ifMatch: afterFailure.validator,
+  });
+  if (retried.status !== 'saved') {
+    throw new Error('Synthetic retry did not report success.');
+  }
+
+  const restored = repository.save({
+    documentId: 'buyer-document',
+    document: initial.document,
+    ifMatch: retried.validator,
+  });
+  if (restored.status !== 'saved') {
+    throw new Error('Synthetic restore did not report success.');
+  }
+
+  const forked = repository.fork({
+    documentId: 'buyer-document',
+    forkDocumentId: 'buyer-document-fork',
+    ifMatch: restored.validator,
+  });
+  if (forked.status !== 'forked') {
+    throw new Error('Synthetic fork did not report success.');
+  }
+  const forkInitial = forked.repository.read('buyer-document-fork');
+  const forkSaved = forked.repository.save({
+    documentId: 'buyer-document-fork',
+    document: 'Fork-only edit',
+    ifMatch: forkInitial.validator,
+  });
+  if (forkSaved.status !== 'saved') {
+    throw new Error('Synthetic fork save did not report success.');
+  }
+
+  const forkFinal = forked.repository.read('buyer-document-fork');
+  const sourceAfterFork = repository.read('buyer-document');
   process.stdout.write(
     `${JSON.stringify({
       afterAmbiguousValidator: afterAmbiguous.validator,
+      afterFailureValidator: afterFailure.validator,
       conflictCurrentValidator: conflict.currentValidator,
-      finalDocument: finalState.document,
-      finalValidator: finalState.validator,
+      forkDocument: forkInitial.document,
+      forkFinalDocument: forkFinal.document,
+      forkInitialValidator: forkInitial.validator,
+      forkSavedValidator: forkSaved.validator,
       initialValidator: initial.validator,
+      restoredValidator: restored.validator,
+      retrySavedValidator: retried.validator,
       savedValidator: saved.validator,
+      sourceDocumentAfterFork: sourceAfterFork.document,
+      sourceValidatorAfterFork: sourceAfterFork.validator,
     })}\n`,
   );
 }
@@ -272,8 +377,30 @@ function runHostileAccessorSelfTest() {
       error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
   }
 
+  let forkGetterCalls = 0;
+  let forkErrorCode = null;
+  const hostileFork = {
+    documentId: 'buyer-document',
+    ifMatch: initial.validator,
+  };
+  Object.defineProperty(hostileFork, 'forkDocumentId', {
+    enumerable: true,
+    get() {
+      forkGetterCalls += 1;
+      return 'buyer-document-fork';
+    },
+  });
+  try {
+    repository.fork(hostileFork);
+  } catch (error) {
+    forkErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
   process.stdout.write(
     `${JSON.stringify({
+      forkErrorCode,
+      forkGetterCalls,
       optionErrorCode,
       optionGetterCalls,
       requestErrorCode,

From fc7479d5062d8a16a6830a3514ed1605312b9d2f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:42:43 -0700
Subject: [PATCH 035/258] test(reference-host): require recovery guide parity

---
 src/referenceHostSyntheticRepository.test.ts | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 7ee1ffd4..83154bd3 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -8,6 +8,7 @@ const fixturePath = resolve(
   process.cwd(),
   'examples/reference-host/synthetic-document-repository.mjs',
 );
+const guidePath = resolve(process.cwd(), 'examples/reference-host/README.md');
 
 describe('reference-host synthetic durable repository contract', () => {
   it('ships one executable reference-only repository fixture outside the published runtime', () => {
@@ -64,4 +65,18 @@ describe('reference-host synthetic durable repository contract', () => {
       requestGetterCalls: 0,
     });
   });
+
+  it('keeps the buyer guide code-current for retry, restore, and independent fork semantics', () => {
+    const guide = readFileSync(guidePath, 'utf8');
+
+    expect(guide).toContain(
+      'A confirmed failure can be retried with the unchanged current validator.',
+    );
+    expect(guide).toContain(
+      'A restore is a normal confirmed save against the current validator and advances it only after success.',
+    );
+    expect(guide).toContain(
+      'A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.',
+    );
+  });
 });

From e604320de84ecbcbda400feda4c9466f90ceceb2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:45:12 -0700
Subject: [PATCH 036/258] docs(reference-host): document recovery semantics

---
 examples/reference-host/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 01e7928a..cf8eecb9 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -6,7 +6,7 @@ This directory is buyer-facing integration evidence for issue #377. It is intent
 
 The current slice contains four executable, deterministic fixtures plus two public-package presentation entrypoints:
 
-- `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict.
+- `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
@@ -19,7 +19,7 @@ All executable fixtures are marked `REFERENCE_ONLY`, require no service, databas
 
 | Reference element | Buyer action |
 | --- | --- |
-| synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy and returns a new strong validator only after confirmed success. |
+| synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves validators across ambiguous/failed operations, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
@@ -57,7 +57,7 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected conflict, lifecycle, recovery, real host-created `Y.Doc`, reconnect, teardown, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 

From 1c5ae7c9edb6926756192e18069ad8a3a304c9ec Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:53:22 -0700
Subject: [PATCH 037/258] test(reference-host): contain hostile reflection
 failures

---
 ...referenceHostReflectionContainment.test.ts | 82 +++++++++++++++++++
 1 file changed, 82 insertions(+)
 create mode 100644 src/referenceHostReflectionContainment.test.ts

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
new file mode 100644
index 00000000..f3174a56
--- /dev/null
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -0,0 +1,82 @@
+import { execFileSync } from 'node:child_process';
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { describe, expect, it } from 'vitest';
+
+function observeHostileReflectionFailure(
+  fixture: string,
+  invocation: string,
+): string {
+  const fixtureUrl = pathToFileURL(resolve(process.cwd(), fixture)).href;
+  const script = `
+    const module = await import(${JSON.stringify(fixtureUrl)});
+    const privateSentinel = 'private-reflection-sentinel';
+    const hostileError = new Proxy({}, {
+      getPrototypeOf() {
+        throw privateSentinel;
+      },
+    });
+    const hostileSource = new Proxy({}, ${invocation});
+    let observed = 'no-error';
+    try {
+      module.runReflectionBoundarySelfTest(hostileSource);
+    } catch (error) {
+      if (typeof error === 'object' && error !== null) {
+        const descriptor = Object.getOwnPropertyDescriptor(error, 'message');
+        observed = descriptor && Object.prototype.hasOwnProperty.call(descriptor, 'value')
+          ? descriptor.value
+          : 'object-error';
+      } else {
+        observed = String(error);
+      }
+    }
+    process.stdout.write(JSON.stringify({ observed }));
+  `;
+  const output = execFileSync(
+    process.execPath,
+    ['--input-type=module', '--eval', script],
+    { encoding: 'utf8' },
+  );
+  return (JSON.parse(output) as { observed: string }).observed;
+}
+
+describe('reference-host hostile reflection containment', () => {
+  it('redacts hostile meta-object failures across every reference boundary', () => {
+    const prototypeTrap = `{
+      getPrototypeOf() {
+        throw hostileError;
+      },
+    }`;
+    const descriptorTrap = `{
+      getOwnPropertyDescriptor() {
+        throw hostileError;
+      },
+    }`;
+
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/synthetic-document-repository.mjs',
+        prototypeTrap,
+      ),
+    ).toBe('Reference persistence invalid_options.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/delayed-proposal.mjs',
+        prototypeTrap,
+      ),
+    ).toBe('proposal creation is invalid.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/autosave-view-model.mjs',
+        descriptorTrap,
+      ),
+    ).toBe('autosave snapshot is invalid.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/collaboration-provider-lifecycle.mjs',
+        descriptorTrap,
+      ),
+    ).toBe('collaboration options are invalid.');
+  });
+});

From f9158f8e2a03b25d91ae0af62848a3e4b10725bc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 14:54:04 -0700
Subject: [PATCH 038/258] test(reference-host): exercise real reflection
 boundaries

---
 src/referenceHostReflectionContainment.test.ts | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
index f3174a56..723c3a6a 100644
--- a/src/referenceHostReflectionContainment.test.ts
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -6,7 +6,8 @@ import { describe, expect, it } from 'vitest';
 
 function observeHostileReflectionFailure(
   fixture: string,
-  invocation: string,
+  sourceTrap: string,
+  call: string,
 ): string {
   const fixtureUrl = pathToFileURL(resolve(process.cwd(), fixture)).href;
   const script = `
@@ -17,10 +18,10 @@ function observeHostileReflectionFailure(
         throw privateSentinel;
       },
     });
-    const hostileSource = new Proxy({}, ${invocation});
+    const hostileSource = new Proxy({}, ${sourceTrap});
     let observed = 'no-error';
     try {
-      module.runReflectionBoundarySelfTest(hostileSource);
+      ${call}
     } catch (error) {
       if (typeof error === 'object' && error !== null) {
         const descriptor = Object.getOwnPropertyDescriptor(error, 'message');
@@ -58,24 +59,28 @@ describe('reference-host hostile reflection containment', () => {
       observeHostileReflectionFailure(
         'examples/reference-host/synthetic-document-repository.mjs',
         prototypeTrap,
+        'module.createSyntheticDocumentRepository(hostileSource);',
       ),
     ).toBe('Reference persistence invalid_options.');
     expect(
       observeHostileReflectionFailure(
         'examples/reference-host/delayed-proposal.mjs',
         prototypeTrap,
+        'await module.createDelayedProposal(hostileSource);',
       ),
     ).toBe('proposal creation is invalid.');
     expect(
       observeHostileReflectionFailure(
         'examples/reference-host/autosave-view-model.mjs',
         descriptorTrap,
+        'module.createAutosaveViewModel().observe(hostileSource);',
       ),
     ).toBe('autosave snapshot is invalid.');
     expect(
       observeHostileReflectionFailure(
         'examples/reference-host/collaboration-provider-lifecycle.mjs',
         descriptorTrap,
+        'module.createHostCollaborationLifecycle(hostileSource);',
       ),
     ).toBe('collaboration options are invalid.');
   });

From da5033bef5b32739cb8c0edb04ffe403835d2bdf Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:06:04 -0700
Subject: [PATCH 039/258] fix(reference-host): contain hostile reflection
 errors

---
 examples/reference-host/synthetic-document-repository.mjs | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 9da48775..2ad559bf 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -55,10 +55,7 @@ function readPlainDataRecord(source, requiredKeys, optionalKeys, code) {
       values[key] = descriptor.value;
     }
     return values;
-  } catch (error) {
-    if (error instanceof ReferencePersistenceError && error.code === code) {
-      throw error;
-    }
+  } catch {
     throw new ReferencePersistenceError(code);
   }
 }

From d1636526677215368c9175a79e30001951f291d2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:10:46 -0700
Subject: [PATCH 040/258] fix(reference-host): redact proposal reflection
 failures

---
 examples/reference-host/delayed-proposal.mjs | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index 68062df2..56fe5189 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -37,8 +37,7 @@ function readPlainDataRecord(source, keys, message) {
       values[key] = descriptor.value;
     }
     return values;
-  } catch (error) {
-    if (error instanceof TypeError && error.message === message) throw error;
+  } catch {
     throw new TypeError(message);
   }
 }

From dc3fcbd7e80cbff7543a8dfe2a08393c42e5d35b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:14:53 -0700
Subject: [PATCH 041/258] fix(reference-host): contain autosave reflection
 failures

---
 examples/reference-host/autosave-view-model.mjs | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 0b0ec377..4aa55a28 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -41,13 +41,7 @@ function snapshotData(source) {
       values[key] = descriptor.value;
     }
     return values;
-  } catch (error) {
-    if (
-      error instanceof TypeError &&
-      error.message === 'autosave snapshot is invalid.'
-    ) {
-      throw error;
-    }
+  } catch {
     throw new TypeError('autosave snapshot is invalid.');
   }
 }

From 2b43b00c13f6e5f285fea1730cd2f86474e92c4b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:16:51 -0700
Subject: [PATCH 042/258] test(reference-host): cover hostile resource
 reflection

---
 src/referenceHostReflectionContainment.test.ts | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
index 723c3a6a..7efa1630 100644
--- a/src/referenceHostReflectionContainment.test.ts
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -83,5 +83,19 @@ describe('reference-host hostile reflection containment', () => {
         'module.createHostCollaborationLifecycle(hostileSource);',
       ),
     ).toBe('collaboration options are invalid.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/collaboration-provider-lifecycle.mjs',
+        descriptorTrap,
+        `module.createHostCollaborationLifecycle({
+          documentFactory() { return hostileSource; },
+          providerFactory() {
+            return { connect() {}, disconnect() {}, destroy() {} };
+          },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        });`,
+      ),
+    ).toBe('documentFactory returned an invalid document.');
   });
 });

From 7c837e763669852a244c59032442383c2a21b9c6 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:18:35 -0700
Subject: [PATCH 043/258] test(reference-host): cover hostile provider failures

---
 src/referenceHostReflectionContainment.test.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
index 7efa1630..8cf45553 100644
--- a/src/referenceHostReflectionContainment.test.ts
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -97,5 +97,17 @@ describe('reference-host hostile reflection containment', () => {
         });`,
       ),
     ).toBe('documentFactory returned an invalid document.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/collaboration-provider-lifecycle.mjs',
+        descriptorTrap,
+        `module.createHostCollaborationLifecycle({
+          documentFactory() { return { destroy() {} }; },
+          providerFactory() { throw hostileError; },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        });`,
+      ),
+    ).toBe('collaboration lifecycle initialization failed.');
   });
 });

From c6fd4f7f992c9b53204f1820705d7c00a02861fd Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 15:20:30 -0700
Subject: [PATCH 044/258] fix(reference-host): contain collaboration reflection
 failures

---
 .../collaboration-provider-lifecycle.mjs      | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index e0396ad0..f091a2fd 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -3,11 +3,18 @@ import { Doc } from 'yjs';
 const MAX_CONTEXT_CODE_UNITS = 256;
 const INITIALIZATION_FAILURE = 'collaboration lifecycle initialization failed.';
 const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
+const RESOURCE_VALIDATION_ERRORS = new WeakSet();
 
 /** Marker used by repository contracts to keep this lifecycle example out of runtime authority. */
 export const REFERENCE_ONLY = true;
 
-class ResourceValidationError extends TypeError {}
+class ResourceValidationError extends TypeError {
+  constructor(message) {
+    super(message);
+    this.name = 'ResourceValidationError';
+    RESOURCE_VALIDATION_ERRORS.add(this);
+  }
+}
 
 function requireContextString(value, label) {
   if (
@@ -44,8 +51,7 @@ function readOwnDataRecord(source, keys, message) {
       values[key] = descriptor.value;
     }
     return values;
-  } catch (error) {
-    if (error instanceof TypeError && error.message === message) throw error;
+  } catch {
     throw new TypeError(message);
   }
 }
@@ -70,10 +76,7 @@ function findDataMethod(source, key, message) {
       cursor = Object.getPrototypeOf(cursor);
     }
     throw new ResourceValidationError(message);
-  } catch (error) {
-    if (error instanceof ResourceValidationError && error.message === message) {
-      throw error;
-    }
+  } catch {
     throw new ResourceValidationError(message);
   }
 }
@@ -223,7 +226,7 @@ export function createHostCollaborationLifecycle(source) {
     } catch {
       cleanupFailed = true;
     }
-    if (error instanceof ResourceValidationError && !cleanupFailed) {
+    if (RESOURCE_VALIDATION_ERRORS.has(error) && !cleanupFailed) {
       throw error;
     }
     throw initializationFailure();

From 39da20a415e9d931f23851ee9d7b541348ae3d68 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:08:16 -0700
Subject: [PATCH 045/258] test(reference-host): retain failed provider for
 retry

---
 ...eferenceHostCollaborationLifecycle.test.ts | 69 ++++++++++++++++++-
 1 file changed, 68 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index 48c817bb..1d2c7aec 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -1,5 +1,6 @@
 import { execFileSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
 import { resolve } from 'node:path';
 
 import { describe, expect, it } from 'vitest';
@@ -53,6 +54,72 @@ describe('reference-host collaboration lifecycle contract', () => {
     });
   });
 
+  it('retains a provider whose destroy failed so reconnect can retry cleanup before replacement', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let generation = 0;
+      let firstDestroyAttempts = 0;
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return { destroy() { events.push('document:destroy'); } };
+        },
+        providerFactory() {
+          generation += 1;
+          const current = generation;
+          events.push('provider:create:' + current);
+          return {
+            connect() { events.push('provider:connect:' + current); },
+            disconnect() { events.push('provider:disconnect:' + current); },
+            destroy() {
+              events.push('provider:destroy:' + current);
+              if (current === 1 && firstDestroyAttempts === 0) {
+                firstDestroyAttempts += 1;
+                throw new Error('private transient destroy failure');
+              }
+            },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+      lifecycle.connect();
+      let firstError = null;
+      try {
+        lifecycle.reconnect();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      lifecycle.reconnect();
+      process.stdout.write(JSON.stringify({
+        events,
+        firstError,
+        snapshot: lifecycle.getSnapshot(),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      events: [
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:destroy:1',
+        'provider:create:2',
+        'provider:connect:2',
+      ],
+      firstError: 'collaboration lifecycle teardown failed.',
+      snapshot: { providerGeneration: 2, status: 'connected' },
+    });
+  });
+
   it('rejects accessor-backed lifecycle options and resource methods without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(
@@ -106,4 +173,4 @@ describe('reference-host collaboration lifecycle contract', () => {
       status: 'disposed',
     });
   });
-});
+});
\ No newline at end of file

From 916fc9467c90e01c229307f2d11804feb0fdf994 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:11:15 -0700
Subject: [PATCH 046/258] fix(reference-host): retry failed provider
 destruction

---
 .../reference-host/collaboration-provider-lifecycle.mjs     | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index f091a2fd..065a9e5b 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -166,8 +166,8 @@ export function createHostCollaborationLifecycle(source) {
   function teardownProvider() {
     const resource = providerResource;
     if (resource === null) return;
-    providerResource = null;
     let failed = false;
+    let destroyFailed = false;
     if (connected) {
       connected = false;
       try {
@@ -180,6 +180,10 @@ export function createHostCollaborationLifecycle(source) {
       resource.destroy.call(resource.value);
     } catch {
       failed = true;
+      destroyFailed = true;
+    }
+    if (!destroyFailed) {
+      providerResource = null;
     }
     if (failed) throw teardownFailure();
   }

From f9cd1dc8fdecd6748aee37dc231389f9179fd91b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:33:52 -0700
Subject: [PATCH 047/258] test(reference-host): require empty document
 persistence

---
 src/referenceHostSyntheticRepository.test.ts | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 83154bd3..f0698c06 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -48,6 +48,22 @@ describe('reference-host synthetic durable repository contract', () => {
     });
   });
 
+  it('accepts an empty document body while keeping document identifiers non-empty', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--empty-document-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      clearedDocument: '',
+      clearedValidator: '"v2"',
+      emptyDocumentIdError: 'invalid_document_id',
+      initialEmptyDocument: '',
+    });
+  });
+
   it('fails closed without invoking caller-owned option, save, or fork-request accessors', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 5213b43f74409da1124187306f7d02f9e640b9ef Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:35:40 -0700
Subject: [PATCH 048/258] fix(reference-host): allow empty document bodies

---
 .../synthetic-document-repository.mjs         | 60 +++++++++++++++++--
 1 file changed, 55 insertions(+), 5 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 2ad559bf..06049c91 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -25,6 +25,13 @@ function requireBoundedString(value, maximumCodeUnits, code) {
   return value;
 }
 
+function requireBoundedDocument(value, code) {
+  if (typeof value !== 'string' || value.length > MAX_DOCUMENT_CODE_UNITS) {
+    throw new ReferencePersistenceError(code);
+  }
+  return value;
+}
+
 function readPlainDataRecord(source, requiredKeys, optionalKeys, code) {
   try {
     if (
@@ -99,9 +106,8 @@ export function createSyntheticDocumentRepository(options) {
     MAX_DOCUMENT_ID_CODE_UNITS,
     'invalid_document_id',
   );
-  let document = requireBoundedString(
+  let document = requireBoundedDocument(
     configuration.initialDocument,
-    MAX_DOCUMENT_CODE_UNITS,
     'invalid_document',
   );
   let version = 1;
@@ -127,9 +133,8 @@ export function createSyntheticDocumentRepository(options) {
     );
 
     assertDocumentId(candidate.documentId);
-    const nextDocument = requireBoundedString(
+    const nextDocument = requireBoundedDocument(
       candidate.document,
-      MAX_DOCUMENT_CODE_UNITS,
       'invalid_document',
     );
     const ifMatch = requireBoundedString(
@@ -331,6 +336,49 @@ function runSelfTest() {
   );
 }
 
+function runEmptyDocumentSelfTest() {
+  const emptyRepository = createSyntheticDocumentRepository({
+    documentId: 'buyer-empty',
+    initialDocument: '',
+  });
+  const initialEmptyDocument = emptyRepository.read('buyer-empty').document;
+
+  const repository = createSyntheticDocumentRepository({
+    documentId: 'buyer-document',
+    initialDocument: 'Not empty',
+  });
+  const initial = repository.read('buyer-document');
+  const cleared = repository.save({
+    documentId: 'buyer-document',
+    document: '',
+    ifMatch: initial.validator,
+  });
+  if (cleared.status !== 'saved') {
+    throw new Error('Synthetic empty-document save did not report success.');
+  }
+  const afterClear = repository.read('buyer-document');
+
+  let emptyDocumentIdError = null;
+  try {
+    createSyntheticDocumentRepository({
+      documentId: '',
+      initialDocument: '',
+    });
+  } catch (error) {
+    emptyDocumentIdError =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      clearedDocument: afterClear.document,
+      clearedValidator: afterClear.validator,
+      emptyDocumentIdError,
+      initialEmptyDocument,
+    })}\n`,
+  );
+}
+
 function runHostileAccessorSelfTest() {
   let optionGetterCalls = 0;
   let optionErrorCode = null;
@@ -406,7 +454,9 @@ function runHostileAccessorSelfTest() {
   );
 }
 
-if (process.argv.includes('--hostile-accessor-self-test')) {
+if (process.argv.includes('--empty-document-self-test')) {
+  runEmptyDocumentSelfTest();
+} else if (process.argv.includes('--hostile-accessor-self-test')) {
   runHostileAccessorSelfTest();
 } else if (process.argv.includes('--self-test')) {
   runSelfTest();

From db1195778f39aa4524ca879fab4ce25e902adce2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:38:04 -0700
Subject: [PATCH 049/258] test(reference-host): allow empty proposal
 replacement

---
 src/referenceHostDelayedProposal.test.ts | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/src/referenceHostDelayedProposal.test.ts b/src/referenceHostDelayedProposal.test.ts
index 4079832c..26481f59 100644
--- a/src/referenceHostDelayedProposal.test.ts
+++ b/src/referenceHostDelayedProposal.test.ts
@@ -38,6 +38,22 @@ describe('reference-host delayed proposal contract', () => {
     });
   });
 
+  it('permits an empty replacement without weakening non-empty revision identity', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--empty-proposal-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      appliedDocument: '',
+      appliedStatus: 'applied',
+      emptyRevisionError: 'expectedRevision is invalid.',
+      proposalReplacement: '',
+    });
+  });
+
   it('rejects accessor-backed untrusted proposal inputs without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 7ec85416da6bd9804e6aec9baa1ca360d753f289 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:38:37 -0700
Subject: [PATCH 050/258] fix(reference-host): permit empty proposal
 replacement

---
 examples/reference-host/delayed-proposal.mjs | 57 ++++++++++++++++----
 1 file changed, 46 insertions(+), 11 deletions(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index 56fe5189..a3eac30c 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -15,6 +15,13 @@ function requireBoundedString(value, maximumCodeUnits, label) {
   return value;
 }
 
+function requireBoundedReplacement(value) {
+  if (typeof value !== 'string' || value.length > MAX_PROPOSAL_CODE_UNITS) {
+    throw new TypeError('replacement is invalid.');
+  }
+  return value;
+}
+
 function readPlainDataRecord(source, keys, message) {
   try {
     if (
@@ -61,11 +68,7 @@ export async function createDelayedProposal(source) {
     MAX_REVISION_CODE_UNITS,
     'expectedRevision',
   );
-  const boundedReplacement = requireBoundedString(
-    input.replacement,
-    MAX_PROPOSAL_CODE_UNITS,
-    'replacement',
-  );
+  const boundedReplacement = requireBoundedReplacement(input.replacement);
 
   await Promise.resolve();
   return Object.freeze({
@@ -103,11 +106,7 @@ export function applyDelayedProposal(source) {
     MAX_REVISION_CODE_UNITS,
     'expectedRevision',
   );
-  const replacement = requireBoundedString(
-    proposal.replacement,
-    MAX_PROPOSAL_CODE_UNITS,
-    'replacement',
-  );
+  const replacement = requireBoundedReplacement(proposal.replacement);
 
   if (expectedRevision !== boundedCurrentRevision) {
     return Object.freeze({ status: 'conflict' });
@@ -160,6 +159,40 @@ async function runSelfTest() {
   );
 }
 
+async function runEmptyProposalSelfTest() {
+  const proposal = await createDelayedProposal({
+    expectedRevision: 'revision-v1',
+    replacement: '',
+  });
+  let appliedDocument = 'Non-empty draft';
+  const result = applyDelayedProposal({
+    proposal,
+    currentRevision: 'revision-v1',
+    apply(replacement) {
+      appliedDocument = replacement;
+    },
+  });
+
+  let emptyRevisionError = null;
+  try {
+    await createDelayedProposal({
+      expectedRevision: '',
+      replacement: '',
+    });
+  } catch (error) {
+    emptyRevisionError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      appliedDocument,
+      appliedStatus: result.status,
+      emptyRevisionError,
+      proposalReplacement: proposal.replacement,
+    })}\n`,
+  );
+}
+
 async function runHostileAccessorSelfTest() {
   let creationGetterCalls = 0;
   let creationError = null;
@@ -232,7 +265,9 @@ async function runHostileAccessorSelfTest() {
   );
 }
 
-if (process.argv.includes('--hostile-accessor-self-test')) {
+if (process.argv.includes('--empty-proposal-self-test')) {
+  await runEmptyProposalSelfTest();
+} else if (process.argv.includes('--hostile-accessor-self-test')) {
   await runHostileAccessorSelfTest();
 } else if (process.argv.includes('--self-test')) {
   await runSelfTest();

From 8e4993687e81c9fc09926b0952b13d258981d6ef Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:40:18 -0700
Subject: [PATCH 051/258] test(reference-host): reject empty autosave
 validators

---
 src/referenceHostAutosaveViewModel.test.ts | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index fe372237..d5b6a936 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -47,6 +47,21 @@ describe('reference-host autosave presentation contract', () => {
     });
   });
 
+  it('rejects empty non-null validator fields instead of treating them as lifecycle evidence', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--invalid-validator-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      activeError: 'activeStrongEntityTag is invalid.',
+      lastSavedError: 'lastSavedStrongEntityTag is invalid.',
+      pendingError: 'pendingStrongEntityTag is invalid.',
+    });
+  });
+
   it('rejects accessor-backed lifecycle snapshots without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 0cc48b6622c5bd8968803b51cdef1a9c91f876bd Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 16:40:54 -0700
Subject: [PATCH 052/258] fix(reference-host): reject empty autosave validators

---
 .../reference-host/autosave-view-model.mjs    | 35 +++++++++++++++++--
 1 file changed, 33 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 4aa55a28..9f699a68 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -18,7 +18,7 @@ const SNAPSHOT_KEYS = [
 export const REFERENCE_ONLY = true;
 
 function requireNullableString(value, label) {
-  if (value !== null && typeof value !== 'string') {
+  if (value !== null && (typeof value !== 'string' || value.length === 0)) {
     throw new TypeError(`${label} is invalid.`);
   }
   return value;
@@ -216,6 +216,35 @@ function runSelfTest() {
   );
 }
 
+function runInvalidValidatorSelfTest() {
+  function observeError(candidate) {
+    try {
+      createAutosaveViewModel().observe(candidate);
+      return null;
+    } catch (error) {
+      return error instanceof Error ? error.message : 'unexpected error';
+    }
+  }
+
+  const activeError = observeError(
+    snapshot({ state: 'saving', activeStrongEntityTag: '' }),
+  );
+  const pendingError = observeError(
+    snapshot({
+      state: 'saving',
+      activeStrongEntityTag: '"local-active"',
+      pendingStrongEntityTag: '',
+    }),
+  );
+  const lastSavedError = observeError(
+    snapshot({ state: 'idle', lastSavedStrongEntityTag: '' }),
+  );
+
+  process.stdout.write(
+    `${JSON.stringify({ activeError, lastSavedError, pendingError })}\n`,
+  );
+}
+
 function runHostileAccessorSelfTest() {
   let getterCalls = 0;
   let error = null;
@@ -240,7 +269,9 @@ function runHostileAccessorSelfTest() {
   process.stdout.write(`${JSON.stringify({ error, getterCalls })}\n`);
 }
 
-if (process.argv.includes('--hostile-accessor-self-test')) {
+if (process.argv.includes('--invalid-validator-self-test')) {
+  runInvalidValidatorSelfTest();
+} else if (process.argv.includes('--hostile-accessor-self-test')) {
   runHostileAccessorSelfTest();
 } else if (process.argv.includes('--self-test')) {
   runSelfTest();

From b62af9b501369bddd104e808f914da8c3e2a33c0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:10:33 -0700
Subject: [PATCH 053/258] test(reference-host): require observed retry before
 recovery

---
 src/referenceHostAutosaveViewModel.test.ts | 30 ++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index d5b6a936..9adf3466 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -1,5 +1,6 @@
 import { execFileSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
 import { resolve } from 'node:path';
 
 import { describe, expect, it } from 'vitest';
@@ -47,6 +48,35 @@ describe('reference-host autosave presentation contract', () => {
     });
   });
 
+  it('does not claim recovery unless a retrying save was observed', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createAutosaveViewModel } from ${moduleUrl};
+      const snapshot = (state, blockedReason = null) => ({
+        state,
+        blockedReason,
+        activeStrongEntityTag: null,
+        pendingStrongEntityTag: null,
+        lastSavedStrongEntityTag: null,
+      });
+      const viewModel = createAutosaveViewModel();
+      const blocked = viewModel.observe(snapshot('blocked', 'conflict')).viewState;
+      const idleWithoutRetry = viewModel.observe(snapshot('idle')).viewState;
+      process.stdout.write(JSON.stringify({ blocked, idleWithoutRetry }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      blocked: 'conflict',
+      idleWithoutRetry: 'clean',
+    });
+  });
+
   it('rejects empty non-null validator fields instead of treating them as lifecycle evidence', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From a7f2c5a4c43fb5e58994626e9dc1d260a5f63342 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:11:34 -0700
Subject: [PATCH 054/258] fix(reference-host): require retry before recovery
 state

---
 .../reference-host/autosave-view-model.mjs    | 34 +++++++++++++------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 9f699a68..65393a2f 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -99,42 +99,54 @@ function presentation(viewState) {
  *
  * `observe()` consumes only programmatic queue/session snapshots. Snapshot fields
  * must be own data properties so presentation never invokes caller-owned accessors.
- * A blocked to saving transition is presented as retrying, and its next idle
- * transition is presented as recovered. The projection never returns local or
- * durable validators; hosts localize `messageKey` and keep authenticated recovery
- * controls outside Inkspan.
+ * A blocked to saving transition is presented as retrying, and only a later idle
+ * transition after that observed retry is presented as recovered. A blocked to
+ * idle transition without an intervening save returns to clean instead of
+ * manufacturing recovery evidence. The projection never returns local or durable
+ * validators; hosts localize `messageKey` and keep authenticated recovery controls
+ * outside Inkspan.
  */
 export function createAutosaveViewModel() {
-  let recovering = false;
+  let retryPending = false;
+  let retryInFlight = false;
+
+  function clearRetryEvidence() {
+    retryPending = false;
+    retryInFlight = false;
+  }
 
   function observe(snapshot) {
     const current = readSnapshot(snapshot);
 
     if (current.state === 'blocked') {
-      recovering = true;
+      retryPending = true;
+      retryInFlight = false;
       return presentation(
         current.blockedReason === 'conflict' ? 'conflict' : 'failed',
       );
     }
     if (current.state === 'closing') {
-      recovering = false;
+      clearRetryEvidence();
       return presentation('closing');
     }
     if (current.state === 'closed') {
-      recovering = false;
+      clearRetryEvidence();
       return presentation('closed');
     }
-    if (current.state === 'saving' && recovering) {
+    if (current.state === 'saving' && (retryPending || retryInFlight)) {
+      retryPending = false;
+      retryInFlight = true;
       return presentation('retrying');
     }
     if (current.state === 'saving' && current.pendingStrongEntityTag !== null) {
       return presentation('queued');
     }
     if (current.state === 'saving') return presentation('saving');
-    if (recovering) {
-      recovering = false;
+    if (retryInFlight) {
+      clearRetryEvidence();
       return presentation('recovered');
     }
+    retryPending = false;
     return presentation('clean');
   }
 

From 20e0be5468eb416c3bab5f604d74adfa1214b434 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:12:17 -0700
Subject: [PATCH 055/258] test(reference-host): redact reconnect provider
 failures

---
 ...eferenceHostCollaborationLifecycle.test.ts | 73 ++++++++++++++++++-
 1 file changed, 72 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index 1d2c7aec..92c52088 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -120,6 +120,77 @@ describe('reference-host collaboration lifecycle contract', () => {
     });
   });
 
+  it('redacts reconnect provider construction failures and remains recoverable', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const privateCause = 'private reconnect provider cause';
+      const events = [];
+      let generation = 0;
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return { destroy() { events.push('document:destroy'); } };
+        },
+        providerFactory() {
+          generation += 1;
+          const current = generation;
+          events.push('provider:create:' + current);
+          if (current === 2) throw new Error(privateCause);
+          return {
+            connect() { events.push('provider:connect:' + current); },
+            disconnect() { events.push('provider:disconnect:' + current); },
+            destroy() { events.push('provider:destroy:' + current); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+      lifecycle.connect();
+      let reconnectError = null;
+      try {
+        lifecycle.reconnect();
+      } catch (error) {
+        reconnectError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      const afterFailure = lifecycle.getSnapshot();
+      const recovered = lifecycle.reconnect();
+      lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        events,
+        leakedPrivateCause:
+          typeof reconnectError === 'string' && reconnectError.includes(privateCause),
+        reconnectError,
+        recovered,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 2, status: 'disconnected' },
+      events: [
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:create:2',
+        'provider:create:3',
+        'provider:connect:3',
+        'provider:disconnect:3',
+        'provider:destroy:3',
+        'document:destroy',
+      ],
+      leakedPrivateCause: false,
+      reconnectError: 'collaboration lifecycle reconnect failed.',
+      recovered: { providerGeneration: 3, status: 'connected' },
+    });
+  });
+
   it('rejects accessor-backed lifecycle options and resource methods without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(
@@ -173,4 +244,4 @@ describe('reference-host collaboration lifecycle contract', () => {
       status: 'disposed',
     });
   });
-});
\ No newline at end of file
+});

From 783dc9ecfc74d9f2dcf31b6de65d633b9d6cf729 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:13:07 -0700
Subject: [PATCH 056/258] fix(reference-host): redact reconnect provider
 failures

---
 .../collaboration-provider-lifecycle.mjs      | 28 +++++++++++++------
 1 file changed, 19 insertions(+), 9 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 065a9e5b..19f5096f 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -2,6 +2,7 @@ import { Doc } from 'yjs';
 
 const MAX_CONTEXT_CODE_UNITS = 256;
 const INITIALIZATION_FAILURE = 'collaboration lifecycle initialization failed.';
+const RECONNECT_FAILURE = 'collaboration lifecycle reconnect failed.';
 const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
 const RESOURCE_VALIDATION_ERRORS = new WeakSet();
 
@@ -103,6 +104,10 @@ function initializationFailure() {
   return new Error(INITIALIZATION_FAILURE);
 }
 
+function reconnectFailure() {
+  return new Error(RECONNECT_FAILURE);
+}
+
 function teardownFailure() {
   return new Error(TEARDOWN_FAILURE);
 }
@@ -115,8 +120,9 @@ function teardownFailure() {
  * it does not create, reconnect, disconnect, or destroy either resource. Option
  * fields and resource methods are captured from data descriptors so lifecycle
  * validation never executes accessor-backed host objects. Initial provider
- * failures unwind an already-created document, and cleanup failures are
- * payload-redacted without preventing remaining teardown attempts.
+ * failures unwind an already-created document, reconnect provider-construction
+ * failures remain retryable, and private callback/cleanup causes are payload-
+ * redacted without preventing remaining teardown attempts.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -136,16 +142,20 @@ export function createHostCollaborationLifecycle(source) {
   let connected = false;
   let disposed = false;
 
-  function makeProvider() {
+  function makeProvider(privateFailure) {
     providerGeneration += 1;
-    providerResource = requireProvider(
-      createProvider({
+    let candidate;
+    try {
+      candidate = createProvider({
         document,
         roomId: boundedRoomId,
         actorId: boundedActorId,
         generation: providerGeneration,
-      }),
-    );
+      });
+    } catch {
+      throw privateFailure();
+    }
+    providerResource = requireProvider(candidate);
     connected = false;
   }
 
@@ -191,7 +201,7 @@ export function createHostCollaborationLifecycle(source) {
   function reconnect() {
     requireLive();
     teardownProvider();
-    makeProvider();
+    makeProvider(reconnectFailure);
     connect();
     return getSnapshot();
   }
@@ -222,7 +232,7 @@ export function createHostCollaborationLifecycle(source) {
   }
 
   try {
-    makeProvider();
+    makeProvider(initializationFailure);
   } catch (error) {
     let cleanupFailed = false;
     try {

From 577512a555d10b5c12b1788db269b48b7a4ab7d2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:14:14 -0700
Subject: [PATCH 057/258] test(reference-host): redact host collaboration
 callback failures

---
 ...eHostCollaborationFailureRedaction.test.ts | 116 ++++++++++++++++++
 1 file changed, 116 insertions(+)
 create mode 100644 src/referenceHostCollaborationFailureRedaction.test.ts

diff --git a/src/referenceHostCollaborationFailureRedaction.test.ts b/src/referenceHostCollaborationFailureRedaction.test.ts
new file mode 100644
index 00000000..cdd0e962
--- /dev/null
+++ b/src/referenceHostCollaborationFailureRedaction.test.ts
@@ -0,0 +1,116 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host collaboration callback failure redaction', () => {
+  it('redacts document factory failures at initialization', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const privateCause = 'private document factory cause';
+      let error = null;
+      try {
+        createHostCollaborationLifecycle({
+          documentFactory() { throw new Error(privateCause); },
+          providerFactory() {
+            return { connect() {}, disconnect() {}, destroy() {} };
+          },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        });
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        error,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'collaboration lifecycle initialization failed.',
+      leakedPrivateCause: false,
+    });
+  });
+
+  it('redacts transient provider connect failures and permits an explicit retry', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const privateCause = 'private provider connect cause';
+      const events = [];
+      let connectAttempts = 0;
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return { destroy() { events.push('document:destroy'); } };
+        },
+        providerFactory() {
+          return {
+            connect() {
+              connectAttempts += 1;
+              events.push('provider:connect:' + connectAttempts);
+              if (connectAttempts === 1) throw new Error(privateCause);
+            },
+            disconnect() { events.push('provider:disconnect'); },
+            destroy() { events.push('provider:destroy'); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+      let error = null;
+      try {
+        lifecycle.connect();
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      const afterFailure = lifecycle.getSnapshot();
+      const retryResult = lifecycle.connect();
+      const afterRetry = lifecycle.getSnapshot();
+      lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        afterRetry,
+        error,
+        events,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+        retryResult,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      afterRetry: { providerGeneration: 1, status: 'connected' },
+      error: 'collaboration lifecycle connection failed.',
+      events: [
+        'provider:connect:1',
+        'provider:connect:2',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy',
+      ],
+      leakedPrivateCause: false,
+      retryResult: true,
+    });
+  });
+});

From 64212aeb49d3212a14b530ef6d4d10f101bf51c1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 17:14:56 -0700
Subject: [PATCH 058/258] fix(reference-host): redact collaboration callback
 failures

---
 .../collaboration-provider-lifecycle.mjs      | 28 +++++++++++++++----
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 19f5096f..af034bd4 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -2,6 +2,7 @@ import { Doc } from 'yjs';
 
 const MAX_CONTEXT_CODE_UNITS = 256;
 const INITIALIZATION_FAILURE = 'collaboration lifecycle initialization failed.';
+const CONNECTION_FAILURE = 'collaboration lifecycle connection failed.';
 const RECONNECT_FAILURE = 'collaboration lifecycle reconnect failed.';
 const TEARDOWN_FAILURE = 'collaboration lifecycle teardown failed.';
 const RESOURCE_VALIDATION_ERRORS = new WeakSet();
@@ -104,6 +105,10 @@ function initializationFailure() {
   return new Error(INITIALIZATION_FAILURE);
 }
 
+function connectionFailure() {
+  return new Error(CONNECTION_FAILURE);
+}
+
 function reconnectFailure() {
   return new Error(RECONNECT_FAILURE);
 }
@@ -119,10 +124,11 @@ function teardownFailure() {
  * context. Inkspan receives the resulting stable document/provider references;
  * it does not create, reconnect, disconnect, or destroy either resource. Option
  * fields and resource methods are captured from data descriptors so lifecycle
- * validation never executes accessor-backed host objects. Initial provider
- * failures unwind an already-created document, reconnect provider-construction
- * failures remain retryable, and private callback/cleanup causes are payload-
- * redacted without preventing remaining teardown attempts.
+ * validation never executes accessor-backed host objects. Initial document and
+ * provider callback failures are payload-redacted, acquired documents unwind on
+ * initial provider failure, reconnect provider-construction failures remain
+ * retryable, connect failures preserve the disconnected provider for an explicit
+ * retry, and cleanup failures do not prevent remaining teardown attempts.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -134,7 +140,13 @@ export function createHostCollaborationLifecycle(source) {
   const createProvider = requireFactory(options.providerFactory, 'providerFactory');
   const boundedRoomId = requireContextString(options.roomId, 'roomId');
   const boundedActorId = requireContextString(options.actorId, 'actorId');
-  const documentResource = requireDocument(createDocument());
+  let documentCandidate;
+  try {
+    documentCandidate = createDocument();
+  } catch {
+    throw initializationFailure();
+  }
+  const documentResource = requireDocument(documentCandidate);
   const document = documentResource.value;
 
   let providerGeneration = 0;
@@ -168,7 +180,11 @@ export function createHostCollaborationLifecycle(source) {
   function connect() {
     requireLive();
     if (connected) return false;
-    providerResource.connect.call(providerResource.value);
+    try {
+      providerResource.connect.call(providerResource.value);
+    } catch {
+      throw connectionFailure();
+    }
     connected = true;
     return true;
   }

From c9b4a21c931a806b9012bf991634fec472b7825e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:08:52 -0700
Subject: [PATCH 059/258] test(reference-host): bound prototype traversal

---
 ...ostCollaborationPrototypeTraversal.test.ts | 58 +++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 src/referenceHostCollaborationPrototypeTraversal.test.ts

diff --git a/src/referenceHostCollaborationPrototypeTraversal.test.ts b/src/referenceHostCollaborationPrototypeTraversal.test.ts
new file mode 100644
index 00000000..515651ab
--- /dev/null
+++ b/src/referenceHostCollaborationPrototypeTraversal.test.ts
@@ -0,0 +1,58 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host collaboration prototype traversal', () => {
+  it('bounds hostile resource prototype traversal before caller-controlled work can continue indefinitely', () => {
+    const fixtureUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${fixtureUrl};
+      const privateCause = 'private prototype traversal cause';
+      let prototypeReads = 0;
+      let hostileDocument;
+      hostileDocument = new Proxy({}, {
+        getPrototypeOf() {
+          prototypeReads += 1;
+          if (prototypeReads > 64) throw new Error(privateCause);
+          return hostileDocument;
+        },
+      });
+      let error = null;
+      try {
+        createHostCollaborationLifecycle({
+          documentFactory() { return hostileDocument; },
+          providerFactory() {
+            return { connect() {}, disconnect() {}, destroy() {} };
+          },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        });
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        error,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+        prototypeReads,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'documentFactory returned an invalid document.',
+      leakedPrivateCause: false,
+      prototypeReads: 64,
+    });
+  });
+});

From be208da43d4376f6148237aca10c4163953f4895 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:11:27 -0700
Subject: [PATCH 060/258] fix(reference-host): bound prototype discovery

---
 .../reference-host/collaboration-provider-lifecycle.mjs     | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index af034bd4..ceaf617d 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -1,6 +1,7 @@
 import { Doc } from 'yjs';
 
 const MAX_CONTEXT_CODE_UNITS = 256;
+const MAX_RESOURCE_PROTOTYPE_DEPTH = 64;
 const INITIALIZATION_FAILURE = 'collaboration lifecycle initialization failed.';
 const CONNECTION_FAILURE = 'collaboration lifecycle connection failed.';
 const RECONNECT_FAILURE = 'collaboration lifecycle reconnect failed.';
@@ -64,7 +65,11 @@ function findDataMethod(source, key, message) {
       throw new ResourceValidationError(message);
     }
     let cursor = source;
+    let depth = 0;
     while (cursor !== null) {
+      if (depth >= MAX_RESOURCE_PROTOTYPE_DEPTH) {
+        throw new ResourceValidationError(message);
+      }
       const descriptor = Object.getOwnPropertyDescriptor(cursor, key);
       if (descriptor !== undefined) {
         if (
@@ -76,6 +81,7 @@ function findDataMethod(source, key, message) {
         return descriptor.value;
       }
       cursor = Object.getPrototypeOf(cursor);
+      depth += 1;
     }
     throw new ResourceValidationError(message);
   } catch {

From ac130d01fc58548e29f22b1609fd404f066c8ea1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:10:45 -0700
Subject: [PATCH 061/258] test(reference-host): redact proposal apply failures

---
 ...tDelayedProposalApplicationFailure.test.ts | 50 +++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 src/referenceHostDelayedProposalApplicationFailure.test.ts

diff --git a/src/referenceHostDelayedProposalApplicationFailure.test.ts b/src/referenceHostDelayedProposalApplicationFailure.test.ts
new file mode 100644
index 00000000..b862da2c
--- /dev/null
+++ b/src/referenceHostDelayedProposalApplicationFailure.test.ts
@@ -0,0 +1,50 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/delayed-proposal.mjs',
+);
+
+describe('reference-host delayed proposal application failure', () => {
+  it('redacts host apply failures instead of leaking private causes through the proposal boundary', () => {
+    const fixtureUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { applyDelayedProposal, createDelayedProposal } from ${fixtureUrl};
+      const privateCause = 'private host apply cause';
+      const proposal = await createDelayedProposal({
+        expectedRevision: 'revision-v1',
+        replacement: 'Accepted proposal',
+      });
+      let error = null;
+      try {
+        applyDelayedProposal({
+          proposal,
+          currentRevision: 'revision-v1',
+          apply() {
+            throw new Error(privateCause);
+          },
+        });
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        error,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'proposal application failed.',
+      leakedPrivateCause: false,
+    });
+  });
+});

From 1e45d14668dae2fcc65aa226ef80bdc5ae5180e7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:11:42 -0700
Subject: [PATCH 062/258] fix(reference-host): redact proposal apply failures

---
 examples/reference-host/delayed-proposal.mjs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index a3eac30c..f1413395 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -80,7 +80,8 @@ export async function createDelayedProposal(source) {
 /**
  * Apply one untrusted proposal only when the host's current revision still matches its capture.
  * Top-level application metadata and model proposal fields must be own data properties so
- * validation never executes accessor-backed untrusted proposal data.
+ * validation never executes accessor-backed untrusted proposal data. Host apply failures are
+ * normalized at this reference boundary so private callback causes are not reflected outward.
  */
 export function applyDelayedProposal(source) {
   const application = readPlainDataRecord(
@@ -112,7 +113,11 @@ export function applyDelayedProposal(source) {
     return Object.freeze({ status: 'conflict' });
   }
 
-  application.apply(replacement);
+  try {
+    application.apply(replacement);
+  } catch {
+    throw new Error('proposal application failed.');
+  }
   return Object.freeze({ status: 'applied' });
 }
 

From 8f1cebd771e0370e689d11d516102930f165fe44 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:15:08 -0700
Subject: [PATCH 063/258] test(reference-host): model ambiguous committed
 writes

---
 ...SyntheticRepositoryAmbiguousCommit.test.ts | 65 +++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts

diff --git a/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts b/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts
new file mode 100644
index 00000000..7bd5d88a
--- /dev/null
+++ b/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts
@@ -0,0 +1,65 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/synthetic-document-repository.mjs',
+);
+
+describe('reference-host ambiguous persistence reconciliation', () => {
+  it('models a transport-ambiguous write as possibly committed and forces a durable read before retry', () => {
+    const fixtureUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import {
+        ReferencePersistenceError,
+        createSyntheticDocumentRepository,
+      } from ${fixtureUrl};
+      const repository = createSyntheticDocumentRepository({
+        documentId: 'buyer-document',
+        initialDocument: 'Buyer draft v1',
+      });
+      const initial = repository.read('buyer-document');
+      let ambiguousError = null;
+      try {
+        repository.save({
+          documentId: 'buyer-document',
+          document: 'Possibly committed draft',
+          ifMatch: initial.validator,
+          outcome: 'ambiguous_failure',
+        });
+      } catch (error) {
+        ambiguousError =
+          error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+      }
+      const reconciled = repository.read('buyer-document');
+      const staleRetry = repository.save({
+        documentId: 'buyer-document',
+        document: 'Blind retry must not overwrite',
+        ifMatch: initial.validator,
+      });
+      process.stdout.write(JSON.stringify({
+        ambiguousError,
+        initialValidator: initial.validator,
+        reconciledDocument: reconciled.document,
+        reconciledValidator: reconciled.validator,
+        staleRetry,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      ambiguousError: 'ambiguous_failure',
+      initialValidator: '"v1"',
+      reconciledDocument: 'Possibly committed draft',
+      reconciledValidator: '"v2"',
+      staleRetry: { status: 'conflict', currentValidator: '"v2"' },
+    });
+  });
+});

From 1d7b07b5f0c68521e8a38197402ab1fe0f91b9b5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:15:55 -0700
Subject: [PATCH 064/258] test(reference-host): distinguish ambiguous commit

---
 src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts b/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts
index 7bd5d88a..c84e07ab 100644
--- a/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts
+++ b/src/referenceHostSyntheticRepositoryAmbiguousCommit.test.ts
@@ -28,7 +28,7 @@ describe('reference-host ambiguous persistence reconciliation', () => {
           documentId: 'buyer-document',
           document: 'Possibly committed draft',
           ifMatch: initial.validator,
-          outcome: 'ambiguous_failure',
+          outcome: 'ambiguous_commit_failure',
         });
       } catch (error) {
         ambiguousError =

From b7715e1f214fcd26f8f9571f0b516519cec6d43f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:17:25 -0700
Subject: [PATCH 065/258] fix(reference-host): model ambiguous committed writes

---
 .../synthetic-document-repository.mjs             | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 06049c91..82563393 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -87,10 +87,13 @@ function frozenConflict(currentValidator) {
  * Create an in-memory host-owned reference repository with exact If-Match semantics.
  *
  * This adapter is synthetic acquisition/support evidence only. Buyers must replace
- * it with an authorized atomic durable store. Ambiguous or failed operations never
- * mutate the document or advance the strong validator. A confirmed fork requires
- * the current strong validator and starts an independent repository at a fresh
- * validator so source and fork cannot silently share revision authority.
+ * it with an authorized atomic durable store. Confirmed failures and the
+ * `ambiguous_failure` pre-commit fixture leave durable state unchanged. The
+ * `ambiguous_commit_failure` fixture deliberately commits before returning the
+ * same ambiguous error so consumers must re-read durable state instead of
+ * advancing or blindly reusing their last known validator. A confirmed fork
+ * requires the current strong validator and starts an independent repository at a
+ * fresh validator so source and fork cannot silently share revision authority.
  * Configuration, save, and fork request fields are snapshotted from own data
  * properties without invoking caller-owned accessors.
  */
@@ -146,6 +149,7 @@ export function createSyntheticDocumentRepository(options) {
     if (
       outcome !== 'saved' &&
       outcome !== 'ambiguous_failure' &&
+      outcome !== 'ambiguous_commit_failure' &&
       outcome !== 'failure'
     ) {
       throw new ReferencePersistenceError('invalid_outcome');
@@ -164,6 +168,9 @@ export function createSyntheticDocumentRepository(options) {
     document = nextDocument;
     version += 1;
     validator = validatorForVersion(version);
+    if (outcome === 'ambiguous_commit_failure') {
+      throw new ReferencePersistenceError('ambiguous_failure');
+    }
     return frozenSave('saved', validator);
   }
 

From 5143fe5814917ab42d728ced8aa4d3194fd4ed19 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:18:13 -0700
Subject: [PATCH 066/258] test(reference-host): bind ambiguity guidance

---
 src/referenceHostSyntheticRepository.test.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index f0698c06..894b4b32 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -82,12 +82,18 @@ describe('reference-host synthetic durable repository contract', () => {
     });
   });
 
-  it('keeps the buyer guide code-current for retry, restore, and independent fork semantics', () => {
+  it('keeps the buyer guide code-current for retry, ambiguity reconciliation, restore, and independent fork semantics', () => {
     const guide = readFileSync(guidePath, 'utf8');
 
     expect(guide).toContain(
       'A confirmed failure can be retried with the unchanged current validator.',
     );
+    expect(guide).toContain(
+      '`ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator.',
+    );
+    expect(guide).toContain(
+      'After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller\'s last known validator.',
+    );
     expect(guide).toContain(
       'A restore is a normal confirmed save against the current validator and advances it only after success.',
     );

From 4b211fedd5086a749d03a0413604f94819903a95 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:19:08 -0700
Subject: [PATCH 067/258] docs(reference-host): clarify ambiguous recovery

---
 examples/reference-host/README.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index cf8eecb9..cfe3b36c 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -6,8 +6,8 @@ This directory is buyer-facing integration evidence for issue #377. It is intent
 
 The current slice contains four executable, deterministic fixtures plus two public-package presentation entrypoints:
 
-- `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. Ambiguous and failed writes do not mutate durable state or advance the validator; a stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
-- `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content.
+- `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. `ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator. After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller's last known validator. A stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
+- `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
@@ -19,8 +19,8 @@ All executable fixtures are marked `REFERENCE_ONLY`, require no service, databas
 
 | Reference element | Buyer action |
 | --- | --- |
-| synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves validators across ambiguous/failed operations, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
-| deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks before applying untrusted proposal data. |
+| synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves caller validators across confirmed failures, reconciles authoritative state after ambiguous transport outcomes, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
+| deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks and payload-redacted callback-failure handling before applying untrusted proposal data. |
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
@@ -57,7 +57,7 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, proposal-failure redaction, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 

From cc64cc1359e3bda21f986f18a57de69ab60db4f2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:32:35 -0700
Subject: [PATCH 068/258] test(reference-host): define native form journey
 contract

---
 src/referenceHostNativeFormJourney.test.ts | 31 ++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 src/referenceHostNativeFormJourney.test.ts

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
new file mode 100644
index 00000000..fee61a79
--- /dev/null
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -0,0 +1,31 @@
+import { readFileSync } from 'node:fs';
+import { describe, expect, it } from 'vitest';
+
+const nativeFormHostSource = readFileSync(
+  new URL('../examples/reference-host/native-form-host.tsx', import.meta.url),
+  'utf8',
+);
+
+describe('reference-host native form journey', () => {
+  it('uses the published editor package and delegates serialization to Inkspan native form integration', () => {
+    expect(nativeFormHostSource).toContain(
+      "from '@contextualwisdomlab/cwl-editor'",
+    );
+    expect(nativeFormHostSource).toContain('formFieldName="message_body"');
+    expect(nativeFormHostSource).toContain('formResetValue="# Draft"');
+    expect(nativeFormHostSource).toContain('new FormData(event.currentTarget)');
+    expect(nativeFormHostSource).toContain('type="submit"');
+    expect(nativeFormHostSource).toContain('type="reset"');
+
+    expect(nativeFormHostSource).not.toMatch(/<input[^>]+type=["']hidden["']/i);
+    expect(nativeFormHostSource).not.toContain('/src/');
+    expect(nativeFormHostSource).not.toContain('../../src');
+  });
+
+  it('keeps host authorization and durable persistence explicitly outside the component submit callback', () => {
+    expect(nativeFormHostSource).toContain('onAuthorizedSubmit');
+    expect(nativeFormHostSource).toContain('await onAuthorizedSubmit(messageBody)');
+    expect(nativeFormHostSource).not.toContain('fetch(');
+    expect(nativeFormHostSource).not.toContain('localStorage');
+  });
+});

From cfae15420aba809be075a2dff52279b468c96fd7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:32:51 -0700
Subject: [PATCH 069/258] feat(reference-host): add native form buyer journey

---
 examples/reference-host/native-form-host.tsx | 72 ++++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 examples/reference-host/native-form-host.tsx

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
new file mode 100644
index 00000000..915357cc
--- /dev/null
+++ b/examples/reference-host/native-form-host.tsx
@@ -0,0 +1,72 @@
+import { useState, type FormEvent } from 'react';
+import { CwlEditor } from '@contextualwisdomlab/cwl-editor';
+
+type SubmissionState = 'idle' | 'saving' | 'saved' | 'failed';
+
+export interface NativeFormHostProps {
+  /**
+   * Host-owned authorization and durable persistence boundary.
+   * The reference component deliberately does not choose transport,
+   * credentials, tenancy, or storage for the embedding application.
+   */
+  onAuthorizedSubmit(messageBody: string): Promise<void> | void;
+}
+
+/**
+ * Buyer-facing native-form integration example.
+ *
+ * Inkspan owns synchronization of the editor document into the native form
+ * control. The host reads FormData at submit time and then applies its own
+ * authorization and durable-persistence policy through onAuthorizedSubmit.
+ */
+export function NativeFormHost({
+  onAuthorizedSubmit,
+}: NativeFormHostProps) {
+  const [submissionState, setSubmissionState] =
+    useState<SubmissionState>('idle');
+
+  async function handleSubmit(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault();
+
+    const messageBodyEntry = new FormData(event.currentTarget).get(
+      'message_body',
+    );
+    if (typeof messageBodyEntry !== 'string') {
+      setSubmissionState('failed');
+      return;
+    }
+
+    setSubmissionState('saving');
+    try {
+      const messageBody = messageBodyEntry;
+      await onAuthorizedSubmit(messageBody);
+      setSubmissionState('saved');
+    } catch {
+      setSubmissionState('failed');
+    }
+  }
+
+  return (
+    <form onSubmit={handleSubmit}>
+      <CwlEditor
+        mode="markdown"
+        defaultValue="# Draft"
+        formFieldName="message_body"
+        formResetValue="# Draft"
+      />
+      <div>
+        <button type="submit">Save document</button>
+        <button type="reset">Reset draft</button>
+      </div>
+      <output aria-live="polite">
+        {submissionState === 'saving'
+          ? 'Saving…'
+          : submissionState === 'saved'
+            ? 'Saved'
+            : submissionState === 'failed'
+              ? 'Save failed'
+              : 'Not saved yet'}
+      </output>
+    </form>
+  );
+}

From 19b95edac95746be4633b16becbb6619559b147e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:33:19 -0700
Subject: [PATCH 070/258] docs(reference-host): record native form buyer
 journey

---
 examples/reference-host/README.md | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index cfe3b36c..2340f9d2 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -4,7 +4,7 @@ Status: Active PR / partial reference-host implementation
 
 This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining SSR/package/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains four executable, deterministic fixtures plus two public-package presentation entrypoints:
+The current slice contains four executable, deterministic fixtures, two public-package presentation entrypoints, and one buyer-facing native-form host component:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. `ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator. After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller's last known validator. A stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
@@ -12,8 +12,9 @@ The current slice contains four executable, deterministic fixtures plus two publ
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
+- `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
 
-All executable fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. The presentation entrypoints reference only public package subpaths. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+All executable fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. The presentation and native-form examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
 ## Copy this, replace that
 
@@ -24,6 +25,7 @@ All executable fixtures are marked `REFERENCE_ONLY`, require no service, databas
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
+| native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -44,7 +46,7 @@ flowchart LR
     class Host,Repo,Provider,Model host;
 ```
 
-Inkspan owns deterministic editor/revision/autosave/conversion/package behavior. The host owns authenticated transport, authorization, tenancy, durable persistence, `Y.Doc` and collaboration-provider lifecycle, credentials, model policy, retention, deployment, and durable audit. A successful local editor operation, Yjs update, model response, or status check is not durable authorization or persistence evidence.
+Inkspan owns deterministic editor/revision/autosave/conversion/package behavior. The host owns authenticated transport, authorization, tenancy, durable persistence, `Y.Doc` and collaboration-provider lifecycle, credentials, model policy, retention, deployment, and durable audit. A successful local editor operation, native-form submission, Yjs update, model response, or status check is not durable authorization or persistence evidence.
 
 ## Executable fixture checks
 
@@ -57,10 +59,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, proposal-failure redaction, and public presentation-package behavior. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, proposal-failure redaction, public presentation-package behavior, and the native-form example's published-package/host-authority contract. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, native form journeys, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, packed-artifact/browser execution of the native-form journey, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, or deterministic collaboration provider as a production persistence, authentication, collaboration, or model implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, or native-form example callback as a production persistence, authentication, collaboration, or model implementation.

From f81dfff3fc0d6b2a792e0b1126716de3b5f97b88 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:37:23 -0700
Subject: [PATCH 071/258] test(reference-host): resolve fixture path from
 repository root

---
 src/referenceHostNativeFormJourney.test.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index fee61a79..4fc94723 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -1,8 +1,9 @@
 import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
 import { describe, expect, it } from 'vitest';
 
 const nativeFormHostSource = readFileSync(
-  new URL('../examples/reference-host/native-form-host.tsx', import.meta.url),
+  resolve(process.cwd(), 'examples/reference-host/native-form-host.tsx'),
   'utf8',
 );
 

From 4a5d59320f088f1b16d52e92630b8d4bfc849afe Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:07:45 -0700
Subject: [PATCH 072/258] test(reference-host): require single-flight
 authorized submit

---
 ...eferenceHostSingleFlightSubmission.test.ts | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 src/referenceHostSingleFlightSubmission.test.ts

diff --git a/src/referenceHostSingleFlightSubmission.test.ts b/src/referenceHostSingleFlightSubmission.test.ts
new file mode 100644
index 00000000..96e21dce
--- /dev/null
+++ b/src/referenceHostSingleFlightSubmission.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it, vi } from 'vitest';
+import { createSingleFlightSubmission } from '../examples/reference-host/single-flight-submission.js';
+
+describe('reference-host authorized submission single-flight boundary', () => {
+  it('admits at most one durable host submission at a time and permits a later submission after settlement', async () => {
+    let resolveFirst: (() => void) | undefined;
+    const firstResult = new Promise<void>((resolve) => {
+      resolveFirst = resolve;
+    });
+    const onAuthorizedSubmit = vi
+      .fn<(messageBody: string) => Promise<void>>()
+      .mockImplementationOnce(async () => firstResult)
+      .mockResolvedValue(undefined);
+    const states: string[] = [];
+    const submit = createSingleFlightSubmission(onAuthorizedSubmit, (state) => {
+      states.push(state);
+    });
+
+    const first = submit('# First');
+    const overlapping = submit('# Overlapping');
+
+    expect(onAuthorizedSubmit).toHaveBeenCalledTimes(1);
+    expect(onAuthorizedSubmit).toHaveBeenLastCalledWith('# First');
+    await expect(overlapping).resolves.toBe(false);
+    expect(states).toEqual(['saving']);
+
+    resolveFirst?.();
+    await expect(first).resolves.toBe(true);
+    expect(states).toEqual(['saving', 'saved']);
+
+    await expect(submit('# Later')).resolves.toBe(true);
+    expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
+    expect(onAuthorizedSubmit).toHaveBeenLastCalledWith('# Later');
+    expect(states).toEqual(['saving', 'saved', 'saving', 'saved']);
+  });
+
+  it('releases the gate after a failed host submission without exposing the failure value', async () => {
+    const privateFailure = new Error('private durable-store detail');
+    const onAuthorizedSubmit = vi
+      .fn<(messageBody: string) => Promise<void>>()
+      .mockRejectedValueOnce(privateFailure)
+      .mockResolvedValue(undefined);
+    const states: string[] = [];
+    const submit = createSingleFlightSubmission(onAuthorizedSubmit, (state) => {
+      states.push(state);
+    });
+
+    await expect(submit('# Failing')).resolves.toBe(false);
+    await expect(submit('# Retry')).resolves.toBe(true);
+
+    expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
+    expect(states).toEqual(['saving', 'failed', 'saving', 'saved']);
+  });
+});

From a4ddda4a01744f351c15ca96813e1ab45d805e2a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:10:52 -0700
Subject: [PATCH 073/258] fix(reference-host): serialize authorized submissions

---
 .../single-flight-submission.ts               | 43 +++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 examples/reference-host/single-flight-submission.ts

diff --git a/examples/reference-host/single-flight-submission.ts b/examples/reference-host/single-flight-submission.ts
new file mode 100644
index 00000000..0aa1fc3a
--- /dev/null
+++ b/examples/reference-host/single-flight-submission.ts
@@ -0,0 +1,43 @@
+export type ReferenceHostSubmissionState = 'saving' | 'saved' | 'failed';
+
+export type AuthorizedSubmit = (
+  messageBody: string,
+) => Promise<void> | void;
+
+export type SubmissionStateObserver = (
+  state: ReferenceHostSubmissionState,
+) => void;
+
+/**
+ * Serialize host-owned authorized persistence attempts without assuming any
+ * transport or storage authority in Inkspan.
+ *
+ * Overlapping attempts are rejected while one host callback is in flight.
+ * Host failures are reduced to a stable boolean/state signal so private
+ * durable-store details do not cross the reference component boundary.
+ */
+export function createSingleFlightSubmission(
+  onAuthorizedSubmit: AuthorizedSubmit,
+  onStateChange: SubmissionStateObserver,
+) {
+  let inFlight = false;
+
+  return async (messageBody: string): Promise<boolean> => {
+    if (inFlight) {
+      return false;
+    }
+
+    inFlight = true;
+    onStateChange('saving');
+    try {
+      await onAuthorizedSubmit(messageBody);
+      onStateChange('saved');
+      return true;
+    } catch {
+      onStateChange('failed');
+      return false;
+    } finally {
+      inFlight = false;
+    }
+  };
+}

From ae5ce154eafab246953191789706ef2f95f43aa8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:12:10 -0700
Subject: [PATCH 074/258] fix(reference-host): guard overlapping native submits

---
 examples/reference-host/native-form-host.tsx | 37 ++++++++++++++------
 1 file changed, 26 insertions(+), 11 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 915357cc..9f0a6002 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -1,7 +1,11 @@
-import { useState, type FormEvent } from 'react';
+import { useRef, useState, type FormEvent } from 'react';
 import { CwlEditor } from '@contextualwisdomlab/cwl-editor';
+import {
+  createSingleFlightSubmission,
+  type ReferenceHostSubmissionState,
+} from './single-flight-submission.js';
 
-type SubmissionState = 'idle' | 'saving' | 'saved' | 'failed';
+type SubmissionState = 'idle' | ReferenceHostSubmissionState;
 
 export interface NativeFormHostProps {
   /**
@@ -18,12 +22,28 @@ export interface NativeFormHostProps {
  * Inkspan owns synchronization of the editor document into the native form
  * control. The host reads FormData at submit time and then applies its own
  * authorization and durable-persistence policy through onAuthorizedSubmit.
+ * Overlapping submissions are rejected while the host callback is in flight,
+ * preventing duplicate durable writes without claiming host persistence.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
 }: NativeFormHostProps) {
   const [submissionState, setSubmissionState] =
     useState<SubmissionState>('idle');
+  const onAuthorizedSubmitRef = useRef(onAuthorizedSubmit);
+  onAuthorizedSubmitRef.current = onAuthorizedSubmit;
+
+  const submitAuthorizedRef = useRef<
+    ReturnType<typeof createSingleFlightSubmission> | null
+  >(null);
+  let submitAuthorized = submitAuthorizedRef.current;
+  if (submitAuthorized === null) {
+    submitAuthorized = createSingleFlightSubmission(
+      (messageBody) => onAuthorizedSubmitRef.current(messageBody),
+      setSubmissionState,
+    );
+    submitAuthorizedRef.current = submitAuthorized;
+  }
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
@@ -36,14 +56,7 @@ export function NativeFormHost({
       return;
     }
 
-    setSubmissionState('saving');
-    try {
-      const messageBody = messageBodyEntry;
-      await onAuthorizedSubmit(messageBody);
-      setSubmissionState('saved');
-    } catch {
-      setSubmissionState('failed');
-    }
+    await submitAuthorized(messageBodyEntry);
   }
 
   return (
@@ -55,7 +68,9 @@ export function NativeFormHost({
         formResetValue="# Draft"
       />
       <div>
-        <button type="submit">Save document</button>
+        <button type="submit" disabled={submissionState === 'saving'}>
+          Save document
+        </button>
         <button type="reset">Reset draft</button>
       </div>
       <output aria-live="polite">

From 7c09378f99a6b23c01afd84f2cefd3921dfaad21 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:13:41 -0700
Subject: [PATCH 075/258] test(reference-host): bind native form to
 single-flight submit

---
 src/referenceHostNativeFormJourney.test.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 4fc94723..95fc90b9 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -25,7 +25,16 @@ describe('reference-host native form journey', () => {
 
   it('keeps host authorization and durable persistence explicitly outside the component submit callback', () => {
     expect(nativeFormHostSource).toContain('onAuthorizedSubmit');
-    expect(nativeFormHostSource).toContain('await onAuthorizedSubmit(messageBody)');
+    expect(nativeFormHostSource).toContain('createSingleFlightSubmission');
+    expect(nativeFormHostSource).toContain(
+      'onAuthorizedSubmitRef.current(messageBody)',
+    );
+    expect(nativeFormHostSource).toContain(
+      'await submitAuthorized(messageBodyEntry)',
+    );
+    expect(nativeFormHostSource).toContain(
+      "disabled={submissionState === 'saving'}",
+    );
     expect(nativeFormHostSource).not.toContain('fetch(');
     expect(nativeFormHostSource).not.toContain('localStorage');
   });

From de3f2a4c8b6e9f12dd4135f57971e32c74a34676 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:19:26 -0700
Subject: [PATCH 076/258] test(reference-host): require hydration-gated editor
 mount

---
 src/referenceHostHydrationGate.test.tsx | 39 +++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 src/referenceHostHydrationGate.test.tsx

diff --git a/src/referenceHostHydrationGate.test.tsx b/src/referenceHostHydrationGate.test.tsx
new file mode 100644
index 00000000..931f8538
--- /dev/null
+++ b/src/referenceHostHydrationGate.test.tsx
@@ -0,0 +1,39 @@
+import { cleanup, render, screen, waitFor } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { renderToString } from 'react-dom/server';
+import { ReferenceHostHydrationGate } from '../examples/reference-host/hydration-gate.js';
+
+afterEach(cleanup);
+
+describe('reference-host hydration gate', () => {
+  it('keeps the browser editor out of server markup and mounts it only after client hydration', async () => {
+    const renderEditor = vi.fn(() => (
+      <div data-reference-editor="ready">Hydrated editor</div>
+    ));
+
+    const serverHtml = renderToString(
+      <ReferenceHostHydrationGate
+        loadingLabel="Loading editor"
+        renderEditor={renderEditor}
+      />,
+    );
+
+    expect(renderEditor).not.toHaveBeenCalled();
+    expect(serverHtml).toContain('aria-busy="true"');
+    expect(serverHtml).toContain('Loading editor');
+    expect(serverHtml).not.toContain('data-reference-editor="ready"');
+
+    render(
+      <ReferenceHostHydrationGate
+        loadingLabel="Loading editor"
+        renderEditor={renderEditor}
+      />,
+    );
+
+    await waitFor(() => {
+      expect(renderEditor).toHaveBeenCalledTimes(1);
+      expect(screen.getByText('Hydrated editor')).toBeInTheDocument();
+    });
+    expect(screen.queryByText('Loading editor')).not.toBeInTheDocument();
+  });
+});

From c53f9c63bd4658c29ce7bf9cbf639944e3f5d68f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 00:04:10 -0700
Subject: [PATCH 077/258] feat(reference-host): add hydration-gated editor
 mount

---
 examples/reference-host/hydration-gate.tsx | 23 ++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 examples/reference-host/hydration-gate.tsx

diff --git a/examples/reference-host/hydration-gate.tsx b/examples/reference-host/hydration-gate.tsx
new file mode 100644
index 00000000..03211282
--- /dev/null
+++ b/examples/reference-host/hydration-gate.tsx
@@ -0,0 +1,23 @@
+import { useEffect, useState, type ReactNode } from 'react';
+
+export interface ReferenceHostHydrationGateProps {
+  loadingLabel: string;
+  renderEditor: () => ReactNode;
+}
+
+export function ReferenceHostHydrationGate({
+  loadingLabel,
+  renderEditor,
+}: ReferenceHostHydrationGateProps) {
+  const [hydrated, setHydrated] = useState(false);
+
+  useEffect(() => {
+    setHydrated(true);
+  }, []);
+
+  if (!hydrated) {
+    return <div aria-busy="true">{loadingLabel}</div>;
+  }
+
+  return <>{renderEditor()}</>;
+}

From 3e99bbb735837a10295beb2f8f7e00e7c80b3654 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:04:55 -0700
Subject: [PATCH 078/258] test(reference-host): require packed artifact
 acceptance

---
 src/referenceHostPackedArtifact.test.ts | 45 +++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 src/referenceHostPackedArtifact.test.ts

diff --git a/src/referenceHostPackedArtifact.test.ts b/src/referenceHostPackedArtifact.test.ts
new file mode 100644
index 00000000..a7234c16
--- /dev/null
+++ b/src/referenceHostPackedArtifact.test.ts
@@ -0,0 +1,45 @@
+import { execFileSync } from 'node:child_process';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const repositoryRoot = process.cwd();
+const verifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-packed-artifact.mjs',
+);
+
+describe('reference-host packed artifact acceptance', () => {
+  it(
+    'builds, packs, installs, and SSR-imports the exact tarball without network fallback',
+    () => {
+      const output = execFileSync(process.execPath, [verifierPath], {
+        cwd: repositoryRoot,
+        encoding: 'utf8',
+        env: {
+          ...process.env,
+          INKSPAN_REFERENCE_HOST_EXPECTED_HEAD: process.env.GITHUB_SHA ?? '',
+        },
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 180_000,
+      });
+
+      const result = JSON.parse(output.trim()) as {
+        packageName?: unknown;
+        packageVersion?: unknown;
+        installedFromTarball?: unknown;
+        offlineInstall?: unknown;
+        serverRenderedNamedField?: unknown;
+        sourceImportDetected?: unknown;
+      };
+
+      expect(result.packageName).toBe('@contextualwisdomlab/cwl-editor');
+      expect(result.packageVersion).toBe('0.6.0');
+      expect(result.installedFromTarball).toBe(true);
+      expect(result.offlineInstall).toBe(true);
+      expect(result.serverRenderedNamedField).toBe(true);
+      expect(result.sourceImportDetected).toBe(false);
+    },
+    180_000,
+  );
+});

From 1b87cc0e3cc639250f7e6b9b0b013e86a342be00 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:05:33 -0700
Subject: [PATCH 079/258] feat(reference-host): verify exact packed artifact
 consumer

---
 .../reference-host/verify-packed-artifact.mjs | 168 ++++++++++++++++++
 1 file changed, 168 insertions(+)
 create mode 100644 examples/reference-host/verify-packed-artifact.mjs

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
new file mode 100644
index 00000000..e9577b29
--- /dev/null
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -0,0 +1,168 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import {
+  mkdtempSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  realpathSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const repositoryRoot = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  '..',
+  '..',
+);
+const packageMetadata = JSON.parse(
+  readFileSync(join(repositoryRoot, 'package.json'), 'utf8'),
+);
+const packageName = packageMetadata.name;
+const packageVersion = packageMetadata.version;
+
+function run(command, argumentsList, cwd) {
+  return execFileSync(command, argumentsList, {
+    cwd,
+    encoding: 'utf8',
+    env: process.env,
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+}
+
+function isContained(parentPath, childPath) {
+  const relation = relative(realpathSync(parentPath), realpathSync(childPath));
+  return relation === '' || (!relation.startsWith(`..${sep}`) && relation !== '..');
+}
+
+const temporaryRoot = mkdtempSync(join(tmpdir(), 'inkspan-reference-host-'));
+
+try {
+  run('pnpm', ['build'], repositoryRoot);
+
+  const packDirectory = join(temporaryRoot, 'pack');
+  mkdirSync(packDirectory, { recursive: true });
+  run('pnpm', ['pack', '--pack-destination', packDirectory], repositoryRoot);
+
+  const tarballs = readdirSync(packDirectory).filter((name) => name.endsWith('.tgz'));
+  assert.equal(tarballs.length, 1, 'Expected exactly one packed Inkspan tarball.');
+  const tarballPath = join(packDirectory, tarballs[0]);
+
+  const hostDirectory = join(temporaryRoot, 'host');
+  mkdirSync(hostDirectory, { recursive: true });
+  writeFileSync(
+    join(hostDirectory, 'package.json'),
+    `${JSON.stringify(
+      {
+        name: 'inkspan-reference-host-packed-consumer',
+        private: true,
+        type: 'module',
+        packageManager: packageMetadata.packageManager,
+        dependencies: {
+          [packageName]: `file:${tarballPath}`,
+          react: packageMetadata.devDependencies.react,
+          'react-dom': packageMetadata.devDependencies['react-dom'],
+        },
+      },
+      null,
+      2,
+    )}\n`,
+    'utf8',
+  );
+
+  // Offline mode is intentional: this acceptance step may use only artifacts
+  // already admitted by the clean-checkout dependency install. A missing cache
+  // entry must fail rather than silently introducing a new network dependency.
+  run('pnpm', ['install', '--offline', '--ignore-scripts'], hostDirectory);
+
+  const consumerPath = join(hostDirectory, 'consumer.mjs');
+  writeFileSync(
+    consumerPath,
+    `import assert from 'node:assert/strict';
+import React from 'react';
+import { renderToString } from 'react-dom/server';
+import { CwlEditor } from '${packageName}';
+import { createDocumentAutosaveQueue } from '${packageName}/autosave';
+
+const serverHtml = renderToString(
+  React.createElement(CwlEditor, {
+    mode: 'markdown',
+    defaultValue: '# Packed draft',
+    formFieldName: 'message_body',
+    hideToolbar: true,
+  }),
+);
+assert.match(serverHtml, /name="message_body"/u);
+assert.match(serverHtml, /value="# Packed draft"/u);
+assert.equal(typeof createDocumentAutosaveQueue, 'function');
+
+const rootEntry = import.meta.resolve('${packageName}');
+const styleEntry = import.meta.resolve('${packageName}/styles.css');
+const fullFontEntry = import.meta.resolve('${packageName}/fonts.css');
+const latinFontEntry = import.meta.resolve('${packageName}/fonts-latin.css');
+for (const entry of [rootEntry, styleEntry, fullFontEntry, latinFontEntry]) {
+  assert.ok(entry.startsWith('file:'), 'Packed package export did not resolve to a file URL.');
+}
+
+process.stdout.write(JSON.stringify({
+  serverRenderedNamedField: true,
+  rootEntry,
+  styleEntry,
+  fullFontEntry,
+  latinFontEntry,
+}));
+`,
+    'utf8',
+  );
+
+  const consumerResult = JSON.parse(run(process.execPath, [consumerPath], hostDirectory));
+  const installedPackageDirectory = join(
+    hostDirectory,
+    'node_modules',
+    ...packageName.split('/'),
+  );
+  const installedMetadata = JSON.parse(
+    readFileSync(join(installedPackageDirectory, 'package.json'), 'utf8'),
+  );
+
+  assert.equal(installedMetadata.name, packageName);
+  assert.equal(installedMetadata.version, packageVersion);
+  assert.equal(
+    isContained(join(hostDirectory, 'node_modules'), installedPackageDirectory),
+    true,
+    'Installed package escaped the isolated host node_modules tree.',
+  );
+
+  const resolvedRootPath = fileURLToPath(consumerResult.rootEntry);
+  assert.equal(
+    isContained(installedPackageDirectory, resolvedRootPath),
+    true,
+    'Consumer root import did not resolve through the packed host installation.',
+  );
+
+  const sourceImportDetected = !relative(
+    realpathSync(installedPackageDirectory),
+    realpathSync(resolvedRootPath),
+  ).startsWith(`dist${sep}`);
+  assert.equal(
+    sourceImportDetected,
+    false,
+    'Packed consumer unexpectedly resolved the executable root import outside dist/.',
+  );
+
+  process.stdout.write(
+    `${JSON.stringify({
+      packageName,
+      packageVersion,
+      installedFromTarball: true,
+      offlineInstall: true,
+      serverRenderedNamedField: consumerResult.serverRenderedNamedField === true,
+      sourceImportDetected,
+    })}\n`,
+  );
+} finally {
+  rmSync(temporaryRoot, { recursive: true, force: true });
+}

From 297d2c341452cc48d83a6dcc80ad3bcb41b88a2e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:09:40 -0700
Subject: [PATCH 080/258] test(reference-host): correct packed consumer install
 contract

---
 src/referenceHostPackedArtifact.test.ts | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/referenceHostPackedArtifact.test.ts b/src/referenceHostPackedArtifact.test.ts
index a7234c16..31cba2a4 100644
--- a/src/referenceHostPackedArtifact.test.ts
+++ b/src/referenceHostPackedArtifact.test.ts
@@ -1,4 +1,5 @@
 import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 
 import { describe, expect, it } from 'vitest';
@@ -8,18 +9,17 @@ const verifierPath = resolve(
   repositoryRoot,
   'examples/reference-host/verify-packed-artifact.mjs',
 );
+const packageMetadata = JSON.parse(
+  readFileSync(resolve(repositoryRoot, 'package.json'), 'utf8'),
+) as { name: string; version: string };
 
 describe('reference-host packed artifact acceptance', () => {
   it(
-    'builds, packs, installs, and SSR-imports the exact tarball without network fallback',
+    'builds, packs, installs, and SSR-imports the exact tarball in an isolated consumer',
     () => {
       const output = execFileSync(process.execPath, [verifierPath], {
         cwd: repositoryRoot,
         encoding: 'utf8',
-        env: {
-          ...process.env,
-          INKSPAN_REFERENCE_HOST_EXPECTED_HEAD: process.env.GITHUB_SHA ?? '',
-        },
         stdio: ['ignore', 'pipe', 'pipe'],
         timeout: 180_000,
       });
@@ -28,15 +28,15 @@ describe('reference-host packed artifact acceptance', () => {
         packageName?: unknown;
         packageVersion?: unknown;
         installedFromTarball?: unknown;
-        offlineInstall?: unknown;
+        consumerInstallCompleted?: unknown;
         serverRenderedNamedField?: unknown;
         sourceImportDetected?: unknown;
       };
 
-      expect(result.packageName).toBe('@contextualwisdomlab/cwl-editor');
-      expect(result.packageVersion).toBe('0.6.0');
+      expect(result.packageName).toBe(packageMetadata.name);
+      expect(result.packageVersion).toBe(packageMetadata.version);
       expect(result.installedFromTarball).toBe(true);
-      expect(result.offlineInstall).toBe(true);
+      expect(result.consumerInstallCompleted).toBe(true);
       expect(result.serverRenderedNamedField).toBe(true);
       expect(result.sourceImportDetected).toBe(false);
     },

From 1c9270961d64cf76c33a81fa49f5bebbf1e3f205 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:10:08 -0700
Subject: [PATCH 081/258] fix(reference-host): validate consumer dependency
 resolution truthfully

---
 .../reference-host/verify-packed-artifact.mjs     | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index e9577b29..2a3ce94c 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -73,10 +73,15 @@ try {
     'utf8',
   );
 
-  // Offline mode is intentional: this acceptance step may use only artifacts
-  // already admitted by the clean-checkout dependency install. A missing cache
-  // entry must fail rather than silently introducing a new network dependency.
-  run('pnpm', ['install', '--offline', '--ignore-scripts'], hostDirectory);
+  // A published library consumer resolves the dependency ranges declared in the
+  // packed manifest. Prefer the clean-checkout store, but permit the package
+  // manager to fetch a transitive version that is valid for the packed consumer
+  // even when that version is not present in Inkspan's development lockfile.
+  run(
+    'pnpm',
+    ['install', '--prefer-offline', '--ignore-scripts', '--no-frozen-lockfile'],
+    hostDirectory,
+  );
 
   const consumerPath = join(hostDirectory, 'consumer.mjs');
   writeFileSync(
@@ -158,7 +163,7 @@ process.stdout.write(JSON.stringify({
       packageName,
       packageVersion,
       installedFromTarball: true,
-      offlineInstall: true,
+      consumerInstallCompleted: true,
       serverRenderedNamedField: consumerResult.serverRenderedNamedField === true,
       sourceImportDetected,
     })}\n`,

From afe023618d01f478fce6667c2559404e243db711 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:08:29 -0700
Subject: [PATCH 082/258] test(reference-host): contain submission observer
 failures

---
 ...eferenceHostSingleFlightSubmission.test.ts | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/src/referenceHostSingleFlightSubmission.test.ts b/src/referenceHostSingleFlightSubmission.test.ts
index 96e21dce..75a63b8f 100644
--- a/src/referenceHostSingleFlightSubmission.test.ts
+++ b/src/referenceHostSingleFlightSubmission.test.ts
@@ -51,4 +51,39 @@ describe('reference-host authorized submission single-flight boundary', () => {
     expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
     expect(states).toEqual(['saving', 'failed', 'saving', 'saved']);
   });
+
+  it('contains a saving-state observer failure without blocking durable host submission or later retries', async () => {
+    const privateObserverFailure = new Error('private presentation detail');
+    const onAuthorizedSubmit = vi
+      .fn<(messageBody: string) => Promise<void>>()
+      .mockResolvedValue(undefined);
+    let savingNotifications = 0;
+    const submit = createSingleFlightSubmission(onAuthorizedSubmit, (state) => {
+      if (state === 'saving' && savingNotifications++ === 0) {
+        throw privateObserverFailure;
+      }
+    });
+
+    await expect(submit('# First')).resolves.toBe(true);
+    await expect(submit('# Retry')).resolves.toBe(true);
+    expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
+  });
+
+  it('does not reclassify successful durable persistence when the saved-state observer fails', async () => {
+    const privateObserverFailure = new Error('private presentation detail');
+    const onAuthorizedSubmit = vi
+      .fn<(messageBody: string) => Promise<void>>()
+      .mockResolvedValue(undefined);
+    const states: string[] = [];
+    const submit = createSingleFlightSubmission(onAuthorizedSubmit, (state) => {
+      states.push(state);
+      if (state === 'saved') {
+        throw privateObserverFailure;
+      }
+    });
+
+    await expect(submit('# Persisted')).resolves.toBe(true);
+    expect(onAuthorizedSubmit).toHaveBeenCalledOnce();
+    expect(states).toEqual(['saving', 'saved']);
+  });
 });

From bfa915883c2b1b6664fd59b1ab62375ec9a39b46 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:08:56 -0700
Subject: [PATCH 083/258] fix(reference-host): isolate submission observers

---
 .../reference-host/single-flight-submission.ts   | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/single-flight-submission.ts b/examples/reference-host/single-flight-submission.ts
index 0aa1fc3a..5b29079f 100644
--- a/examples/reference-host/single-flight-submission.ts
+++ b/examples/reference-host/single-flight-submission.ts
@@ -15,6 +15,8 @@ export type SubmissionStateObserver = (
  * Overlapping attempts are rejected while one host callback is in flight.
  * Host failures are reduced to a stable boolean/state signal so private
  * durable-store details do not cross the reference component boundary.
+ * Presentation-state observer failures are best-effort and cannot block,
+ * reclassify, or wedge the host-owned persistence attempt.
  */
 export function createSingleFlightSubmission(
   onAuthorizedSubmit: AuthorizedSubmit,
@@ -22,19 +24,27 @@ export function createSingleFlightSubmission(
 ) {
   let inFlight = false;
 
+  const notifyState = (state: ReferenceHostSubmissionState) => {
+    try {
+      onStateChange(state);
+    } catch {
+      // Presentation observation must not acquire persistence authority.
+    }
+  };
+
   return async (messageBody: string): Promise<boolean> => {
     if (inFlight) {
       return false;
     }
 
     inFlight = true;
-    onStateChange('saving');
+    notifyState('saving');
     try {
       await onAuthorizedSubmit(messageBody);
-      onStateChange('saved');
+      notifyState('saved');
       return true;
     } catch {
-      onStateChange('failed');
+      notifyState('failed');
       return false;
     } finally {
       inFlight = false;

From 95d60b487ecb6aab6c95d2600d056abf29621144 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:11:13 -0700
Subject: [PATCH 084/258] test(reference-host): keep reset status honest

---
 src/referenceHostNativeFormJourney.test.ts | 49 +++++++++++++++++++++-
 1 file changed, 48 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 95fc90b9..0da60b7c 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -1,12 +1,30 @@
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { describe, expect, it } from 'vitest';
+import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { createElement } from 'react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+vi.mock('@contextualwisdomlab/cwl-editor', async () => {
+  const { createElement: createReactElement } = await import('react');
+  return {
+    CwlEditor: () =>
+      createReactElement('textarea', {
+        'aria-label': 'Document body',
+        defaultValue: '# Draft',
+        name: 'message_body',
+      }),
+  };
+});
+
+import { NativeFormHost } from '../examples/reference-host/native-form-host.js';
 
 const nativeFormHostSource = readFileSync(
   resolve(process.cwd(), 'examples/reference-host/native-form-host.tsx'),
   'utf8',
 );
 
+afterEach(cleanup);
+
 describe('reference-host native form journey', () => {
   it('uses the published editor package and delegates serialization to Inkspan native form integration', () => {
     expect(nativeFormHostSource).toContain(
@@ -38,4 +56,33 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).not.toContain('fetch(');
     expect(nativeFormHostSource).not.toContain('localStorage');
   });
+
+  it('blocks reset while durable submission is in flight and clears stale saved status after a later reset', async () => {
+    let resolveSave: (() => void) | undefined;
+    const saveResult = new Promise<void>((resolve) => {
+      resolveSave = resolve;
+    });
+    const onAuthorizedSubmit = vi.fn(() => saveResult);
+    const { container } = render(
+      createElement(NativeFormHost, { onAuthorizedSubmit }),
+    );
+    const form = container.querySelector('form')!;
+    const resetButton = screen.getByRole('button', { name: 'Reset draft' });
+
+    fireEvent.submit(form);
+    await waitFor(() => expect(screen.getByText('Saving…')).toBeInTheDocument());
+    expect(resetButton).toBeDisabled();
+    expect(fireEvent.reset(form)).toBe(false);
+    expect(screen.getByText('Saving…')).toBeInTheDocument();
+
+    act(() => resolveSave?.());
+    await waitFor(() => expect(screen.getByText('Saved')).toBeInTheDocument());
+    expect(resetButton).not.toBeDisabled();
+
+    expect(fireEvent.reset(form)).toBe(true);
+    await waitFor(() =>
+      expect(screen.getByText('Not saved yet')).toBeInTheDocument(),
+    );
+    expect(onAuthorizedSubmit).toHaveBeenCalledOnce();
+  });
 });

From 8e6c9416a1828eaffffc2a4a92d872a3c7d089f2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:11:32 -0700
Subject: [PATCH 085/258] fix(reference-host): keep reset save state consistent

---
 examples/reference-host/native-form-host.tsx | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 9f0a6002..12459eb3 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -22,8 +22,10 @@ export interface NativeFormHostProps {
  * Inkspan owns synchronization of the editor document into the native form
  * control. The host reads FormData at submit time and then applies its own
  * authorization and durable-persistence policy through onAuthorizedSubmit.
- * Overlapping submissions are rejected while the host callback is in flight,
- * preventing duplicate durable writes without claiming host persistence.
+ * Overlapping submissions and form resets are blocked while the host callback
+ * is in flight, preventing stale success presentation or duplicate durable
+ * writes without claiming host persistence. A later successful reset returns
+ * the host presentation to an explicitly unsaved state.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
@@ -59,8 +61,16 @@ export function NativeFormHost({
     await submitAuthorized(messageBodyEntry);
   }
 
+  function handleReset(event: FormEvent<HTMLFormElement>) {
+    if (submissionState === 'saving') {
+      event.preventDefault();
+      return;
+    }
+    setSubmissionState('idle');
+  }
+
   return (
-    <form onSubmit={handleSubmit}>
+    <form onSubmit={handleSubmit} onReset={handleReset}>
       <CwlEditor
         mode="markdown"
         defaultValue="# Draft"
@@ -71,7 +81,9 @@ export function NativeFormHost({
         <button type="submit" disabled={submissionState === 'saving'}>
           Save document
         </button>
-        <button type="reset">Reset draft</button>
+        <button type="reset" disabled={submissionState === 'saving'}>
+          Reset draft
+        </button>
       </div>
       <output aria-live="polite">
         {submissionState === 'saving'

From 721a6c08ca4c1f02f25435419680d3399991157d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:12:50 -0700
Subject: [PATCH 086/258] test(reference-host): keep native form contract
 source-isolated

---
 src/referenceHostNativeFormJourney.test.ts | 55 +++++-----------------
 1 file changed, 11 insertions(+), 44 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 0da60b7c..0ce7dfeb 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -1,30 +1,12 @@
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
-import { createElement } from 'react';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-
-vi.mock('@contextualwisdomlab/cwl-editor', async () => {
-  const { createElement: createReactElement } = await import('react');
-  return {
-    CwlEditor: () =>
-      createReactElement('textarea', {
-        'aria-label': 'Document body',
-        defaultValue: '# Draft',
-        name: 'message_body',
-      }),
-  };
-});
-
-import { NativeFormHost } from '../examples/reference-host/native-form-host.js';
+import { describe, expect, it } from 'vitest';
 
 const nativeFormHostSource = readFileSync(
   resolve(process.cwd(), 'examples/reference-host/native-form-host.tsx'),
   'utf8',
 );
 
-afterEach(cleanup);
-
 describe('reference-host native form journey', () => {
   it('uses the published editor package and delegates serialization to Inkspan native form integration', () => {
     expect(nativeFormHostSource).toContain(
@@ -57,32 +39,17 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).not.toContain('localStorage');
   });
 
-  it('blocks reset while durable submission is in flight and clears stale saved status after a later reset', async () => {
-    let resolveSave: (() => void) | undefined;
-    const saveResult = new Promise<void>((resolve) => {
-      resolveSave = resolve;
-    });
-    const onAuthorizedSubmit = vi.fn(() => saveResult);
-    const { container } = render(
-      createElement(NativeFormHost, { onAuthorizedSubmit }),
+  it('blocks form reset while durable submission is in flight and marks a later reset unsaved', () => {
+    expect(nativeFormHostSource).toContain(
+      '<form onSubmit={handleSubmit} onReset={handleReset}>',
     );
-    const form = container.querySelector('form')!;
-    const resetButton = screen.getByRole('button', { name: 'Reset draft' });
-
-    fireEvent.submit(form);
-    await waitFor(() => expect(screen.getByText('Saving…')).toBeInTheDocument());
-    expect(resetButton).toBeDisabled();
-    expect(fireEvent.reset(form)).toBe(false);
-    expect(screen.getByText('Saving…')).toBeInTheDocument();
-
-    act(() => resolveSave?.());
-    await waitFor(() => expect(screen.getByText('Saved')).toBeInTheDocument());
-    expect(resetButton).not.toBeDisabled();
-
-    expect(fireEvent.reset(form)).toBe(true);
-    await waitFor(() =>
-      expect(screen.getByText('Not saved yet')).toBeInTheDocument(),
+    expect(nativeFormHostSource).toContain(
+      "if (submissionState === 'saving') {",
+    );
+    expect(nativeFormHostSource).toContain('event.preventDefault();');
+    expect(nativeFormHostSource).toContain("setSubmissionState('idle');");
+    expect(nativeFormHostSource).toMatch(
+      /<button type="reset" disabled=\{submissionState === 'saving'\}>/u,
     );
-    expect(onAuthorizedSubmit).toHaveBeenCalledOnce();
   });
 });

From f0401c6f76ed81c8600e52484cd5312e06486421 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 03:15:48 -0700
Subject: [PATCH 087/258] fix(reference-host): keep submission callback
 non-null

---
 examples/reference-host/native-form-host.tsx | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 12459eb3..c7d6be0f 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -38,12 +38,14 @@ export function NativeFormHost({
   const submitAuthorizedRef = useRef<
     ReturnType<typeof createSingleFlightSubmission> | null
   >(null);
-  let submitAuthorized = submitAuthorizedRef.current;
-  if (submitAuthorized === null) {
-    submitAuthorized = createSingleFlightSubmission(
+  const existingSubmitAuthorized = submitAuthorizedRef.current;
+  const submitAuthorized =
+    existingSubmitAuthorized ??
+    createSingleFlightSubmission(
       (messageBody) => onAuthorizedSubmitRef.current(messageBody),
       setSubmissionState,
     );
+  if (existingSubmitAuthorized === null) {
     submitAuthorizedRef.current = submitAuthorized;
   }
 

From 3e65edaa0c11ee8be75e4de288d9a2ec21c16a37 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:03:50 -0700
Subject: [PATCH 088/258] test(reference-host): require read-only form
 fail-closed contract

---
 src/referenceHostNativeFormJourney.test.ts | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 0ce7dfeb..d4e2d1a9 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -52,4 +52,20 @@ describe('reference-host native form journey', () => {
       /<button type="reset" disabled=\{submissionState === 'saving'\}>/u,
     );
   });
+
+  it('makes host write permission explicit and fail-closes native form writes while read-only', () => {
+    expect(nativeFormHostSource).toContain('readOnly?: boolean;');
+    expect(nativeFormHostSource).toContain('readOnly = false');
+    expect(nativeFormHostSource).toContain('editable={!readOnly}');
+    expect(nativeFormHostSource).toContain('formFieldDisabled={readOnly}');
+    expect(nativeFormHostSource).toContain(
+      "if (readOnly || submissionState === 'saving') {",
+    );
+    expect(nativeFormHostSource).toMatch(
+      /type="submit"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,
+    );
+    expect(nativeFormHostSource).toMatch(
+      /type="reset"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,
+    );
+  });
 });

From cf0c060d8f15e329d04aa005040e25def9c6fbdc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:08:12 -0700
Subject: [PATCH 089/258] feat(reference-host): fail-close native form when
 read-only

---
 examples/reference-host/native-form-host.tsx | 34 ++++++++++++++++----
 1 file changed, 28 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index c7d6be0f..c77c2df1 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -14,6 +14,15 @@ export interface NativeFormHostProps {
    * credentials, tenancy, or storage for the embedding application.
    */
   onAuthorizedSubmit(messageBody: string): Promise<void> | void;
+  /**
+   * Host-owned write permission presentation.
+   *
+   * A read-only host keeps the editor readable while fail-closing native form
+   * submission/reset and disabling the named form field. This is presentation
+   * evidence only; the embedding host remains responsible for authorization at
+   * the durable write boundary.
+   */
+  readOnly?: boolean;
 }
 
 /**
@@ -23,12 +32,14 @@ export interface NativeFormHostProps {
  * control. The host reads FormData at submit time and then applies its own
  * authorization and durable-persistence policy through onAuthorizedSubmit.
  * Overlapping submissions and form resets are blocked while the host callback
- * is in flight, preventing stale success presentation or duplicate durable
- * writes without claiming host persistence. A later successful reset returns
- * the host presentation to an explicitly unsaved state.
+ * is in flight. Host read-only state additionally fail-closes native form
+ * writes and disables the named field without moving authorization authority
+ * into Inkspan. A later successful reset returns the host presentation to an
+ * explicitly unsaved state.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
+  readOnly = false,
 }: NativeFormHostProps) {
   const [submissionState, setSubmissionState] =
     useState<SubmissionState>('idle');
@@ -51,6 +62,9 @@ export function NativeFormHost({
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
+    if (readOnly || submissionState === 'saving') {
+      return;
+    }
 
     const messageBodyEntry = new FormData(event.currentTarget).get(
       'message_body',
@@ -64,7 +78,7 @@ export function NativeFormHost({
   }
 
   function handleReset(event: FormEvent<HTMLFormElement>) {
-    if (submissionState === 'saving') {
+    if (readOnly || submissionState === 'saving') {
       event.preventDefault();
       return;
     }
@@ -76,14 +90,22 @@ export function NativeFormHost({
       <CwlEditor
         mode="markdown"
         defaultValue="# Draft"
+        editable={!readOnly}
         formFieldName="message_body"
+        formFieldDisabled={readOnly}
         formResetValue="# Draft"
       />
       <div>
-        <button type="submit" disabled={submissionState === 'saving'}>
+        <button
+          type="submit"
+          disabled={readOnly || submissionState === 'saving'}
+        >
           Save document
         </button>
-        <button type="reset" disabled={submissionState === 'saving'}>
+        <button
+          type="reset"
+          disabled={readOnly || submissionState === 'saving'}
+        >
           Reset draft
         </button>
       </div>

From fca5b904699a90f4d2a3c57aac2f6daa85eced8c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:08:53 -0700
Subject: [PATCH 090/258] test(reference-host): align form assertions with
 read-only guard

---
 src/referenceHostNativeFormJourney.test.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index d4e2d1a9..33f31a6e 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -33,7 +33,7 @@ describe('reference-host native form journey', () => {
       'await submitAuthorized(messageBodyEntry)',
     );
     expect(nativeFormHostSource).toContain(
-      "disabled={submissionState === 'saving'}",
+      "disabled={readOnly || submissionState === 'saving'}",
     );
     expect(nativeFormHostSource).not.toContain('fetch(');
     expect(nativeFormHostSource).not.toContain('localStorage');
@@ -44,12 +44,12 @@ describe('reference-host native form journey', () => {
       '<form onSubmit={handleSubmit} onReset={handleReset}>',
     );
     expect(nativeFormHostSource).toContain(
-      "if (submissionState === 'saving') {",
+      "if (readOnly || submissionState === 'saving') {",
     );
     expect(nativeFormHostSource).toContain('event.preventDefault();');
     expect(nativeFormHostSource).toContain("setSubmissionState('idle');");
     expect(nativeFormHostSource).toMatch(
-      /<button type="reset" disabled=\{submissionState === 'saving'\}>/u,
+      /type="reset"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,
     );
   });
 

From 529b549f3650b9fcec0faf4779f2131490e6a5dc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:11:02 -0700
Subject: [PATCH 091/258] test(reference-host): require packed asset
 containment evidence

---
 src/referenceHostPackedArtifact.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/referenceHostPackedArtifact.test.ts b/src/referenceHostPackedArtifact.test.ts
index 31cba2a4..f9ac4a57 100644
--- a/src/referenceHostPackedArtifact.test.ts
+++ b/src/referenceHostPackedArtifact.test.ts
@@ -30,6 +30,7 @@ describe('reference-host packed artifact acceptance', () => {
         installedFromTarball?: unknown;
         consumerInstallCompleted?: unknown;
         serverRenderedNamedField?: unknown;
+        publicAssetEntriesContained?: unknown;
         sourceImportDetected?: unknown;
       };
 
@@ -38,6 +39,7 @@ describe('reference-host packed artifact acceptance', () => {
       expect(result.installedFromTarball).toBe(true);
       expect(result.consumerInstallCompleted).toBe(true);
       expect(result.serverRenderedNamedField).toBe(true);
+      expect(result.publicAssetEntriesContained).toBe(true);
       expect(result.sourceImportDetected).toBe(false);
     },
     180_000,

From 2bc48a290b51d8db5827d2b42205ac1620350fdb Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:15:57 -0700
Subject: [PATCH 092/258] fix(reference-host): verify packed public asset
 containment

---
 .../reference-host/verify-packed-artifact.mjs     | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index 2a3ce94c..0708fd80 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -148,6 +148,20 @@ process.stdout.write(JSON.stringify({
     'Consumer root import did not resolve through the packed host installation.',
   );
 
+  const publicAssetEntries = [
+    ['stylesheet', consumerResult.styleEntry],
+    ['full font stylesheet', consumerResult.fullFontEntry],
+    ['Latin font stylesheet', consumerResult.latinFontEntry],
+  ];
+  for (const [label, entry] of publicAssetEntries) {
+    assert.equal(
+      isContained(installedPackageDirectory, fileURLToPath(entry)),
+      true,
+      `${label} export escaped the installed packed package.`,
+    );
+  }
+  const publicAssetEntriesContained = true;
+
   const sourceImportDetected = !relative(
     realpathSync(installedPackageDirectory),
     realpathSync(resolvedRootPath),
@@ -165,6 +179,7 @@ process.stdout.write(JSON.stringify({
       installedFromTarball: true,
       consumerInstallCompleted: true,
       serverRenderedNamedField: consumerResult.serverRenderedNamedField === true,
+      publicAssetEntriesContained,
       sourceImportDetected,
     })}\n`,
   );

From 9654d265b0bb510263d4985dc23f0163613470e4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 04:21:16 -0700
Subject: [PATCH 093/258] test(reference-host): require explicit client
 hydration boundary

---
 src/referenceHostHydrationGate.test.tsx | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostHydrationGate.test.tsx b/src/referenceHostHydrationGate.test.tsx
index 931f8538..4d396311 100644
--- a/src/referenceHostHydrationGate.test.tsx
+++ b/src/referenceHostHydrationGate.test.tsx
@@ -1,11 +1,23 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
 import { cleanup, render, screen, waitFor } from '@testing-library/react';
 import { afterEach, describe, expect, it, vi } from 'vitest';
 import { renderToString } from 'react-dom/server';
 import { ReferenceHostHydrationGate } from '../examples/reference-host/hydration-gate.js';
 
+const hydrationGateSource = readFileSync(
+  resolve(process.cwd(), 'examples/reference-host/hydration-gate.tsx'),
+  'utf8',
+);
+
 afterEach(cleanup);
 
 describe('reference-host hydration gate', () => {
+  it('declares the hydration boundary as a client component for App Router style hosts', () => {
+    expect(hydrationGateSource.startsWith("'use client';\n")).toBe(true);
+  });
+
   it('keeps the browser editor out of server markup and mounts it only after client hydration', async () => {
     const renderEditor = vi.fn(() => (
       <div data-reference-editor="ready">Hydrated editor</div>

From 3eb10fb6d19e6e6e5bcd709fcb6285a57004ad5b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 05:10:56 -0700
Subject: [PATCH 094/258] fix(reference-host): mark hydration gate as client
 boundary

---
 examples/reference-host/hydration-gate.tsx | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/examples/reference-host/hydration-gate.tsx b/examples/reference-host/hydration-gate.tsx
index 03211282..d027a6d1 100644
--- a/examples/reference-host/hydration-gate.tsx
+++ b/examples/reference-host/hydration-gate.tsx
@@ -1,3 +1,5 @@
+'use client';
+
 import { useEffect, useState, type ReactNode } from 'react';
 
 export interface ReferenceHostHydrationGateProps {

From 9bc7ef9a950b6448dfa112132379de32c48d4710 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 06:11:29 -0700
Subject: [PATCH 095/258] test(reference-host): verify packed ESM and CommonJS
 consumers

---
 .../reference-host/verify-packed-artifact.mjs | 101 +++++++++++++++---
 1 file changed, 88 insertions(+), 13 deletions(-)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index 0708fd80..f3dea753 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -91,6 +91,7 @@ import React from 'react';
 import { renderToString } from 'react-dom/server';
 import { CwlEditor } from '${packageName}';
 import { createDocumentAutosaveQueue } from '${packageName}/autosave';
+import { dataUriToBytes } from '${packageName}/converter';
 
 const serverHtml = renderToString(
   React.createElement(CwlEditor, {
@@ -103,18 +104,31 @@ const serverHtml = renderToString(
 assert.match(serverHtml, /name="message_body"/u);
 assert.match(serverHtml, /value="# Packed draft"/u);
 assert.equal(typeof createDocumentAutosaveQueue, 'function');
+assert.deepEqual(Array.from(dataUriToBytes('data:text/plain;base64,SGk=').bytes), [72, 105]);
 
 const rootEntry = import.meta.resolve('${packageName}');
+const autosaveEntry = import.meta.resolve('${packageName}/autosave');
+const converterEntry = import.meta.resolve('${packageName}/converter');
 const styleEntry = import.meta.resolve('${packageName}/styles.css');
 const fullFontEntry = import.meta.resolve('${packageName}/fonts.css');
 const latinFontEntry = import.meta.resolve('${packageName}/fonts-latin.css');
-for (const entry of [rootEntry, styleEntry, fullFontEntry, latinFontEntry]) {
+for (const entry of [
+  rootEntry,
+  autosaveEntry,
+  converterEntry,
+  styleEntry,
+  fullFontEntry,
+  latinFontEntry,
+]) {
   assert.ok(entry.startsWith('file:'), 'Packed package export did not resolve to a file URL.');
 }
 
 process.stdout.write(JSON.stringify({
   serverRenderedNamedField: true,
+  converterRoundTrip: true,
   rootEntry,
+  autosaveEntry,
+  converterEntry,
   styleEntry,
   fullFontEntry,
   latinFontEntry,
@@ -124,6 +138,45 @@ process.stdout.write(JSON.stringify({
   );
 
   const consumerResult = JSON.parse(run(process.execPath, [consumerPath], hostDirectory));
+
+  const commonJsConsumerPath = join(hostDirectory, 'consumer.cjs');
+  writeFileSync(
+    commonJsConsumerPath,
+    `const assert = require('node:assert/strict');
+const React = require('react');
+const { renderToString } = require('react-dom/server');
+const { CwlEditor } = require('${packageName}');
+const { createDocumentAutosaveQueue } = require('${packageName}/autosave');
+const { dataUriToBytes } = require('${packageName}/converter');
+
+const serverHtml = renderToString(
+  React.createElement(CwlEditor, {
+    mode: 'markdown',
+    defaultValue: '# Packed CommonJS draft',
+    formFieldName: 'message_body',
+    hideToolbar: true,
+  }),
+);
+assert.match(serverHtml, /name="message_body"/u);
+assert.match(serverHtml, /value="# Packed CommonJS draft"/u);
+assert.equal(typeof createDocumentAutosaveQueue, 'function');
+assert.deepEqual(Array.from(dataUriToBytes('data:text/plain;base64,T0s=').bytes), [79, 75]);
+
+process.stdout.write(JSON.stringify({
+  serverRenderedNamedField: true,
+  converterRoundTrip: true,
+  rootEntry: require.resolve('${packageName}'),
+  autosaveEntry: require.resolve('${packageName}/autosave'),
+  converterEntry: require.resolve('${packageName}/converter'),
+}));
+`,
+    'utf8',
+  );
+
+  const commonJsConsumerResult = JSON.parse(
+    run(process.execPath, [commonJsConsumerPath], hostDirectory),
+  );
+
   const installedPackageDirectory = join(
     hostDirectory,
     'node_modules',
@@ -141,12 +194,28 @@ process.stdout.write(JSON.stringify({
     'Installed package escaped the isolated host node_modules tree.',
   );
 
-  const resolvedRootPath = fileURLToPath(consumerResult.rootEntry);
-  assert.equal(
-    isContained(installedPackageDirectory, resolvedRootPath),
-    true,
-    'Consumer root import did not resolve through the packed host installation.',
-  );
+  const executableEntries = [
+    ['ESM root', fileURLToPath(consumerResult.rootEntry)],
+    ['ESM autosave', fileURLToPath(consumerResult.autosaveEntry)],
+    ['ESM converter', fileURLToPath(consumerResult.converterEntry)],
+    ['CommonJS root', commonJsConsumerResult.rootEntry],
+    ['CommonJS autosave', commonJsConsumerResult.autosaveEntry],
+    ['CommonJS converter', commonJsConsumerResult.converterEntry],
+  ];
+  for (const [label, entry] of executableEntries) {
+    assert.equal(
+      isContained(installedPackageDirectory, entry),
+      true,
+      `${label} import escaped the installed packed package.`,
+    );
+    assert.equal(
+      relative(realpathSync(installedPackageDirectory), realpathSync(entry)).startsWith(
+        `dist${sep}`,
+      ),
+      true,
+      `${label} executable import did not resolve through packed dist/.`,
+    );
+  }
 
   const publicAssetEntries = [
     ['stylesheet', consumerResult.styleEntry],
@@ -162,14 +231,15 @@ process.stdout.write(JSON.stringify({
   }
   const publicAssetEntriesContained = true;
 
-  const sourceImportDetected = !relative(
-    realpathSync(installedPackageDirectory),
-    realpathSync(resolvedRootPath),
-  ).startsWith(`dist${sep}`);
+  const sourceImportDetected = executableEntries.some(([, entry]) =>
+    relative(realpathSync(installedPackageDirectory), realpathSync(entry)).startsWith(
+      `src${sep}`,
+    ),
+  );
   assert.equal(
     sourceImportDetected,
     false,
-    'Packed consumer unexpectedly resolved the executable root import outside dist/.',
+    'Packed consumer unexpectedly resolved an executable import through source files.',
   );
 
   process.stdout.write(
@@ -178,8 +248,13 @@ process.stdout.write(JSON.stringify({
       packageVersion,
       installedFromTarball: true,
       consumerInstallCompleted: true,
-      serverRenderedNamedField: consumerResult.serverRenderedNamedField === true,
+      esmServerRenderedNamedField: consumerResult.serverRenderedNamedField === true,
+      commonJsServerRenderedNamedField:
+        commonJsConsumerResult.serverRenderedNamedField === true,
+      esmConverterRoundTrip: consumerResult.converterRoundTrip === true,
+      commonJsConverterRoundTrip: commonJsConsumerResult.converterRoundTrip === true,
       publicAssetEntriesContained,
+      executableEntriesContained: true,
       sourceImportDetected,
     })}\n`,
   );

From fc0add26d3481e2ea3cccb00d2d264d5f5e14954 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 06:18:03 -0700
Subject: [PATCH 096/258] fix(reference-host): preserve packed verifier receipt
 contract

---
 examples/reference-host/verify-packed-artifact.mjs | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index f3dea753..18ecd7f0 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -242,15 +242,21 @@ process.stdout.write(JSON.stringify({
     'Packed consumer unexpectedly resolved an executable import through source files.',
   );
 
+  const esmServerRenderedNamedField = consumerResult.serverRenderedNamedField === true;
+  const commonJsServerRenderedNamedField =
+    commonJsConsumerResult.serverRenderedNamedField === true;
+
   process.stdout.write(
     `${JSON.stringify({
       packageName,
       packageVersion,
       installedFromTarball: true,
       consumerInstallCompleted: true,
-      esmServerRenderedNamedField: consumerResult.serverRenderedNamedField === true,
-      commonJsServerRenderedNamedField:
-        commonJsConsumerResult.serverRenderedNamedField === true,
+      // Preserve the established verifier receipt while extending it with
+      // format-specific evidence below.
+      serverRenderedNamedField: esmServerRenderedNamedField,
+      esmServerRenderedNamedField,
+      commonJsServerRenderedNamedField,
       esmConverterRoundTrip: consumerResult.converterRoundTrip === true,
       commonJsConverterRoundTrip: commonJsConsumerResult.converterRoundTrip === true,
       publicAssetEntriesContained,

From 28016268d650594c26f4ecdf73eb9d883097e1b5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 08:05:54 -0700
Subject: [PATCH 097/258] test(reference-host): expose TypeScript import-guard
 gap

---
 src/referenceHostPackagingBoundary.test.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index acc494e9..b1b531a8 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -25,6 +25,13 @@ describe('reference-host package authority boundary', () => {
       path.endsWith('.mjs'),
     );
 
+    expect(executableFiles).toEqual(
+      expect.arrayContaining([
+        'hydration-gate.tsx',
+        'native-form-host.tsx',
+        'single-flight-submission.ts',
+      ]),
+    );
     expect(executableFiles.length).toBeGreaterThan(0);
     for (const file of executableFiles) {
       const source = readFileSync(resolve(referenceHostDirectory, file), 'utf8');

From 6db306d90147897dde912300d5ab2cc786600d94 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 08:09:25 -0700
Subject: [PATCH 098/258] test(reference-host): guard all executable example
 imports

---
 src/referenceHostPackagingBoundary.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index b1b531a8..26073d12 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -22,7 +22,7 @@ describe('reference-host package authority boundary', () => {
 
   it('rejects source-relative and workspace-alias imports in executable reference files', () => {
     const executableFiles = readdirSync(referenceHostDirectory).filter((path) =>
-      path.endsWith('.mjs'),
+      /\.(?:[cm]?[jt]s|[jt]sx)$/u.test(path),
     );
 
     expect(executableFiles).toEqual(

From c85a746e19f3b6e57b69afe086841495005dcff8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 09:36:29 -0700
Subject: [PATCH 099/258] test(reference-host): expose synchronous submission
 gate

---
 src/referenceHostSingleFlightSubmission.test.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostSingleFlightSubmission.test.ts b/src/referenceHostSingleFlightSubmission.test.ts
index 75a63b8f..0f40d5c9 100644
--- a/src/referenceHostSingleFlightSubmission.test.ts
+++ b/src/referenceHostSingleFlightSubmission.test.ts
@@ -17,18 +17,27 @@ describe('reference-host authorized submission single-flight boundary', () => {
     });
 
     const first = submit('# First');
+
+    // Admission is synchronous even when a React-style state observer has not
+    // committed a render yet. Native submit/reset handlers must be able to
+    // consult this gate directly rather than infer it from presentation state.
+    expect(submit.isInFlight()).toBe(true);
+
     const overlapping = submit('# Overlapping');
 
     expect(onAuthorizedSubmit).toHaveBeenCalledTimes(1);
     expect(onAuthorizedSubmit).toHaveBeenLastCalledWith('# First');
     await expect(overlapping).resolves.toBe(false);
+    expect(submit.isInFlight()).toBe(true);
     expect(states).toEqual(['saving']);
 
     resolveFirst?.();
     await expect(first).resolves.toBe(true);
+    expect(submit.isInFlight()).toBe(false);
     expect(states).toEqual(['saving', 'saved']);
 
     await expect(submit('# Later')).resolves.toBe(true);
+    expect(submit.isInFlight()).toBe(false);
     expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
     expect(onAuthorizedSubmit).toHaveBeenLastCalledWith('# Later');
     expect(states).toEqual(['saving', 'saved', 'saving', 'saved']);
@@ -46,6 +55,7 @@ describe('reference-host authorized submission single-flight boundary', () => {
     });
 
     await expect(submit('# Failing')).resolves.toBe(false);
+    expect(submit.isInFlight()).toBe(false);
     await expect(submit('# Retry')).resolves.toBe(true);
 
     expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
@@ -65,6 +75,7 @@ describe('reference-host authorized submission single-flight boundary', () => {
     });
 
     await expect(submit('# First')).resolves.toBe(true);
+    expect(submit.isInFlight()).toBe(false);
     await expect(submit('# Retry')).resolves.toBe(true);
     expect(onAuthorizedSubmit).toHaveBeenCalledTimes(2);
   });
@@ -83,6 +94,7 @@ describe('reference-host authorized submission single-flight boundary', () => {
     });
 
     await expect(submit('# Persisted')).resolves.toBe(true);
+    expect(submit.isInFlight()).toBe(false);
     expect(onAuthorizedSubmit).toHaveBeenCalledOnce();
     expect(states).toEqual(['saving', 'saved']);
   });

From 77cd38dc760e5c45d3e85ad788bf1c6e6195d865 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 09:36:50 -0700
Subject: [PATCH 100/258] test(reference-host): require synchronous form
 admission gate

---
 src/referenceHostNativeFormJourney.test.ts | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 33f31a6e..9b499377 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -39,13 +39,22 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).not.toContain('localStorage');
   });
 
+  it('binds submit/reset admission to the synchronous durable gate rather than deferred presentation state', () => {
+    expect(
+      nativeFormHostSource.match(
+        /if \(readOnly \|\| submitAuthorized\.isInFlight\(\)\) \{/gu,
+      ),
+    ).toHaveLength(2);
+    expect(nativeFormHostSource).not.toContain(
+      "if (readOnly || submissionState === 'saving') {",
+    );
+  });
+
   it('blocks form reset while durable submission is in flight and marks a later reset unsaved', () => {
     expect(nativeFormHostSource).toContain(
       '<form onSubmit={handleSubmit} onReset={handleReset}>',
     );
-    expect(nativeFormHostSource).toContain(
-      "if (readOnly || submissionState === 'saving') {",
-    );
+    expect(nativeFormHostSource).toContain('submitAuthorized.isInFlight()');
     expect(nativeFormHostSource).toContain('event.preventDefault();');
     expect(nativeFormHostSource).toContain("setSubmissionState('idle');");
     expect(nativeFormHostSource).toMatch(
@@ -59,7 +68,7 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).toContain('editable={!readOnly}');
     expect(nativeFormHostSource).toContain('formFieldDisabled={readOnly}');
     expect(nativeFormHostSource).toContain(
-      "if (readOnly || submissionState === 'saving') {",
+      'if (readOnly || submitAuthorized.isInFlight()) {',
     );
     expect(nativeFormHostSource).toMatch(
       /type="submit"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,

From f8afbb7e82ff962617fd17341899f2f8e7aae092 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 09:37:20 -0700
Subject: [PATCH 101/258] fix(reference-host): expose synchronous submission
 admission

---
 examples/reference-host/single-flight-submission.ts | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/single-flight-submission.ts b/examples/reference-host/single-flight-submission.ts
index 5b29079f..8817c8c3 100644
--- a/examples/reference-host/single-flight-submission.ts
+++ b/examples/reference-host/single-flight-submission.ts
@@ -13,7 +13,9 @@ export type SubmissionStateObserver = (
  * transport or storage authority in Inkspan.
  *
  * Overlapping attempts are rejected while one host callback is in flight.
- * Host failures are reduced to a stable boolean/state signal so private
+ * The returned callable also exposes the synchronous admission gate so event
+ * handlers can reject same-turn mutations without depending on deferred UI
+ * state. Host failures are reduced to a stable boolean/state signal so private
  * durable-store details do not cross the reference component boundary.
  * Presentation-state observer failures are best-effort and cannot block,
  * reclassify, or wedge the host-owned persistence attempt.
@@ -32,7 +34,7 @@ export function createSingleFlightSubmission(
     }
   };
 
-  return async (messageBody: string): Promise<boolean> => {
+  const submit = async (messageBody: string): Promise<boolean> => {
     if (inFlight) {
       return false;
     }
@@ -50,4 +52,8 @@ export function createSingleFlightSubmission(
       inFlight = false;
     }
   };
+
+  return Object.assign(submit, {
+    isInFlight: (): boolean => inFlight,
+  });
 }

From f7bb0ea5d71b47ed1b655d8b08f1ccb6fec3ab3d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 09:37:39 -0700
Subject: [PATCH 102/258] fix(reference-host): bind form mutations to
 synchronous gate

---
 examples/reference-host/native-form-host.tsx | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index c77c2df1..23110e0e 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -31,11 +31,13 @@ export interface NativeFormHostProps {
  * Inkspan owns synchronization of the editor document into the native form
  * control. The host reads FormData at submit time and then applies its own
  * authorization and durable-persistence policy through onAuthorizedSubmit.
- * Overlapping submissions and form resets are blocked while the host callback
- * is in flight. Host read-only state additionally fail-closes native form
- * writes and disables the named field without moving authorization authority
- * into Inkspan. A later successful reset returns the host presentation to an
- * explicitly unsaved state.
+ * Overlapping submissions and form resets are blocked by the synchronous
+ * single-flight admission gate while the host callback is in flight; React
+ * presentation state is not used as the mutation authority. Host read-only
+ * state additionally fail-closes native form writes and disables the named
+ * field without moving authorization authority into Inkspan. A later
+ * successful reset returns the host presentation to an explicitly unsaved
+ * state.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
@@ -62,7 +64,7 @@ export function NativeFormHost({
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
-    if (readOnly || submissionState === 'saving') {
+    if (readOnly || submitAuthorized.isInFlight()) {
       return;
     }
 
@@ -78,7 +80,7 @@ export function NativeFormHost({
   }
 
   function handleReset(event: FormEvent<HTMLFormElement>) {
-    if (readOnly || submissionState === 'saving') {
+    if (readOnly || submitAuthorized.isInFlight()) {
       event.preventDefault();
       return;
     }

From 25fda4af07442d6880cd4e065ae85da59f10c3ba Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 11:04:25 -0700
Subject: [PATCH 103/258] test(reference-host): reject unknown proposal fields

---
 src/referenceHostDelayedProposal.test.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/src/referenceHostDelayedProposal.test.ts b/src/referenceHostDelayedProposal.test.ts
index 26481f59..19aafeec 100644
--- a/src/referenceHostDelayedProposal.test.ts
+++ b/src/referenceHostDelayedProposal.test.ts
@@ -71,4 +71,21 @@ describe('reference-host delayed proposal contract', () => {
       proposalGetterCalls: 0,
     });
   });
+
+  it('fails closed on unknown proposal and application fields before host mutation', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--unknown-field-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      applicationApplyCalls: 0,
+      applicationError: 'proposal application is invalid.',
+      creationError: 'proposal creation is invalid.',
+      proposalApplyCalls: 0,
+      proposalError: 'proposal application is invalid.',
+    });
+  });
 });

From 199b80fc75b0ee6ae49605eaf0184a320328c323 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 11:06:54 -0700
Subject: [PATCH 104/258] fix(reference-host): fail closed on unknown proposal
 fields

---
 examples/reference-host/delayed-proposal.mjs | 89 +++++++++++++++++++-
 1 file changed, 85 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index f1413395..3afdc1b9 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -43,6 +43,19 @@ function readPlainDataRecord(source, keys, message) {
       }
       values[key] = descriptor.value;
     }
+
+    const ownKeys = Reflect.ownKeys(source);
+    if (
+      ownKeys.length !== keys.length ||
+      ownKeys.some(
+        (key) =>
+          typeof key !== 'string' ||
+          !keys.some((candidate) => candidate === key),
+      )
+    ) {
+      throw new TypeError(message);
+    }
+
     return values;
   } catch {
     throw new TypeError(message);
@@ -55,7 +68,7 @@ function readPlainDataRecord(source, keys, message) {
  * This fixture deliberately contains no provider SDK, credential, prompt log, or remote call.
  * Real hosts replace proposal generation with an approved model boundary while preserving the
  * expectedRevision conflict gate before applying untrusted proposal data. Candidate fields are
- * snapshotted from own data properties without invoking caller-owned accessors.
+ * snapshotted from an exact own-data-property shape without invoking caller-owned accessors.
  */
 export async function createDelayedProposal(source) {
   const input = readPlainDataRecord(
@@ -79,9 +92,10 @@ export async function createDelayedProposal(source) {
 
 /**
  * Apply one untrusted proposal only when the host's current revision still matches its capture.
- * Top-level application metadata and model proposal fields must be own data properties so
- * validation never executes accessor-backed untrusted proposal data. Host apply failures are
- * normalized at this reference boundary so private callback causes are not reflected outward.
+ * Top-level application metadata and model proposal fields must have an exact own-data-property
+ * shape so validation never executes accessor-backed untrusted proposal data or silently admits
+ * unknown authority-looking metadata. Host apply failures are normalized at this reference
+ * boundary so private callback causes are not reflected outward.
  */
 export function applyDelayedProposal(source) {
   const application = readPlainDataRecord(
@@ -270,10 +284,77 @@ async function runHostileAccessorSelfTest() {
   );
 }
 
+async function runUnknownFieldSelfTest() {
+  let creationError = null;
+  try {
+    await createDelayedProposal({
+      expectedRevision: 'revision-v1',
+      replacement: 'Untrusted proposal',
+      authorization: 'owner',
+    });
+  } catch (error) {
+    creationError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  const validProposal = await createDelayedProposal({
+    expectedRevision: 'revision-v1',
+    replacement: 'Valid proposal',
+  });
+  let applicationApplyCalls = 0;
+  let applicationError = null;
+  const applicationWithHiddenField = {
+    proposal: validProposal,
+    currentRevision: 'revision-v1',
+    apply() {
+      applicationApplyCalls += 1;
+    },
+  };
+  Object.defineProperty(applicationWithHiddenField, 'authorization', {
+    value: 'owner',
+    enumerable: false,
+  });
+  try {
+    applyDelayedProposal(applicationWithHiddenField);
+  } catch (error) {
+    applicationError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  let proposalApplyCalls = 0;
+  let proposalError = null;
+  const authorityKey = Symbol('authorization');
+  try {
+    applyDelayedProposal({
+      proposal: {
+        expectedRevision: 'revision-v1',
+        replacement: 'Untrusted proposal',
+        [authorityKey]: 'owner',
+      },
+      currentRevision: 'revision-v1',
+      apply() {
+        proposalApplyCalls += 1;
+      },
+    });
+  } catch (error) {
+    proposalError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      applicationApplyCalls,
+      applicationError,
+      creationError,
+      proposalApplyCalls,
+      proposalError,
+    })}\n`,
+  );
+}
+
 if (process.argv.includes('--empty-proposal-self-test')) {
   await runEmptyProposalSelfTest();
 } else if (process.argv.includes('--hostile-accessor-self-test')) {
   await runHostileAccessorSelfTest();
+} else if (process.argv.includes('--unknown-field-self-test')) {
+  await runUnknownFieldSelfTest();
 } else if (process.argv.includes('--self-test')) {
   await runSelfTest();
 }

From 47289f3d68117b054be3dda0767fe78504e6de04 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 11:10:57 -0700
Subject: [PATCH 105/258] test(reference-host): reject unknown persistence
 fields

---
 src/referenceHostSyntheticRepository.test.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 894b4b32..294ba98e 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -82,6 +82,23 @@ describe('reference-host synthetic durable repository contract', () => {
     });
   });
 
+  it('fails closed on unknown option, save, and fork fields before durable state changes', () => {
+    if (!existsSync(fixturePath)) return;
+    const output = execFileSync(
+      process.execPath,
+      [fixturePath, '--unknown-field-self-test'],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      forkErrorCode: 'invalid_fork_request',
+      optionErrorCode: 'invalid_options',
+      saveErrorCode: 'invalid_request',
+      savedDocument: 'Buyer draft v1',
+      savedValidator: '"v1"',
+    });
+  });
+
   it('keeps the buyer guide code-current for retry, ambiguity reconciliation, restore, and independent fork semantics', () => {
     const guide = readFileSync(guidePath, 'utf8');
 

From 2d1a5914dce6e62ebf9bc16636d62e6fe30054c2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 11:12:00 -0700
Subject: [PATCH 106/258] fix(reference-host): fail closed on unknown
 persistence fields

---
 .../synthetic-document-repository.mjs         | 79 ++++++++++++++++++-
 1 file changed, 77 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 82563393..a7b5ac73 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -61,6 +61,16 @@ function readPlainDataRecord(source, requiredKeys, optionalKeys, code) {
       }
       values[key] = descriptor.value;
     }
+
+    const allowedKeys = [...requiredKeys, ...optionalKeys];
+    if (
+      Reflect.ownKeys(source).some(
+        (key) => typeof key !== 'string' || !allowedKeys.includes(key),
+      )
+    ) {
+      throw new ReferencePersistenceError(code);
+    }
+
     return values;
   } catch {
     throw new ReferencePersistenceError(code);
@@ -94,8 +104,9 @@ function frozenConflict(currentValidator) {
  * advancing or blindly reusing their last known validator. A confirmed fork
  * requires the current strong validator and starts an independent repository at a
  * fresh validator so source and fork cannot silently share revision authority.
- * Configuration, save, and fork request fields are snapshotted from own data
- * properties without invoking caller-owned accessors.
+ * Configuration, save, and fork request fields are snapshotted from exact own
+ * data-property shapes without invoking caller-owned accessors or admitting
+ * unknown authority-looking metadata.
  */
 export function createSyntheticDocumentRepository(options) {
   const configuration = readPlainDataRecord(
@@ -461,10 +472,74 @@ function runHostileAccessorSelfTest() {
   );
 }
 
+function runUnknownFieldSelfTest() {
+  let optionErrorCode = null;
+  try {
+    createSyntheticDocumentRepository({
+      documentId: 'buyer-document',
+      initialDocument: 'Buyer draft v1',
+      authorization: 'owner',
+    });
+  } catch (error) {
+    optionErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  const repository = createSyntheticDocumentRepository({
+    documentId: 'buyer-document',
+    initialDocument: 'Buyer draft v1',
+  });
+  const initial = repository.read('buyer-document');
+
+  let saveErrorCode = null;
+  const saveWithHiddenField = {
+    documentId: 'buyer-document',
+    document: 'Unauthorized write',
+    ifMatch: initial.validator,
+  };
+  Object.defineProperty(saveWithHiddenField, 'authorization', {
+    value: 'owner',
+    enumerable: false,
+  });
+  try {
+    repository.save(saveWithHiddenField);
+  } catch (error) {
+    saveErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  let forkErrorCode = null;
+  const authorityKey = Symbol('authorization');
+  try {
+    repository.fork({
+      documentId: 'buyer-document',
+      forkDocumentId: 'buyer-document-fork',
+      ifMatch: initial.validator,
+      [authorityKey]: 'owner',
+    });
+  } catch (error) {
+    forkErrorCode =
+      error instanceof ReferencePersistenceError ? error.code : 'unexpected_error';
+  }
+
+  const afterRejectedSave = repository.read('buyer-document');
+  process.stdout.write(
+    `${JSON.stringify({
+      forkErrorCode,
+      optionErrorCode,
+      saveErrorCode,
+      savedDocument: afterRejectedSave.document,
+      savedValidator: afterRejectedSave.validator,
+    })}\n`,
+  );
+}
+
 if (process.argv.includes('--empty-document-self-test')) {
   runEmptyDocumentSelfTest();
 } else if (process.argv.includes('--hostile-accessor-self-test')) {
   runHostileAccessorSelfTest();
+} else if (process.argv.includes('--unknown-field-self-test')) {
+  runUnknownFieldSelfTest();
 } else if (process.argv.includes('--self-test')) {
   runSelfTest();
 }

From 25ec179872608db71c2d0f02583fe8e12a54e462 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:05:10 -0700
Subject: [PATCH 107/258] test(reference-host): reject unknown collaboration
 option fields

---
 ...erenceHostCollaborationOptionShape.test.ts | 78 +++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 src/referenceHostCollaborationOptionShape.test.ts

diff --git a/src/referenceHostCollaborationOptionShape.test.ts b/src/referenceHostCollaborationOptionShape.test.ts
new file mode 100644
index 00000000..245e6a95
--- /dev/null
+++ b/src/referenceHostCollaborationOptionShape.test.ts
@@ -0,0 +1,78 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host collaboration option shape', () => {
+  it('rejects unknown authority-looking option fields before invoking host factories', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+
+      function run(kind) {
+        let documentFactoryCalls = 0;
+        let providerFactoryCalls = 0;
+        const options = {
+          documentFactory() {
+            documentFactoryCalls += 1;
+            return { destroy() {} };
+          },
+          providerFactory() {
+            providerFactoryCalls += 1;
+            return { connect() {}, disconnect() {}, destroy() {} };
+          },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        };
+
+        if (kind === 'enumerable') {
+          options.authorization = 'owner';
+        } else if (kind === 'hidden') {
+          Object.defineProperty(options, 'authorization', {
+            value: 'owner',
+            enumerable: false,
+          });
+        } else {
+          options[Symbol('authorization')] = 'owner';
+        }
+
+        let error = null;
+        try {
+          const lifecycle = createHostCollaborationLifecycle(options);
+          lifecycle.dispose();
+        } catch (failure) {
+          error = failure instanceof Error ? failure.message : 'unexpected error';
+        }
+        return { documentFactoryCalls, error, providerFactoryCalls };
+      }
+
+      process.stdout.write(JSON.stringify({
+        enumerable: run('enumerable'),
+        hidden: run('hidden'),
+        symbol: run('symbol'),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    const rejected = {
+      documentFactoryCalls: 0,
+      error: 'collaboration options are invalid.',
+      providerFactoryCalls: 0,
+    };
+    expect(JSON.parse(output)).toEqual({
+      enumerable: rejected,
+      hidden: rejected,
+      symbol: rejected,
+    });
+  });
+});

From 5c8aca00fef2ea3dda84a505d5af0bd1ff44a027 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:06:31 -0700
Subject: [PATCH 108/258] fix(reference-host): reject unknown collaboration
 option fields

---
 .../collaboration-provider-lifecycle.mjs              | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index ceaf617d..6933f09e 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -53,6 +53,17 @@ function readOwnDataRecord(source, keys, message) {
       }
       values[key] = descriptor.value;
     }
+    const ownKeys = Reflect.ownKeys(source);
+    if (
+      ownKeys.length !== keys.length ||
+      ownKeys.some(
+        (key) =>
+          typeof key !== 'string' ||
+          !keys.some((candidate) => candidate === key),
+      )
+    ) {
+      throw new TypeError(message);
+    }
     return values;
   } catch {
     throw new TypeError(message);

From df64f9244052808b56e8f9c44ba9682345e340ee Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:06:59 -0700
Subject: [PATCH 109/258] test(reference-host): reject unknown autosave
 snapshot fields

---
 ...referenceHostAutosaveSnapshotShape.test.ts | 97 +++++++++++++++++++
 1 file changed, 97 insertions(+)
 create mode 100644 src/referenceHostAutosaveSnapshotShape.test.ts

diff --git a/src/referenceHostAutosaveSnapshotShape.test.ts b/src/referenceHostAutosaveSnapshotShape.test.ts
new file mode 100644
index 00000000..f9284334
--- /dev/null
+++ b/src/referenceHostAutosaveSnapshotShape.test.ts
@@ -0,0 +1,97 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/autosave-view-model.mjs',
+);
+
+const baseSnapshotSource = `
+  const validSnapshot = (state = 'idle', blockedReason = null) => ({
+    state,
+    blockedReason,
+    activeStrongEntityTag: null,
+    pendingStrongEntityTag: null,
+    lastSavedStrongEntityTag: null,
+  });
+`;
+
+describe('reference-host autosave snapshot shape', () => {
+  it('rejects unknown authority-looking fields across enumerable, hidden, and symbol keys', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createAutosaveViewModel } from ${moduleUrl};
+      ${baseSnapshotSource}
+
+      function observeError(kind) {
+        const candidate = validSnapshot();
+        if (kind === 'enumerable') {
+          candidate.authorization = 'owner';
+        } else if (kind === 'hidden') {
+          Object.defineProperty(candidate, 'authorization', {
+            value: 'owner',
+            enumerable: false,
+          });
+        } else {
+          candidate[Symbol('authorization')] = 'owner';
+        }
+        try {
+          createAutosaveViewModel().observe(candidate);
+          return null;
+        } catch (error) {
+          return error instanceof Error ? error.message : 'unexpected error';
+        }
+      }
+
+      process.stdout.write(JSON.stringify({
+        enumerable: observeError('enumerable'),
+        hidden: observeError('hidden'),
+        symbol: observeError('symbol'),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      enumerable: 'autosave snapshot is invalid.',
+      hidden: 'autosave snapshot is invalid.',
+      symbol: 'autosave snapshot is invalid.',
+    });
+  });
+
+  it('does not mutate retry presentation state when a malformed blocked snapshot is rejected', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createAutosaveViewModel } from ${moduleUrl};
+      ${baseSnapshotSource}
+
+      const viewModel = createAutosaveViewModel();
+      const malformed = validSnapshot('blocked', 'conflict');
+      malformed.authorization = 'owner';
+      let malformedError = null;
+      try {
+        viewModel.observe(malformed);
+      } catch (error) {
+        malformedError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      const afterRejected = viewModel.observe(validSnapshot('saving')).viewState;
+      process.stdout.write(JSON.stringify({ afterRejected, malformedError }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterRejected: 'saving',
+      malformedError: 'autosave snapshot is invalid.',
+    });
+  });
+});

From ba723f6f53c6e37e7cb10cb21c0d337322edaab0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:07:33 -0700
Subject: [PATCH 110/258] fix(reference-host): require exact autosave snapshot
 shape

---
 examples/reference-host/autosave-view-model.mjs | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index 65393a2f..ff4b4ab2 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -40,6 +40,15 @@ function snapshotData(source) {
       }
       values[key] = descriptor.value;
     }
+    const ownKeys = Reflect.ownKeys(source);
+    if (
+      ownKeys.length !== SNAPSHOT_KEYS.length ||
+      ownKeys.some(
+        (key) => typeof key !== 'string' || !SNAPSHOT_KEYS.includes(key),
+      )
+    ) {
+      throw new TypeError('autosave snapshot is invalid.');
+    }
     return values;
   } catch {
     throw new TypeError('autosave snapshot is invalid.');
@@ -98,7 +107,8 @@ function presentation(viewState) {
  * Create one host-owned projection of Inkspan autosave lifecycle transitions.
  *
  * `observe()` consumes only programmatic queue/session snapshots. Snapshot fields
- * must be own data properties so presentation never invokes caller-owned accessors.
+ * must be an exact own-data-property shape so presentation never invokes
+ * caller-owned accessors or silently admits authority-looking metadata.
  * A blocked to saving transition is presented as retrying, and only a later idle
  * transition after that observed retry is presented as recovered. A blocked to
  * idle transition without an intervening save returns to clean instead of

From 88feb70031b3f2a37f20ca6c426bc9d8eb64af6e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:34:43 -0700
Subject: [PATCH 111/258] test(reference-host): expose incomplete collaboration
 teardown

---
 ...eferenceHostCollaborationLifecycle.test.ts | 71 +++++++++++++++++++
 1 file changed, 71 insertions(+)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index 92c52088..b81562dd 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -244,4 +244,75 @@ describe('reference-host collaboration lifecycle contract', () => {
       status: 'disposed',
     });
   });
+
+  it('retries incomplete provider destruction without destroying the host document twice', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let providerDestroyAttempts = 0;
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          return {
+            connect() { events.push('provider:connect'); },
+            disconnect() { events.push('provider:disconnect'); },
+            destroy() {
+              providerDestroyAttempts += 1;
+              events.push('provider:destroy:' + providerDestroyAttempts);
+              if (providerDestroyAttempts === 1) {
+                throw new Error('private transient provider destroy failure');
+              }
+            },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+      lifecycle.connect();
+      let firstError = null;
+      try {
+        lifecycle.dispose();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      const afterFailure = lifecycle.getSnapshot();
+      const retryResult = lifecycle.dispose();
+      const afterRetry = lifecycle.getSnapshot();
+      const idempotentResult = lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        afterRetry,
+        events,
+        firstError,
+        idempotentResult,
+        retryResult,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      afterRetry: { providerGeneration: 1, status: 'disposed' },
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy:1',
+        'document:destroy',
+        'provider:destroy:2',
+      ],
+      firstError: 'collaboration lifecycle teardown failed.',
+      idempotentResult: false,
+      retryResult: true,
+    });
+  });
 });

From 2b56d0d5424849f492ea01d743792af899ee1d8b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:35:38 -0700
Subject: [PATCH 112/258] fix(reference-host): retry incomplete collaboration
 teardown

---
 .../collaboration-provider-lifecycle.mjs      | 20 ++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 6933f09e..e88bfe6d 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -145,7 +145,9 @@ function teardownFailure() {
  * provider callback failures are payload-redacted, acquired documents unwind on
  * initial provider failure, reconnect provider-construction failures remain
  * retryable, connect failures preserve the disconnected provider for an explicit
- * retry, and cleanup failures do not prevent remaining teardown attempts.
+ * retry, and cleanup failures do not prevent remaining teardown attempts. A
+ * failed provider or document destruction keeps only the incomplete cleanup live
+ * so a later dispose() retries it without repeating already-successful teardown.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -169,6 +171,7 @@ export function createHostCollaborationLifecycle(source) {
   let providerGeneration = 0;
   let providerResource = null;
   let connected = false;
+  let documentDestroyed = false;
   let disposed = false;
 
   function makeProvider(privateFailure) {
@@ -247,13 +250,16 @@ export function createHostCollaborationLifecycle(source) {
     } catch {
       failed = true;
     }
-    try {
-      documentResource.destroy.call(document);
-    } catch {
-      failed = true;
+    if (!documentDestroyed) {
+      try {
+        documentResource.destroy.call(document);
+        documentDestroyed = true;
+      } catch {
+        failed = true;
+      }
     }
-    disposed = true;
-    if (failed) throw teardownFailure();
+    disposed = providerResource === null && documentDestroyed;
+    if (failed || !disposed) throw teardownFailure();
     return true;
   }
 

From 27d2e21d29a08882ff6e521e614fc8a82830bf87 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:47:19 -0700
Subject: [PATCH 113/258] test(reference-host): lock partial teardown to
 cleanup

---
 ...eferenceHostCollaborationLifecycle.test.ts | 80 +++++++++++++++++++
 1 file changed, 80 insertions(+)

diff --git a/src/referenceHostCollaborationLifecycle.test.ts b/src/referenceHostCollaborationLifecycle.test.ts
index b81562dd..83071c8c 100644
--- a/src/referenceHostCollaborationLifecycle.test.ts
+++ b/src/referenceHostCollaborationLifecycle.test.ts
@@ -315,4 +315,84 @@ describe('reference-host collaboration lifecycle contract', () => {
       retryResult: true,
     });
   });
+
+  it('allows only cleanup retries after disposal has started', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          return {
+            connect() { events.push('provider:connect'); },
+            disconnect() { events.push('provider:disconnect'); },
+            destroy() {
+              events.push('provider:destroy');
+              throw new Error('private persistent provider destroy failure');
+            },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+      lifecycle.connect();
+      let disposeError = null;
+      try {
+        lifecycle.dispose();
+      } catch (error) {
+        disposeError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      const eventsAfterDispose = [...events];
+      let connectError = null;
+      try {
+        lifecycle.connect();
+      } catch (error) {
+        connectError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      let reconnectError = null;
+      try {
+        lifecycle.reconnect();
+      } catch (error) {
+        reconnectError = error instanceof Error ? error.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        connectError,
+        disposeError,
+        events,
+        eventsAfterDispose,
+        reconnectError,
+        snapshot: lifecycle.getSnapshot(),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      connectError: 'collaboration lifecycle teardown failed.',
+      disposeError: 'collaboration lifecycle teardown failed.',
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy',
+      ],
+      eventsAfterDispose: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy',
+      ],
+      reconnectError: 'collaboration lifecycle teardown failed.',
+      snapshot: { providerGeneration: 1, status: 'disconnected' },
+    });
+  });
 });

From a03f8f921a73e1e38dbe3daee22c4e94ecaaedfa Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 12:52:00 -0700
Subject: [PATCH 114/258] fix(reference-host): lock partial collaboration
 teardown

---
 .../reference-host/collaboration-provider-lifecycle.mjs     | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index e88bfe6d..ed1837fc 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -148,6 +148,7 @@ function teardownFailure() {
  * retry, and cleanup failures do not prevent remaining teardown attempts. A
  * failed provider or document destruction keeps only the incomplete cleanup live
  * so a later dispose() retries it without repeating already-successful teardown.
+ * Once disposal starts, connect/reconnect stay closed while cleanup is pending.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -172,6 +173,7 @@ export function createHostCollaborationLifecycle(source) {
   let providerResource = null;
   let connected = false;
   let documentDestroyed = false;
+  let disposeStarted = false;
   let disposed = false;
 
   function makeProvider(privateFailure) {
@@ -195,6 +197,9 @@ export function createHostCollaborationLifecycle(source) {
     if (disposed) {
       throw new Error('collaboration lifecycle is disposed.');
     }
+    if (disposeStarted) {
+      throw teardownFailure();
+    }
   }
 
   function connect() {
@@ -244,6 +249,7 @@ export function createHostCollaborationLifecycle(source) {
 
   function dispose() {
     if (disposed) return false;
+    disposeStarted = true;
     let failed = false;
     try {
       teardownProvider();

From aa174c01a6dafda2827969ed28b8104673af513a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:05:54 -0700
Subject: [PATCH 115/258] test(reference-host): reject fork validator aliasing

---
 src/referenceHostSyntheticRepository.test.ts | 36 ++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 294ba98e..50a3d162 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -1,6 +1,7 @@
 import { execFileSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
 
 import { describe, expect, it } from 'vitest';
 
@@ -48,6 +49,41 @@ describe('reference-host synthetic durable repository contract', () => {
     });
   });
 
+  it('gives an immediate fork validator authority distinct from its unchanged source', () => {
+    if (!existsSync(fixturePath)) return;
+    const fixtureUrl = pathToFileURL(fixturePath).href;
+    const output = execFileSync(
+      process.execPath,
+      [
+        '--input-type=module',
+        '--eval',
+        `import { createSyntheticDocumentRepository } from ${JSON.stringify(fixtureUrl)};
+const source = createSyntheticDocumentRepository({
+  documentId: 'buyer-document',
+  initialDocument: 'Buyer draft v1',
+});
+const sourceInitial = source.read('buyer-document');
+const forked = source.fork({
+  documentId: 'buyer-document',
+  forkDocumentId: 'buyer-document-fork',
+  ifMatch: sourceInitial.validator,
+});
+const forkInitial = forked.repository.read('buyer-document-fork');
+process.stdout.write(JSON.stringify({
+  forkValidator: forkInitial.validator,
+  sourceValidator: sourceInitial.validator,
+}));`,
+      ],
+      { encoding: 'utf8' },
+    );
+    const evidence = JSON.parse(output) as {
+      forkValidator: string;
+      sourceValidator: string;
+    };
+
+    expect(evidence.forkValidator).not.toBe(evidence.sourceValidator);
+  });
+
   it('accepts an empty document body while keeping document identifiers non-empty', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 7f564f51d50cc9728c79517bf3181ca352d910e3 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:09:00 -0700
Subject: [PATCH 116/258] fix(reference-host): namespace fork validators

---
 .../synthetic-document-repository.mjs         | 74 +++++++++++--------
 1 file changed, 44 insertions(+), 30 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index a7b5ac73..7fe1f40a 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -77,8 +77,9 @@ function readPlainDataRecord(source, requiredKeys, optionalKeys, code) {
   }
 }
 
-function validatorForVersion(version) {
-  return `"v${version}"`;
+function validatorForVersion(version, validatorNamespace) {
+  const prefix = validatorNamespace === '' ? '' : `${validatorNamespace}-`;
+  return `"${prefix}v${version}"`;
 }
 
 function frozenRead(document, validator) {
@@ -93,28 +94,7 @@ function frozenConflict(currentValidator) {
   return Object.freeze({ status: 'conflict', currentValidator });
 }
 
-/**
- * Create an in-memory host-owned reference repository with exact If-Match semantics.
- *
- * This adapter is synthetic acquisition/support evidence only. Buyers must replace
- * it with an authorized atomic durable store. Confirmed failures and the
- * `ambiguous_failure` pre-commit fixture leave durable state unchanged. The
- * `ambiguous_commit_failure` fixture deliberately commits before returning the
- * same ambiguous error so consumers must re-read durable state instead of
- * advancing or blindly reusing their last known validator. A confirmed fork
- * requires the current strong validator and starts an independent repository at a
- * fresh validator so source and fork cannot silently share revision authority.
- * Configuration, save, and fork request fields are snapshotted from exact own
- * data-property shapes without invoking caller-owned accessors or admitting
- * unknown authority-looking metadata.
- */
-export function createSyntheticDocumentRepository(options) {
-  const configuration = readPlainDataRecord(
-    options,
-    ['documentId', 'initialDocument'],
-    [],
-    'invalid_options',
-  );
+function createRepository(configuration, validatorNamespace) {
   const documentId = requireBoundedString(
     configuration.documentId,
     MAX_DOCUMENT_ID_CODE_UNITS,
@@ -125,7 +105,8 @@ export function createSyntheticDocumentRepository(options) {
     'invalid_document',
   );
   let version = 1;
-  let validator = validatorForVersion(version);
+  let validator = validatorForVersion(version, validatorNamespace);
+  let forkSequence = 0;
 
   function assertDocumentId(candidate) {
     if (candidate !== documentId) {
@@ -178,7 +159,7 @@ export function createSyntheticDocumentRepository(options) {
 
     document = nextDocument;
     version += 1;
-    validator = validatorForVersion(version);
+    validator = validatorForVersion(version, validatorNamespace);
     if (outcome === 'ambiguous_commit_failure') {
       throw new ReferencePersistenceError('ambiguous_failure');
     }
@@ -211,18 +192,51 @@ export function createSyntheticDocumentRepository(options) {
       throw new ReferencePersistenceError('invalid_fork_document_id');
     }
 
+    forkSequence += 1;
+    const childNamespace =
+      validatorNamespace === ''
+        ? `f${forkSequence}`
+        : `${validatorNamespace}.f${forkSequence}`;
     return Object.freeze({
       status: 'forked',
-      repository: createSyntheticDocumentRepository({
-        documentId: forkDocumentId,
-        initialDocument: document,
-      }),
+      repository: createRepository(
+        {
+          documentId: forkDocumentId,
+          initialDocument: document,
+        },
+        childNamespace,
+      ),
     });
   }
 
   return Object.freeze({ fork, read, save });
 }
 
+/**
+ * Create an in-memory host-owned reference repository with exact If-Match semantics.
+ *
+ * This adapter is synthetic acquisition/support evidence only. Buyers must replace
+ * it with an authorized atomic durable store. Confirmed failures and the
+ * `ambiguous_failure` pre-commit fixture leave durable state unchanged. The
+ * `ambiguous_commit_failure` fixture deliberately commits before returning the
+ * same ambiguous error so consumers must re-read durable state instead of
+ * advancing or blindly reusing their last known validator. A confirmed fork
+ * requires the current strong validator and starts an independent repository at a
+ * fresh validator so source and fork cannot silently share revision authority.
+ * Configuration, save, and fork request fields are snapshotted from exact own
+ * data-property shapes without invoking caller-owned accessors or admitting
+ * unknown authority-looking metadata.
+ */
+export function createSyntheticDocumentRepository(options) {
+  const configuration = readPlainDataRecord(
+    options,
+    ['documentId', 'initialDocument'],
+    [],
+    'invalid_options',
+  );
+  return createRepository(configuration, '');
+}
+
 function runSelfTest() {
   const repository = createSyntheticDocumentRepository({
     documentId: 'buyer-document',

From dc6ea30dd68fb316fdb6ec488f10c098c29db5a0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:09:24 -0700
Subject: [PATCH 117/258] test(reference-host): lock fork validator namespace

---
 src/referenceHostSyntheticRepository.test.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 50a3d162..6486354d 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -38,8 +38,8 @@ describe('reference-host synthetic durable repository contract', () => {
       conflictCurrentValidator: '"v2"',
       forkDocument: 'Buyer draft v1',
       forkFinalDocument: 'Fork-only edit',
-      forkInitialValidator: '"v1"',
-      forkSavedValidator: '"v2"',
+      forkInitialValidator: '"f1-v1"',
+      forkSavedValidator: '"f1-v2"',
       initialValidator: '"v1"',
       restoredValidator: '"v4"',
       retrySavedValidator: '"v3"',

From d235b8c0c08883841ba683dff2fd7e764cf910d0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:10:51 -0700
Subject: [PATCH 118/258] test(reference-host): bound nested fork validators

---
 src/referenceHostSyntheticRepository.test.ts | 50 ++++++++++++++++++++
 1 file changed, 50 insertions(+)

diff --git a/src/referenceHostSyntheticRepository.test.ts b/src/referenceHostSyntheticRepository.test.ts
index 6486354d..60b642f0 100644
--- a/src/referenceHostSyntheticRepository.test.ts
+++ b/src/referenceHostSyntheticRepository.test.ts
@@ -84,6 +84,56 @@ process.stdout.write(JSON.stringify({
     expect(evidence.forkValidator).not.toBe(evidence.sourceValidator);
   });
 
+  it('keeps deeply nested fork-issued validators acceptable to their own save boundary', () => {
+    if (!existsSync(fixturePath)) return;
+    const fixtureUrl = pathToFileURL(fixturePath).href;
+    const output = execFileSync(
+      process.execPath,
+      [
+        '--input-type=module',
+        '--eval',
+        `import { createSyntheticDocumentRepository } from ${JSON.stringify(fixtureUrl)};
+let repository = createSyntheticDocumentRepository({
+  documentId: 'buyer-document-0',
+  initialDocument: 'Buyer draft v1',
+});
+let documentId = 'buyer-document-0';
+for (let depth = 1; depth <= 100; depth += 1) {
+  const current = repository.read(documentId);
+  const forkDocumentId = \`buyer-document-\${depth}\`;
+  const forked = repository.fork({
+    documentId,
+    forkDocumentId,
+    ifMatch: current.validator,
+  });
+  repository = forked.repository;
+  documentId = forkDocumentId;
+}
+const leaf = repository.read(documentId);
+const saved = repository.save({
+  documentId,
+  document: 'Deep fork edit',
+  ifMatch: leaf.validator,
+});
+process.stdout.write(JSON.stringify({
+  initialValidatorLength: leaf.validator.length,
+  savedStatus: saved.status,
+  savedValidatorLength: saved.validator.length,
+}));`,
+      ],
+      { encoding: 'utf8' },
+    );
+    const evidence = JSON.parse(output) as {
+      initialValidatorLength: number;
+      savedStatus: string;
+      savedValidatorLength: number;
+    };
+
+    expect(evidence.savedStatus).toBe('saved');
+    expect(evidence.initialValidatorLength).toBeLessThanOrEqual(256);
+    expect(evidence.savedValidatorLength).toBeLessThanOrEqual(256);
+  });
+
   it('accepts an empty document body while keeping document identifiers non-empty', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 1e3dabbe911a4b5cebbf07d13bddb66dda9de1b9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:11:32 -0700
Subject: [PATCH 119/258] fix(reference-host): bound fork validator namespaces

---
 .../synthetic-document-repository.mjs            | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/synthetic-document-repository.mjs b/examples/reference-host/synthetic-document-repository.mjs
index 7fe1f40a..e8734b99 100644
--- a/examples/reference-host/synthetic-document-repository.mjs
+++ b/examples/reference-host/synthetic-document-repository.mjs
@@ -94,7 +94,7 @@ function frozenConflict(currentValidator) {
   return Object.freeze({ status: 'conflict', currentValidator });
 }
 
-function createRepository(configuration, validatorNamespace) {
+function createRepository(configuration, validatorNamespace, forkAuthority) {
   const documentId = requireBoundedString(
     configuration.documentId,
     MAX_DOCUMENT_ID_CODE_UNITS,
@@ -106,7 +106,6 @@ function createRepository(configuration, validatorNamespace) {
   );
   let version = 1;
   let validator = validatorForVersion(version, validatorNamespace);
-  let forkSequence = 0;
 
   function assertDocumentId(candidate) {
     if (candidate !== documentId) {
@@ -191,12 +190,12 @@ function createRepository(configuration, validatorNamespace) {
     if (forkDocumentId === documentId) {
       throw new ReferencePersistenceError('invalid_fork_document_id');
     }
+    if (!Number.isSafeInteger(forkAuthority.nextNamespace)) {
+      throw new ReferencePersistenceError('fork_namespace_exhausted');
+    }
 
-    forkSequence += 1;
-    const childNamespace =
-      validatorNamespace === ''
-        ? `f${forkSequence}`
-        : `${validatorNamespace}.f${forkSequence}`;
+    const childNamespace = `f${forkAuthority.nextNamespace}`;
+    forkAuthority.nextNamespace += 1;
     return Object.freeze({
       status: 'forked',
       repository: createRepository(
@@ -205,6 +204,7 @@ function createRepository(configuration, validatorNamespace) {
           initialDocument: document,
         },
         childNamespace,
+        forkAuthority,
       ),
     });
   }
@@ -234,7 +234,7 @@ export function createSyntheticDocumentRepository(options) {
     [],
     'invalid_options',
   );
-  return createRepository(configuration, '');
+  return createRepository(configuration, '', { nextNamespace: 1 });
 }
 
 function runSelfTest() {

From 5c96976a41bfe8dbf9bf2d09534b8f7047b57a41 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:14:44 -0700
Subject: [PATCH 120/258] test(reference-host): require packed markdown handoff

---
 src/referenceHostPackedArtifact.test.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/referenceHostPackedArtifact.test.ts b/src/referenceHostPackedArtifact.test.ts
index f9ac4a57..a8f5de6a 100644
--- a/src/referenceHostPackedArtifact.test.ts
+++ b/src/referenceHostPackedArtifact.test.ts
@@ -30,6 +30,8 @@ describe('reference-host packed artifact acceptance', () => {
         installedFromTarball?: unknown;
         consumerInstallCompleted?: unknown;
         serverRenderedNamedField?: unknown;
+        esmMarkdownProjection?: unknown;
+        commonJsMarkdownProjection?: unknown;
         publicAssetEntriesContained?: unknown;
         sourceImportDetected?: unknown;
       };
@@ -39,6 +41,8 @@ describe('reference-host packed artifact acceptance', () => {
       expect(result.installedFromTarball).toBe(true);
       expect(result.consumerInstallCompleted).toBe(true);
       expect(result.serverRenderedNamedField).toBe(true);
+      expect(result.esmMarkdownProjection).toBe(true);
+      expect(result.commonJsMarkdownProjection).toBe(true);
       expect(result.publicAssetEntriesContained).toBe(true);
       expect(result.sourceImportDetected).toBe(false);
     },

From 48e27fefc0cb87783cb6ba38ff717d197cd8805f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:15:16 -0700
Subject: [PATCH 121/258] feat(reference-host): verify packed markdown handoff

---
 .../reference-host/verify-packed-artifact.mjs | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index 18ecd7f0..26539e3f 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -92,6 +92,7 @@ import { renderToString } from 'react-dom/server';
 import { CwlEditor } from '${packageName}';
 import { createDocumentAutosaveQueue } from '${packageName}/autosave';
 import { dataUriToBytes } from '${packageName}/converter';
+import { markdownToHtml, markdownToPlainText } from '${packageName}/markdown';
 
 const serverHtml = renderToString(
   React.createElement(CwlEditor, {
@@ -105,10 +106,16 @@ assert.match(serverHtml, /name="message_body"/u);
 assert.match(serverHtml, /value="# Packed draft"/u);
 assert.equal(typeof createDocumentAutosaveQueue, 'function');
 assert.deepEqual(Array.from(dataUriToBytes('data:text/plain;base64,SGk=').bytes), [72, 105]);
+const markdownSource = '# Packed handoff\\n\\nBuyer text';
+const projectedHtml = markdownToHtml(markdownSource);
+assert.equal(projectedHtml, markdownToHtml(markdownSource));
+assert.match(markdownToPlainText(markdownSource), /Packed handoff/u);
+assert.match(markdownToPlainText(markdownSource), /Buyer text/u);
 
 const rootEntry = import.meta.resolve('${packageName}');
 const autosaveEntry = import.meta.resolve('${packageName}/autosave');
 const converterEntry = import.meta.resolve('${packageName}/converter');
+const markdownEntry = import.meta.resolve('${packageName}/markdown');
 const styleEntry = import.meta.resolve('${packageName}/styles.css');
 const fullFontEntry = import.meta.resolve('${packageName}/fonts.css');
 const latinFontEntry = import.meta.resolve('${packageName}/fonts-latin.css');
@@ -116,6 +123,7 @@ for (const entry of [
   rootEntry,
   autosaveEntry,
   converterEntry,
+  markdownEntry,
   styleEntry,
   fullFontEntry,
   latinFontEntry,
@@ -126,9 +134,11 @@ for (const entry of [
 process.stdout.write(JSON.stringify({
   serverRenderedNamedField: true,
   converterRoundTrip: true,
+  markdownProjection: true,
   rootEntry,
   autosaveEntry,
   converterEntry,
+  markdownEntry,
   styleEntry,
   fullFontEntry,
   latinFontEntry,
@@ -148,6 +158,7 @@ const { renderToString } = require('react-dom/server');
 const { CwlEditor } = require('${packageName}');
 const { createDocumentAutosaveQueue } = require('${packageName}/autosave');
 const { dataUriToBytes } = require('${packageName}/converter');
+const { markdownToHtml, markdownToPlainText } = require('${packageName}/markdown');
 
 const serverHtml = renderToString(
   React.createElement(CwlEditor, {
@@ -161,13 +172,20 @@ assert.match(serverHtml, /name="message_body"/u);
 assert.match(serverHtml, /value="# Packed CommonJS draft"/u);
 assert.equal(typeof createDocumentAutosaveQueue, 'function');
 assert.deepEqual(Array.from(dataUriToBytes('data:text/plain;base64,T0s=').bytes), [79, 75]);
+const markdownSource = '# Packed CommonJS handoff\\n\\nBuyer text';
+const projectedHtml = markdownToHtml(markdownSource);
+assert.equal(projectedHtml, markdownToHtml(markdownSource));
+assert.match(markdownToPlainText(markdownSource), /Packed CommonJS handoff/u);
+assert.match(markdownToPlainText(markdownSource), /Buyer text/u);
 
 process.stdout.write(JSON.stringify({
   serverRenderedNamedField: true,
   converterRoundTrip: true,
+  markdownProjection: true,
   rootEntry: require.resolve('${packageName}'),
   autosaveEntry: require.resolve('${packageName}/autosave'),
   converterEntry: require.resolve('${packageName}/converter'),
+  markdownEntry: require.resolve('${packageName}/markdown'),
 }));
 `,
     'utf8',
@@ -198,9 +216,11 @@ process.stdout.write(JSON.stringify({
     ['ESM root', fileURLToPath(consumerResult.rootEntry)],
     ['ESM autosave', fileURLToPath(consumerResult.autosaveEntry)],
     ['ESM converter', fileURLToPath(consumerResult.converterEntry)],
+    ['ESM markdown', fileURLToPath(consumerResult.markdownEntry)],
     ['CommonJS root', commonJsConsumerResult.rootEntry],
     ['CommonJS autosave', commonJsConsumerResult.autosaveEntry],
     ['CommonJS converter', commonJsConsumerResult.converterEntry],
+    ['CommonJS markdown', commonJsConsumerResult.markdownEntry],
   ];
   for (const [label, entry] of executableEntries) {
     assert.equal(
@@ -259,6 +279,8 @@ process.stdout.write(JSON.stringify({
       commonJsServerRenderedNamedField,
       esmConverterRoundTrip: consumerResult.converterRoundTrip === true,
       commonJsConverterRoundTrip: commonJsConsumerResult.converterRoundTrip === true,
+      esmMarkdownProjection: consumerResult.markdownProjection === true,
+      commonJsMarkdownProjection: commonJsConsumerResult.markdownProjection === true,
       publicAssetEntriesContained,
       executableEntriesContained: true,
       sourceImportDetected,

From f970ae1dcb6aa5fdf1eea775c4991b86b888faec Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:35:00 -0700
Subject: [PATCH 122/258] test(reference-host): lock ambiguous connect
 quarantine

---
 ...eHostCollaborationAmbiguousConnect.test.ts | 102 ++++++++++++++++++
 1 file changed, 102 insertions(+)
 create mode 100644 src/referenceHostCollaborationAmbiguousConnect.test.ts

diff --git a/src/referenceHostCollaborationAmbiguousConnect.test.ts b/src/referenceHostCollaborationAmbiguousConnect.test.ts
new file mode 100644
index 00000000..c9e52185
--- /dev/null
+++ b/src/referenceHostCollaborationAmbiguousConnect.test.ts
@@ -0,0 +1,102 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host ambiguous collaboration connect contract', () => {
+  it('quarantines a provider after connect throws instead of retrying an indeterminate resource', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let generation = 0;
+      let firstProviderConnectAttempts = 0;
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          generation += 1;
+          const current = generation;
+          events.push('provider:create:' + current);
+          return {
+            connect() {
+              events.push('provider:connect:' + current);
+              if (current === 1) {
+                firstProviderConnectAttempts += 1;
+                if (firstProviderConnectAttempts === 1) {
+                  throw new Error('private ambiguous connect failure');
+                }
+              }
+            },
+            disconnect() { events.push('provider:disconnect:' + current); },
+            destroy() { events.push('provider:destroy:' + current); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+
+      let firstError = null;
+      try {
+        lifecycle.connect();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      let retryError = null;
+      let retryResult = null;
+      try {
+        retryResult = lifecycle.connect();
+      } catch (error) {
+        retryError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      const afterFailure = lifecycle.getSnapshot();
+      const recovered = lifecycle.reconnect();
+      const disposeResult = lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        disposeResult,
+        events,
+        firstError,
+        recovered,
+        retryError,
+        retryResult,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      disposeResult: true,
+      events: [
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:create:2',
+        'provider:connect:2',
+        'provider:disconnect:2',
+        'provider:destroy:2',
+        'document:destroy',
+      ],
+      firstError: 'collaboration lifecycle connection failed.',
+      recovered: { providerGeneration: 2, status: 'connected' },
+      retryError: 'collaboration lifecycle connection failed.',
+      retryResult: null,
+    });
+  });
+});

From f23f1a87b0eb6b3d219496dc6d8caeb6eee29bf9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:39:28 -0700
Subject: [PATCH 123/258] fix(reference-host): quarantine ambiguous provider
 connections

---
 .../collaboration-provider-lifecycle.mjs      | 20 +++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index ed1837fc..30a4d796 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -144,11 +144,12 @@ function teardownFailure() {
  * validation never executes accessor-backed host objects. Initial document and
  * provider callback failures are payload-redacted, acquired documents unwind on
  * initial provider failure, reconnect provider-construction failures remain
- * retryable, connect failures preserve the disconnected provider for an explicit
- * retry, and cleanup failures do not prevent remaining teardown attempts. A
- * failed provider or document destruction keeps only the incomplete cleanup live
- * so a later dispose() retries it without repeating already-successful teardown.
- * Once disposal starts, connect/reconnect stay closed while cleanup is pending.
+ * retryable, connect failures quarantine the indeterminate provider until
+ * reconnect/dispose tears it down, and cleanup failures do not prevent remaining
+ * teardown attempts. A failed provider or document destruction keeps only the
+ * incomplete cleanup live so a later dispose() retries it without repeating
+ * already-successful teardown. Once disposal starts, connect/reconnect stay
+ * closed while cleanup is pending.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -172,6 +173,7 @@ export function createHostCollaborationLifecycle(source) {
   let providerGeneration = 0;
   let providerResource = null;
   let connected = false;
+  let providerConnectionIndeterminate = false;
   let documentDestroyed = false;
   let disposeStarted = false;
   let disposed = false;
@@ -191,6 +193,7 @@ export function createHostCollaborationLifecycle(source) {
     }
     providerResource = requireProvider(candidate);
     connected = false;
+    providerConnectionIndeterminate = false;
   }
 
   function requireLive() {
@@ -204,10 +207,12 @@ export function createHostCollaborationLifecycle(source) {
 
   function connect() {
     requireLive();
+    if (providerConnectionIndeterminate) throw connectionFailure();
     if (connected) return false;
     try {
       providerResource.connect.call(providerResource.value);
     } catch {
+      providerConnectionIndeterminate = true;
       throw connectionFailure();
     }
     connected = true;
@@ -219,12 +224,14 @@ export function createHostCollaborationLifecycle(source) {
     if (resource === null) return;
     let failed = false;
     let destroyFailed = false;
-    if (connected) {
+    if (connected || providerConnectionIndeterminate) {
       connected = false;
       try {
         resource.disconnect.call(resource.value);
+        providerConnectionIndeterminate = false;
       } catch {
         failed = true;
+        providerConnectionIndeterminate = true;
       }
     }
     try {
@@ -235,6 +242,7 @@ export function createHostCollaborationLifecycle(source) {
     }
     if (!destroyFailed) {
       providerResource = null;
+      providerConnectionIndeterminate = false;
     }
     if (failed) throw teardownFailure();
   }

From ec7f78d70639f564fd44b63094260a161c83da9b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:41:53 -0700
Subject: [PATCH 124/258] test(reference-host): align connect failure recovery
 contract

---
 ...eHostCollaborationFailureRedaction.test.ts | 45 ++++++++++++-------
 1 file changed, 29 insertions(+), 16 deletions(-)

diff --git a/src/referenceHostCollaborationFailureRedaction.test.ts b/src/referenceHostCollaborationFailureRedaction.test.ts
index cdd0e962..0baf2101 100644
--- a/src/referenceHostCollaborationFailureRedaction.test.ts
+++ b/src/referenceHostCollaborationFailureRedaction.test.ts
@@ -47,27 +47,29 @@ describe('reference-host collaboration callback failure redaction', () => {
     });
   });
 
-  it('redacts transient provider connect failures and permits an explicit retry', () => {
+  it('redacts ambiguous provider connect failures and requires provider replacement', () => {
     if (!existsSync(fixturePath)) return;
     const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
     const script = `
       import { createHostCollaborationLifecycle } from ${moduleUrl};
       const privateCause = 'private provider connect cause';
       const events = [];
-      let connectAttempts = 0;
+      let providerGeneration = 0;
       const lifecycle = createHostCollaborationLifecycle({
         documentFactory() {
           return { destroy() { events.push('document:destroy'); } };
         },
         providerFactory() {
+          providerGeneration += 1;
+          const generation = providerGeneration;
+          events.push('provider:create:' + generation);
           return {
             connect() {
-              connectAttempts += 1;
-              events.push('provider:connect:' + connectAttempts);
-              if (connectAttempts === 1) throw new Error(privateCause);
+              events.push('provider:connect:' + generation);
+              if (generation === 1) throw new Error(privateCause);
             },
-            disconnect() { events.push('provider:disconnect'); },
-            destroy() { events.push('provider:destroy'); },
+            disconnect() { events.push('provider:disconnect:' + generation); },
+            destroy() { events.push('provider:destroy:' + generation); },
           };
         },
         roomId: 'reference-room',
@@ -80,16 +82,23 @@ describe('reference-host collaboration callback failure redaction', () => {
         error = failure instanceof Error ? failure.message : 'unexpected error';
       }
       const afterFailure = lifecycle.getSnapshot();
-      const retryResult = lifecycle.connect();
-      const afterRetry = lifecycle.getSnapshot();
+      let retryError = null;
+      try {
+        lifecycle.connect();
+      } catch (failure) {
+        retryError = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      const recovered = lifecycle.reconnect();
       lifecycle.dispose();
       process.stdout.write(JSON.stringify({
         afterFailure,
-        afterRetry,
         error,
         events,
-        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
-        retryResult,
+        leakedPrivateCause:
+          (typeof error === 'string' && error.includes(privateCause)) ||
+          (typeof retryError === 'string' && retryError.includes(privateCause)),
+        recovered,
+        retryError,
       }));
     `;
     const output = execFileSync(
@@ -100,17 +109,21 @@ describe('reference-host collaboration callback failure redaction', () => {
 
     expect(JSON.parse(output)).toEqual({
       afterFailure: { providerGeneration: 1, status: 'disconnected' },
-      afterRetry: { providerGeneration: 1, status: 'connected' },
       error: 'collaboration lifecycle connection failed.',
       events: [
+        'provider:create:1',
         'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:create:2',
         'provider:connect:2',
-        'provider:disconnect',
-        'provider:destroy',
+        'provider:disconnect:2',
+        'provider:destroy:2',
         'document:destroy',
       ],
       leakedPrivateCause: false,
-      retryResult: true,
+      recovered: { providerGeneration: 2, status: 'connected' },
+      retryError: 'collaboration lifecycle connection failed.',
     });
   });
 });

From 271ade4c03281ff66e14bb7dbe5eab70cad4c382 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:47:32 -0700
Subject: [PATCH 125/258] docs(reference-host): reconcile executable slice
 inventory

---
 examples/reference-host/README.md | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 2340f9d2..e237f3b4 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -2,19 +2,22 @@
 
 Status: Active PR / partial reference-host implementation
 
-This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining SSR/package/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
+This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining complete browser-host/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains four executable, deterministic fixtures, two public-package presentation entrypoints, and one buyer-facing native-form host component:
+The current slice contains deterministic host fixtures and helpers, public-package presentation entrypoints, a buyer-facing native-form component, an SSR/hydration gate, and an exact-packed-artifact verifier:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. `ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator. After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller's last known validator. A stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
-- `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, and owns provider/document teardown. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
+- `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, owns provider/document teardown, and replaces a provider whose `connect()` threw rather than retrying an indeterminate resource. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
+- `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
+- `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
+- `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer browser host.
 
-All executable fixtures are marked `REFERENCE_ONLY`, require no service, database, credential, provider SDK, or network connection for their self-tests, and are exercised by repository tests. The presentation and native-form examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
 ## Copy this, replace that
 
@@ -23,9 +26,10 @@ All executable fixtures are marked `REFERENCE_ONLY`, require no service, databas
 | synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves caller validators across confirmed failures, reconciles authoritative state after ambiguous transport outcomes, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks and payload-redacted callback-failure handling before applying untrusted proposal data. |
 | autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
-| collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving reconnect, teardown, credential, and room-authorization policy. |
+| collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving ambiguous-connect replacement, reconnect, teardown, credential, and room-authorization policy. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
+| exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/package-resolution checks in buyer CI, then add the complete framework/browser application journey rather than treating package import success as product acceptance. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -50,7 +54,7 @@ Inkspan owns deterministic editor/revision/autosave/conversion/package behavior.
 
 ## Executable fixture checks
 
-From a clean repository checkout with the supported Node runtime, these reference-only fixtures can be exercised directly:
+From a clean repository checkout with the supported Node runtime, the deterministic reference-only fixture checks can be exercised directly:
 
 ```sh
 node examples/reference-host/synthetic-document-repository.mjs --self-test
@@ -59,10 +63,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The root test suite independently invokes those commands and asserts the expected stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, reconnect, teardown, proposal-failure redaction, public presentation-package behavior, and the native-form example's published-package/host-authority contract. These commands do **not** yet satisfy #377's complete packed-tarball application acceptance.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a packed-artifact application (preferably a supported Next.js App Router host), deterministic SSR/hydration proof, packed-artifact/browser execution of the native-form journey, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command that builds the tarball before installing it into the example.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command for the complete end-to-end reference journey.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, or native-form example callback as a production persistence, authentication, collaboration, or model implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, or native-form example callback as a production persistence, authentication, collaboration, model, or deployment implementation.

From 1b5d34663230c2d63360415d32f7bd554495cecd Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 19:48:08 -0700
Subject: [PATCH 126/258] test(reference-host): keep buyer inventory
 code-current

---
 src/referenceHostPackagingBoundary.test.ts | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index 26073d12..133d6c3e 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -39,4 +39,21 @@ describe('reference-host package authority boundary', () => {
       expect(source).not.toContain('workspace:');
     }
   });
+
+  it('keeps the buyer-facing inventory synchronized without claiming complete app acceptance', () => {
+    const readme = readFileSync(resolve(referenceHostDirectory, 'README.md'), 'utf8');
+    const executableFiles = readdirSync(referenceHostDirectory).filter((path) =>
+      /\.(?:[cm]?[jt]s|[jt]sx)$/u.test(path),
+    );
+
+    for (const file of executableFiles) {
+      expect(readme).toContain(`\`${file}\``);
+    }
+    expect(readme).toContain('`presentation-full.css`');
+    expect(readme).toContain('`presentation-latin.css`');
+    expect(readme).toContain('complete packed-artifact reference-host application');
+    expect(readme).toContain(
+      'do **not** yet satisfy #377\'s complete packed-artifact browser-application acceptance.',
+    );
+  });
 });

From c62500443274f6dea0c5da18a5cd4e69e64649e5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 20:06:16 -0700
Subject: [PATCH 127/258] test(reference-host): require packed autosave
 observer wiring

---
 src/referenceHostPackedArtifact.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/referenceHostPackedArtifact.test.ts b/src/referenceHostPackedArtifact.test.ts
index a8f5de6a..42537235 100644
--- a/src/referenceHostPackedArtifact.test.ts
+++ b/src/referenceHostPackedArtifact.test.ts
@@ -30,6 +30,7 @@ describe('reference-host packed artifact acceptance', () => {
         installedFromTarball?: unknown;
         consumerInstallCompleted?: unknown;
         serverRenderedNamedField?: unknown;
+        autosaveObserverWired?: unknown;
         esmMarkdownProjection?: unknown;
         commonJsMarkdownProjection?: unknown;
         publicAssetEntriesContained?: unknown;
@@ -41,6 +42,7 @@ describe('reference-host packed artifact acceptance', () => {
       expect(result.installedFromTarball).toBe(true);
       expect(result.consumerInstallCompleted).toBe(true);
       expect(result.serverRenderedNamedField).toBe(true);
+      expect(result.autosaveObserverWired).toBe(true);
       expect(result.esmMarkdownProjection).toBe(true);
       expect(result.commonJsMarkdownProjection).toBe(true);
       expect(result.publicAssetEntriesContained).toBe(true);

From 94e64dcb7b7e78e676e36ffab412196c0ce0ebd4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 20:09:31 -0700
Subject: [PATCH 128/258] feat(reference-host): wire packed autosave observer

---
 .../reference-host/verify-packed-artifact.mjs | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)

diff --git a/examples/reference-host/verify-packed-artifact.mjs b/examples/reference-host/verify-packed-artifact.mjs
index 26539e3f..4547130b 100644
--- a/examples/reference-host/verify-packed-artifact.mjs
+++ b/examples/reference-host/verify-packed-artifact.mjs
@@ -1,6 +1,7 @@
 import assert from 'node:assert/strict';
 import { execFileSync } from 'node:child_process';
 import {
+  copyFileSync,
   mkdtempSync,
   mkdirSync,
   readFileSync,
@@ -53,6 +54,10 @@ try {
 
   const hostDirectory = join(temporaryRoot, 'host');
   mkdirSync(hostDirectory, { recursive: true });
+  copyFileSync(
+    join(repositoryRoot, 'examples/reference-host/autosave-view-model.mjs'),
+    join(hostDirectory, 'autosave-view-model.mjs'),
+  );
   writeFileSync(
     join(hostDirectory, 'package.json'),
     `${JSON.stringify(
@@ -93,6 +98,7 @@ import { CwlEditor } from '${packageName}';
 import { createDocumentAutosaveQueue } from '${packageName}/autosave';
 import { dataUriToBytes } from '${packageName}/converter';
 import { markdownToHtml, markdownToPlainText } from '${packageName}/markdown';
+import { createAutosaveViewModel } from './autosave-view-model.mjs';
 
 const serverHtml = renderToString(
   React.createElement(CwlEditor, {
@@ -112,6 +118,38 @@ assert.equal(projectedHtml, markdownToHtml(markdownSource));
 assert.match(markdownToPlainText(markdownSource), /Packed handoff/u);
 assert.match(markdownToPlainText(markdownSource), /Buyer text/u);
 
+const digestHex = '41'.repeat(32);
+const evidence = Object.freeze({
+  envelope: Object.freeze({
+    schemaId: 'https://inkspan.io/schemas/document-envelope/v1',
+    schemaVersion: 1,
+    documentJson: Object.freeze({ type: 'doc' }),
+  }),
+  revision: Object.freeze({
+    algorithm: 'SHA-256',
+    digestHex,
+    strongEntityTag: \`"sha256-\${digestHex}"\`,
+  }),
+});
+const autosaveViewModel = createAutosaveViewModel();
+const autosaveViewStates = [];
+const autosaveQueue = createDocumentAutosaveQueue({
+  save() {
+    return { status: 'saved' };
+  },
+  onSnapshotChange(snapshot) {
+    autosaveViewStates.push(autosaveViewModel.observe(snapshot).viewState);
+  },
+});
+assert.equal(autosaveViewModel.observe(autosaveQueue.getSnapshot()).viewState, 'clean');
+const autosaveOutcome = await autosaveQueue.enqueue(evidence);
+await autosaveQueue.flush();
+await Promise.resolve();
+assert.equal(autosaveOutcome.status, 'saved');
+assert.ok(autosaveViewStates.includes('saving'));
+assert.equal(autosaveViewStates.at(-1), 'clean');
+assert.equal((await autosaveQueue.close()).state, 'closed');
+
 const rootEntry = import.meta.resolve('${packageName}');
 const autosaveEntry = import.meta.resolve('${packageName}/autosave');
 const converterEntry = import.meta.resolve('${packageName}/converter');
@@ -133,6 +171,7 @@ for (const entry of [
 
 process.stdout.write(JSON.stringify({
   serverRenderedNamedField: true,
+  autosaveObserverWired: true,
   converterRoundTrip: true,
   markdownProjection: true,
   rootEntry,
@@ -277,6 +316,7 @@ process.stdout.write(JSON.stringify({
       serverRenderedNamedField: esmServerRenderedNamedField,
       esmServerRenderedNamedField,
       commonJsServerRenderedNamedField,
+      autosaveObserverWired: consumerResult.autosaveObserverWired === true,
       esmConverterRoundTrip: consumerResult.converterRoundTrip === true,
       commonJsConverterRoundTrip: commonJsConsumerResult.converterRoundTrip === true,
       esmMarkdownProjection: consumerResult.markdownProjection === true,

From 8b14d1e1a5c0cffe3dcbd764597aacf7b650b158 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 20:10:23 -0700
Subject: [PATCH 129/258] test(reference-host): require autosave wiring
 inventory truth

---
 src/referenceHostPackagingBoundary.test.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index 133d6c3e..69151e48 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -51,6 +51,10 @@ describe('reference-host package authority boundary', () => {
     }
     expect(readme).toContain('`presentation-full.css`');
     expect(readme).toContain('`presentation-latin.css`');
+    expect(readme).toContain(
+      'exact packed autosave observer wiring into the host lifecycle projection',
+    );
+    expect(readme).not.toContain('packed-package wiring of the autosave observer');
     expect(readme).toContain('complete packed-artifact reference-host application');
     expect(readme).toContain(
       'do **not** yet satisfy #377\'s complete packed-artifact browser-application acceptance.',

From f12e0da7aba1eba593f7e5386d7960dd79604a51 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 20:10:56 -0700
Subject: [PATCH 130/258] docs(reference-host): record packed autosave observer
 wiring

---
 examples/reference-host/README.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index e237f3b4..503bdc75 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -15,7 +15,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
-- `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer browser host.
+- `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer browser host.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
@@ -25,11 +25,11 @@ Executable fixtures and helpers remain reference-only host code, require no serv
 | --- | --- |
 | synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves caller validators across confirmed failures, reconciles authoritative state after ambiguous transport outcomes, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks and payload-redacted callback-failure handling before applying untrusted proposal data. |
-| autosave presentation projection | Wire the packed Inkspan autosave session observer into localized host UI and authenticated recovery actions; do not display revision or durable validators as user-facing status. |
+| autosave presentation projection | Preserve the exact packed autosave observer-to-view-model boundary in localized host UI; connect authenticated recovery actions in host code and do not display revision or durable validators as user-facing status. |
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving ambiguous-connect replacement, reconnect, teardown, credential, and room-authorization policy. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
-| exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/package-resolution checks in buyer CI, then add the complete framework/browser application journey rather than treating package import success as product acceptance. |
+| exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/autosave-observer/package-resolution checks in buyer CI, then add the complete framework/browser application journey rather than treating package import success as product acceptance. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -63,10 +63,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, packed-package wiring of the autosave observer, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, or native-form example callback as a production persistence, authentication, collaboration, model, or deployment implementation.

From 96b871ef841947af8342146cfaf4826ac5a7c883 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 21:04:29 -0700
Subject: [PATCH 131/258] test(reference-host): require bounded Office handoff

---
 src/referenceHostOfficeHandoff.test.ts | 33 ++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 src/referenceHostOfficeHandoff.test.ts

diff --git a/src/referenceHostOfficeHandoff.test.ts b/src/referenceHostOfficeHandoff.test.ts
new file mode 100644
index 00000000..c56872fc
--- /dev/null
+++ b/src/referenceHostOfficeHandoff.test.ts
@@ -0,0 +1,33 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+function repositoryFile(path: string): string {
+  return readFileSync(resolve(process.cwd(), path), 'utf8');
+}
+
+describe('reference-host Office handoff', () => {
+  it('maps bounded editor Markdown through the public React-free projection before creating a DOCX request', () => {
+    const source = repositoryFile('examples/reference-host/office-handoff.mjs');
+
+    expect(source).toContain(
+      "import { markdownToPlainText } from '@contextualwisdomlab/cwl-editor/markdown';",
+    );
+    expect(source).toContain('export function createReferenceDocxRequest');
+    expect(source).toContain('markdownToPlainText(markdown)');
+    expect(source).toContain("format: 'docx'");
+    expect(source).toContain("type: 'paragraph'");
+  });
+
+  it('keeps Office rendering, authorization, storage, and transport outside the reference helper', () => {
+    const source = repositoryFile('examples/reference-host/office-handoff.mjs');
+
+    expect(source).not.toContain('fetch(');
+    expect(source).not.toContain('localStorage');
+    expect(source).not.toContain('process.env');
+    expect(source).not.toContain('inkspan_office');
+    expect(source).not.toContain('child_process');
+    expect(source).not.toContain('writeFile');
+  });
+});

From 226cf926b390286c85cd020904368ffee58d9502 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 21:06:17 -0700
Subject: [PATCH 132/258] feat(reference-host): add bounded Office handoff

---
 examples/reference-host/office-handoff.mjs | 36 ++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 examples/reference-host/office-handoff.mjs

diff --git a/examples/reference-host/office-handoff.mjs b/examples/reference-host/office-handoff.mjs
new file mode 100644
index 00000000..f10fa107
--- /dev/null
+++ b/examples/reference-host/office-handoff.mjs
@@ -0,0 +1,36 @@
+import { markdownToPlainText } from '@contextualwisdomlab/cwl-editor/markdown';
+
+function requireNonEmptyString(value, fieldName) {
+  if (typeof value !== 'string' || !/\S/u.test(value)) {
+    throw new TypeError(`${fieldName} must be a non-empty string.`);
+  }
+  return value;
+}
+
+/**
+ * Create a bounded reference-only DOCX request from editor Markdown.
+ *
+ * The host deliberately projects Markdown to plain text through Inkspan's
+ * React-free public package surface before constructing the strict Office
+ * request. This example does not claim Markdown-to-OOXML round-trip fidelity,
+ * perform Office rendering, authorize export, choose a filesystem path, or
+ * persist/distribute the resulting artifact; those remain host responsibilities.
+ *
+ * @param {{ title: string, markdown: string }} input host-owned export input
+ * @returns {{ format: 'docx', title: string, blocks: readonly [{ type: 'paragraph', text: string }] }}
+ */
+export function createReferenceDocxRequest({ title, markdown }) {
+  const acceptedTitle = requireNonEmptyString(title, 'title');
+  if (typeof markdown !== 'string') {
+    throw new TypeError('markdown must be a string.');
+  }
+
+  const text = markdownToPlainText(markdown);
+  const paragraph = Object.freeze({ type: 'paragraph', text });
+
+  return Object.freeze({
+    format: 'docx',
+    title: acceptedTitle,
+    blocks: Object.freeze([paragraph]),
+  });
+}

From f14ebb4fbd10a6ef6dac34c268c4ce5f22a5e762 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 21:10:47 -0700
Subject: [PATCH 133/258] docs(reference-host): document Office handoff
 boundary

---
 examples/reference-host/README.md | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 503bdc75..a44e2cff 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -15,6 +15,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
+- `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer browser host.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
@@ -29,6 +30,7 @@ Executable fixtures and helpers remain reference-only host code, require no serv
 | collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving ambiguous-connect replacement, reconnect, teardown, credential, and room-authorization policy. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
+| Office handoff helper | Keep the provider-neutral public Markdown projection/request mapping or replace it with a host-approved richer mapping; invoke the strict Inkspan Office renderer only behind host-owned export authorization, output-location policy, storage, and distribution. |
 | exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/autosave-observer/package-resolution checks in buyer CI, then add the complete framework/browser application journey rather than treating package import success as product acceptance. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
@@ -63,10 +65,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application or Office-renderer acceptance.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, converter/Office handoff, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, or native-form example callback as a production persistence, authentication, collaboration, model, or deployment implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From dc5e9d80afa334d09deccbf7709f658910697625 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 21:13:54 -0700
Subject: [PATCH 134/258] docs(reference-host): preserve browser acceptance
 contract

---
 examples/reference-host/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index a44e2cff..3f2e5a9d 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -65,7 +65,7 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application or Office-renderer acceptance.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 

From c855622c8590676b764d171c5ff2b766c643d12d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:35:46 -0700
Subject: [PATCH 135/258] test(reference-host): require application-level
 hydration

---
 ...referenceHostApplicationHydration.test.tsx | 120 ++++++++++++++++++
 1 file changed, 120 insertions(+)
 create mode 100644 src/referenceHostApplicationHydration.test.tsx

diff --git a/src/referenceHostApplicationHydration.test.tsx b/src/referenceHostApplicationHydration.test.tsx
new file mode 100644
index 00000000..3b4f6ac7
--- /dev/null
+++ b/src/referenceHostApplicationHydration.test.tsx
@@ -0,0 +1,120 @@
+import { act } from 'react';
+import { hydrateRoot, type Root } from 'react-dom/client';
+import { renderToString } from 'react-dom/server';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+import { ReferenceHostApp } from '../examples/reference-host/reference-host-app.js';
+
+const mountedContainers: HTMLElement[] = [];
+const mountedRoots: Root[] = [];
+
+afterEach(async () => {
+  while (mountedRoots.length > 0) {
+    const root = mountedRoots.pop();
+    if (root) {
+      await act(async () => {
+        root.unmount();
+      });
+    }
+  }
+  while (mountedContainers.length > 0) {
+    mountedContainers.pop()?.remove();
+  }
+  vi.restoreAllMocks();
+});
+
+describe('reference-host application hydration', () => {
+  it('server-renders a deterministic shell and hydrates the real native-form host without a mismatch', async () => {
+    const onAuthorizedSubmit = vi.fn();
+    const consoleError = vi.spyOn(console, 'error').mockImplementation(() => undefined);
+
+    const serverHtml = renderToString(
+      <ReferenceHostApp
+        loadingLabel="Loading buyer editor"
+        onAuthorizedSubmit={onAuthorizedSubmit}
+      />,
+    );
+
+    expect(serverHtml).toContain('Inkspan reference host');
+    expect(serverHtml).toContain('aria-busy="true"');
+    expect(serverHtml).toContain('Loading buyer editor');
+    expect(serverHtml).not.toContain('name="message_body"');
+    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
+
+    const container = document.createElement('div');
+    container.innerHTML = serverHtml;
+    document.body.append(container);
+    mountedContainers.push(container);
+
+    let root: Root | undefined;
+    await act(async () => {
+      root = hydrateRoot(
+        container,
+        <ReferenceHostApp
+          loadingLabel="Loading buyer editor"
+          onAuthorizedSubmit={onAuthorizedSubmit}
+        />,
+      );
+      await Promise.resolve();
+    });
+    if (!root) {
+      throw new Error('Reference host hydration root was not created.');
+    }
+    mountedRoots.push(root);
+
+    expect(container.querySelector('input[name="message_body"]')).not.toBeNull();
+    expect(container.textContent).toContain('Save document');
+    expect(container.textContent).not.toContain('Loading buyer editor');
+    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
+
+    const hydrationErrors = consoleError.mock.calls.filter(([first]) =>
+      typeof first === 'string'
+        ? /hydration|did not match|server html/i.test(first)
+        : false,
+    );
+    expect(hydrationErrors).toEqual([]);
+  });
+
+  it('keeps the real hydrated form fail-closed when the host is read-only', async () => {
+    const onAuthorizedSubmit = vi.fn();
+    const container = document.createElement('div');
+    container.innerHTML = renderToString(
+      <ReferenceHostApp
+        loadingLabel="Loading buyer editor"
+        onAuthorizedSubmit={onAuthorizedSubmit}
+        readOnly
+      />,
+    );
+    document.body.append(container);
+    mountedContainers.push(container);
+
+    let root: Root | undefined;
+    await act(async () => {
+      root = hydrateRoot(
+        container,
+        <ReferenceHostApp
+          loadingLabel="Loading buyer editor"
+          onAuthorizedSubmit={onAuthorizedSubmit}
+          readOnly
+        />,
+      );
+      await Promise.resolve();
+    });
+    if (!root) {
+      throw new Error('Reference host hydration root was not created.');
+    }
+    mountedRoots.push(root);
+
+    const field = container.querySelector<HTMLInputElement>(
+      'input[name="message_body"]',
+    );
+    const submit = container.querySelector<HTMLButtonElement>('button[type="submit"]');
+    const reset = container.querySelector<HTMLButtonElement>('button[type="reset"]');
+
+    expect(field).not.toBeNull();
+    expect(field?.disabled).toBe(true);
+    expect(submit?.disabled).toBe(true);
+    expect(reset?.disabled).toBe(true);
+    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
+  });
+});

From fde3b0cd09d7aed33fac9984348853ae9f6728e9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:36:38 -0700
Subject: [PATCH 136/258] feat(reference-host): compose application hydration
 boundary

---
 .../reference-host/reference-host-app.tsx     | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 examples/reference-host/reference-host-app.tsx

diff --git a/examples/reference-host/reference-host-app.tsx b/examples/reference-host/reference-host-app.tsx
new file mode 100644
index 00000000..73760075
--- /dev/null
+++ b/examples/reference-host/reference-host-app.tsx
@@ -0,0 +1,41 @@
+'use client';
+
+import { ReferenceHostHydrationGate } from './hydration-gate.js';
+import {
+  NativeFormHost,
+  type NativeFormHostProps,
+} from './native-form-host.js';
+
+export interface ReferenceHostAppProps extends NativeFormHostProps {
+  /** Host-localized label rendered in the deterministic server shell. */
+  loadingLabel: string;
+}
+
+/**
+ * Minimal buyer-facing application composition for the reference host.
+ *
+ * The server render is deliberately limited to deterministic host chrome and a
+ * hydration placeholder. The real Inkspan native-form integration is created
+ * only after client hydration, while authorization and durable persistence stay
+ * behind the host-supplied onAuthorizedSubmit callback.
+ */
+export function ReferenceHostApp({
+  loadingLabel,
+  onAuthorizedSubmit,
+  readOnly = false,
+}: ReferenceHostAppProps) {
+  return (
+    <main aria-labelledby="reference-host-heading">
+      <h1 id="reference-host-heading">Inkspan reference host</h1>
+      <ReferenceHostHydrationGate
+        loadingLabel={loadingLabel}
+        renderEditor={() => (
+          <NativeFormHost
+            onAuthorizedSubmit={onAuthorizedSubmit}
+            readOnly={readOnly}
+          />
+        )}
+      />
+    </main>
+  );
+}

From 45b21171b495185e88e51d2e48610429d9fb3529 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:38:27 -0700
Subject: [PATCH 137/258] test(reference-host): keep hydration proof at package
 boundary

---
 ...referenceHostApplicationHydration.test.tsx | 159 +++++-------------
 1 file changed, 46 insertions(+), 113 deletions(-)

diff --git a/src/referenceHostApplicationHydration.test.tsx b/src/referenceHostApplicationHydration.test.tsx
index 3b4f6ac7..83ea3fce 100644
--- a/src/referenceHostApplicationHydration.test.tsx
+++ b/src/referenceHostApplicationHydration.test.tsx
@@ -1,120 +1,53 @@
-import { act } from 'react';
-import { hydrateRoot, type Root } from 'react-dom/client';
-import { renderToString } from 'react-dom/server';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-
-import { ReferenceHostApp } from '../examples/reference-host/reference-host-app.js';
-
-const mountedContainers: HTMLElement[] = [];
-const mountedRoots: Root[] = [];
-
-afterEach(async () => {
-  while (mountedRoots.length > 0) {
-    const root = mountedRoots.pop();
-    if (root) {
-      await act(async () => {
-        root.unmount();
-      });
-    }
-  }
-  while (mountedContainers.length > 0) {
-    mountedContainers.pop()?.remove();
-  }
-  vi.restoreAllMocks();
-});
-
-describe('reference-host application hydration', () => {
-  it('server-renders a deterministic shell and hydrates the real native-form host without a mismatch', async () => {
-    const onAuthorizedSubmit = vi.fn();
-    const consoleError = vi.spyOn(console, 'error').mockImplementation(() => undefined);
-
-    const serverHtml = renderToString(
-      <ReferenceHostApp
-        loadingLabel="Loading buyer editor"
-        onAuthorizedSubmit={onAuthorizedSubmit}
-      />,
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const applicationSource = readFileSync(
+  resolve(process.cwd(), 'examples/reference-host/reference-host-app.tsx'),
+  'utf8',
+);
+const nativeFormSource = readFileSync(
+  resolve(process.cwd(), 'examples/reference-host/native-form-host.tsx'),
+  'utf8',
+);
+
+describe('reference-host application hydration contract', () => {
+  it('keeps a deterministic server shell and mounts the real native-form host through the client hydration gate', () => {
+    expect(applicationSource.startsWith("'use client';\n")).toBe(true);
+    expect(applicationSource).toContain(
+      "from './hydration-gate.js'",
     );
-
-    expect(serverHtml).toContain('Inkspan reference host');
-    expect(serverHtml).toContain('aria-busy="true"');
-    expect(serverHtml).toContain('Loading buyer editor');
-    expect(serverHtml).not.toContain('name="message_body"');
-    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
-
-    const container = document.createElement('div');
-    container.innerHTML = serverHtml;
-    document.body.append(container);
-    mountedContainers.push(container);
-
-    let root: Root | undefined;
-    await act(async () => {
-      root = hydrateRoot(
-        container,
-        <ReferenceHostApp
-          loadingLabel="Loading buyer editor"
-          onAuthorizedSubmit={onAuthorizedSubmit}
-        />,
-      );
-      await Promise.resolve();
-    });
-    if (!root) {
-      throw new Error('Reference host hydration root was not created.');
-    }
-    mountedRoots.push(root);
-
-    expect(container.querySelector('input[name="message_body"]')).not.toBeNull();
-    expect(container.textContent).toContain('Save document');
-    expect(container.textContent).not.toContain('Loading buyer editor');
-    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
-
-    const hydrationErrors = consoleError.mock.calls.filter(([first]) =>
-      typeof first === 'string'
-        ? /hydration|did not match|server html/i.test(first)
-        : false,
+    expect(applicationSource).toContain(
+      "from './native-form-host.js'",
     );
-    expect(hydrationErrors).toEqual([]);
-  });
-
-  it('keeps the real hydrated form fail-closed when the host is read-only', async () => {
-    const onAuthorizedSubmit = vi.fn();
-    const container = document.createElement('div');
-    container.innerHTML = renderToString(
-      <ReferenceHostApp
-        loadingLabel="Loading buyer editor"
-        onAuthorizedSubmit={onAuthorizedSubmit}
-        readOnly
-      />,
+    expect(applicationSource).toContain(
+      '<main aria-labelledby="reference-host-heading">',
     );
-    document.body.append(container);
-    mountedContainers.push(container);
-
-    let root: Root | undefined;
-    await act(async () => {
-      root = hydrateRoot(
-        container,
-        <ReferenceHostApp
-          loadingLabel="Loading buyer editor"
-          onAuthorizedSubmit={onAuthorizedSubmit}
-          readOnly
-        />,
-      );
-      await Promise.resolve();
-    });
-    if (!root) {
-      throw new Error('Reference host hydration root was not created.');
-    }
-    mountedRoots.push(root);
-
-    const field = container.querySelector<HTMLInputElement>(
-      'input[name="message_body"]',
+    expect(applicationSource).toContain(
+      '<ReferenceHostHydrationGate',
     );
-    const submit = container.querySelector<HTMLButtonElement>('button[type="submit"]');
-    const reset = container.querySelector<HTMLButtonElement>('button[type="reset"]');
+    expect(applicationSource).toContain(
+      'renderEditor={() => (',
+    );
+    expect(applicationSource).toContain(
+      '<NativeFormHost',
+    );
+    expect(applicationSource).toContain(
+      'onAuthorizedSubmit={onAuthorizedSubmit}',
+    );
+    expect(applicationSource).toContain('readOnly={readOnly}');
+  });
 
-    expect(field).not.toBeNull();
-    expect(field?.disabled).toBe(true);
-    expect(submit?.disabled).toBe(true);
-    expect(reset?.disabled).toBe(true);
-    expect(onAuthorizedSubmit).not.toHaveBeenCalled();
+  it('preserves the public-package and host-authority boundary for the hydrated form', () => {
+    expect(nativeFormSource).toContain(
+      "from '@contextualwisdomlab/cwl-editor'",
+    );
+    expect(nativeFormSource).toContain('formFieldName="message_body"');
+    expect(applicationSource).not.toContain('/src/');
+    expect(applicationSource).not.toContain('../../src');
+    expect(applicationSource).not.toContain('fetch(');
+    expect(applicationSource).not.toContain('localStorage');
+    expect(applicationSource).not.toContain('process.env');
   });
 });

From 029b6eb582358104fb3a9f4dae4a69751e93b842 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:42:04 -0700
Subject: [PATCH 138/258] docs(reference-host): inventory application
 composition

---
 examples/reference-host/README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 3f2e5a9d..f463eccb 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -12,6 +12,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, owns provider/document teardown, and replaces a provider whose `connect()` threw rather than retrying an indeterminate resource. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
+- `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.

From 7d03815529ed8ffd63f6e882dd905bb589581f48 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:46:49 -0700
Subject: [PATCH 139/258] test(reference-host): require real browser hydration
 journey

---
 .../reference-host.print.browser.spec.ts      | 68 +++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 tests/browser/specs/reference-host.print.browser.spec.ts

diff --git a/tests/browser/specs/reference-host.print.browser.spec.ts b/tests/browser/specs/reference-host.print.browser.spec.ts
new file mode 100644
index 00000000..3db583a6
--- /dev/null
+++ b/tests/browser/specs/reference-host.print.browser.spec.ts
@@ -0,0 +1,68 @@
+import { expect, test } from '@playwright/test';
+
+const REFERENCE_HOST_URL =
+  'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
+
+function isReferenceHostRequest(requestUrl: string): boolean {
+  const url = new URL(requestUrl);
+  return url.protocol === 'http:' && url.hostname === '127.0.0.1' && url.port === '4173';
+}
+
+test.describe.configure({ mode: 'serial' });
+
+test('hydrates the real native-form reference host without external runtime requests', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+  const consoleErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  page.on('console', (message) => {
+    if (message.type() === 'error') {
+      consoleErrors.push(message.text());
+    }
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  await expect(
+    page.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Draft');
+  await expect(page.getByText('Loading buyer editor')).toHaveCount(0);
+
+  await page.getByRole('button', { name: 'Save document' }).click();
+  await expect
+    .poll(() =>
+      page.evaluate(() => {
+        const hostWindow = window as typeof window & {
+          referenceHostSubmissions?: string[];
+        };
+        return hostWindow.referenceHostSubmissions ?? [];
+      }),
+    )
+    .toEqual(['# Draft']);
+
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+  expect(
+    consoleErrors.filter((message) =>
+      /hydration|did not match|server html/iu.test(message),
+    ),
+  ).toEqual([]);
+});

From fe9cbbae3979b96bad1eae941bf769b4313bf433 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:51:01 -0700
Subject: [PATCH 140/258] feat(reference-host): add deterministic browser shell

---
 examples/reference-host/browser-host.html | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 examples/reference-host/browser-host.html

diff --git a/examples/reference-host/browser-host.html b/examples/reference-host/browser-host.html
new file mode 100644
index 00000000..fc0149f2
--- /dev/null
+++ b/examples/reference-host/browser-host.html
@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Inkspan reference host</title>
+  </head>
+  <body>
+    <div id="reference-host-root">
+      <main aria-labelledby="reference-host-heading">
+        <h1 id="reference-host-heading">Inkspan reference host</h1>
+        <div aria-busy="true">Loading buyer editor</div>
+      </main>
+    </div>
+    <script type="module" src="./browser-host.tsx"></script>
+  </body>
+</html>

From ee9bc971a8055ea3efa0f309a1f7dc327c2449aa Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:51:25 -0700
Subject: [PATCH 141/258] feat(reference-host): hydrate browser host
 application

---
 examples/reference-host/browser-host.tsx | 31 ++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 examples/reference-host/browser-host.tsx

diff --git a/examples/reference-host/browser-host.tsx b/examples/reference-host/browser-host.tsx
new file mode 100644
index 00000000..21c94eeb
--- /dev/null
+++ b/examples/reference-host/browser-host.tsx
@@ -0,0 +1,31 @@
+import { hydrateRoot } from 'react-dom/client';
+
+import { ReferenceHostApp } from './reference-host-app.js';
+
+declare global {
+  interface Window {
+    referenceHostSubmissions: string[];
+  }
+}
+
+const submissions: string[] = [];
+window.referenceHostSubmissions = submissions;
+
+const root = document.getElementById('reference-host-root');
+if (!root) {
+  throw new Error('Reference host root is missing.');
+}
+
+const readOnly =
+  new URLSearchParams(window.location.search).get('readOnly') === '1';
+
+hydrateRoot(
+  root,
+  <ReferenceHostApp
+    loadingLabel="Loading buyer editor"
+    onAuthorizedSubmit={async (messageBody) => {
+      submissions.push(messageBody);
+    }}
+    readOnly={readOnly}
+  />,
+);

From b32fbe8100faf6296c461870ca7e2267f85c1e53 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 22:52:02 -0700
Subject: [PATCH 142/258] docs(reference-host): inventory browser host evidence

---
 examples/reference-host/README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index f463eccb..87e5b93b 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -13,6 +13,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
+- `browser-host.tsx` hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
@@ -66,7 +67,7 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell and real native-form hydration path. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 

From a700a21d3aa2ff66478d19ff9ebe07f512391a1c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 23:22:27 -0700
Subject: [PATCH 143/258] fix(reference-host): preserve hydration shell text
 nodes

---
 examples/reference-host/browser-host.html | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/examples/reference-host/browser-host.html b/examples/reference-host/browser-host.html
index fc0149f2..86db56ed 100644
--- a/examples/reference-host/browser-host.html
+++ b/examples/reference-host/browser-host.html
@@ -6,12 +6,7 @@
     <title>Inkspan reference host</title>
   </head>
   <body>
-    <div id="reference-host-root">
-      <main aria-labelledby="reference-host-heading">
-        <h1 id="reference-host-heading">Inkspan reference host</h1>
-        <div aria-busy="true">Loading buyer editor</div>
-      </main>
-    </div>
+    <div id="reference-host-root"><main aria-labelledby="reference-host-heading"><h1 id="reference-host-heading">Inkspan reference host</h1><div aria-busy="true">Loading buyer editor</div></main></div>
     <script type="module" src="./browser-host.tsx"></script>
   </body>
 </html>

From 9a0cc37b5c5ca6330cb362e8733d4f8637b5434a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 01:34:26 -0700
Subject: [PATCH 144/258] test(reference-host): cover read-only browser journey

---
 .../reference-host.print.browser.spec.ts      | 63 +++++++++++++++++++
 1 file changed, 63 insertions(+)

diff --git a/tests/browser/specs/reference-host.print.browser.spec.ts b/tests/browser/specs/reference-host.print.browser.spec.ts
index 3db583a6..1524d39e 100644
--- a/tests/browser/specs/reference-host.print.browser.spec.ts
+++ b/tests/browser/specs/reference-host.print.browser.spec.ts
@@ -66,3 +66,66 @@ test('hydrates the real native-form reference host without external runtime requ
     ),
   ).toEqual([]);
 });
+
+test('keeps the buyer host readable while read-only mode fail-closes native writes', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+  const consoleErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  page.on('console', (message) => {
+    if (message.type() === 'error') {
+      consoleErrors.push(message.text());
+    }
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  const response = await page.goto(`${REFERENCE_HOST_URL}?readOnly=1`);
+  expect(response?.ok()).toBe(true);
+
+  await expect(
+    page.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(page.getByRole('textbox')).toHaveAttribute('aria-readonly', 'true');
+  await expect(page.getByRole('textbox')).toContainText('Draft');
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toBeDisabled();
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Draft');
+  await expect(page.getByRole('button', { name: 'Save document' })).toBeDisabled();
+  await expect(page.getByRole('button', { name: 'Reset draft' })).toBeDisabled();
+  await expect(page.getByText('Loading buyer editor')).toHaveCount(0);
+
+  await expect
+    .poll(() =>
+      page.evaluate(() => {
+        const hostWindow = window as typeof window & {
+          referenceHostSubmissions?: string[];
+        };
+        return hostWindow.referenceHostSubmissions ?? [];
+      }),
+    )
+    .toEqual([]);
+
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+  expect(
+    consoleErrors.filter((message) =>
+      /hydration|did not match|server html/iu.test(message),
+    ),
+  ).toEqual([]);
+});

From bc0b3575779d0f21e8b6a6c2d18b8d19434be320 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 01:37:19 -0700
Subject: [PATCH 145/258] docs(reference-host): record read-only browser
 evidence

---
 examples/reference-host/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 87e5b93b..1fb4a044 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -13,7 +13,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
-- `browser-host.tsx` hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
+- `browser-host.tsx` hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution, supports a deterministic `?readOnly=1` host state for fail-closed write-admission evidence, and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
@@ -67,10 +67,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell and real native-form hydration path. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, and the deterministic read-only transition. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that host, read-only and forced-colors/print/narrow-viewport journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, forced-colors/print/narrow-viewport journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From 4198b4c424e3c825de16a8b6e0720449300f3180 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 01:42:45 -0700
Subject: [PATCH 146/258] test(reference-host): cover narrow viewport journey

---
 .../reference-host.print.browser.spec.ts      | 55 +++++++++++++++++++
 1 file changed, 55 insertions(+)

diff --git a/tests/browser/specs/reference-host.print.browser.spec.ts b/tests/browser/specs/reference-host.print.browser.spec.ts
index 1524d39e..eba64f34 100644
--- a/tests/browser/specs/reference-host.print.browser.spec.ts
+++ b/tests/browser/specs/reference-host.print.browser.spec.ts
@@ -129,3 +129,58 @@ test('keeps the buyer host readable while read-only mode fail-closes native writ
     ),
   ).toEqual([]);
 });
+
+test('keeps the buyer host usable without horizontal overflow at a narrow viewport', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  await page.setViewportSize({ width: 320, height: 640 });
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  await expect(
+    page.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(page.getByRole('textbox')).toBeVisible();
+  await expect(page.getByRole('button', { name: 'Save document' })).toBeVisible();
+  await expect(page.getByRole('button', { name: 'Reset draft' })).toBeVisible();
+  await expect(page.getByText('Loading buyer editor')).toHaveCount(0);
+
+  const layout = await page.evaluate(() => {
+    const editor = document.querySelector<HTMLElement>('.cwl-editor');
+    if (!editor) {
+      throw new Error('reference host editor is missing');
+    }
+    const rect = editor.getBoundingClientRect();
+    return {
+      viewportWidth: window.innerWidth,
+      documentScrollWidth: document.documentElement.scrollWidth,
+      bodyScrollWidth: document.body.scrollWidth,
+      editorLeft: rect.left,
+      editorRight: rect.right,
+    };
+  });
+
+  expect(layout.viewportWidth).toBe(320);
+  expect(layout.documentScrollWidth).toBeLessThanOrEqual(layout.viewportWidth);
+  expect(layout.bodyScrollWidth).toBeLessThanOrEqual(layout.viewportWidth);
+  expect(layout.editorLeft).toBeGreaterThanOrEqual(0);
+  expect(layout.editorRight).toBeLessThanOrEqual(layout.viewportWidth);
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From a7c120b0a0dc4d19fdf53e37d05180d6c1b18e9a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 01:48:15 -0700
Subject: [PATCH 147/258] docs(reference-host): record narrow viewport evidence

---
 examples/reference-host/README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 1fb4a044..a239ebb6 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -67,10 +67,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, and the deterministic read-only transition. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, the deterministic read-only transition, and a 320px narrow-viewport journey. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, forced-colors/print/narrow-viewport journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, forced-colors/print journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From a05dd94509f2b2c1c15357c769746b150a5abe9d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 02:10:13 -0700
Subject: [PATCH 148/258] test(reference-host): exercise buyer print journey

---
 .../reference-host.print.browser.spec.ts      | 61 +++++++++++++++++++
 1 file changed, 61 insertions(+)

diff --git a/tests/browser/specs/reference-host.print.browser.spec.ts b/tests/browser/specs/reference-host.print.browser.spec.ts
index eba64f34..979cb922 100644
--- a/tests/browser/specs/reference-host.print.browser.spec.ts
+++ b/tests/browser/specs/reference-host.print.browser.spec.ts
@@ -184,3 +184,64 @@ test('keeps the buyer host usable without horizontal overflow at a narrow viewpo
   expect(rejectedRequests).toEqual([]);
   expect(pageErrors).toEqual([]);
 });
+
+test('applies the package print contract inside the real buyer host without runtime network', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  await page.emulateMedia({ media: 'print' });
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  await expect(
+    page.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(page.locator('.cwl-editor__content')).toContainText('Draft');
+  await expect(page.locator('.cwl-toolbar')).toBeHidden();
+
+  const printStyles = await page.evaluate(() => {
+    const editor = document.querySelector<HTMLElement>('.cwl-editor');
+    const surface = document.querySelector<HTMLElement>('.cwl-editor__surface');
+    const content = document.querySelector<HTMLElement>('.cwl-editor__content');
+    if (!editor || !surface || !content) {
+      throw new Error('reference host print surface is incomplete');
+    }
+    const editorStyle = getComputedStyle(editor);
+    const surfaceStyle = getComputedStyle(surface);
+    const contentStyle = getComputedStyle(content);
+    return {
+      printMediaMatches: matchMedia('print').matches,
+      editorOverflow: editorStyle.overflow,
+      editorBorderTopWidth: editorStyle.borderTopWidth,
+      surfaceOverflow: surfaceStyle.overflow,
+      surfaceMaxHeight: surfaceStyle.maxHeight,
+      contentMinHeight: contentStyle.minHeight,
+      contentPaddingTop: contentStyle.paddingTop,
+    };
+  });
+
+  expect(printStyles.printMediaMatches).toBe(true);
+  expect(printStyles.editorOverflow).toBe('visible');
+  expect(printStyles.editorBorderTopWidth).toBe('0px');
+  expect(printStyles.surfaceOverflow).toBe('visible');
+  expect(printStyles.surfaceMaxHeight).toBe('none');
+  expect(printStyles.contentMinHeight).toBe('0px');
+  expect(printStyles.contentPaddingTop).toBe('0px');
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From b851c18309b4cfd0370fdd74b55d8e2f7aabdb07 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 02:19:48 -0700
Subject: [PATCH 149/258] fix(reference-host): load public editor presentation
 contract

---
 examples/reference-host/browser-host.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/examples/reference-host/browser-host.tsx b/examples/reference-host/browser-host.tsx
index 21c94eeb..109a1d09 100644
--- a/examples/reference-host/browser-host.tsx
+++ b/examples/reference-host/browser-host.tsx
@@ -1,3 +1,4 @@
+import '@contextualwisdomlab/cwl-editor/styles.css';
 import { hydrateRoot } from 'react-dom/client';
 
 import { ReferenceHostApp } from './reference-host-app.js';

From 95dcc93db3b62413d0ad5b0fb1eb211924d2e2f5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 02:24:54 -0700
Subject: [PATCH 150/258] docs(reference-host): align buyer print evidence

---
 examples/reference-host/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index a239ebb6..56506381 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -13,7 +13,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
-- `browser-host.tsx` hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution, supports a deterministic `?readOnly=1` host state for fail-closed write-admission evidence, and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
+- `browser-host.tsx` imports Inkspan's public `styles.css` package contract and hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution. It supports a deterministic `?readOnly=1` host state for fail-closed write-admission evidence, exercises the package print-media presentation contract without an external runtime request, and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
@@ -67,10 +67,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, the deterministic read-only transition, and a 320px narrow-viewport journey. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, the deterministic read-only transition, a 320px narrow-viewport journey, and the host's opt-in public package print-media contract. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey runs the real buyer host under print media, requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, forced-colors/print journeys, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, a forced-colors journey plus print revalidation over the future exact-packed host, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From a589f65b2b633cb66738624e55b3780bb01f9762 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 04:07:20 -0700
Subject: [PATCH 151/258] test(reference-host): exercise forced-colors buyer
 journey

---
 ...e-host-forced-colors.print.browser.spec.ts | 81 +++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 tests/browser/specs/reference-host-forced-colors.print.browser.spec.ts

diff --git a/tests/browser/specs/reference-host-forced-colors.print.browser.spec.ts b/tests/browser/specs/reference-host-forced-colors.print.browser.spec.ts
new file mode 100644
index 00000000..b8a5f9fa
--- /dev/null
+++ b/tests/browser/specs/reference-host-forced-colors.print.browser.spec.ts
@@ -0,0 +1,81 @@
+import { expect, test } from '@playwright/test';
+
+const REFERENCE_HOST_URL =
+  'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
+
+function isReferenceHostRequest(requestUrl: string): boolean {
+  const url = new URL(requestUrl);
+  return (
+    url.protocol === 'http:' &&
+    url.hostname === '127.0.0.1' &&
+    url.port === '4173'
+  );
+}
+
+test.describe.configure({ mode: 'serial' });
+
+test('keeps the real buyer host operable in forced-colors mode without runtime network', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  await page.emulateMedia({ forcedColors: 'active' });
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  await expect(
+    page.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(page.getByRole('textbox')).toBeVisible();
+  await expect(page.getByRole('button', { name: 'Save document' })).toBeVisible();
+  await expect(page.getByRole('button', { name: 'Reset draft' })).toBeVisible();
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Draft');
+  await expect(page.getByText('Loading buyer editor')).toHaveCount(0);
+
+  const toolbarButton = page.locator('.cwl-tb-btn').first();
+  await expect(toolbarButton).toBeVisible();
+  await toolbarButton.focus();
+
+  const forcedColorsEvidence = await page.evaluate(() => {
+    const editor = document.querySelector<HTMLElement>('.cwl-editor');
+    const toolbarControl = document.querySelector<HTMLElement>('.cwl-tb-btn');
+    if (!editor || !toolbarControl) {
+      throw new Error('reference host forced-colors surface is incomplete');
+    }
+    const editorStyle = getComputedStyle(editor);
+    const toolbarStyle = getComputedStyle(toolbarControl);
+    return {
+      forcedColorsMatches: matchMedia('(forced-colors: active)').matches,
+      editorColor: editorStyle.color,
+      editorBackgroundColor: editorStyle.backgroundColor,
+      outlineStyle: toolbarStyle.outlineStyle,
+      outlineWidth: toolbarStyle.outlineWidth,
+      outlineColor: toolbarStyle.outlineColor,
+    };
+  });
+
+  expect(forcedColorsEvidence.forcedColorsMatches).toBe(true);
+  expect(forcedColorsEvidence.editorColor).not.toBe('rgba(0, 0, 0, 0)');
+  expect(forcedColorsEvidence.editorBackgroundColor).not.toBe('rgba(0, 0, 0, 0)');
+  expect(forcedColorsEvidence.outlineStyle).not.toBe('none');
+  expect(forcedColorsEvidence.outlineWidth).not.toBe('0px');
+  expect(forcedColorsEvidence.outlineColor).not.toBe('rgba(0, 0, 0, 0)');
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From 6649758b79f4d3fcde95e87f25d49f4ca4738d3c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 04:19:28 -0700
Subject: [PATCH 152/258] test(reference-host): require packed browser package
 binding

---
 src/referenceHostPackedBrowserBinding.test.ts | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 src/referenceHostPackedBrowserBinding.test.ts

diff --git a/src/referenceHostPackedBrowserBinding.test.ts b/src/referenceHostPackedBrowserBinding.test.ts
new file mode 100644
index 00000000..691274bb
--- /dev/null
+++ b/src/referenceHostPackedBrowserBinding.test.ts
@@ -0,0 +1,41 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+function repositoryFile(path: string): string {
+  return readFileSync(resolve(process.cwd(), path), 'utf8');
+}
+
+describe('reference-host packed browser binding', () => {
+  it('routes the buyer host public package imports through the exact packed release artifact', () => {
+    const viteConfig = repositoryFile('tests/browser/vite.config.ts');
+    const nativeFormHost = repositoryFile(
+      'examples/reference-host/native-form-host.tsx',
+    );
+    const browserHost = repositoryFile(
+      'examples/reference-host/browser-host.tsx',
+    );
+
+    expect(nativeFormHost).toContain(
+      "from '@contextualwisdomlab/cwl-editor'",
+    );
+    expect(browserHost).toContain(
+      "import '@contextualwisdomlab/cwl-editor/styles.css'",
+    );
+    expect(nativeFormHost).not.toContain('inkspan-browser-under-test');
+    expect(browserHost).not.toContain('inkspan-browser-under-test');
+
+    expect(viteConfig).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY');
+    expect(viteConfig).toContain(
+      "find: '@contextualwisdomlab/cwl-editor/styles.css'",
+    );
+    expect(viteConfig).toContain(
+      "find: '@contextualwisdomlab/cwl-editor'",
+    );
+    expect(viteConfig).toContain(
+      "resolve(packedPackageRoot, 'dist/cwl-editor.css')",
+    );
+    expect(viteConfig).toContain('replacement: packageEntry');
+  });
+});

From 5ceae9af82ef3003add79b7dc7f6d826173bec96 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 04:20:04 -0700
Subject: [PATCH 153/258] fix(reference-host): bind release browser to packed
 package

---
 tests/browser/vite.config.ts | 25 ++++++++++++++++++++++---
 1 file changed, 22 insertions(+), 3 deletions(-)

diff --git a/tests/browser/vite.config.ts b/tests/browser/vite.config.ts
index 50c49dd1..06b0fcfd 100644
--- a/tests/browser/vite.config.ts
+++ b/tests/browser/vite.config.ts
@@ -8,11 +8,30 @@ const configuredPackageEntry = process.env.INKSPAN_BROWSER_PACKAGE_ENTRY?.trim()
 const packageEntry = configuredPackageEntry
   ? resolve(configuredPackageEntry)
   : resolve(repositoryRoot, 'src/index.ts');
+const packedPackageRoot = configuredPackageEntry
+  ? resolve(dirname(packageEntry), '..')
+  : null;
+const alias = [
+  ...(packedPackageRoot
+    ? [
+        {
+          find: '@contextualwisdomlab/cwl-editor/styles.css',
+          replacement: resolve(packedPackageRoot, 'dist/cwl-editor.css'),
+        },
+        {
+          find: '@contextualwisdomlab/cwl-editor',
+          replacement: packageEntry,
+        },
+      ]
+    : []),
+  {
+    find: 'inkspan-browser-under-test',
+    replacement: packageEntry,
+  },
+];
 
 export default defineConfig({
   resolve: {
-    alias: {
-      'inkspan-browser-under-test': packageEntry,
-    },
+    alias,
   },
 });

From 93a06e1b0fc724115e8e332e11ac388e1e876ccb Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 05:36:54 -0700
Subject: [PATCH 154/258] test(reference-host): bound autosave validators

---
 src/referenceHostAutosaveViewModel.test.ts | 41 ++++++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index 9adf3466..c773c17c 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -92,6 +92,47 @@ describe('reference-host autosave presentation contract', () => {
     });
   });
 
+  it('bounds non-null validator fields before projecting autosave state', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createAutosaveViewModel } from ${moduleUrl};
+      const oversized = 'x'.repeat(257);
+      const candidate = {
+        state: 'saving',
+        blockedReason: null,
+        activeStrongEntityTag: null,
+        pendingStrongEntityTag: null,
+        lastSavedStrongEntityTag: null,
+      };
+      const errors = {};
+      for (const field of [
+        'activeStrongEntityTag',
+        'pendingStrongEntityTag',
+        'lastSavedStrongEntityTag',
+      ]) {
+        try {
+          createAutosaveViewModel().observe({ ...candidate, [field]: oversized });
+          errors[field] = null;
+        } catch (error) {
+          errors[field] = error instanceof Error ? error.message : 'unexpected error';
+        }
+      }
+      process.stdout.write(JSON.stringify(errors));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      activeStrongEntityTag: 'activeStrongEntityTag is invalid.',
+      pendingStrongEntityTag: 'pendingStrongEntityTag is invalid.',
+      lastSavedStrongEntityTag: 'lastSavedStrongEntityTag is invalid.',
+    });
+  });
+
   it('rejects accessor-backed lifecycle snapshots without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 7ea44dc43bb6cf2f93d9976edfe1643e37ede774 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 05:38:23 -0700
Subject: [PATCH 155/258] fix(reference-host): bound autosave validators

---
 examples/reference-host/autosave-view-model.mjs | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index ff4b4ab2..a3089e5e 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -6,6 +6,7 @@ const AUTOSAVE_STATES = new Set([
   'closed',
 ]);
 const BLOCKED_REASONS = new Set(['conflict', 'failure']);
+const MAX_STRONG_ENTITY_TAG_CODE_UNITS = 256;
 const SNAPSHOT_KEYS = [
   'state',
   'blockedReason',
@@ -18,7 +19,12 @@ const SNAPSHOT_KEYS = [
 export const REFERENCE_ONLY = true;
 
 function requireNullableString(value, label) {
-  if (value !== null && (typeof value !== 'string' || value.length === 0)) {
+  if (
+    value !== null &&
+    (typeof value !== 'string' ||
+      value.length === 0 ||
+      value.length > MAX_STRONG_ENTITY_TAG_CODE_UNITS)
+  ) {
     throw new TypeError(`${label} is invalid.`);
   }
   return value;
@@ -108,7 +114,9 @@ function presentation(viewState) {
  *
  * `observe()` consumes only programmatic queue/session snapshots. Snapshot fields
  * must be an exact own-data-property shape so presentation never invokes
- * caller-owned accessors or silently admits authority-looking metadata.
+ * caller-owned accessors or silently admits authority-looking metadata. Strong
+ * entity tags are also bounded before projection so untrusted snapshot metadata
+ * cannot allocate unbounded retained strings at this reference boundary.
  * A blocked to saving transition is presented as retrying, and only a later idle
  * transition after that observed retry is presented as recovered. A blocked to
  * idle transition without an intervening save returns to clean instead of

From afd6f5703ea9085f2692b62c970f3f4495b76eaf Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 06:36:48 -0700
Subject: [PATCH 156/258] test(reference-host): reject malformed strong entity
 tags

---
 src/referenceHostAutosaveViewModel.test.ts | 48 ++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/src/referenceHostAutosaveViewModel.test.ts b/src/referenceHostAutosaveViewModel.test.ts
index c773c17c..052263d1 100644
--- a/src/referenceHostAutosaveViewModel.test.ts
+++ b/src/referenceHostAutosaveViewModel.test.ts
@@ -133,6 +133,54 @@ describe('reference-host autosave presentation contract', () => {
     });
   });
 
+  it('rejects weak and malformed values labeled as strong entity tags', () => {
+    if (!existsSync(fixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createAutosaveViewModel } from ${moduleUrl};
+      const candidate = {
+        state: 'saving',
+        blockedReason: null,
+        activeStrongEntityTag: null,
+        pendingStrongEntityTag: null,
+        lastSavedStrongEntityTag: null,
+      };
+      const candidates = [
+        ['weak', 'W/"weak"'],
+        ['unquoted', 'opaque'],
+        ['embeddedQuote', '"bad"quote"'],
+        ['control', '"line\\nbreak"'],
+        ['nonOctet', '"😀"'],
+      ];
+      const errors = {};
+      for (const [name, value] of candidates) {
+        try {
+          createAutosaveViewModel().observe({
+            ...candidate,
+            activeStrongEntityTag: value,
+          });
+          errors[name] = null;
+        } catch (error) {
+          errors[name] = error instanceof Error ? error.message : 'unexpected error';
+        }
+      }
+      process.stdout.write(JSON.stringify(errors));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      weak: 'activeStrongEntityTag is invalid.',
+      unquoted: 'activeStrongEntityTag is invalid.',
+      embeddedQuote: 'activeStrongEntityTag is invalid.',
+      control: 'activeStrongEntityTag is invalid.',
+      nonOctet: 'activeStrongEntityTag is invalid.',
+    });
+  });
+
   it('rejects accessor-backed lifecycle snapshots without invoking them', () => {
     if (!existsSync(fixturePath)) return;
     const output = execFileSync(

From 890be94dae466419809c4fb5afd44823e0b10b2e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 06:39:19 -0700
Subject: [PATCH 157/258] fix(reference-host): validate strong entity-tag
 syntax

---
 .../reference-host/autosave-view-model.mjs     | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/autosave-view-model.mjs b/examples/reference-host/autosave-view-model.mjs
index a3089e5e..b5479c9d 100644
--- a/examples/reference-host/autosave-view-model.mjs
+++ b/examples/reference-host/autosave-view-model.mjs
@@ -7,6 +7,7 @@ const AUTOSAVE_STATES = new Set([
 ]);
 const BLOCKED_REASONS = new Set(['conflict', 'failure']);
 const MAX_STRONG_ENTITY_TAG_CODE_UNITS = 256;
+const STRONG_ENTITY_TAG_PATTERN = /^"[\x21\x23-\x7e\x80-\xff]*"$/u;
 const SNAPSHOT_KEYS = [
   'state',
   'blockedReason',
@@ -18,12 +19,12 @@ const SNAPSHOT_KEYS = [
 /** Marker used by repository contracts to prevent this host fixture becoming runtime authority. */
 export const REFERENCE_ONLY = true;
 
-function requireNullableString(value, label) {
+function requireNullableStrongEntityTag(value, label) {
   if (
     value !== null &&
     (typeof value !== 'string' ||
-      value.length === 0 ||
-      value.length > MAX_STRONG_ENTITY_TAG_CODE_UNITS)
+      value.length > MAX_STRONG_ENTITY_TAG_CODE_UNITS ||
+      !STRONG_ENTITY_TAG_PATTERN.test(value))
   ) {
     throw new TypeError(`${label} is invalid.`);
   }
@@ -81,15 +82,15 @@ function readSnapshot(source) {
   return Object.freeze({
     state: snapshot.state,
     blockedReason: snapshot.blockedReason,
-    activeStrongEntityTag: requireNullableString(
+    activeStrongEntityTag: requireNullableStrongEntityTag(
       snapshot.activeStrongEntityTag,
       'activeStrongEntityTag',
     ),
-    pendingStrongEntityTag: requireNullableString(
+    pendingStrongEntityTag: requireNullableStrongEntityTag(
       snapshot.pendingStrongEntityTag,
       'pendingStrongEntityTag',
     ),
-    lastSavedStrongEntityTag: requireNullableString(
+    lastSavedStrongEntityTag: requireNullableStrongEntityTag(
       snapshot.lastSavedStrongEntityTag,
       'lastSavedStrongEntityTag',
     ),
@@ -115,8 +116,9 @@ function presentation(viewState) {
  * `observe()` consumes only programmatic queue/session snapshots. Snapshot fields
  * must be an exact own-data-property shape so presentation never invokes
  * caller-owned accessors or silently admits authority-looking metadata. Strong
- * entity tags are also bounded before projection so untrusted snapshot metadata
- * cannot allocate unbounded retained strings at this reference boundary.
+ * entity tags are validated as bounded RFC 9110 strong entity-tags before
+ * projection so untrusted snapshot metadata cannot masquerade as a durable
+ * validator or allocate unbounded retained strings at this reference boundary.
  * A blocked to saving transition is presented as retrying, and only a later idle
  * transition after that observed retry is presented as recovered. A blocked to
  * idle transition without an intervening save returns to clean instead of

From 08eb81d8125c497249ce309e7405eb2b4a16856e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 09:05:59 -0700
Subject: [PATCH 158/258] test(reference-host): require controlled and
 uncontrolled form modes

---
 src/referenceHostNativeFormJourney.test.ts | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 9b499377..0e00b20d 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -77,4 +77,24 @@ describe('reference-host native form journey', () => {
       /type="reset"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,
     );
   });
+
+  it('demonstrates both uncontrolled and host-controlled editor composition without moving persistence authority into Inkspan', () => {
+    expect(nativeFormHostSource).toContain(
+      "controlMode?: 'controlled' | 'uncontrolled';",
+    );
+    expect(nativeFormHostSource).toContain("controlMode = 'uncontrolled'");
+    expect(nativeFormHostSource).toContain(
+      "const [controlledValue, setControlledValue] = useState('# Draft');",
+    );
+    expect(nativeFormHostSource).toContain(
+      "controlMode === 'controlled'",
+    );
+    expect(nativeFormHostSource).toContain('value={controlledValue}');
+    expect(nativeFormHostSource).toContain('onChange={setControlledValue}');
+    expect(nativeFormHostSource).toContain("defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}");
+    expect(nativeFormHostSource).toContain(
+      "if (controlMode === 'controlled') {",
+    );
+    expect(nativeFormHostSource).toContain("setControlledValue('# Draft');");
+  });
 });

From 93512cd08b7b81e122f6e9eeb5cc0b5623984859 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 09:06:34 -0700
Subject: [PATCH 159/258] feat(reference-host): demonstrate controlled editor
 composition

---
 examples/reference-host/native-form-host.tsx | 31 +++++++++++++++-----
 1 file changed, 23 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 23110e0e..fa31627b 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -14,6 +14,12 @@ export interface NativeFormHostProps {
    * credentials, tenancy, or storage for the embedding application.
    */
   onAuthorizedSubmit(messageBody: string): Promise<void> | void;
+  /**
+   * Demonstration mode for the public controlled and uncontrolled editor APIs.
+   * This changes only local React ownership of the current value; durable
+   * persistence and authorization remain host-owned through onAuthorizedSubmit.
+   */
+  controlMode?: 'controlled' | 'uncontrolled';
   /**
    * Host-owned write permission presentation.
    *
@@ -31,20 +37,24 @@ export interface NativeFormHostProps {
  * Inkspan owns synchronization of the editor document into the native form
  * control. The host reads FormData at submit time and then applies its own
  * authorization and durable-persistence policy through onAuthorizedSubmit.
- * Overlapping submissions and form resets are blocked by the synchronous
- * single-flight admission gate while the host callback is in flight; React
- * presentation state is not used as the mutation authority. Host read-only
- * state additionally fail-closes native form writes and disables the named
- * field without moving authorization authority into Inkspan. A later
- * successful reset returns the host presentation to an explicitly unsaved
- * state.
+ * Both the public controlled and uncontrolled editor compositions are supported
+ * without changing that boundary. Overlapping submissions and form resets are
+ * blocked by the synchronous single-flight admission gate while the host
+ * callback is in flight; React presentation state is not used as the mutation
+ * authority. Host read-only state additionally fail-closes native form writes
+ * and disables the named field without moving authorization authority into
+ * Inkspan. A later successful reset returns the host presentation to an
+ * explicitly unsaved state and restores the controlled example value when that
+ * mode is selected.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
+  controlMode = 'uncontrolled',
   readOnly = false,
 }: NativeFormHostProps) {
   const [submissionState, setSubmissionState] =
     useState<SubmissionState>('idle');
+  const [controlledValue, setControlledValue] = useState('# Draft');
   const onAuthorizedSubmitRef = useRef(onAuthorizedSubmit);
   onAuthorizedSubmitRef.current = onAuthorizedSubmit;
 
@@ -84,6 +94,9 @@ export function NativeFormHost({
       event.preventDefault();
       return;
     }
+    if (controlMode === 'controlled') {
+      setControlledValue('# Draft');
+    }
     setSubmissionState('idle');
   }
 
@@ -91,7 +104,9 @@ export function NativeFormHost({
     <form onSubmit={handleSubmit} onReset={handleReset}>
       <CwlEditor
         mode="markdown"
-        defaultValue="# Draft"
+        value={controlMode === 'controlled' ? controlledValue : undefined}
+        onChange={controlMode === 'controlled' ? setControlledValue : undefined}
+        defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}
         editable={!readOnly}
         formFieldName="message_body"
         formFieldDisabled={readOnly}

From 1b43592ec8e6dfc4d4fd0caf909949ae157fa536 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 09:10:10 -0700
Subject: [PATCH 160/258] test(reference-host): match conditional controlled
 binding

---
 src/referenceHostNativeFormJourney.test.ts | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 0e00b20d..04a4facc 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -87,11 +87,14 @@ describe('reference-host native form journey', () => {
       "const [controlledValue, setControlledValue] = useState('# Draft');",
     );
     expect(nativeFormHostSource).toContain(
-      "controlMode === 'controlled'",
+      "value={controlMode === 'controlled' ? controlledValue : undefined}",
+    );
+    expect(nativeFormHostSource).toContain(
+      "onChange={controlMode === 'controlled' ? setControlledValue : undefined}",
+    );
+    expect(nativeFormHostSource).toContain(
+      "defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}",
     );
-    expect(nativeFormHostSource).toContain('value={controlledValue}');
-    expect(nativeFormHostSource).toContain('onChange={setControlledValue}');
-    expect(nativeFormHostSource).toContain("defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}");
     expect(nativeFormHostSource).toContain(
       "if (controlMode === 'controlled') {",
     );

From 89cc471410e9a6ba648b02870382494609c0cd04 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 09:17:31 -0700
Subject: [PATCH 161/258] test(ci): require packed reference-host browser
 artifact

---
 scripts/release-metadata.test.mjs | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/scripts/release-metadata.test.mjs b/scripts/release-metadata.test.mjs
index 768e4ec4..506c08a1 100644
--- a/scripts/release-metadata.test.mjs
+++ b/scripts/release-metadata.test.mjs
@@ -69,3 +69,22 @@ test('preserves historical 0.5.29 release evidence and doctoring identity', () =
     true,
   );
 });
+
+test('CI browser evidence installs the exact packed editor instead of source fallback', () => {
+  const ciWorkflow = readRepositoryText('.github/workflows/ci.yml');
+  const packIndex = ciWorkflow.indexOf(
+    '- name: Pack exact editor artifact for browser verification',
+  );
+  const entryIndex = ciWorkflow.indexOf('INKSPAN_BROWSER_PACKAGE_ENTRY=');
+  const playwrightIndex = ciWorkflow.indexOf(
+    '- name: Verify real-engine rich clipboard release evidence',
+  );
+
+  assert.notEqual(packIndex, -1);
+  assert.notEqual(entryIndex, -1);
+  assert.notEqual(playwrightIndex, -1);
+  assert.equal(ciWorkflow.includes('npm pack --ignore-scripts --json'), true);
+  assert.equal(ciWorkflow.includes("package_name != '@contextualwisdomlab/cwl-editor'"), true);
+  assert.equal(packIndex < entryIndex, true);
+  assert.equal(entryIndex < playwrightIndex, true);
+});

From 8aa2370c115e86b4cd4c687c9831c7916542260c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 09:22:28 -0700
Subject: [PATCH 162/258] fix(ci): bind reference-host browser evidence to
 packed artifact

---
 .github/workflows/ci.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 210bbdb8..2bc3cc30 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -64,11 +64,33 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Install browser-test dependencies from the isolated immutable lock
         run: pnpm --dir tests/browser install --frozen-lockfile
+      - name: Pack exact editor artifact for browser verification
+        run: |
+          set -euo pipefail
+          pnpm build
+          pack_json="$(npm pack --ignore-scripts --json)"
+          package_file="$(printf '%s' "$pack_json" | node -e "let input=''; process.stdin.on('data', chunk => input += chunk); process.stdin.on('end', () => process.stdout.write(JSON.parse(input)[0].filename));")"
+          package_target="$GITHUB_WORKSPACE/tests/browser/node_modules/@contextualwisdomlab/cwl-editor"
+          package_sha="$(sha256sum -- "$package_file" | awk '{print $1}')"
+          rm -rf "$package_target"
+          mkdir -p "$package_target"
+          tar -xzf "$package_file" --strip-components=1 -C "$package_target"
+          test -f "$package_target/package.json"
+          test -f "$package_target/dist/cwl-editor.js"
+          package_name="$(node -e "const fs=require('node:fs'); const p=JSON.parse(fs.readFileSync(process.argv[1], 'utf8')); process.stdout.write(p.name || '')" "$package_target/package.json")"
+          if [[ "$package_name" != '@contextualwisdomlab/cwl-editor' ]]; then
+            echo "::error::Packed browser artifact has an unexpected package identity."
+            exit 1
+          fi
+          echo "INKSPAN_BROWSER_PACKAGE_ENTRY=$package_target/dist/cwl-editor.js" >> "$GITHUB_ENV"
+          echo "INKSPAN_EXPECTED_PACKAGE_SHA256=$package_sha" >> "$GITHUB_ENV"
+          rm -f -- "$package_file"
       - name: Install Playwright browser revisions pinned by 1.62.0
         run: pnpm --dir tests/browser exec playwright install --with-deps chromium firefox webkit
       - name: Verify real-engine rich clipboard release evidence
         env:
           INKSPAN_EXPECTED_HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+          INKSPAN_EXPECTED_PACKAGE_SHA256: ${{ env.INKSPAN_EXPECTED_PACKAGE_SHA256 }}
         run: pnpm --dir tests/browser exec playwright test --config playwright.config.ts
 
   office:

From 49eae9a564a5c1331b3327ccbf30af7a204b7297 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 10:10:01 -0700
Subject: [PATCH 163/258] fix(ci): align packed browser identity contract

---
 scripts/release-metadata.test.mjs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/scripts/release-metadata.test.mjs b/scripts/release-metadata.test.mjs
index 506c08a1..641549b4 100644
--- a/scripts/release-metadata.test.mjs
+++ b/scripts/release-metadata.test.mjs
@@ -84,7 +84,12 @@ test('CI browser evidence installs the exact packed editor instead of source fal
   assert.notEqual(entryIndex, -1);
   assert.notEqual(playwrightIndex, -1);
   assert.equal(ciWorkflow.includes('npm pack --ignore-scripts --json'), true);
-  assert.equal(ciWorkflow.includes("package_name != '@contextualwisdomlab/cwl-editor'"), true);
+  assert.equal(
+    ciWorkflow.includes(
+      "if [[ \"$package_name\" != '@contextualwisdomlab/cwl-editor' ]]; then",
+    ),
+    true,
+  );
   assert.equal(packIndex < entryIndex, true);
   assert.equal(entryIndex < playwrightIndex, true);
 });

From 369b9635a303d83bbe8666c6387bccaca9bf3b4c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 11:35:56 -0700
Subject: [PATCH 164/258] test(reference-host): contain Office handoff
 reflection

---
 src/referenceHostReflectionContainment.test.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
index 8cf45553..c16d9cb3 100644
--- a/src/referenceHostReflectionContainment.test.ts
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -69,6 +69,18 @@ describe('reference-host hostile reflection containment', () => {
         'await module.createDelayedProposal(hostileSource);',
       ),
     ).toBe('proposal creation is invalid.');
+    expect(
+      observeHostileReflectionFailure(
+        'examples/reference-host/office-handoff.mjs',
+        `{
+          get(_target, property) {
+            if (property === 'title') throw privateSentinel;
+            return undefined;
+          },
+        }`,
+        'module.createReferenceDocxRequest(hostileSource);',
+      ),
+    ).toBe('Office handoff input is invalid.');
     expect(
       observeHostileReflectionFailure(
         'examples/reference-host/autosave-view-model.mjs',

From 1bc207529506306e60232fcb9217fd78e8e1a2c5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 11:39:49 -0700
Subject: [PATCH 165/258] test(reference-host): isolate Office reflection
 harness

---
 ...referenceHostReflectionContainment.test.ts | 23 ++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostReflectionContainment.test.ts b/src/referenceHostReflectionContainment.test.ts
index c16d9cb3..54686ad6 100644
--- a/src/referenceHostReflectionContainment.test.ts
+++ b/src/referenceHostReflectionContainment.test.ts
@@ -1,15 +1,36 @@
 import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 
 import { describe, expect, it } from 'vitest';
 
+const OFFICE_MARKDOWN_IMPORT =
+  "import { markdownToPlainText } from '@contextualwisdomlab/cwl-editor/markdown';";
+
+function fixtureModuleUrl(fixture: string): string {
+  const path = resolve(process.cwd(), fixture);
+  if (fixture !== 'examples/reference-host/office-handoff.mjs') {
+    return pathToFileURL(path).href;
+  }
+
+  const source = readFileSync(path, 'utf8');
+  const isolatedSource = source.replace(
+    OFFICE_MARKDOWN_IMPORT,
+    'const markdownToPlainText = (markdown) => markdown;',
+  );
+  if (isolatedSource === source) {
+    throw new Error('Office handoff public Markdown import contract changed.');
+  }
+  return `data:text/javascript;base64,${Buffer.from(isolatedSource, 'utf8').toString('base64')}`;
+}
+
 function observeHostileReflectionFailure(
   fixture: string,
   sourceTrap: string,
   call: string,
 ): string {
-  const fixtureUrl = pathToFileURL(resolve(process.cwd(), fixture)).href;
+  const fixtureUrl = fixtureModuleUrl(fixture);
   const script = `
     const module = await import(${JSON.stringify(fixtureUrl)});
     const privateSentinel = 'private-reflection-sentinel';

From f82d09a1edb0902ee93ff29f7d41f2f56ab5bb8f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 11:42:40 -0700
Subject: [PATCH 166/258] fix(reference-host): contain Office handoff
 reflection

---
 examples/reference-host/office-handoff.mjs | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/office-handoff.mjs b/examples/reference-host/office-handoff.mjs
index f10fa107..0935c5f0 100644
--- a/examples/reference-host/office-handoff.mjs
+++ b/examples/reference-host/office-handoff.mjs
@@ -7,6 +7,17 @@ function requireNonEmptyString(value, fieldName) {
   return value;
 }
 
+function readOfficeHandoffInput(input) {
+  try {
+    return {
+      title: input.title,
+      markdown: input.markdown,
+    };
+  } catch {
+    throw new TypeError('Office handoff input is invalid.');
+  }
+}
+
 /**
  * Create a bounded reference-only DOCX request from editor Markdown.
  *
@@ -15,11 +26,14 @@ function requireNonEmptyString(value, fieldName) {
  * request. This example does not claim Markdown-to-OOXML round-trip fidelity,
  * perform Office rendering, authorize export, choose a filesystem path, or
  * persist/distribute the resulting artifact; those remain host responsibilities.
+ * Host input reflection failures are normalized at this boundary instead of
+ * exposing caller-controlled exception values.
  *
  * @param {{ title: string, markdown: string }} input host-owned export input
  * @returns {{ format: 'docx', title: string, blocks: readonly [{ type: 'paragraph', text: string }] }}
  */
-export function createReferenceDocxRequest({ title, markdown }) {
+export function createReferenceDocxRequest(input) {
+  const { title, markdown } = readOfficeHandoffInput(input);
   const acceptedTitle = requireNonEmptyString(title, 'title');
   if (typeof markdown !== 'string') {
     throw new TypeError('markdown must be a string.');

From 04f307f3ba404d8ecc41da9258cb3fcee8d23707 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 12:00:51 -0700
Subject: [PATCH 167/258] test(reference-host): expose async proposal apply
 false-success

---
 ...tDelayedProposalApplicationFailure.test.ts | 46 +++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/src/referenceHostDelayedProposalApplicationFailure.test.ts b/src/referenceHostDelayedProposalApplicationFailure.test.ts
index b862da2c..9a5246fe 100644
--- a/src/referenceHostDelayedProposalApplicationFailure.test.ts
+++ b/src/referenceHostDelayedProposalApplicationFailure.test.ts
@@ -47,4 +47,50 @@ describe('reference-host delayed proposal application failure', () => {
       leakedPrivateCause: false,
     });
   });
+
+  it('does not report applied when a host apply thenable rejects asynchronously', () => {
+    const fixtureUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { applyDelayedProposal, createDelayedProposal } from ${fixtureUrl};
+      const privateCause = 'private async host apply cause';
+      const proposal = await createDelayedProposal({
+        expectedRevision: 'revision-v1',
+        replacement: 'Accepted proposal',
+      });
+      let error = null;
+      let status = null;
+      try {
+        const result = await applyDelayedProposal({
+          proposal,
+          currentRevision: 'revision-v1',
+          apply() {
+            return {
+              then(_resolve, reject) {
+                reject(new Error(privateCause));
+              },
+            };
+          },
+        });
+        status = result.status;
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        error,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+        status,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'proposal application failed.',
+      leakedPrivateCause: false,
+      status: null,
+    });
+  });
 });

From b94845bb23fa9ed8841f25a208a15f51453c7fc8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 12:05:13 -0700
Subject: [PATCH 168/258] fix(reference-host): settle async proposal callbacks

---
 examples/reference-host/delayed-proposal.mjs | 35 +++++++++++++++++++-
 1 file changed, 34 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/delayed-proposal.mjs b/examples/reference-host/delayed-proposal.mjs
index 3afdc1b9..d2d0e770 100644
--- a/examples/reference-host/delayed-proposal.mjs
+++ b/examples/reference-host/delayed-proposal.mjs
@@ -127,11 +127,44 @@ export function applyDelayedProposal(source) {
     return Object.freeze({ status: 'conflict' });
   }
 
+  let applicationResult;
   try {
-    application.apply(replacement);
+    applicationResult = application.apply(replacement);
   } catch {
     throw new Error('proposal application failed.');
   }
+
+  if (
+    (typeof applicationResult === 'object' && applicationResult !== null) ||
+    typeof applicationResult === 'function'
+  ) {
+    let then;
+    try {
+      then = applicationResult.then;
+    } catch {
+      throw new Error('proposal application failed.');
+    }
+
+    if (typeof then === 'function') {
+      return new Promise((resolve, reject) => {
+        try {
+          then.call(
+            applicationResult,
+            () => resolve(),
+            () => reject(),
+          );
+        } catch {
+          reject();
+        }
+      }).then(
+        () => Object.freeze({ status: 'applied' }),
+        () => {
+          throw new Error('proposal application failed.');
+        },
+      );
+    }
+  }
+
   return Object.freeze({ status: 'applied' });
 }
 

From 447209457011678075bc09ecde6c13962ecf59e9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 12:08:56 -0700
Subject: [PATCH 169/258] test(reference-host): expose dropped control mode

---
 src/referenceHostApplicationHydration.test.tsx | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/referenceHostApplicationHydration.test.tsx b/src/referenceHostApplicationHydration.test.tsx
index 83ea3fce..e1b04762 100644
--- a/src/referenceHostApplicationHydration.test.tsx
+++ b/src/referenceHostApplicationHydration.test.tsx
@@ -39,6 +39,11 @@ describe('reference-host application hydration contract', () => {
     expect(applicationSource).toContain('readOnly={readOnly}');
   });
 
+  it('forwards the declared controlled or uncontrolled composition mode into the hydrated native-form host', () => {
+    expect(applicationSource).toContain("controlMode = 'uncontrolled'");
+    expect(applicationSource).toContain('controlMode={controlMode}');
+  });
+
   it('preserves the public-package and host-authority boundary for the hydrated form', () => {
     expect(nativeFormSource).toContain(
       "from '@contextualwisdomlab/cwl-editor'",

From f530b71ee7374b75dbc7c90568299ec2c68073ee Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 12:13:10 -0700
Subject: [PATCH 170/258] fix(reference-host): preserve app control mode

---
 examples/reference-host/reference-host-app.tsx | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/examples/reference-host/reference-host-app.tsx b/examples/reference-host/reference-host-app.tsx
index 73760075..268a35e4 100644
--- a/examples/reference-host/reference-host-app.tsx
+++ b/examples/reference-host/reference-host-app.tsx
@@ -22,6 +22,7 @@ export interface ReferenceHostAppProps extends NativeFormHostProps {
 export function ReferenceHostApp({
   loadingLabel,
   onAuthorizedSubmit,
+  controlMode = 'uncontrolled',
   readOnly = false,
 }: ReferenceHostAppProps) {
   return (
@@ -32,6 +33,7 @@ export function ReferenceHostApp({
         renderEditor={() => (
           <NativeFormHost
             onAuthorizedSubmit={onAuthorizedSubmit}
+            controlMode={controlMode}
             readOnly={readOnly}
           />
         )}

From d07ca94f25712151cbda7db06f9b4c443d7dc7cc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:04:30 -0700
Subject: [PATCH 171/258] test(reference-host): reject async provider connect
 false-success

---
 ...eHostCollaborationAmbiguousConnect.test.ts | 85 +++++++++++++++++++
 1 file changed, 85 insertions(+)

diff --git a/src/referenceHostCollaborationAmbiguousConnect.test.ts b/src/referenceHostCollaborationAmbiguousConnect.test.ts
index c9e52185..2d285e22 100644
--- a/src/referenceHostCollaborationAmbiguousConnect.test.ts
+++ b/src/referenceHostCollaborationAmbiguousConnect.test.ts
@@ -99,4 +99,89 @@ describe('reference-host ambiguous collaboration connect contract', () => {
       retryResult: null,
     });
   });
+
+  it('quarantines promise-returning connect attempts without false success or unhandled rejection', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let generation = 0;
+      let unhandledRejections = 0;
+      process.on('unhandledRejection', () => {
+        unhandledRejections += 1;
+      });
+
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          generation += 1;
+          const current = generation;
+          events.push('provider:create:' + current);
+          return {
+            connect() {
+              events.push('provider:connect:' + current);
+              if (current === 1) {
+                return Promise.reject(new Error('private asynchronous connect failure'));
+              }
+            },
+            disconnect() { events.push('provider:disconnect:' + current); },
+            destroy() { events.push('provider:destroy:' + current); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+
+      let firstError = null;
+      let firstResult = null;
+      try {
+        firstResult = lifecycle.connect();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      await new Promise((resolve) => setImmediate(resolve));
+      const afterFailure = lifecycle.getSnapshot();
+      const recovered = lifecycle.reconnect();
+      const disposeResult = lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        disposeResult,
+        events,
+        firstError,
+        firstResult,
+        recovered,
+        unhandledRejections,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      disposeResult: true,
+      events: [
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'provider:create:2',
+        'provider:connect:2',
+        'provider:disconnect:2',
+        'provider:destroy:2',
+        'document:destroy',
+      ],
+      firstError: 'collaboration lifecycle connection failed.',
+      firstResult: null,
+      recovered: { providerGeneration: 2, status: 'connected' },
+      unhandledRejections: 0,
+    });
+  });
 });

From 3976752bdcb49c289d51658490c1082ead299ee8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:09:59 -0700
Subject: [PATCH 172/258] fix(reference-host): quarantine async provider
 connect

---
 .../collaboration-provider-lifecycle.mjs      | 23 +++++++++++++------
 1 file changed, 16 insertions(+), 7 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 30a4d796..64dab135 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -144,12 +144,15 @@ function teardownFailure() {
  * validation never executes accessor-backed host objects. Initial document and
  * provider callback failures are payload-redacted, acquired documents unwind on
  * initial provider failure, reconnect provider-construction failures remain
- * retryable, connect failures quarantine the indeterminate provider until
- * reconnect/dispose tears it down, and cleanup failures do not prevent remaining
- * teardown attempts. A failed provider or document destruction keeps only the
- * incomplete cleanup live so a later dispose() retries it without repeating
- * already-successful teardown. Once disposal starts, connect/reconnect stay
- * closed while cleanup is pending.
+ * retryable, and connect failures quarantine the indeterminate provider until
+ * reconnect/dispose tears it down. The reference lifecycle is intentionally
+ * synchronous: any non-void connect result is treated as indeterminate, its
+ * promise/thenable settlement is consumed, and the provider is quarantined
+ * instead of reporting a false successful connection. Cleanup failures do not
+ * prevent remaining teardown attempts. A failed provider or document destruction
+ * keeps only the incomplete cleanup live so a later dispose() retries it without
+ * repeating already-successful teardown. Once disposal starts, connect/reconnect
+ * stay closed while cleanup is pending.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -209,12 +212,18 @@ export function createHostCollaborationLifecycle(source) {
     requireLive();
     if (providerConnectionIndeterminate) throw connectionFailure();
     if (connected) return false;
+    let connectionResult;
     try {
-      providerResource.connect.call(providerResource.value);
+      connectionResult = providerResource.connect.call(providerResource.value);
     } catch {
       providerConnectionIndeterminate = true;
       throw connectionFailure();
     }
+    if (connectionResult !== undefined) {
+      providerConnectionIndeterminate = true;
+      void Promise.resolve(connectionResult).catch(() => undefined);
+      throw connectionFailure();
+    }
     connected = true;
     return true;
   }

From 82289713998d65dec3bff33528d27bdff0415c56 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:15:27 -0700
Subject: [PATCH 173/258] test(reference-host): reject async provider teardown
 false-success

---
 ...enceHostCollaborationAsyncTeardown.test.ts | 95 +++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 src/referenceHostCollaborationAsyncTeardown.test.ts

diff --git a/src/referenceHostCollaborationAsyncTeardown.test.ts b/src/referenceHostCollaborationAsyncTeardown.test.ts
new file mode 100644
index 00000000..5664b91a
--- /dev/null
+++ b/src/referenceHostCollaborationAsyncTeardown.test.ts
@@ -0,0 +1,95 @@
+import { execFileSync } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const fixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host asynchronous teardown contract', () => {
+  it('quarantines promise-returning provider destruction and retries cleanup without an unhandled rejection', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let providerDestroyAttempts = 0;
+      let unhandledRejections = 0;
+      process.on('unhandledRejection', () => {
+        unhandledRejections += 1;
+      });
+
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          return {
+            connect() { events.push('provider:connect'); },
+            disconnect() { events.push('provider:disconnect'); },
+            destroy() {
+              providerDestroyAttempts += 1;
+              events.push('provider:destroy:' + providerDestroyAttempts);
+              if (providerDestroyAttempts === 1) {
+                return Promise.reject(new Error('private asynchronous provider destroy failure'));
+              }
+            },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+
+      lifecycle.connect();
+      let firstError = null;
+      let firstResult = null;
+      try {
+        firstResult = lifecycle.dispose();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      await new Promise((resolve) => setImmediate(resolve));
+      const afterFailure = lifecycle.getSnapshot();
+      const retryResult = lifecycle.dispose();
+      const afterRetry = lifecycle.getSnapshot();
+      const idempotentResult = lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        afterRetry,
+        events,
+        firstError,
+        firstResult,
+        idempotentResult,
+        retryResult,
+        unhandledRejections,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      afterRetry: { providerGeneration: 1, status: 'disposed' },
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy:1',
+        'document:destroy',
+        'provider:destroy:2',
+      ],
+      firstError: 'collaboration lifecycle teardown failed.',
+      firstResult: null,
+      idempotentResult: false,
+      retryResult: true,
+      unhandledRejections: 0,
+    });
+  });
+});

From 31970f3a7be34211207fc26741c352c16d0c8d78 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:16:40 -0700
Subject: [PATCH 174/258] test(reference-host): cover async document teardown
 false-success

---
 ...enceHostCollaborationAsyncTeardown.test.ts | 133 ++++++++++++++++++
 1 file changed, 133 insertions(+)

diff --git a/src/referenceHostCollaborationAsyncTeardown.test.ts b/src/referenceHostCollaborationAsyncTeardown.test.ts
index 5664b91a..a19d8d7d 100644
--- a/src/referenceHostCollaborationAsyncTeardown.test.ts
+++ b/src/referenceHostCollaborationAsyncTeardown.test.ts
@@ -92,4 +92,137 @@ describe('reference-host asynchronous teardown contract', () => {
       unhandledRejections: 0,
     });
   });
+
+  it('retries promise-returning document destruction without repeating successful provider teardown', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let documentDestroyAttempts = 0;
+      let unhandledRejections = 0;
+      process.on('unhandledRejection', () => {
+        unhandledRejections += 1;
+      });
+
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() {
+              documentDestroyAttempts += 1;
+              events.push('document:destroy:' + documentDestroyAttempts);
+              if (documentDestroyAttempts === 1) {
+                return Promise.reject(new Error('private asynchronous document destroy failure'));
+              }
+            },
+          };
+        },
+        providerFactory() {
+          return {
+            connect() { events.push('provider:connect'); },
+            disconnect() { events.push('provider:disconnect'); },
+            destroy() { events.push('provider:destroy'); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+
+      lifecycle.connect();
+      let firstError = null;
+      let firstResult = null;
+      try {
+        firstResult = lifecycle.dispose();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      await new Promise((resolve) => setImmediate(resolve));
+      const afterFailure = lifecycle.getSnapshot();
+      const retryResult = lifecycle.dispose();
+      const afterRetry = lifecycle.getSnapshot();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        afterRetry,
+        events,
+        firstError,
+        firstResult,
+        retryResult,
+        unhandledRejections,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disconnected' },
+      afterRetry: { providerGeneration: 1, status: 'disposed' },
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy:1',
+        'document:destroy:2',
+      ],
+      firstError: 'collaboration lifecycle teardown failed.',
+      firstResult: null,
+      retryResult: true,
+      unhandledRejections: 0,
+    });
+  });
+
+  it('contains promise-returning document cleanup while unwinding initial provider failure', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let unhandledRejections = 0;
+      process.on('unhandledRejection', () => {
+        unhandledRejections += 1;
+      });
+
+      let initializationError = null;
+      try {
+        createHostCollaborationLifecycle({
+          documentFactory() {
+            events.push('document:create');
+            return {
+              destroy() {
+                events.push('document:destroy');
+                return Promise.reject(new Error('private asynchronous initialization cleanup failure'));
+              },
+            };
+          },
+          providerFactory() {
+            events.push('provider:create');
+            throw new Error('private provider construction failure');
+          },
+          roomId: 'reference-room',
+          actorId: 'reference-actor',
+        });
+      } catch (error) {
+        initializationError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      await new Promise((resolve) => setImmediate(resolve));
+      process.stdout.write(JSON.stringify({
+        events,
+        initializationError,
+        unhandledRejections,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      events: ['document:create', 'provider:create', 'document:destroy'],
+      initializationError: 'collaboration lifecycle initialization failed.',
+      unhandledRejections: 0,
+    });
+  });
 });

From 931f6f96dc4e3ec0561bb937c40053f68d991837 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:21:27 -0700
Subject: [PATCH 175/258] test(reference-host): cover async provider disconnect
 false-success

---
 ...enceHostCollaborationAsyncTeardown.test.ts | 72 +++++++++++++++++++
 1 file changed, 72 insertions(+)

diff --git a/src/referenceHostCollaborationAsyncTeardown.test.ts b/src/referenceHostCollaborationAsyncTeardown.test.ts
index a19d8d7d..97c381e9 100644
--- a/src/referenceHostCollaborationAsyncTeardown.test.ts
+++ b/src/referenceHostCollaborationAsyncTeardown.test.ts
@@ -225,4 +225,76 @@ describe('reference-host asynchronous teardown contract', () => {
       unhandledRejections: 0,
     });
   });
+
+  it('contains promise-returning provider disconnection before completing synchronous destruction', () => {
+    const moduleUrl = JSON.stringify(pathToFileURL(fixturePath).href);
+    const script = `
+      import { createHostCollaborationLifecycle } from ${moduleUrl};
+      const events = [];
+      let unhandledRejections = 0;
+      process.on('unhandledRejection', () => {
+        unhandledRejections += 1;
+      });
+
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return {
+            destroy() { events.push('document:destroy'); },
+          };
+        },
+        providerFactory() {
+          return {
+            connect() { events.push('provider:connect'); },
+            disconnect() {
+              events.push('provider:disconnect');
+              return Promise.reject(new Error('private asynchronous provider disconnect failure'));
+            },
+            destroy() { events.push('provider:destroy'); },
+          };
+        },
+        roomId: 'reference-room',
+        actorId: 'reference-actor',
+      });
+
+      lifecycle.connect();
+      let firstError = null;
+      let firstResult = null;
+      try {
+        firstResult = lifecycle.dispose();
+      } catch (error) {
+        firstError = error instanceof Error ? error.message : 'unexpected error';
+      }
+
+      await new Promise((resolve) => setImmediate(resolve));
+      const afterFailure = lifecycle.getSnapshot();
+      const retryResult = lifecycle.dispose();
+      process.stdout.write(JSON.stringify({
+        afterFailure,
+        events,
+        firstError,
+        firstResult,
+        retryResult,
+        unhandledRejections,
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      afterFailure: { providerGeneration: 1, status: 'disposed' },
+      events: [
+        'provider:connect',
+        'provider:disconnect',
+        'provider:destroy',
+        'document:destroy',
+      ],
+      firstError: 'collaboration lifecycle teardown failed.',
+      firstResult: null,
+      retryResult: false,
+      unhandledRejections: 0,
+    });
+  });
 });

From 93dcc0b21d8bcbfab8a143590b9ef8aa18a226c9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 13:30:30 -0700
Subject: [PATCH 176/258] fix(reference-host): contain async provider teardown

---
 .../collaboration-provider-lifecycle.mjs      | 48 +++++++++++++------
 1 file changed, 33 insertions(+), 15 deletions(-)

diff --git a/examples/reference-host/collaboration-provider-lifecycle.mjs b/examples/reference-host/collaboration-provider-lifecycle.mjs
index 64dab135..3714c86e 100644
--- a/examples/reference-host/collaboration-provider-lifecycle.mjs
+++ b/examples/reference-host/collaboration-provider-lifecycle.mjs
@@ -134,6 +134,12 @@ function teardownFailure() {
   return new Error(TEARDOWN_FAILURE);
 }
 
+function consumeNonVoidResult(result) {
+  if (result === undefined) return false;
+  void Promise.resolve(result).catch(() => undefined);
+  return true;
+}
+
 /**
  * Create one provider-neutral collaboration lifecycle owned entirely by the host.
  *
@@ -146,13 +152,13 @@ function teardownFailure() {
  * initial provider failure, reconnect provider-construction failures remain
  * retryable, and connect failures quarantine the indeterminate provider until
  * reconnect/dispose tears it down. The reference lifecycle is intentionally
- * synchronous: any non-void connect result is treated as indeterminate, its
- * promise/thenable settlement is consumed, and the provider is quarantined
- * instead of reporting a false successful connection. Cleanup failures do not
- * prevent remaining teardown attempts. A failed provider or document destruction
- * keeps only the incomplete cleanup live so a later dispose() retries it without
- * repeating already-successful teardown. Once disposal starts, connect/reconnect
- * stay closed while cleanup is pending.
+ * synchronous: any non-void lifecycle callback result is treated as indeterminate,
+ * its promise/thenable settlement is consumed, and the operation fails closed
+ * instead of reporting false success. Cleanup failures do not prevent remaining
+ * teardown attempts. A failed provider or document destruction keeps only the
+ * incomplete cleanup live so a later dispose() retries it without repeating
+ * already-successful teardown. Once disposal starts, connect/reconnect stay closed
+ * while cleanup is pending.
  */
 export function createHostCollaborationLifecycle(source) {
   const options = readOwnDataRecord(
@@ -219,9 +225,8 @@ export function createHostCollaborationLifecycle(source) {
       providerConnectionIndeterminate = true;
       throw connectionFailure();
     }
-    if (connectionResult !== undefined) {
+    if (consumeNonVoidResult(connectionResult)) {
       providerConnectionIndeterminate = true;
-      void Promise.resolve(connectionResult).catch(() => undefined);
       throw connectionFailure();
     }
     connected = true;
@@ -236,15 +241,24 @@ export function createHostCollaborationLifecycle(source) {
     if (connected || providerConnectionIndeterminate) {
       connected = false;
       try {
-        resource.disconnect.call(resource.value);
-        providerConnectionIndeterminate = false;
+        const disconnectResult = resource.disconnect.call(resource.value);
+        if (consumeNonVoidResult(disconnectResult)) {
+          failed = true;
+          providerConnectionIndeterminate = true;
+        } else {
+          providerConnectionIndeterminate = false;
+        }
       } catch {
         failed = true;
         providerConnectionIndeterminate = true;
       }
     }
     try {
-      resource.destroy.call(resource.value);
+      const destroyResult = resource.destroy.call(resource.value);
+      if (consumeNonVoidResult(destroyResult)) {
+        failed = true;
+        destroyFailed = true;
+      }
     } catch {
       failed = true;
       destroyFailed = true;
@@ -275,8 +289,12 @@ export function createHostCollaborationLifecycle(source) {
     }
     if (!documentDestroyed) {
       try {
-        documentResource.destroy.call(document);
-        documentDestroyed = true;
+        const destroyResult = documentResource.destroy.call(document);
+        if (consumeNonVoidResult(destroyResult)) {
+          failed = true;
+        } else {
+          documentDestroyed = true;
+        }
       } catch {
         failed = true;
       }
@@ -298,7 +316,7 @@ export function createHostCollaborationLifecycle(source) {
   } catch (error) {
     let cleanupFailed = false;
     try {
-      documentResource.destroy.call(document);
+      cleanupFailed = consumeNonVoidResult(documentResource.destroy.call(document));
     } catch {
       cleanupFailed = true;
     }

From 05ab985c94de0943ab89827ebc1693a2ff16e0be Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:07:14 -0700
Subject: [PATCH 177/258] test(reference-host): reproduce stale saved state
 after edits

---
 ...referenceHostNativeFormDirtyState.test.tsx | 119 ++++++++++++++++++
 1 file changed, 119 insertions(+)
 create mode 100644 src/referenceHostNativeFormDirtyState.test.tsx

diff --git a/src/referenceHostNativeFormDirtyState.test.tsx b/src/referenceHostNativeFormDirtyState.test.tsx
new file mode 100644
index 00000000..773f2712
--- /dev/null
+++ b/src/referenceHostNativeFormDirtyState.test.tsx
@@ -0,0 +1,119 @@
+import { cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { NativeFormHost } from '../examples/reference-host/native-form-host.js';
+
+type MockEditorProps = {
+  value?: string;
+  defaultValue?: string;
+  onChange?: (value: string) => void;
+  editable?: boolean;
+  formFieldName?: string;
+  formFieldDisabled?: boolean;
+};
+
+vi.mock('@contextualwisdomlab/cwl-editor', async () => {
+  const React = await import('react');
+
+  function MockEditor({
+    value,
+    defaultValue,
+    onChange,
+    editable = true,
+    formFieldName,
+    formFieldDisabled = false,
+  }: MockEditorProps) {
+    const [uncontrolledValue, setUncontrolledValue] = React.useState(
+      defaultValue ?? '',
+    );
+    const currentValue = value ?? uncontrolledValue;
+
+    return (
+      <>
+        <textarea
+          aria-label="Document editor"
+          disabled={!editable}
+          value={currentValue}
+          onChange={(event) => {
+            const nextValue = event.currentTarget.value;
+            if (value === undefined) {
+              setUncontrolledValue(nextValue);
+            }
+            onChange?.(nextValue);
+          }}
+        />
+        <input
+          type="hidden"
+          name={formFieldName}
+          value={currentValue}
+          disabled={formFieldDisabled}
+          readOnly
+        />
+      </>
+    );
+  }
+
+  return { CwlEditor: MockEditor };
+});
+
+afterEach(cleanup);
+
+describe('reference-host native form dirty-state presentation', () => {
+  it('stops claiming the document is saved after a later controlled edit', async () => {
+    const onAuthorizedSubmit = vi.fn(async () => undefined);
+
+    render(
+      <NativeFormHost
+        controlMode="controlled"
+        onAuthorizedSubmit={onAuthorizedSubmit}
+      />,
+    );
+
+    fireEvent.click(screen.getByRole('button', { name: 'Save document' }));
+
+    await waitFor(() => {
+      expect(screen.getByText('Saved')).toBeInTheDocument();
+    });
+
+    fireEvent.change(screen.getByLabelText('Document editor'), {
+      target: { value: '# Edited after save' },
+    });
+
+    expect(screen.queryByText('Saved')).not.toBeInTheDocument();
+    expect(screen.getByText('Not saved yet')).toBeInTheDocument();
+  });
+
+  it('does not report saved when the document changes while persistence is in flight', async () => {
+    let resolveSave: (() => void) | undefined;
+    const onAuthorizedSubmit = vi.fn(
+      () =>
+        new Promise<void>((resolve) => {
+          resolveSave = resolve;
+        }),
+    );
+
+    render(
+      <NativeFormHost
+        controlMode="controlled"
+        onAuthorizedSubmit={onAuthorizedSubmit}
+      />,
+    );
+
+    fireEvent.change(screen.getByLabelText('Document editor'), {
+      target: { value: '# Submitted version' },
+    });
+    fireEvent.click(screen.getByRole('button', { name: 'Save document' }));
+
+    expect(screen.getByText('Saving…')).toBeInTheDocument();
+    expect(onAuthorizedSubmit).toHaveBeenCalledWith('# Submitted version');
+
+    fireEvent.change(screen.getByLabelText('Document editor'), {
+      target: { value: '# Newer unsaved version' },
+    });
+    resolveSave?.();
+
+    await waitFor(() => {
+      expect(screen.getByText('Not saved yet')).toBeInTheDocument();
+    });
+    expect(screen.queryByText('Saved')).not.toBeInTheDocument();
+  });
+});

From 39fcd9859cc57785060719a5c90025d60e55e47c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:09:53 -0700
Subject: [PATCH 178/258] test(reference-host): exercise saved-state
 invalidation in browser

---
 ...reference-host-dirty-state.browser.spec.ts | 56 +++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 tests/browser/specs/reference-host-dirty-state.browser.spec.ts

diff --git a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
new file mode 100644
index 00000000..f6abd069
--- /dev/null
+++ b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
@@ -0,0 +1,56 @@
+import { expect, test } from '@playwright/test';
+
+const REFERENCE_HOST_URL =
+  'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
+
+function isReferenceHostRequest(requestUrl: string): boolean {
+  const url = new URL(requestUrl);
+  return (
+    url.protocol === 'http:' &&
+    url.hostname === '127.0.0.1' &&
+    url.port === '4173'
+  );
+}
+
+test('invalidates a completed save claim after the buyer edits the packed editor again', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  const editor = page.getByRole('textbox');
+  const field = page.locator(
+    '[data-inkspan-form-field][name="message_body"]',
+  );
+  await expect(editor).toBeVisible();
+  await expect(field).toHaveValue('# Draft');
+
+  await page.getByRole('button', { name: 'Save document' }).click();
+  await expect(page.getByText('Saved')).toBeVisible();
+
+  await editor.click();
+  await page.keyboard.press('Control+A');
+  await page.keyboard.type('Edited after save');
+
+  await expect(field).not.toHaveValue('# Draft');
+  await expect(page.getByText('Saved')).toHaveCount(0);
+  await expect(page.getByText('Not saved yet')).toBeVisible();
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From f53a68b9fbfb5e5fdea6d2ebf6590bc8b2c55358 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:10:20 -0700
Subject: [PATCH 179/258] test(reference-host): move dirty-state RED to packed
 browser

---
 ...referenceHostNativeFormDirtyState.test.tsx | 119 ------------------
 1 file changed, 119 deletions(-)
 delete mode 100644 src/referenceHostNativeFormDirtyState.test.tsx

diff --git a/src/referenceHostNativeFormDirtyState.test.tsx b/src/referenceHostNativeFormDirtyState.test.tsx
deleted file mode 100644
index 773f2712..00000000
--- a/src/referenceHostNativeFormDirtyState.test.tsx
+++ /dev/null
@@ -1,119 +0,0 @@
-import { cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-import { NativeFormHost } from '../examples/reference-host/native-form-host.js';
-
-type MockEditorProps = {
-  value?: string;
-  defaultValue?: string;
-  onChange?: (value: string) => void;
-  editable?: boolean;
-  formFieldName?: string;
-  formFieldDisabled?: boolean;
-};
-
-vi.mock('@contextualwisdomlab/cwl-editor', async () => {
-  const React = await import('react');
-
-  function MockEditor({
-    value,
-    defaultValue,
-    onChange,
-    editable = true,
-    formFieldName,
-    formFieldDisabled = false,
-  }: MockEditorProps) {
-    const [uncontrolledValue, setUncontrolledValue] = React.useState(
-      defaultValue ?? '',
-    );
-    const currentValue = value ?? uncontrolledValue;
-
-    return (
-      <>
-        <textarea
-          aria-label="Document editor"
-          disabled={!editable}
-          value={currentValue}
-          onChange={(event) => {
-            const nextValue = event.currentTarget.value;
-            if (value === undefined) {
-              setUncontrolledValue(nextValue);
-            }
-            onChange?.(nextValue);
-          }}
-        />
-        <input
-          type="hidden"
-          name={formFieldName}
-          value={currentValue}
-          disabled={formFieldDisabled}
-          readOnly
-        />
-      </>
-    );
-  }
-
-  return { CwlEditor: MockEditor };
-});
-
-afterEach(cleanup);
-
-describe('reference-host native form dirty-state presentation', () => {
-  it('stops claiming the document is saved after a later controlled edit', async () => {
-    const onAuthorizedSubmit = vi.fn(async () => undefined);
-
-    render(
-      <NativeFormHost
-        controlMode="controlled"
-        onAuthorizedSubmit={onAuthorizedSubmit}
-      />,
-    );
-
-    fireEvent.click(screen.getByRole('button', { name: 'Save document' }));
-
-    await waitFor(() => {
-      expect(screen.getByText('Saved')).toBeInTheDocument();
-    });
-
-    fireEvent.change(screen.getByLabelText('Document editor'), {
-      target: { value: '# Edited after save' },
-    });
-
-    expect(screen.queryByText('Saved')).not.toBeInTheDocument();
-    expect(screen.getByText('Not saved yet')).toBeInTheDocument();
-  });
-
-  it('does not report saved when the document changes while persistence is in flight', async () => {
-    let resolveSave: (() => void) | undefined;
-    const onAuthorizedSubmit = vi.fn(
-      () =>
-        new Promise<void>((resolve) => {
-          resolveSave = resolve;
-        }),
-    );
-
-    render(
-      <NativeFormHost
-        controlMode="controlled"
-        onAuthorizedSubmit={onAuthorizedSubmit}
-      />,
-    );
-
-    fireEvent.change(screen.getByLabelText('Document editor'), {
-      target: { value: '# Submitted version' },
-    });
-    fireEvent.click(screen.getByRole('button', { name: 'Save document' }));
-
-    expect(screen.getByText('Saving…')).toBeInTheDocument();
-    expect(onAuthorizedSubmit).toHaveBeenCalledWith('# Submitted version');
-
-    fireEvent.change(screen.getByLabelText('Document editor'), {
-      target: { value: '# Newer unsaved version' },
-    });
-    resolveSave?.();
-
-    await waitFor(() => {
-      expect(screen.getByText('Not saved yet')).toBeInTheDocument();
-    });
-    expect(screen.queryByText('Saved')).not.toBeInTheDocument();
-  });
-});

From f2156cee72061a1887aeae98755330138c2ceedb Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:13:42 -0700
Subject: [PATCH 180/258] fix(ci): run every declared browser acceptance spec

---
 tests/browser/playwright.config.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/browser/playwright.config.ts b/tests/browser/playwright.config.ts
index 375056da..520c067e 100644
--- a/tests/browser/playwright.config.ts
+++ b/tests/browser/playwright.config.ts
@@ -2,7 +2,7 @@ import { defineConfig, devices } from '@playwright/test';
 
 const HARNESS_ORIGIN = 'http://127.0.0.1:4173';
 const HARNESS_URL = `${HARNESS_ORIGIN}/tests/browser/harness.html`;
-const ENGINE_BROWSER_SPECS = /(?:clipboard|print)\.browser\.spec\.ts/u;
+const ENGINE_BROWSER_SPECS = /\.browser\.spec\.ts$/u;
 
 export default defineConfig({
   testDir: './specs',

From c0e97bb91d8ad339fb858f2ffa96712c5fe8dfe3 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:18:38 -0700
Subject: [PATCH 181/258] test(reference-host): allow deterministic deferred
 save journey

---
 examples/reference-host/browser-host.tsx | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/browser-host.tsx b/examples/reference-host/browser-host.tsx
index 109a1d09..f5fcae31 100644
--- a/examples/reference-host/browser-host.tsx
+++ b/examples/reference-host/browser-host.tsx
@@ -6,6 +6,7 @@ import { ReferenceHostApp } from './reference-host-app.js';
 declare global {
   interface Window {
     referenceHostSubmissions: string[];
+    referenceHostResolveSubmission?: () => void;
   }
 }
 
@@ -17,8 +18,14 @@ if (!root) {
   throw new Error('Reference host root is missing.');
 }
 
-const readOnly =
-  new URLSearchParams(window.location.search).get('readOnly') === '1';
+const searchParams = new URLSearchParams(window.location.search);
+const readOnly = searchParams.get('readOnly') === '1';
+const deferSubmission = searchParams.get('deferSubmission') === '1';
+let resolveDeferredSubmission: (() => void) | undefined;
+
+window.referenceHostResolveSubmission = () => {
+  resolveDeferredSubmission?.();
+};
 
 hydrateRoot(
   root,
@@ -26,6 +33,12 @@ hydrateRoot(
     loadingLabel="Loading buyer editor"
     onAuthorizedSubmit={async (messageBody) => {
       submissions.push(messageBody);
+      if (deferSubmission) {
+        await new Promise<void>((resolve) => {
+          resolveDeferredSubmission = resolve;
+        });
+        resolveDeferredSubmission = undefined;
+      }
     }}
     readOnly={readOnly}
   />,

From 03beed603a0713a19dd2bc57efb0de936eabdb07 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:19:07 -0700
Subject: [PATCH 182/258] test(reference-host): reproduce edit during in-flight
 save

---
 ...reference-host-dirty-state.browser.spec.ts | 44 +++++++++++++++++--
 1 file changed, 41 insertions(+), 3 deletions(-)

diff --git a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
index f6abd069..b009fd79 100644
--- a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
+++ b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
@@ -12,9 +12,7 @@ function isReferenceHostRequest(requestUrl: string): boolean {
   );
 }
 
-test('invalidates a completed save claim after the buyer edits the packed editor again', async ({
-  page,
-}) => {
+async function failUnexpectedNetwork(page: Parameters<typeof test>[0]['page']) {
   const rejectedRequests: string[] = [];
   const pageErrors: string[] = [];
 
@@ -31,6 +29,13 @@ test('invalidates a completed save claim after the buyer edits the packed editor
     await route.abort('blockedbyclient');
   });
 
+  return { rejectedRequests, pageErrors };
+}
+
+test('invalidates a completed save claim after the buyer edits the packed editor again', async ({
+  page,
+}) => {
+  const { rejectedRequests, pageErrors } = await failUnexpectedNetwork(page);
   const response = await page.goto(REFERENCE_HOST_URL);
   expect(response?.ok()).toBe(true);
 
@@ -54,3 +59,36 @@ test('invalidates a completed save claim after the buyer edits the packed editor
   expect(rejectedRequests).toEqual([]);
   expect(pageErrors).toEqual([]);
 });
+
+test('does not claim a newer document is saved when the submitted version settles later', async ({
+  page,
+}) => {
+  const { rejectedRequests, pageErrors } = await failUnexpectedNetwork(page);
+  const response = await page.goto(`${REFERENCE_HOST_URL}?deferSubmission=1`);
+  expect(response?.ok()).toBe(true);
+
+  const editor = page.getByRole('textbox');
+  const saveButton = page.getByRole('button', { name: 'Save document' });
+  await expect(editor).toBeVisible();
+
+  await editor.click();
+  await page.keyboard.press('Control+A');
+  await page.keyboard.type('Submitted version');
+  await saveButton.click();
+  await expect(page.getByText('Saving…')).toBeVisible();
+  await expect(saveButton).toBeDisabled();
+
+  await editor.click();
+  await page.keyboard.press('Control+A');
+  await page.keyboard.type('Newer unsaved version');
+  await page.evaluate(() => window.referenceHostResolveSubmission?.());
+
+  await expect(page.getByText('Saving…')).toHaveCount(0);
+  await expect(page.getByText('Saved')).toHaveCount(0);
+  await expect(page.getByText('Not saved yet')).toBeVisible();
+  expect(await page.evaluate(() => window.referenceHostSubmissions)).toEqual([
+    'Submitted version',
+  ]);
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From 3b898709471e7e6a7dc693d6c1bdfc7ee0db92b7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:19:43 -0700
Subject: [PATCH 183/258] test(reference-host): type browser network guard
 explicitly

---
 .../browser/specs/reference-host-dirty-state.browser.spec.ts  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
index b009fd79..77f1af1a 100644
--- a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
+++ b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
@@ -1,4 +1,4 @@
-import { expect, test } from '@playwright/test';
+import { expect, test, type Page } from '@playwright/test';
 
 const REFERENCE_HOST_URL =
   'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
@@ -12,7 +12,7 @@ function isReferenceHostRequest(requestUrl: string): boolean {
   );
 }
 
-async function failUnexpectedNetwork(page: Parameters<typeof test>[0]['page']) {
+async function failUnexpectedNetwork(page: Page) {
   const rejectedRequests: string[] = [];
   const pageErrors: string[] = [];
 

From 5580c354391b25464e2cf04d18983240d1657d13 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:20:25 -0700
Subject: [PATCH 184/258] fix(reference-host): invalidate stale saved
 presentation

---
 examples/reference-host/native-form-host.tsx | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index fa31627b..d521ea08 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -43,7 +43,9 @@ export interface NativeFormHostProps {
  * callback is in flight; React presentation state is not used as the mutation
  * authority. Host read-only state additionally fail-closes native form writes
  * and disables the named field without moving authorization authority into
- * Inkspan. A later successful reset returns the host presentation to an
+ * Inkspan. Document edits invalidate stale saved/failed presentation, including
+ * when a newer edit occurs while an older host-owned persistence attempt is in
+ * flight. A later successful reset returns the host presentation to an
  * explicitly unsaved state and restores the controlled example value when that
  * mode is selected.
  */
@@ -55,6 +57,7 @@ export function NativeFormHost({
   const [submissionState, setSubmissionState] =
     useState<SubmissionState>('idle');
   const [controlledValue, setControlledValue] = useState('# Draft');
+  const documentGenerationRef = useRef(0);
   const onAuthorizedSubmitRef = useRef(onAuthorizedSubmit);
   onAuthorizedSubmitRef.current = onAuthorizedSubmit;
 
@@ -72,6 +75,14 @@ export function NativeFormHost({
     submitAuthorizedRef.current = submitAuthorized;
   }
 
+  function handleDocumentChange(nextValue: string) {
+    documentGenerationRef.current += 1;
+    if (controlMode === 'controlled') {
+      setControlledValue(nextValue);
+    }
+    setSubmissionState((state) => (state === 'saving' ? state : 'idle'));
+  }
+
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
     if (readOnly || submitAuthorized.isInFlight()) {
@@ -86,7 +97,11 @@ export function NativeFormHost({
       return;
     }
 
+    const submittedGeneration = documentGenerationRef.current;
     await submitAuthorized(messageBodyEntry);
+    if (documentGenerationRef.current !== submittedGeneration) {
+      setSubmissionState('idle');
+    }
   }
 
   function handleReset(event: FormEvent<HTMLFormElement>) {
@@ -94,6 +109,7 @@ export function NativeFormHost({
       event.preventDefault();
       return;
     }
+    documentGenerationRef.current += 1;
     if (controlMode === 'controlled') {
       setControlledValue('# Draft');
     }
@@ -105,7 +121,7 @@ export function NativeFormHost({
       <CwlEditor
         mode="markdown"
         value={controlMode === 'controlled' ? controlledValue : undefined}
-        onChange={controlMode === 'controlled' ? setControlledValue : undefined}
+        onChange={handleDocumentChange}
         defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}
         editable={!readOnly}
         formFieldName="message_body"

From 65cb6cf9e20e1c3d9d57c96d2f7629147e90a10f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:20:58 -0700
Subject: [PATCH 185/258] test(reference-host): contract truthful dirty-state
 projection

---
 src/referenceHostNativeFormJourney.test.ts | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 04a4facc..68ca320b 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -62,6 +62,23 @@ describe('reference-host native form journey', () => {
     );
   });
 
+  it('invalidates stale persistence presentation when the document changes', () => {
+    expect(nativeFormHostSource).toContain('const documentGenerationRef = useRef(0);');
+    expect(nativeFormHostSource).toContain(
+      'documentGenerationRef.current += 1;',
+    );
+    expect(nativeFormHostSource).toContain(
+      'const submittedGeneration = documentGenerationRef.current;',
+    );
+    expect(nativeFormHostSource).toContain(
+      'if (documentGenerationRef.current !== submittedGeneration) {',
+    );
+    expect(nativeFormHostSource).toContain(
+      "setSubmissionState((state) => (state === 'saving' ? state : 'idle'));",
+    );
+    expect(nativeFormHostSource).toContain('onChange={handleDocumentChange}');
+  });
+
   it('makes host write permission explicit and fail-closes native form writes while read-only', () => {
     expect(nativeFormHostSource).toContain('readOnly?: boolean;');
     expect(nativeFormHostSource).toContain('readOnly = false');
@@ -89,9 +106,7 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).toContain(
       "value={controlMode === 'controlled' ? controlledValue : undefined}",
     );
-    expect(nativeFormHostSource).toContain(
-      "onChange={controlMode === 'controlled' ? setControlledValue : undefined}",
-    );
+    expect(nativeFormHostSource).toContain('onChange={handleDocumentChange}');
     expect(nativeFormHostSource).toContain(
       "defaultValue={controlMode === 'uncontrolled' ? '# Draft' : undefined}",
     );

From 85532caf1765c44199b8c301a75ab23db19b6c75 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:48:40 -0700
Subject: [PATCH 186/258] fix(reference-host): invalidate stale save state on
 native input

---
 examples/reference-host/native-form-host.tsx | 28 +++++++++++++++-----
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index d521ea08..3551b1a2 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -45,9 +45,13 @@ export interface NativeFormHostProps {
  * and disables the named field without moving authorization authority into
  * Inkspan. Document edits invalidate stale saved/failed presentation, including
  * when a newer edit occurs while an older host-owned persistence attempt is in
- * flight. A later successful reset returns the host presentation to an
- * explicitly unsaved state and restores the controlled example value when that
- * mode is selected.
+ * flight. The host observes both the editor value callback and bubbling native
+ * input as independent local mutation signals; either signal advances the
+ * monotonic document generation, and duplicate advances for one logical edit
+ * are harmless because generation equality—not the numeric delta—is the
+ * persistence freshness invariant. A later successful reset returns the host
+ * presentation to an explicitly unsaved state and restores the controlled
+ * example value when that mode is selected.
  */
 export function NativeFormHost({
   onAuthorizedSubmit,
@@ -75,12 +79,20 @@ export function NativeFormHost({
     submitAuthorizedRef.current = submitAuthorized;
   }
 
-  function handleDocumentChange(nextValue: string) {
+  function markDocumentDirty() {
     documentGenerationRef.current += 1;
+    setSubmissionState((state) => (state === 'saving' ? state : 'idle'));
+  }
+
+  function handleDocumentChange(nextValue: string) {
+    markDocumentDirty();
     if (controlMode === 'controlled') {
       setControlledValue(nextValue);
     }
-    setSubmissionState((state) => (state === 'saving' ? state : 'idle'));
+  }
+
+  function handleNativeInput() {
+    markDocumentDirty();
   }
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
@@ -117,7 +129,11 @@ export function NativeFormHost({
   }
 
   return (
-    <form onSubmit={handleSubmit} onReset={handleReset}>
+    <form
+      onInput={handleNativeInput}
+      onSubmit={handleSubmit}
+      onReset={handleReset}
+    >
       <CwlEditor
         mode="markdown"
         value={controlMode === 'controlled' ? controlledValue : undefined}

From c2f137b716daf257e811bae2936166c4ccff5b7b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 18:49:27 -0700
Subject: [PATCH 187/258] test(reference-host): contract native dirty-state
 fallback

---
 src/referenceHostNativeFormJourney.test.ts | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 68ca320b..35fa939f 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -51,8 +51,8 @@ describe('reference-host native form journey', () => {
   });
 
   it('blocks form reset while durable submission is in flight and marks a later reset unsaved', () => {
-    expect(nativeFormHostSource).toContain(
-      '<form onSubmit={handleSubmit} onReset={handleReset}>',
+    expect(nativeFormHostSource).toMatch(
+      /<form\s+onInput=\{handleNativeInput\}\s+onSubmit=\{handleSubmit\}\s+onReset=\{handleReset\}/u,
     );
     expect(nativeFormHostSource).toContain('submitAuthorized.isInFlight()');
     expect(nativeFormHostSource).toContain('event.preventDefault();');
@@ -62,8 +62,9 @@ describe('reference-host native form journey', () => {
     );
   });
 
-  it('invalidates stale persistence presentation when the document changes', () => {
+  it('invalidates stale persistence presentation through independent editor and native-input mutation signals', () => {
     expect(nativeFormHostSource).toContain('const documentGenerationRef = useRef(0);');
+    expect(nativeFormHostSource).toContain('function markDocumentDirty() {');
     expect(nativeFormHostSource).toContain(
       'documentGenerationRef.current += 1;',
     );
@@ -77,6 +78,11 @@ describe('reference-host native form journey', () => {
       "setSubmissionState((state) => (state === 'saving' ? state : 'idle'));",
     );
     expect(nativeFormHostSource).toContain('onChange={handleDocumentChange}');
+    expect(nativeFormHostSource).toContain('function handleNativeInput() {');
+    expect(nativeFormHostSource).toContain('onInput={handleNativeInput}');
+    expect(
+      nativeFormHostSource.match(/markDocumentDirty\(\);/gu),
+    ).toHaveLength(2);
   });
 
   it('makes host write permission explicit and fail-closes native form writes while read-only', () => {

From db688442900f10d9e5545f1337f0e2df62b7151f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:04:32 -0700
Subject: [PATCH 188/258] test(reference-host): make save-state assertions
 exact

---
 .../reference-host-dirty-state.browser.spec.ts     | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
index 77f1af1a..46e6b4f1 100644
--- a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
+++ b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
@@ -47,15 +47,15 @@ test('invalidates a completed save claim after the buyer edits the packed editor
   await expect(field).toHaveValue('# Draft');
 
   await page.getByRole('button', { name: 'Save document' }).click();
-  await expect(page.getByText('Saved')).toBeVisible();
+  await expect(page.getByText('Saved', { exact: true })).toBeVisible();
 
   await editor.click();
   await page.keyboard.press('Control+A');
   await page.keyboard.type('Edited after save');
 
   await expect(field).not.toHaveValue('# Draft');
-  await expect(page.getByText('Saved')).toHaveCount(0);
-  await expect(page.getByText('Not saved yet')).toBeVisible();
+  await expect(page.getByText('Saved', { exact: true })).toHaveCount(0);
+  await expect(page.getByText('Not saved yet', { exact: true })).toBeVisible();
   expect(rejectedRequests).toEqual([]);
   expect(pageErrors).toEqual([]);
 });
@@ -75,7 +75,7 @@ test('does not claim a newer document is saved when the submitted version settle
   await page.keyboard.press('Control+A');
   await page.keyboard.type('Submitted version');
   await saveButton.click();
-  await expect(page.getByText('Saving…')).toBeVisible();
+  await expect(page.getByText('Saving…', { exact: true })).toBeVisible();
   await expect(saveButton).toBeDisabled();
 
   await editor.click();
@@ -83,9 +83,9 @@ test('does not claim a newer document is saved when the submitted version settle
   await page.keyboard.type('Newer unsaved version');
   await page.evaluate(() => window.referenceHostResolveSubmission?.());
 
-  await expect(page.getByText('Saving…')).toHaveCount(0);
-  await expect(page.getByText('Saved')).toHaveCount(0);
-  await expect(page.getByText('Not saved yet')).toBeVisible();
+  await expect(page.getByText('Saving…', { exact: true })).toHaveCount(0);
+  await expect(page.getByText('Saved', { exact: true })).toHaveCount(0);
+  await expect(page.getByText('Not saved yet', { exact: true })).toBeVisible();
   expect(await page.evaluate(() => window.referenceHostSubmissions)).toEqual([
     'Submitted version',
   ]);

From 61cdec200d95295a50bc980a77fa90f7da2cc6df Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:13:58 -0700
Subject: [PATCH 189/258] test(reference-host): require browser presentation
 entrypoint

---
 src/referenceHostPresentationAssets.test.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostPresentationAssets.test.ts b/src/referenceHostPresentationAssets.test.ts
index be11a40a..801d859d 100644
--- a/src/referenceHostPresentationAssets.test.ts
+++ b/src/referenceHostPresentationAssets.test.ts
@@ -26,6 +26,15 @@ describe('reference-host public presentation assets', () => {
     );
   });
 
+  it('runs the real browser host through the complete multilingual presentation entrypoint', () => {
+    const source = repositoryFile('examples/reference-host/browser-host.tsx');
+
+    expect(source).toContain("import './presentation-full.css';");
+    expect(source).not.toContain(
+      "import '@contextualwisdomlab/cwl-editor/styles.css';",
+    );
+  });
+
   it('keeps every referenced presentation entrypoint in the published package export map', () => {
     const packageMetadata = JSON.parse(repositoryFile('package.json')) as {
       exports: Record<string, unknown>;
@@ -35,4 +44,4 @@ describe('reference-host public presentation assets', () => {
     expect(packageMetadata.exports).toHaveProperty('./fonts.css');
     expect(packageMetadata.exports).toHaveProperty('./fonts-latin.css');
   });
-});
+});
\ No newline at end of file

From 74e21606e20fd8608fc4d9f37cd400f818428255 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:17:06 -0700
Subject: [PATCH 190/258] test(browser): bind packed font entrypoints

---
 tests/browser/vite.config.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/browser/vite.config.ts b/tests/browser/vite.config.ts
index 06b0fcfd..f3cb7b4d 100644
--- a/tests/browser/vite.config.ts
+++ b/tests/browser/vite.config.ts
@@ -18,6 +18,14 @@ const alias = [
           find: '@contextualwisdomlab/cwl-editor/styles.css',
           replacement: resolve(packedPackageRoot, 'dist/cwl-editor.css'),
         },
+        {
+          find: '@contextualwisdomlab/cwl-editor/fonts.css',
+          replacement: resolve(packedPackageRoot, 'src/fonts/fonts.css'),
+        },
+        {
+          find: '@contextualwisdomlab/cwl-editor/fonts-latin.css',
+          replacement: resolve(packedPackageRoot, 'src/fonts/fonts-latin.css'),
+        },
         {
           find: '@contextualwisdomlab/cwl-editor',
           replacement: packageEntry,
@@ -34,4 +42,4 @@ export default defineConfig({
   resolve: {
     alias,
   },
-});
+});
\ No newline at end of file

From 2a16930d00858a5e6939c8dfa2dc8567bd8466aa Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:17:31 -0700
Subject: [PATCH 191/258] feat(reference-host): exercise full packed
 presentation

---
 examples/reference-host/browser-host.tsx | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/browser-host.tsx b/examples/reference-host/browser-host.tsx
index f5fcae31..4b1403b3 100644
--- a/examples/reference-host/browser-host.tsx
+++ b/examples/reference-host/browser-host.tsx
@@ -1,4 +1,4 @@
-import '@contextualwisdomlab/cwl-editor/styles.css';
+import './presentation-full.css';
 import { hydrateRoot } from 'react-dom/client';
 
 import { ReferenceHostApp } from './reference-host-app.js';
@@ -42,4 +42,4 @@ hydrateRoot(
     }}
     readOnly={readOnly}
   />,
-);
+);
\ No newline at end of file

From 6a145db240d929f4c9c168c829e3a59d1908396f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:19:18 -0700
Subject: [PATCH 192/258] docs(reference-host): align packed browser evidence

---
 examples/reference-host/README.md | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 56506381..b84bfc57 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -2,9 +2,9 @@
 
 Status: Active PR / partial reference-host implementation
 
-This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining complete browser-host/collaboration/accessibility/Office acceptance work is implemented and the release boundary permits integration.
+This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining complete framework-host/collaboration/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains deterministic host fixtures and helpers, public-package presentation entrypoints, a buyer-facing native-form component, an SSR/hydration gate, and an exact-packed-artifact verifier:
+The current slice contains deterministic host fixtures and helpers, public-package presentation entrypoints, a buyer-facing native-form component, an SSR/hydration gate, and exact-packed-artifact package/browser verification:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. `ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator. After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller's last known validator. A stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
@@ -13,12 +13,12 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
-- `browser-host.tsx` imports Inkspan's public `styles.css` package contract and hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for repository-built Chromium/Firefox/WebKit execution. It supports a deterministic `?readOnly=1` host state for fail-closed write-admission evidence, exercises the package print-media presentation contract without an external runtime request, and records only host-local test submissions. It remains test-host evidence, not authorized durable persistence or exact packed-artifact acceptance.
+- `browser-host.tsx` loads the local `presentation-full.css` buyer entrypoint, which resolves Inkspan's public `styles.css` plus complete multilingual `fonts.css`, and hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for exact-packed Chromium/Firefox/WebKit execution. The browser harness binds the package root and public presentation subpaths to the exact extracted tarball rather than workspace/source authority. It supports deterministic read-only and deferred-submission states, native-form hydration/submission, narrow-viewport, print, forced-colors, and no-unexpected-network acceptance while recording only host-local test submissions. It remains repository test-host evidence, not an authorized durable host or the complete framework application required by #377.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
 - `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
-- `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer browser host.
+- `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
@@ -33,7 +33,7 @@ Executable fixtures and helpers remain reference-only host code, require no serv
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
 | Office handoff helper | Keep the provider-neutral public Markdown projection/request mapping or replace it with a host-approved richer mapping; invoke the strict Inkspan Office renderer only behind host-owned export authorization, output-location policy, storage, and distribution. |
-| exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/autosave-observer/package-resolution checks in buyer CI, then add the complete framework/browser application journey rather than treating package import success as product acceptance. |
+| exact packed-artifact verifier | Preserve exact-tarball build/install/SSR/autosave-observer/package-resolution and real-browser presentation checks in buyer CI, then add the complete framework application journey rather than treating repository test-host success as product acceptance. |
 | synthetic document and revision identifiers | Replace with authenticated/authorized host context; never infer tenant or actor authority from an Inkspan digest, form value, or example identifier. |
 | reference error handling | Map stable machine outcomes to localized host UX and audited host operations without copying document bodies, prompts, credentials, or private causes into generic telemetry. |
 
@@ -67,10 +67,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally exercises the repository-built browser host shell, real native-form hydration/submission, the deterministic read-only transition, a 320px narrow-viewport journey, and the host's opt-in public package print-media contract. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey runs the real buyer host under print media, requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. It asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact browser-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete packed-artifact reference-host application (preferably a supported Next.js App Router host), deterministic application-level SSR/hydration proof beyond the current gate/SSR consumer evidence, packed-artifact browser execution of the native-form journey, an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle, real Chromium/Firefox/WebKit acceptance over that packed host, a forced-colors journey plus print revalidation over the future exact-packed host, complete converter/Office execution and validation beyond the bounded request helper, and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle; complete converter/Office execution and validation beyond the bounded request helper; and one documented clean-checkout command for the complete end-to-end reference journey.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
\ No newline at end of file

From e0a6c380c300cdedfe3e10e6431ac15f32014a7e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:22:08 -0700
Subject: [PATCH 193/258] test(reference-host): align packed presentation
 binding

---
 src/referenceHostPackedBrowserBinding.test.ts | 25 ++++++++++++++++---
 1 file changed, 22 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostPackedBrowserBinding.test.ts b/src/referenceHostPackedBrowserBinding.test.ts
index 691274bb..58e4b550 100644
--- a/src/referenceHostPackedBrowserBinding.test.ts
+++ b/src/referenceHostPackedBrowserBinding.test.ts
@@ -16,12 +16,19 @@ describe('reference-host packed browser binding', () => {
     const browserHost = repositoryFile(
       'examples/reference-host/browser-host.tsx',
     );
+    const presentationFull = repositoryFile(
+      'examples/reference-host/presentation-full.css',
+    );
 
     expect(nativeFormHost).toContain(
       "from '@contextualwisdomlab/cwl-editor'",
     );
-    expect(browserHost).toContain(
-      "import '@contextualwisdomlab/cwl-editor/styles.css'",
+    expect(browserHost).toContain("import './presentation-full.css'");
+    expect(presentationFull).toContain(
+      "@import '@contextualwisdomlab/cwl-editor/styles.css'",
+    );
+    expect(presentationFull).toContain(
+      "@import '@contextualwisdomlab/cwl-editor/fonts.css'",
     );
     expect(nativeFormHost).not.toContain('inkspan-browser-under-test');
     expect(browserHost).not.toContain('inkspan-browser-under-test');
@@ -30,12 +37,24 @@ describe('reference-host packed browser binding', () => {
     expect(viteConfig).toContain(
       "find: '@contextualwisdomlab/cwl-editor/styles.css'",
     );
+    expect(viteConfig).toContain(
+      "find: '@contextualwisdomlab/cwl-editor/fonts.css'",
+    );
+    expect(viteConfig).toContain(
+      "find: '@contextualwisdomlab/cwl-editor/fonts-latin.css'",
+    );
     expect(viteConfig).toContain(
       "find: '@contextualwisdomlab/cwl-editor'",
     );
     expect(viteConfig).toContain(
       "resolve(packedPackageRoot, 'dist/cwl-editor.css')",
     );
+    expect(viteConfig).toContain(
+      "resolve(packedPackageRoot, 'src/fonts/fonts.css')",
+    );
+    expect(viteConfig).toContain(
+      "resolve(packedPackageRoot, 'src/fonts/fonts-latin.css')",
+    );
     expect(viteConfig).toContain('replacement: packageEntry');
   });
-});
+});
\ No newline at end of file

From eca9a3a820910fc71a27509e93a351d89b845326 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 19:22:47 -0700
Subject: [PATCH 194/258] test(reference-host): align partial-app acceptance
 contract

---
 src/referenceHostPackagingBoundary.test.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index 69151e48..5f8bb420 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -55,9 +55,9 @@ describe('reference-host package authority boundary', () => {
       'exact packed autosave observer wiring into the host lifecycle projection',
     );
     expect(readme).not.toContain('packed-package wiring of the autosave observer');
-    expect(readme).toContain('complete packed-artifact reference-host application');
+    expect(readme).toContain('complete reference-host application');
     expect(readme).toContain(
-      'do **not** yet satisfy #377\'s complete packed-artifact browser-application acceptance.',
+      'do **not** yet satisfy #377\'s complete packed-artifact framework-application acceptance.',
     );
   });
-});
+});
\ No newline at end of file

From f2f368348e35f13eb40097ec92b1dac39aed521d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:21:02 -0700
Subject: [PATCH 195/258] test(reference-host): verify pre-hydration shell
 transition

---
 .../reference-host-hydration.browser.spec.ts  | 89 +++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 tests/browser/specs/reference-host-hydration.browser.spec.ts

diff --git a/tests/browser/specs/reference-host-hydration.browser.spec.ts b/tests/browser/specs/reference-host-hydration.browser.spec.ts
new file mode 100644
index 00000000..5ac07819
--- /dev/null
+++ b/tests/browser/specs/reference-host-hydration.browser.spec.ts
@@ -0,0 +1,89 @@
+import { expect, test, type Page } from '@playwright/test';
+
+const REFERENCE_HOST_URL =
+  'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
+
+function isReferenceHostRequest(requestUrl: string): boolean {
+  const url = new URL(requestUrl);
+  return (
+    url.protocol === 'http:' &&
+    url.hostname === '127.0.0.1' &&
+    url.port === '4173'
+  );
+}
+
+async function observeReferenceHost(page: Page) {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+  const consoleErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  page.on('console', (message) => {
+    if (message.type() === 'error') {
+      consoleErrors.push(message.text());
+    }
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  return { rejectedRequests, pageErrors, consoleErrors };
+}
+
+test('preserves an accessible pre-hydration shell and hydrates the packed reference host without mismatch or external network', async ({
+  browser,
+}) => {
+  const staticContext = await browser.newContext({ javaScriptEnabled: false });
+  const staticPage = await staticContext.newPage();
+  const staticEvidence = await observeReferenceHost(staticPage);
+
+  const staticResponse = await staticPage.goto(REFERENCE_HOST_URL);
+  expect(staticResponse?.ok()).toBe(true);
+  await expect(
+    staticPage.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(
+    staticPage.getByText('Loading buyer editor', { exact: true }),
+  ).toBeVisible();
+  await expect(staticPage.locator('[aria-busy="true"]')).toHaveText(
+    'Loading buyer editor',
+  );
+  await expect(staticPage.getByRole('textbox')).toHaveCount(0);
+  expect(staticEvidence.rejectedRequests).toEqual([]);
+  expect(staticEvidence.pageErrors).toEqual([]);
+  expect(staticEvidence.consoleErrors).toEqual([]);
+  await staticContext.close();
+
+  const hydratedContext = await browser.newContext();
+  const hydratedPage = await hydratedContext.newPage();
+  const hydratedEvidence = await observeReferenceHost(hydratedPage);
+
+  const hydratedResponse = await hydratedPage.goto(REFERENCE_HOST_URL);
+  expect(hydratedResponse?.ok()).toBe(true);
+  await expect(
+    hydratedPage.getByRole('heading', { name: 'Inkspan reference host' }),
+  ).toBeVisible();
+  await expect(hydratedPage.getByRole('textbox')).toBeVisible();
+  await expect(
+    hydratedPage.getByRole('button', { name: 'Save document' }),
+  ).toBeVisible();
+  await expect(
+    hydratedPage.getByText('Loading buyer editor', { exact: true }),
+  ).toHaveCount(0);
+  await expect(hydratedPage.locator('[aria-busy="true"]')).toHaveCount(0);
+  await expect(
+    hydratedPage.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Draft');
+  expect(hydratedEvidence.rejectedRequests).toEqual([]);
+  expect(hydratedEvidence.pageErrors).toEqual([]);
+  expect(hydratedEvidence.consoleErrors).toEqual([]);
+  await hydratedContext.close();
+});

From 177646916e0c8fb518c873045c6b06ec83190f05 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:22:52 -0700
Subject: [PATCH 196/258] test(reference-host): exercise packed native form
 reset

---
 .../reference-host.print.browser.spec.ts      | 53 +++++++++++++++++++
 1 file changed, 53 insertions(+)

diff --git a/tests/browser/specs/reference-host.print.browser.spec.ts b/tests/browser/specs/reference-host.print.browser.spec.ts
index 979cb922..91c900c8 100644
--- a/tests/browser/specs/reference-host.print.browser.spec.ts
+++ b/tests/browser/specs/reference-host.print.browser.spec.ts
@@ -67,6 +67,59 @@ test('hydrates the real native-form reference host without external runtime requ
   ).toEqual([]);
 });
 
+test('restores the packed native-form draft without creating a host submission', async ({
+  page,
+}) => {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  const response = await page.goto(REFERENCE_HOST_URL);
+  expect(response?.ok()).toBe(true);
+
+  const editor = page.getByRole('textbox');
+  const field = page.locator(
+    '[data-inkspan-form-field][name="message_body"]',
+  );
+  await expect(editor).toBeVisible();
+  await expect(field).toHaveValue('# Draft');
+
+  await editor.click();
+  await page.keyboard.press('Control+A');
+  await page.keyboard.type('Buyer changed draft');
+  await expect(field).not.toHaveValue('# Draft');
+
+  await page.getByRole('button', { name: 'Reset draft' }).click();
+  await expect(field).toHaveValue('# Draft');
+  await expect(editor).toContainText('Draft');
+  await expect(page.getByText('Not saved yet', { exact: true })).toBeVisible();
+  await expect
+    .poll(() =>
+      page.evaluate(() => {
+        const hostWindow = window as typeof window & {
+          referenceHostSubmissions?: string[];
+        };
+        return hostWindow.referenceHostSubmissions ?? [];
+      }),
+    )
+    .toEqual([]);
+
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});
+
 test('keeps the buyer host readable while read-only mode fail-closes native writes', async ({
   page,
 }) => {

From 33aafef59b8db27ce61d16de8e16f7f98251c231 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:27:17 -0700
Subject: [PATCH 197/258] test(browser): pin optimizer entry contract

---
 src/referenceHostPackedBrowserBinding.test.ts | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostPackedBrowserBinding.test.ts b/src/referenceHostPackedBrowserBinding.test.ts
index 58e4b550..ab4b5907 100644
--- a/src/referenceHostPackedBrowserBinding.test.ts
+++ b/src/referenceHostPackedBrowserBinding.test.ts
@@ -57,4 +57,14 @@ describe('reference-host packed browser binding', () => {
     );
     expect(viteConfig).toContain('replacement: packageEntry');
   });
-});
\ No newline at end of file
+
+  it('pre-optimizes every browser application entry before parallel Playwright workers can invalidate shared Vite dependency chunks', () => {
+    const viteConfig = repositoryFile('tests/browser/vite.config.ts');
+
+    expect(viteConfig).toContain('optimizeDeps: {');
+    expect(viteConfig).toContain("'tests/browser/harness.html'");
+    expect(viteConfig).toContain(
+      "'examples/reference-host/browser-host.html'",
+    );
+  });
+});

From 942250e95f22c3f477f177112a04750c76382fd5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:28:18 -0700
Subject: [PATCH 198/258] fix(browser): stabilize shared Vite dependency graph

---
 tests/browser/vite.config.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tests/browser/vite.config.ts b/tests/browser/vite.config.ts
index f3cb7b4d..1c1b7ea3 100644
--- a/tests/browser/vite.config.ts
+++ b/tests/browser/vite.config.ts
@@ -39,7 +39,13 @@ const alias = [
 ];
 
 export default defineConfig({
+  optimizeDeps: {
+    entries: [
+      'tests/browser/harness.html',
+      'examples/reference-host/browser-host.html',
+    ],
+  },
   resolve: {
     alias,
   },
-});
\ No newline at end of file
+});

From ba6da1a93e9c554d4c0d173c5ffab5ae9eb1a48a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:35:04 -0700
Subject: [PATCH 199/258] test(reference-host): require executable Office
 handoff acceptance

---
 ...ferenceHostOfficeExecutionContract.test.ts | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 src/referenceHostOfficeExecutionContract.test.ts

diff --git a/src/referenceHostOfficeExecutionContract.test.ts b/src/referenceHostOfficeExecutionContract.test.ts
new file mode 100644
index 00000000..b8626d6c
--- /dev/null
+++ b/src/referenceHostOfficeExecutionContract.test.ts
@@ -0,0 +1,40 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+function repositoryFile(path: string): string {
+  return readFileSync(resolve(process.cwd(), path), 'utf8');
+}
+
+describe('reference-host Office execution acceptance', () => {
+  it('renders the exact packed Markdown handoff through the local Office CLI and validates the DOCX', () => {
+    const verifierPath = resolve(
+      process.cwd(),
+      'examples/reference-host/verify-office-handoff.mjs',
+    );
+    expect(existsSync(verifierPath)).toBe(true);
+    if (!existsSync(verifierPath)) return;
+
+    const verifier = readFileSync(verifierPath, 'utf8');
+    const workflow = repositoryFile('.github/workflows/ci.yml');
+
+    expect(verifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY');
+    expect(verifier).toContain('office-handoff.mjs');
+    expect(verifier).toContain("'-m', 'inkspan_office.cli'");
+    expect(verifier).toContain('document.core_properties.title');
+    expect(verifier).toContain('Buyer-ready body.');
+    expect(verifier).toContain('mkdtemp');
+    expect(verifier).toContain('rm(temporaryDirectory');
+
+    expect(workflow).toContain(
+      'Verify exact packed reference-host Office handoff',
+    );
+    expect(workflow).toContain(
+      'python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt',
+    );
+    expect(workflow).toContain(
+      'node examples/reference-host/verify-office-handoff.mjs',
+    );
+  });
+});

From 3084ee91b91fca55f1702593f63da4e7d6b43dfc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:35:39 -0700
Subject: [PATCH 200/258] feat(reference-host): execute packed Office handoff

---
 .../reference-host/verify-office-handoff.mjs  | 128 ++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 examples/reference-host/verify-office-handoff.mjs

diff --git a/examples/reference-host/verify-office-handoff.mjs b/examples/reference-host/verify-office-handoff.mjs
new file mode 100644
index 00000000..6926c426
--- /dev/null
+++ b/examples/reference-host/verify-office-handoff.mjs
@@ -0,0 +1,128 @@
+import { spawnSync } from 'node:child_process';
+import { copyFile, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { dirname, delimiter, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const TITLE = 'Inkspan acquisition handoff';
+const MARKDOWN = '**Buyer-ready** body.';
+const EXPECTED_BODY = 'Buyer-ready body.';
+
+function requiredEnvironment(name) {
+  const value = process.env[name]?.trim();
+  if (!value) {
+    throw new Error(`${name} is required`);
+  }
+  return value;
+}
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, {
+    cwd: options.cwd,
+    env: options.env,
+    encoding: 'utf8',
+    shell: false,
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    throw new Error(
+      [
+        `${command} exited with status ${result.status}`,
+        result.stdout?.trim(),
+        result.stderr?.trim(),
+      ]
+        .filter(Boolean)
+        .join('\n'),
+    );
+  }
+}
+
+async function main() {
+  const repositoryRoot = resolve(
+    dirname(fileURLToPath(import.meta.url)),
+    '../..',
+  );
+  const packageEntry = resolve(requiredEnvironment('INKSPAN_BROWSER_PACKAGE_ENTRY'));
+  const packageRoot = resolve(dirname(packageEntry), '..');
+  const expectedEntry = resolve(packageRoot, 'dist/cwl-editor.js');
+  if (packageEntry !== expectedEntry) {
+    throw new Error('packed package entry must resolve to dist/cwl-editor.js');
+  }
+
+  const packageMetadata = JSON.parse(
+    await readFile(resolve(packageRoot, 'package.json'), 'utf8'),
+  );
+  if (packageMetadata.name !== '@contextualwisdomlab/cwl-editor') {
+    throw new Error('packed package has an unexpected package identity');
+  }
+
+  const nodeModulesRoot = resolve(packageRoot, '../..');
+  const consumerRoot = dirname(nodeModulesRoot);
+  const temporaryDirectory = await mkdtemp(
+    resolve(consumerRoot, '.inkspan-office-handoff-'),
+  );
+
+  try {
+    const copiedHandoff = resolve(temporaryDirectory, 'office-handoff.mjs');
+    const requestPath = resolve(temporaryDirectory, 'request.json');
+    const outputPath = resolve(temporaryDirectory, 'handoff.docx');
+    await copyFile(
+      resolve(repositoryRoot, 'examples/reference-host/office-handoff.mjs'),
+      copiedHandoff,
+    );
+
+    const { createDocxHandoff } = await import(pathToFileURL(copiedHandoff).href);
+    const request = createDocxHandoff({ title: TITLE, markdown: MARKDOWN });
+    if (
+      request.format !== 'docx' ||
+      request.title !== TITLE ||
+      request.blocks?.length !== 1 ||
+      request.blocks[0]?.type !== 'paragraph' ||
+      request.blocks[0]?.text !== EXPECTED_BODY
+    ) {
+      throw new Error('packed Markdown handoff produced an unexpected Office request');
+    }
+    await writeFile(requestPath, `${JSON.stringify(request)}\n`, 'utf8');
+
+    const python = process.env.INKSPAN_OFFICE_PYTHON?.trim() || 'python';
+    const pythonPath = [
+      resolve(repositoryRoot, 'office/src'),
+      process.env.PYTHONPATH,
+    ]
+      .filter(Boolean)
+      .join(delimiter);
+    const pythonEnvironment = {
+      ...process.env,
+      PYTHONPATH: pythonPath,
+    };
+
+    run(
+      python,
+      ['-m', 'inkspan_office.cli', requestPath, outputPath],
+      { cwd: repositoryRoot, env: pythonEnvironment },
+    );
+
+    const validation = `
+from pathlib import Path
+import sys
+from docx import Document
+
+output = Path(sys.argv[1])
+if not output.read_bytes().startswith(b"PK"):
+    raise SystemExit("Office output is not an OOXML package")
+document = Document(output)
+if document.core_properties.title != ${JSON.stringify(TITLE)}:
+    raise SystemExit("DOCX title metadata does not match the handoff")
+paragraphs = [paragraph.text for paragraph in document.paragraphs]
+if paragraphs != [${JSON.stringify(TITLE)}, ${JSON.stringify(EXPECTED_BODY)}]:
+    raise SystemExit(f"unexpected DOCX paragraphs: {paragraphs!r}")
+`;
+    run(python, ['-c', validation, outputPath], {
+      cwd: repositoryRoot,
+      env: pythonEnvironment,
+    });
+  } finally {
+    await rm(temporaryDirectory, { recursive: true, force: true });
+  }
+}
+
+await main();

From 4b69e58356001408ba9530943349504118d37313 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:36:13 -0700
Subject: [PATCH 201/258] ci(reference-host): verify exact packed Office
 execution

---
 .github/workflows/ci.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bc3cc30..ba9efd05 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -85,6 +85,16 @@ jobs:
           echo "INKSPAN_BROWSER_PACKAGE_ENTRY=$package_target/dist/cwl-editor.js" >> "$GITHUB_ENV"
           echo "INKSPAN_EXPECTED_PACKAGE_SHA256=$package_sha" >> "$GITHUB_ENV"
           rm -f -- "$package_file"
+      - name: Set up Python for reference-host Office handoff
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        with:
+          python-version: "3.13"
+          cache: pip
+          cache-dependency-path: office/requirements-ci.txt
+      - name: Install hash-locked Office handoff dependencies
+        run: python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt
+      - name: Verify exact packed reference-host Office handoff
+        run: node examples/reference-host/verify-office-handoff.mjs
       - name: Install Playwright browser revisions pinned by 1.62.0
         run: pnpm --dir tests/browser exec playwright install --with-deps chromium firefox webkit
       - name: Verify real-engine rich clipboard release evidence

From 2722f8631abbbefda51359c563619b3e55ce29da Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:38:46 -0700
Subject: [PATCH 202/258] test(reference-host): pin Office handoff export name

---
 src/referenceHostOfficeExecutionContract.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/referenceHostOfficeExecutionContract.test.ts b/src/referenceHostOfficeExecutionContract.test.ts
index b8626d6c..123d0eb1 100644
--- a/src/referenceHostOfficeExecutionContract.test.ts
+++ b/src/referenceHostOfficeExecutionContract.test.ts
@@ -21,6 +21,8 @@ describe('reference-host Office execution acceptance', () => {
 
     expect(verifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY');
     expect(verifier).toContain('office-handoff.mjs');
+    expect(verifier).toContain('createReferenceDocxRequest');
+    expect(verifier).not.toContain('createDocxHandoff');
     expect(verifier).toContain("'-m', 'inkspan_office.cli'");
     expect(verifier).toContain('document.core_properties.title');
     expect(verifier).toContain('Buyer-ready body.');

From bcc51c070280e9957f8b238576eb80c451dcf791 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:39:36 -0700
Subject: [PATCH 203/258] fix(ci): quote Office pip cache command

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba9efd05..28bfb8be 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,7 +92,7 @@ jobs:
           cache: pip
           cache-dependency-path: office/requirements-ci.txt
       - name: Install hash-locked Office handoff dependencies
-        run: python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt
+        run: "python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt"
       - name: Verify exact packed reference-host Office handoff
         run: node examples/reference-host/verify-office-handoff.mjs
       - name: Install Playwright browser revisions pinned by 1.62.0

From f13b72634b6c5179b93a9d4b1eca83139527861f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:40:06 -0700
Subject: [PATCH 204/258] fix(reference-host): invoke canonical Office handoff
 export

---
 examples/reference-host/verify-office-handoff.mjs | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/verify-office-handoff.mjs b/examples/reference-host/verify-office-handoff.mjs
index 6926c426..2898b4bc 100644
--- a/examples/reference-host/verify-office-handoff.mjs
+++ b/examples/reference-host/verify-office-handoff.mjs
@@ -70,8 +70,13 @@ async function main() {
       copiedHandoff,
     );
 
-    const { createDocxHandoff } = await import(pathToFileURL(copiedHandoff).href);
-    const request = createDocxHandoff({ title: TITLE, markdown: MARKDOWN });
+    const { createReferenceDocxRequest } = await import(
+      pathToFileURL(copiedHandoff).href
+    );
+    const request = createReferenceDocxRequest({
+      title: TITLE,
+      markdown: MARKDOWN,
+    });
     if (
       request.format !== 'docx' ||
       request.title !== TITLE ||

From 58699fc0fd3606164e243b2d6433d18c7f87e757 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 20:42:46 -0700
Subject: [PATCH 205/258] test(reference-host): keep Office execution docs
 truthful

---
 src/referenceHostOfficeExecutionContract.test.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostOfficeExecutionContract.test.ts b/src/referenceHostOfficeExecutionContract.test.ts
index 123d0eb1..75d3ba43 100644
--- a/src/referenceHostOfficeExecutionContract.test.ts
+++ b/src/referenceHostOfficeExecutionContract.test.ts
@@ -18,6 +18,7 @@ describe('reference-host Office execution acceptance', () => {
 
     const verifier = readFileSync(verifierPath, 'utf8');
     const workflow = repositoryFile('.github/workflows/ci.yml');
+    const readme = repositoryFile('examples/reference-host/README.md');
 
     expect(verifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY');
     expect(verifier).toContain('office-handoff.mjs');
@@ -38,5 +39,16 @@ describe('reference-host Office execution acceptance', () => {
     expect(workflow).toContain(
       'node examples/reference-host/verify-office-handoff.mjs',
     );
+
+    expect(readme).toContain('`verify-office-handoff.mjs`');
+    expect(readme).toContain(
+      'renders that bounded request through the local Inkspan Office CLI',
+    );
+    expect(readme).not.toContain(
+      'Complete Office-renderer execution and validation also remain pending',
+    );
+    expect(readme).not.toContain(
+      'complete converter/Office execution and validation beyond the bounded request helper',
+    );
   });
 });

From cbfe14adc83502b376b8afe745b5de2efd807e46 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 22:01:03 -0700
Subject: [PATCH 206/258] docs(reference-host): align Office execution evidence

---
 examples/reference-host/README.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index b84bfc57..e2f8fe40 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -18,6 +18,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
 - `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
+- `verify-office-handoff.mjs` builds and packs the exact editor artifact, maps its Markdown through the public React-free handoff, renders that bounded request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
@@ -67,10 +68,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. Complete Office-renderer execution and validation also remain pending beyond the bounded request helper.
+The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle; complete converter/Office execution and validation beyond the bounded request helper; and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
\ No newline at end of file

From a34dc33a192d7eace3c821b9875d3696e419ed86 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 22:09:52 -0700
Subject: [PATCH 207/258] test(reference-host): require controlled browser
 composition

---
 .../reference-host-hydration.browser.spec.ts  | 37 +++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/tests/browser/specs/reference-host-hydration.browser.spec.ts b/tests/browser/specs/reference-host-hydration.browser.spec.ts
index 5ac07819..56421fbc 100644
--- a/tests/browser/specs/reference-host-hydration.browser.spec.ts
+++ b/tests/browser/specs/reference-host-hydration.browser.spec.ts
@@ -87,3 +87,40 @@ test('preserves an accessible pre-hydration shell and hydrates the packed refere
   expect(hydratedEvidence.consoleErrors).toEqual([]);
   await hydratedContext.close();
 });
+
+test('exercises the controlled public editor composition in the packed reference host without changing host authority', async ({
+  browser,
+}) => {
+  const context = await browser.newContext();
+  const page = await context.newPage();
+  const evidence = await observeReferenceHost(page);
+
+  const response = await page.goto(`${REFERENCE_HOST_URL}?controlMode=controlled`);
+  expect(response?.ok()).toBe(true);
+
+  const form = page.locator('form[data-reference-host-control-mode="controlled"]');
+  await expect(form).toBeVisible();
+  const textbox = page.getByRole('textbox');
+  await expect(textbox).toBeVisible();
+  await textbox.fill('# Controlled buyer draft');
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Controlled buyer draft');
+
+  await page.getByRole('button', { name: 'Save document' }).click();
+  await expect(page.getByText('Saved', { exact: true })).toBeVisible();
+  expect(await page.evaluate(() => window.referenceHostSubmissions)).toEqual([
+    '# Controlled buyer draft',
+  ]);
+
+  await page.getByRole('button', { name: 'Reset draft' }).click();
+  await expect(textbox).toHaveText('# Draft');
+  await expect(
+    page.locator('[data-inkspan-form-field][name="message_body"]'),
+  ).toHaveValue('# Draft');
+  await expect(page.getByText('Not saved yet', { exact: true })).toBeVisible();
+  expect(evidence.rejectedRequests).toEqual([]);
+  expect(evidence.pageErrors).toEqual([]);
+  expect(evidence.consoleErrors).toEqual([]);
+  await context.close();
+});

From dda8bc5de1cbbc38be9f015a40796855cda6c2f8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 22:15:18 -0700
Subject: [PATCH 208/258] fix(reference-host): route controlled browser mode

---
 examples/reference-host/browser-host.tsx | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/examples/reference-host/browser-host.tsx b/examples/reference-host/browser-host.tsx
index 4b1403b3..f9a47cf7 100644
--- a/examples/reference-host/browser-host.tsx
+++ b/examples/reference-host/browser-host.tsx
@@ -21,6 +21,10 @@ if (!root) {
 const searchParams = new URLSearchParams(window.location.search);
 const readOnly = searchParams.get('readOnly') === '1';
 const deferSubmission = searchParams.get('deferSubmission') === '1';
+const controlMode =
+  searchParams.get('controlMode') === 'controlled'
+    ? 'controlled'
+    : 'uncontrolled';
 let resolveDeferredSubmission: (() => void) | undefined;
 
 window.referenceHostResolveSubmission = () => {
@@ -30,6 +34,7 @@ window.referenceHostResolveSubmission = () => {
 hydrateRoot(
   root,
   <ReferenceHostApp
+    controlMode={controlMode}
     loadingLabel="Loading buyer editor"
     onAuthorizedSubmit={async (messageBody) => {
       submissions.push(messageBody);

From 02475eba640f198beb94471dcafb6edeb0337df4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 22:17:03 -0700
Subject: [PATCH 209/258] fix(reference-host): expose active form control mode

---
 examples/reference-host/native-form-host.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 3551b1a2..4f12528f 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -130,6 +130,7 @@ export function NativeFormHost({
 
   return (
     <form
+      data-reference-host-control-mode={controlMode}
       onInput={handleNativeInput}
       onSubmit={handleSubmit}
       onReset={handleReset}

From 9ac26a05bdebb14a5f60434a5a6caaf8c0bef546 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 22:20:34 -0700
Subject: [PATCH 210/258] test(reference-host): preserve form contract with
 mode marker

---
 src/referenceHostNativeFormJourney.test.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 35fa939f..18ce200d 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -52,7 +52,7 @@ describe('reference-host native form journey', () => {
 
   it('blocks form reset while durable submission is in flight and marks a later reset unsaved', () => {
     expect(nativeFormHostSource).toMatch(
-      /<form\s+onInput=\{handleNativeInput\}\s+onSubmit=\{handleSubmit\}\s+onReset=\{handleReset\}/u,
+      /onInput=\{handleNativeInput\}\s+onSubmit=\{handleSubmit\}\s+onReset=\{handleReset\}/u,
     );
     expect(nativeFormHostSource).toContain('submitAuthorized.isInFlight()');
     expect(nativeFormHostSource).toContain('event.preventDefault();');
@@ -106,6 +106,9 @@ describe('reference-host native form journey', () => {
       "controlMode?: 'controlled' | 'uncontrolled';",
     );
     expect(nativeFormHostSource).toContain("controlMode = 'uncontrolled'");
+    expect(nativeFormHostSource).toContain(
+      'data-reference-host-control-mode={controlMode}',
+    );
     expect(nativeFormHostSource).toContain(
       "const [controlledValue, setControlledValue] = useState('# Draft');",
     );

From 9f6bc031b62fdc8edadb26a5b2a100f807cc8094 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 23:08:17 -0700
Subject: [PATCH 211/258] test(reference-host): enter heading content without
 markdown marker

---
 tests/browser/specs/reference-host-hydration.browser.spec.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/browser/specs/reference-host-hydration.browser.spec.ts b/tests/browser/specs/reference-host-hydration.browser.spec.ts
index 56421fbc..179b5041 100644
--- a/tests/browser/specs/reference-host-hydration.browser.spec.ts
+++ b/tests/browser/specs/reference-host-hydration.browser.spec.ts
@@ -102,7 +102,7 @@ test('exercises the controlled public editor composition in the packed reference
   await expect(form).toBeVisible();
   const textbox = page.getByRole('textbox');
   await expect(textbox).toBeVisible();
-  await textbox.fill('# Controlled buyer draft');
+  await textbox.fill('Controlled buyer draft');
   await expect(
     page.locator('[data-inkspan-form-field][name="message_body"]'),
   ).toHaveValue('# Controlled buyer draft');

From 2a950c5a08f383473d046fd8317dbbbcf7ff18db Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sat, 22 Aug 2026 23:09:45 -0700
Subject: [PATCH 212/258] test(reference-host): assert rendered heading text on
 reset

---
 tests/browser/specs/reference-host-hydration.browser.spec.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/browser/specs/reference-host-hydration.browser.spec.ts b/tests/browser/specs/reference-host-hydration.browser.spec.ts
index 179b5041..664b3ab3 100644
--- a/tests/browser/specs/reference-host-hydration.browser.spec.ts
+++ b/tests/browser/specs/reference-host-hydration.browser.spec.ts
@@ -102,6 +102,7 @@ test('exercises the controlled public editor composition in the packed reference
   await expect(form).toBeVisible();
   const textbox = page.getByRole('textbox');
   await expect(textbox).toBeVisible();
+  await expect(textbox).toHaveText('Draft');
   await textbox.fill('Controlled buyer draft');
   await expect(
     page.locator('[data-inkspan-form-field][name="message_body"]'),
@@ -114,7 +115,7 @@ test('exercises the controlled public editor composition in the packed reference
   ]);
 
   await page.getByRole('button', { name: 'Reset draft' }).click();
-  await expect(textbox).toHaveText('# Draft');
+  await expect(textbox).toHaveText('Draft');
   await expect(
     page.locator('[data-inkspan-form-field][name="message_body"]'),
   ).toHaveValue('# Draft');

From 898bc4a8aa086d48326884e9887369d341a4a75e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 00:04:44 -0700
Subject: [PATCH 213/258] test(reference-host): prove read-only form boundary

---
 .../reference-host-readonly.browser.spec.ts   | 68 +++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 tests/browser/specs/reference-host-readonly.browser.spec.ts

diff --git a/tests/browser/specs/reference-host-readonly.browser.spec.ts b/tests/browser/specs/reference-host-readonly.browser.spec.ts
new file mode 100644
index 00000000..6b36d98b
--- /dev/null
+++ b/tests/browser/specs/reference-host-readonly.browser.spec.ts
@@ -0,0 +1,68 @@
+import { expect, test, type Page } from '@playwright/test';
+
+const REFERENCE_HOST_URL =
+  'http://127.0.0.1:4173/examples/reference-host/browser-host.html';
+
+function isReferenceHostRequest(requestUrl: string): boolean {
+  const url = new URL(requestUrl);
+  return (
+    url.protocol === 'http:' &&
+    url.hostname === '127.0.0.1' &&
+    url.port === '4173'
+  );
+}
+
+async function observeReferenceHost(page: Page) {
+  const rejectedRequests: string[] = [];
+  const pageErrors: string[] = [];
+
+  page.on('pageerror', (error) => {
+    pageErrors.push(error.message);
+  });
+  await page.route('**/*', async (route) => {
+    const requestUrl = route.request().url();
+    if (isReferenceHostRequest(requestUrl)) {
+      await route.continue();
+      return;
+    }
+    rejectedRequests.push(requestUrl);
+    await route.abort('blockedbyclient');
+  });
+
+  return { rejectedRequests, pageErrors };
+}
+
+test('keeps the read-only reference host inert at the native-form write boundary', async ({
+  page,
+}) => {
+  const evidence = await observeReferenceHost(page);
+  const response = await page.goto(`${REFERENCE_HOST_URL}?readOnly=1`);
+  expect(response?.ok()).toBe(true);
+
+  const textbox = page.getByRole('textbox');
+  const field = page.locator(
+    '[data-inkspan-form-field][name="message_body"]',
+  );
+  const saveButton = page.getByRole('button', { name: 'Save document' });
+  const resetButton = page.getByRole('button', { name: 'Reset draft' });
+  const form = page.locator('form');
+
+  await expect(textbox).toBeVisible();
+  await expect(textbox).toHaveAttribute('contenteditable', 'false');
+  await expect(textbox).toHaveText('Draft');
+  await expect(field).toBeDisabled();
+  await expect(field).toHaveValue('# Draft');
+  await expect(saveButton).toBeDisabled();
+  await expect(resetButton).toBeDisabled();
+
+  await form.evaluate((element) => {
+    element.dispatchEvent(new Event('submit', { bubbles: true, cancelable: true }));
+    element.dispatchEvent(new Event('reset', { bubbles: true, cancelable: true }));
+  });
+
+  await expect(textbox).toHaveText('Draft');
+  await expect(field).toHaveValue('# Draft');
+  expect(await page.evaluate(() => window.referenceHostSubmissions)).toEqual([]);
+  expect(evidence.rejectedRequests).toEqual([]);
+  expect(evidence.pageErrors).toEqual([]);
+});

From e86fd96db2c6913493ed6ee41353e17f43cedc93 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:04:15 -0700
Subject: [PATCH 214/258] test(reference-host): require host authorization
 before collaboration provider

---
 ...ferenceHostAuthorizedCollaboration.test.ts | 164 ++++++++++++++++++
 1 file changed, 164 insertions(+)
 create mode 100644 src/referenceHostAuthorizedCollaboration.test.ts

diff --git a/src/referenceHostAuthorizedCollaboration.test.ts b/src/referenceHostAuthorizedCollaboration.test.ts
new file mode 100644
index 00000000..bced5d44
--- /dev/null
+++ b/src/referenceHostAuthorizedCollaboration.test.ts
@@ -0,0 +1,164 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const authorizationFixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/host-authorized-collaboration.mjs',
+);
+const lifecycleFixturePath = resolve(
+  process.cwd(),
+  'examples/reference-host/collaboration-provider-lifecycle.mjs',
+);
+
+describe('reference-host authorized collaboration journey', () => {
+  it('ships a host-owned authorization gate outside the published Inkspan runtime', () => {
+    expect(existsSync(authorizationFixturePath)).toBe(true);
+  });
+
+  it('redacts host authorization failures before provider construction', () => {
+    if (!existsSync(authorizationFixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(authorizationFixturePath).href);
+    const script = `
+      import { createHostAuthorizedProviderFactory } from ${moduleUrl};
+      const privateCause = 'private buyer authorization reason';
+      const events = [];
+      const providerFactory = createHostAuthorizedProviderFactory({
+        authorize(context) {
+          events.push('authorize:' + context.actorId + ':' + context.roomId + ':' + context.generation);
+          throw new Error(privateCause);
+        },
+        createProvider() {
+          events.push('provider:create');
+          return {};
+        },
+      });
+      let error = null;
+      try {
+        providerFactory({
+          document: {},
+          roomId: 'buyer-room',
+          actorId: 'buyer-actor',
+          generation: 1,
+        });
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({
+        error,
+        events,
+        leakedPrivateCause: typeof error === 'string' && error.includes(privateCause),
+      }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'collaboration provider authorization failed.',
+      events: ['authorize:buyer-actor:buyer-room:1'],
+      leakedPrivateCause: false,
+    });
+  });
+
+  it('requires an exact synchronous true decision before constructing a provider', () => {
+    if (!existsSync(authorizationFixturePath)) return;
+    const moduleUrl = JSON.stringify(pathToFileURL(authorizationFixturePath).href);
+    const script = `
+      import { createHostAuthorizedProviderFactory } from ${moduleUrl};
+      const events = [];
+      const providerFactory = createHostAuthorizedProviderFactory({
+        authorize() {
+          events.push('authorize');
+          return Promise.resolve(true);
+        },
+        createProvider() {
+          events.push('provider:create');
+          return {};
+        },
+      });
+      let error = null;
+      try {
+        providerFactory({ document: {}, roomId: 'buyer-room', actorId: 'buyer-actor', generation: 1 });
+      } catch (failure) {
+        error = failure instanceof Error ? failure.message : 'unexpected error';
+      }
+      process.stdout.write(JSON.stringify({ error, events }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      error: 'collaboration provider authorization failed.',
+      events: ['authorize'],
+    });
+  });
+
+  it('re-authorizes the exact host room and actor before every provider generation', () => {
+    if (!existsSync(authorizationFixturePath) || !existsSync(lifecycleFixturePath)) return;
+    const authorizationUrl = JSON.stringify(pathToFileURL(authorizationFixturePath).href);
+    const lifecycleUrl = JSON.stringify(pathToFileURL(lifecycleFixturePath).href);
+    const script = `
+      import { createHostAuthorizedProviderFactory } from ${authorizationUrl};
+      import { createHostCollaborationLifecycle } from ${lifecycleUrl};
+      const events = [];
+      const providerFactory = createHostAuthorizedProviderFactory({
+        authorize(context) {
+          events.push('authorize:' + context.actorId + ':' + context.roomId + ':' + context.generation);
+          return true;
+        },
+        createProvider(context) {
+          const generation = context.generation;
+          events.push('provider:create:' + generation);
+          return {
+            connect() { events.push('provider:connect:' + generation); },
+            disconnect() { events.push('provider:disconnect:' + generation); },
+            destroy() { events.push('provider:destroy:' + generation); },
+          };
+        },
+      });
+      const lifecycle = createHostCollaborationLifecycle({
+        documentFactory() {
+          return { destroy() { events.push('document:destroy'); } };
+        },
+        providerFactory,
+        roomId: 'buyer-room',
+        actorId: 'buyer-actor',
+      });
+      lifecycle.connect();
+      lifecycle.reconnect();
+      lifecycle.dispose();
+      process.stdout.write(JSON.stringify({ events, snapshot: lifecycle.getSnapshot() }));
+    `;
+    const output = execFileSync(
+      process.execPath,
+      ['--input-type=module', '--eval', script],
+      { encoding: 'utf8' },
+    );
+
+    expect(JSON.parse(output)).toEqual({
+      events: [
+        'authorize:buyer-actor:buyer-room:1',
+        'provider:create:1',
+        'provider:connect:1',
+        'provider:disconnect:1',
+        'provider:destroy:1',
+        'authorize:buyer-actor:buyer-room:2',
+        'provider:create:2',
+        'provider:connect:2',
+        'provider:disconnect:2',
+        'provider:destroy:2',
+        'document:destroy',
+      ],
+      snapshot: { providerGeneration: 2, status: 'disposed' },
+    });
+  });
+});

From 5aa0d7e2823c63c092d68767299bd2044616c8db Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:07:25 -0700
Subject: [PATCH 215/258] feat(reference-host): gate collaboration provider
 with host authorization

---
 .../host-authorized-collaboration.mjs         | 113 ++++++++++++++++++
 1 file changed, 113 insertions(+)
 create mode 100644 examples/reference-host/host-authorized-collaboration.mjs

diff --git a/examples/reference-host/host-authorized-collaboration.mjs b/examples/reference-host/host-authorized-collaboration.mjs
new file mode 100644
index 00000000..734a32d8
--- /dev/null
+++ b/examples/reference-host/host-authorized-collaboration.mjs
@@ -0,0 +1,113 @@
+const AUTHORIZATION_FAILURE = 'collaboration provider authorization failed.';
+const OPTIONS_FAILURE = 'collaboration authorization options are invalid.';
+const CONTEXT_FAILURE = 'collaboration provider context is invalid.';
+
+/** Marker used by repository contracts to keep this host example out of runtime authority. */
+export const REFERENCE_ONLY = true;
+
+function readExactOwnDataRecord(source, keys, message) {
+  try {
+    if (typeof source !== 'object' || source === null) {
+      throw new TypeError(message);
+    }
+    const values = Object.create(null);
+    for (const key of keys) {
+      const descriptor = Object.getOwnPropertyDescriptor(source, key);
+      if (
+        descriptor === undefined ||
+        !Object.prototype.hasOwnProperty.call(descriptor, 'value')
+      ) {
+        throw new TypeError(message);
+      }
+      values[key] = descriptor.value;
+    }
+    const ownKeys = Reflect.ownKeys(source);
+    if (
+      ownKeys.length !== keys.length ||
+      ownKeys.some(
+        (key) =>
+          typeof key !== 'string' ||
+          !keys.some((candidate) => candidate === key),
+      )
+    ) {
+      throw new TypeError(message);
+    }
+    return values;
+  } catch {
+    throw new TypeError(message);
+  }
+}
+
+function requireFunction(value, message) {
+  if (typeof value !== 'function') {
+    throw new TypeError(message);
+  }
+  return value;
+}
+
+function requireContextString(value) {
+  if (typeof value !== 'string' || value.length === 0 || value.length > 256) {
+    throw new TypeError(CONTEXT_FAILURE);
+  }
+  return value;
+}
+
+function requireGeneration(value) {
+  if (!Number.isSafeInteger(value) || value < 1) {
+    throw new TypeError(CONTEXT_FAILURE);
+  }
+  return value;
+}
+
+/**
+ * Wrap one host-owned collaboration provider factory with a synchronous host
+ * authorization decision. The authorization callback receives only the bounded
+ * room/actor/generation identity needed for admission; the host-owned Y.Doc is
+ * supplied only to the provider constructor after authorization succeeds.
+ *
+ * Inkspan does not authenticate or authorize here. This reference-only adapter
+ * demonstrates where an integrating host must enforce its own policy before a
+ * provider is constructed. Only the exact boolean `true` admits construction;
+ * false, thrown, asynchronous, malformed, or otherwise indeterminate decisions
+ * fail closed with a payload-redacted error.
+ */
+export function createHostAuthorizedProviderFactory(source) {
+  const options = readExactOwnDataRecord(
+    source,
+    ['authorize', 'createProvider'],
+    OPTIONS_FAILURE,
+  );
+  const authorize = requireFunction(options.authorize, OPTIONS_FAILURE);
+  const createProvider = requireFunction(options.createProvider, OPTIONS_FAILURE);
+
+  return function authorizedProviderFactory(sourceContext) {
+    const context = readExactOwnDataRecord(
+      sourceContext,
+      ['document', 'roomId', 'actorId', 'generation'],
+      CONTEXT_FAILURE,
+    );
+    const roomId = requireContextString(context.roomId);
+    const actorId = requireContextString(context.actorId);
+    const generation = requireGeneration(context.generation);
+    const authorizationContext = Object.freeze({ roomId, actorId, generation });
+
+    let decision;
+    try {
+      decision = authorize(authorizationContext);
+    } catch {
+      throw new Error(AUTHORIZATION_FAILURE);
+    }
+    if (decision !== true) {
+      throw new Error(AUTHORIZATION_FAILURE);
+    }
+
+    return createProvider(
+      Object.freeze({
+        document: context.document,
+        roomId,
+        actorId,
+        generation,
+      }),
+    );
+  };
+}

From f44b327d2604132cec8c22eb76058486ebaf391d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:11:56 -0700
Subject: [PATCH 216/258] docs(reference-host): synchronize authorized
 collaboration inventory

---
 examples/reference-host/README.md | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index e2f8fe40..10ecb126 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -10,6 +10,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
 - `autosave-view-model.mjs` projects Inkspan autosave lifecycle snapshots into host-localizable `clean`, `saving`, `queued`, `conflict`, `failed`, `retrying`, `recovered`, `closing`, and `closed` presentation states. Recovery presentation is derived from observed blocked → saving → idle transitions, and validators are never returned as UI data.
 - `collaboration-provider-lifecycle.mjs` demonstrates that the embedding host creates one real `Y.Doc`, reuses that same document across provider reconnects, owns provider/document teardown, and replaces a provider whose `connect()` threw rather than retrying an indeterminate resource. The deterministic provider fixture has no provider SDK or network transport and does not treat room or actor identifiers as authorization evidence.
+- `host-authorized-collaboration.mjs` demonstrates a host-owned synchronous admission gate around provider construction. The authorization callback receives only bounded room, actor, and provider-generation identity; only the exact boolean `true` admits construction; thrown, asynchronous, false, or otherwise indeterminate decisions fail closed with a payload-redacted error. The host re-authorizes every provider generation before the host-owned `Y.Doc` reaches the provider constructor. This reference adapter contains no production identity service, credential store, provider SDK, or network transport and does not make Inkspan an authorization authority.
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
 - `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
@@ -30,7 +31,7 @@ Executable fixtures and helpers remain reference-only host code, require no serv
 | synthetic document repository | Replace with an authorized atomic durable store that enforces the host's RFC 9110 `If-Match` policy, preserves caller validators across confirmed failures, reconciles authoritative state after ambiguous transport outcomes, supports explicit retry/restore/fork recovery under current-validator checks, isolates fork history, and returns a new strong validator only after confirmed success. |
 | deterministic delayed proposal | Replace proposal generation with a host-approved model gateway and data-use policy while preserving exact-revision conflict checks and payload-redacted callback-failure handling before applying untrusted proposal data. |
 | autosave presentation projection | Preserve the exact packed autosave observer-to-view-model boundary in localized host UI; connect authenticated recovery actions in host code and do not display revision or durable validators as user-facing status. |
-| collaboration lifecycle fixture | Keep host-owned `Y.Doc` lifecycle control and replace the deterministic provider factory with the host's authorized Yjs transport provider while preserving ambiguous-connect replacement, reconnect, teardown, credential, and room-authorization policy. |
+| collaboration lifecycle and authorization fixtures | Keep host-owned `Y.Doc` lifecycle control and per-generation fail-closed authorization placement. Replace the deterministic `authorize` callback and provider factory with the host's authenticated policy decision and authorized Yjs transport provider while preserving ambiguous-connect replacement, reconnect, teardown, credential, and room-authorization policy. Credentials and durable authorization evidence remain host-owned and must not enter Inkspan runtime authority. |
 | presentation entrypoints | Choose the complete multilingual or Latin-only font entrypoint, keep imports on published package subpaths, and apply any host theme overrides without weakening Inkspan accessibility states. |
 | native form host | Keep Inkspan's `formFieldName` / `formResetValue` serialization boundary, then connect `onAuthorizedSubmit` to host-owned authorization and atomic durable persistence. Do not add a second hidden-field serializer or treat submitted form content as authorization evidence. |
 | Office handoff helper | Keep the provider-neutral public Markdown projection/request mapping or replace it with a host-approved richer mapping; invoke the strict Inkspan Office renderer only behind host-owned export authorization, output-location policy, storage, and distribution. |
@@ -68,10 +69,10 @@ node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
+The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; an authorized transport-provider integration journey around the demonstrated host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
\ No newline at end of file
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, host-authorization adapter, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, authorization, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
\ No newline at end of file

From 1b6b505cdb9ef0ec6add3b724421e40fffb9a347 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:31:32 -0700
Subject: [PATCH 217/258] test(reference-host): require one-command buyer
 journey

---
 src/referenceHostOneCommandJourney.test.ts | 57 ++++++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 src/referenceHostOneCommandJourney.test.ts

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
new file mode 100644
index 00000000..26e8f2a6
--- /dev/null
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -0,0 +1,57 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const repositoryRoot = process.cwd();
+const verifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-current-reference-journey.mjs',
+);
+
+describe('reference-host one-command journey contract', () => {
+  it('exposes one deterministic command for the currently implemented buyer journey', () => {
+    expect(existsSync(verifierPath)).toBe(true);
+
+    const output = execFileSync(process.execPath, [verifierPath, '--plan'], {
+      cwd: repositoryRoot,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 10_000,
+    });
+
+    expect(JSON.parse(output.trim())).toEqual({
+      command:
+        'node examples/reference-host/verify-current-reference-journey.mjs',
+      contractVersion: 1,
+      status: 'plan',
+      steps: [
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/synthetic-document-repository.mjs',
+        },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/delayed-proposal.mjs',
+        },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/autosave-view-model.mjs',
+        },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/collaboration-provider-lifecycle.mjs',
+        },
+        {
+          args: [],
+          path: 'examples/reference-host/verify-packed-artifact.mjs',
+        },
+        {
+          args: [],
+          path: 'examples/reference-host/verify-office-handoff.mjs',
+        },
+      ],
+    });
+  });
+});

From 9ea1bd1908556f831fb96b3696889fbb6861faa4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:35:28 -0700
Subject: [PATCH 218/258] feat(reference-host): add current journey verifier

---
 .../verify-current-reference-journey.mjs      | 99 +++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 examples/reference-host/verify-current-reference-journey.mjs

diff --git a/examples/reference-host/verify-current-reference-journey.mjs b/examples/reference-host/verify-current-reference-journey.mjs
new file mode 100644
index 00000000..9c9aa7dd
--- /dev/null
+++ b/examples/reference-host/verify-current-reference-journey.mjs
@@ -0,0 +1,99 @@
+import { spawnSync } from 'node:child_process';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const referenceHostDirectory = dirname(fileURLToPath(import.meta.url));
+const repositoryRoot = resolve(referenceHostDirectory, '..', '..');
+const command = 'node examples/reference-host/verify-current-reference-journey.mjs';
+const steps = Object.freeze([
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/synthetic-document-repository.mjs',
+  }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/delayed-proposal.mjs',
+  }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/autosave-view-model.mjs',
+  }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/collaboration-provider-lifecycle.mjs',
+  }),
+  Object.freeze({
+    args: Object.freeze([]),
+    path: 'examples/reference-host/verify-packed-artifact.mjs',
+  }),
+  Object.freeze({
+    args: Object.freeze([]),
+    path: 'examples/reference-host/verify-office-handoff.mjs',
+  }),
+]);
+
+function writeJson(value) {
+  process.stdout.write(`${JSON.stringify(value)}\n`);
+}
+
+function planReceipt() {
+  return {
+    command,
+    contractVersion: 1,
+    status: 'plan',
+    steps,
+  };
+}
+
+function runStep(step) {
+  const result = spawnSync(
+    process.execPath,
+    [resolve(repositoryRoot, step.path), ...step.args],
+    {
+      cwd: repositoryRoot,
+      encoding: 'utf8',
+      maxBuffer: 4 * 1024 * 1024,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 120_000,
+    },
+  );
+
+  if (
+    result.error !== undefined ||
+    result.signal !== null ||
+    result.status !== 0
+  ) {
+    throw new Error('Reference-host current journey verification failed.');
+  }
+}
+
+function main(argv) {
+  if (argv.length === 1 && argv[0] === '--plan') {
+    writeJson(planReceipt());
+    return;
+  }
+  if (argv.length !== 0) {
+    throw new Error(`Usage: ${command} [--plan]`);
+  }
+
+  for (const step of steps) {
+    runStep(step);
+  }
+
+  writeJson({
+    contractVersion: 1,
+    status: 'completed',
+    steps: steps.length,
+  });
+}
+
+try {
+  main(process.argv.slice(2));
+} catch (error) {
+  const message =
+    error instanceof Error
+      ? error.message
+      : 'Reference-host current journey verification failed.';
+  process.stderr.write(`${message}\n`);
+  process.exitCode = 1;
+}

From 0f89e06572094c2c409a774e7ce2efd0184d71f9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 04:36:15 -0700
Subject: [PATCH 219/258] docs(reference-host): expose current journey command

---
 examples/reference-host/README.md | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 10ecb126..feb728ed 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -21,6 +21,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
 - `verify-office-handoff.mjs` builds and packs the exact editor artifact, maps its Markdown through the public React-free handoff, renders that bounded request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
+- `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact and bounded Office verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
@@ -60,7 +61,19 @@ Inkspan owns deterministic editor/revision/autosave/conversion/package behavior.
 
 ## Executable fixture checks
 
-From a clean repository checkout with the supported Node runtime, the deterministic reference-only fixture checks can be exercised directly:
+From a repository checkout with the supported Node runtime and the dependencies required by the exact packed-artifact and local Office verification already installed, the currently implemented partial reference journey can be exercised with one command:
+
+```sh
+node examples/reference-host/verify-current-reference-journey.mjs
+```
+
+Its deterministic execution plan can be inspected without running the constituent checks:
+
+```sh
+node examples/reference-host/verify-current-reference-journey.mjs --plan
+```
+
+The constituent deterministic reference-only fixture checks remain directly executable when a narrower causal check is needed:
 
 ```sh
 node examples/reference-host/synthetic-document-repository.mjs --self-test
@@ -71,8 +84,10 @@ node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
 
 The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
+The one-command helper above consolidates only the currently implemented reference-host checks. It is **not** the final #377 clean-checkout command because the complete framework application, authenticated transport/provider/credential journey, richer application-level Office fidelity, and their acceptance evidence do not exist yet.
+
 ## Deliberate omissions in this partial slice
 
 Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
 
-Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, host-authorization adapter, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, authorization, collaboration, model, deployment, export-authorization, storage, or distribution implementation.
\ No newline at end of file
+Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, host-authorization adapter, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, authorization, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From 71c3f846cc8ba2e355e4b3960f75ee99abea30c5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 05:01:13 -0700
Subject: [PATCH 220/258] test(reference-host): enforce runtime env
 independence

---
 src/referenceHostPackagingBoundary.test.ts | 25 ++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index 5f8bb420..ae803556 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -9,6 +9,12 @@ function repositoryFile(path: string): string {
   return readFileSync(resolve(process.cwd(), path), 'utf8');
 }
 
+function referenceHostExecutableFiles(): string[] {
+  return readdirSync(referenceHostDirectory).filter((path) =>
+    /\.(?:[cm]?[jt]s|[jt]sx)$/u.test(path),
+  );
+}
+
 describe('reference-host package authority boundary', () => {
   it('keeps every reference-host file outside the npm publish inventory', () => {
     const packageMetadata = JSON.parse(repositoryFile('package.json')) as {
@@ -21,9 +27,7 @@ describe('reference-host package authority boundary', () => {
   });
 
   it('rejects source-relative and workspace-alias imports in executable reference files', () => {
-    const executableFiles = readdirSync(referenceHostDirectory).filter((path) =>
-      /\.(?:[cm]?[jt]s|[jt]sx)$/u.test(path),
-    );
+    const executableFiles = referenceHostExecutableFiles();
 
     expect(executableFiles).toEqual(
       expect.arrayContaining([
@@ -40,11 +44,20 @@ describe('reference-host package authority boundary', () => {
     }
   });
 
+  it('rejects runtime environment-variable authority in executable reference files', () => {
+    const executableFiles = referenceHostExecutableFiles();
+
+    expect(executableFiles.length).toBeGreaterThan(0);
+    for (const file of executableFiles) {
+      const source = readFileSync(resolve(referenceHostDirectory, file), 'utf8');
+      expect(source).not.toMatch(/\bprocess\s*\.\s*env\b/u);
+      expect(source).not.toMatch(/\bimport\s*\.\s*meta\s*\.\s*env\b/u);
+    }
+  });
+
   it('keeps the buyer-facing inventory synchronized without claiming complete app acceptance', () => {
     const readme = readFileSync(resolve(referenceHostDirectory, 'README.md'), 'utf8');
-    const executableFiles = readdirSync(referenceHostDirectory).filter((path) =>
-      /\.(?:[cm]?[jt]s|[jt]sx)$/u.test(path),
-    );
+    const executableFiles = referenceHostExecutableFiles();
 
     for (const file of executableFiles) {
       expect(readme).toContain(`\`${file}\``);

From d8884dc59ae44f3ca97fd01e7826df83c2a71057 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 05:08:35 -0700
Subject: [PATCH 221/258] test(reference-host): scope env contract to runtime
 files

---
 src/referenceHostPackagingBoundary.test.ts | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/src/referenceHostPackagingBoundary.test.ts b/src/referenceHostPackagingBoundary.test.ts
index ae803556..e706cc6c 100644
--- a/src/referenceHostPackagingBoundary.test.ts
+++ b/src/referenceHostPackagingBoundary.test.ts
@@ -15,6 +15,12 @@ function referenceHostExecutableFiles(): string[] {
   );
 }
 
+function referenceHostRuntimeFiles(): string[] {
+  return referenceHostExecutableFiles().filter(
+    (path) => !path.startsWith('verify-'),
+  );
+}
+
 describe('reference-host package authority boundary', () => {
   it('keeps every reference-host file outside the npm publish inventory', () => {
     const packageMetadata = JSON.parse(repositoryFile('package.json')) as {
@@ -44,11 +50,18 @@ describe('reference-host package authority boundary', () => {
     }
   });
 
-  it('rejects runtime environment-variable authority in executable reference files', () => {
-    const executableFiles = referenceHostExecutableFiles();
+  it('rejects runtime environment-variable authority in reference-host runtime files', () => {
+    const runtimeFiles = referenceHostRuntimeFiles();
 
-    expect(executableFiles.length).toBeGreaterThan(0);
-    for (const file of executableFiles) {
+    expect(runtimeFiles).toEqual(
+      expect.arrayContaining([
+        'browser-host.tsx',
+        'reference-host-app.tsx',
+        'native-form-host.tsx',
+      ]),
+    );
+    expect(runtimeFiles.length).toBeGreaterThan(0);
+    for (const file of runtimeFiles) {
       const source = readFileSync(resolve(referenceHostDirectory, file), 'utf8');
       expect(source).not.toMatch(/\bprocess\s*\.\s*env\b/u);
       expect(source).not.toMatch(/\bimport\s*\.\s*meta\s*\.\s*env\b/u);

From 3423d829e1a923fbddf434b7e89633329c9f8290 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 09:35:59 -0700
Subject: [PATCH 222/258] test(reference-host): cover same-turn reset admission

---
 ...reference-host-dirty-state.browser.spec.ts | 38 +++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
index 46e6b4f1..f77d5124 100644
--- a/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
+++ b/tests/browser/specs/reference-host-dirty-state.browser.spec.ts
@@ -92,3 +92,41 @@ test('does not claim a newer document is saved when the submitted version settle
   expect(rejectedRequests).toEqual([]);
   expect(pageErrors).toEqual([]);
 });
+
+test('blocks a same-turn native reset after durable submission admission before React presentation commits', async ({
+  page,
+}) => {
+  const { rejectedRequests, pageErrors } = await failUnexpectedNetwork(page);
+  const response = await page.goto(`${REFERENCE_HOST_URL}?deferSubmission=1`);
+  expect(response?.ok()).toBe(true);
+
+  const editor = page.getByRole('textbox');
+  const field = page.locator(
+    '[data-inkspan-form-field][name="message_body"]',
+  );
+  await expect(editor).toBeVisible();
+
+  await editor.click();
+  await page.keyboard.press('Control+A');
+  await page.keyboard.type('Durable gate payload');
+  await expect(field).toHaveValue('Durable gate payload');
+
+  await page.evaluate(() => {
+    const form = document.querySelector('form');
+    if (!(form instanceof HTMLFormElement)) {
+      throw new Error('Reference host form is missing.');
+    }
+    form.requestSubmit();
+    form.reset();
+  });
+
+  await expect(field).toHaveValue('Durable gate payload');
+  expect(await page.evaluate(() => window.referenceHostSubmissions)).toEqual([
+    'Durable gate payload',
+  ]);
+
+  await page.evaluate(() => window.referenceHostResolveSubmission?.());
+  await expect(page.getByText('Saved', { exact: true })).toBeVisible();
+  expect(rejectedRequests).toEqual([]);
+  expect(pageErrors).toEqual([]);
+});

From c33c4202c39928e4af7c56f21d72f503a27b69c2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 11:38:35 -0700
Subject: [PATCH 223/258] test(reference-host): require browser journey in
 one-command plan

---
 src/referenceHostOneCommandJourney.test.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
index 26e8f2a6..4661c36d 100644
--- a/src/referenceHostOneCommandJourney.test.ts
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -51,6 +51,10 @@ describe('reference-host one-command journey contract', () => {
           args: [],
           path: 'examples/reference-host/verify-office-handoff.mjs',
         },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/verify-browser-journey.mjs',
+        },
       ],
     });
   });

From b6c05b2b771febed96da10537d3d1cd476b3debf Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 11:42:43 -0700
Subject: [PATCH 224/258] feat(reference-host): verify packed browser journey

---
 .../reference-host/verify-browser-journey.mjs | 169 ++++++++++++++++++
 1 file changed, 169 insertions(+)
 create mode 100644 examples/reference-host/verify-browser-journey.mjs

diff --git a/examples/reference-host/verify-browser-journey.mjs b/examples/reference-host/verify-browser-journey.mjs
new file mode 100644
index 00000000..aa3e6ac5
--- /dev/null
+++ b/examples/reference-host/verify-browser-journey.mjs
@@ -0,0 +1,169 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import {
+  existsSync,
+  mkdtempSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const referenceHostDirectory = dirname(fileURLToPath(import.meta.url));
+const repositoryRoot = resolve(referenceHostDirectory, '..', '..');
+const browserDirectory = resolve(repositoryRoot, 'tests/browser');
+const command = 'node examples/reference-host/verify-browser-journey.mjs';
+const projects = Object.freeze(['chromium', 'firefox', 'webkit']);
+const specs = Object.freeze([
+  'reference-host-dirty-state.browser.spec.ts',
+  'reference-host-forced-colors.print.browser.spec.ts',
+  'reference-host-hydration.browser.spec.ts',
+  'reference-host-readonly.browser.spec.ts',
+  'reference-host.print.browser.spec.ts',
+]);
+
+function writeJson(value) {
+  process.stdout.write(`${JSON.stringify(value)}\n`);
+}
+
+function planReceipt() {
+  return {
+    command,
+    contractVersion: 1,
+    packageAuthority: 'exact-packed-tarball',
+    projects,
+    specs,
+    status: 'plan',
+  };
+}
+
+function run(commandName, args, options = {}) {
+  const result = spawnSync(commandName, args, {
+    cwd: options.cwd ?? repositoryRoot,
+    encoding: 'utf8',
+    env: options.env ?? process.env,
+    maxBuffer: 8 * 1024 * 1024,
+    stdio: ['ignore', 'pipe', 'pipe'],
+    timeout: options.timeout ?? 180_000,
+  });
+
+  if (
+    result.error !== undefined ||
+    result.signal !== null ||
+    result.status !== 0
+  ) {
+    throw new Error('Reference-host browser journey verification failed.');
+  }
+
+  return result.stdout;
+}
+
+function verifyBrowserJourney() {
+  const packageMetadata = JSON.parse(
+    readFileSync(resolve(repositoryRoot, 'package.json'), 'utf8'),
+  );
+  const temporaryRoot = mkdtempSync(join(tmpdir(), 'inkspan-browser-journey-'));
+
+  try {
+    run('pnpm', ['build'], { timeout: 240_000 });
+
+    const packDirectory = join(temporaryRoot, 'pack');
+    mkdirSync(packDirectory, { recursive: true });
+    run('pnpm', ['pack', '--pack-destination', packDirectory]);
+
+    const tarballs = readdirSync(packDirectory).filter((name) =>
+      name.endsWith('.tgz'),
+    );
+    assert.equal(tarballs.length, 1, 'Expected exactly one packed Inkspan tarball.');
+
+    const extractedDirectory = join(temporaryRoot, 'package');
+    mkdirSync(extractedDirectory, { recursive: true });
+    run(
+      'tar',
+      [
+        '-xzf',
+        join(packDirectory, tarballs[0]),
+        '--strip-components=1',
+        '-C',
+        extractedDirectory,
+      ],
+      { timeout: 60_000 },
+    );
+
+    const extractedMetadata = JSON.parse(
+      readFileSync(join(extractedDirectory, 'package.json'), 'utf8'),
+    );
+    assert.equal(extractedMetadata.name, packageMetadata.name);
+    assert.equal(extractedMetadata.version, packageMetadata.version);
+
+    const packageEntry = join(extractedDirectory, 'dist/cwl-editor.js');
+    assert.equal(
+      existsSync(packageEntry),
+      true,
+      'Packed browser journey is missing the public ESM entrypoint.',
+    );
+
+    for (const spec of specs) {
+      assert.equal(
+        existsSync(join(browserDirectory, 'specs', spec)),
+        true,
+        `Reference-host browser journey is missing ${spec}.`,
+      );
+    }
+
+    const playwrightArgs = [
+      '--dir',
+      'tests/browser',
+      'exec',
+      'playwright',
+      'test',
+      '--config',
+      'playwright.config.ts',
+      ...specs,
+      ...projects.flatMap((project) => ['--project', project]),
+    ];
+    run('pnpm', playwrightArgs, {
+      env: {
+        ...process.env,
+        INKSPAN_BROWSER_PACKAGE_ENTRY: packageEntry,
+      },
+      timeout: 300_000,
+    });
+
+    writeJson({
+      contractVersion: 1,
+      packageAuthority: 'exact-packed-tarball',
+      projects: projects.length,
+      specs: specs.length,
+      status: 'completed',
+    });
+  } finally {
+    rmSync(temporaryRoot, { recursive: true, force: true });
+  }
+}
+
+function main(argv) {
+  if (argv.length === 1 && argv[0] === '--plan') {
+    writeJson(planReceipt());
+    return;
+  }
+  if (argv.length === 1 && argv[0] === '--self-test') {
+    verifyBrowserJourney();
+    return;
+  }
+  throw new Error(`Usage: ${command} --plan | --self-test`);
+}
+
+try {
+  main(process.argv.slice(2));
+} catch (error) {
+  const message =
+    error instanceof Error
+      ? error.message
+      : 'Reference-host browser journey verification failed.';
+  process.stderr.write(`${message}\n`);
+  process.exitCode = 1;
+}

From dbbb2a902fe3d1e07eeb73e5bf65414ab06fb06e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 11:43:04 -0700
Subject: [PATCH 225/258] feat(reference-host): include browser acceptance in
 journey

---
 .../reference-host/verify-current-reference-journey.mjs     | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/examples/reference-host/verify-current-reference-journey.mjs b/examples/reference-host/verify-current-reference-journey.mjs
index 9c9aa7dd..d174dd33 100644
--- a/examples/reference-host/verify-current-reference-journey.mjs
+++ b/examples/reference-host/verify-current-reference-journey.mjs
@@ -30,6 +30,10 @@ const steps = Object.freeze([
     args: Object.freeze([]),
     path: 'examples/reference-host/verify-office-handoff.mjs',
   }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/verify-browser-journey.mjs',
+  }),
 ]);
 
 function writeJson(value) {
@@ -54,7 +58,7 @@ function runStep(step) {
       encoding: 'utf8',
       maxBuffer: 4 * 1024 * 1024,
       stdio: ['ignore', 'pipe', 'pipe'],
-      timeout: 120_000,
+      timeout: 360_000,
     },
   );
 

From 308669ba2a3ce3828941b00579697631a6101a81 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 11:43:51 -0700
Subject: [PATCH 226/258] docs(reference-host): document scoped browser
 verifier

---
 examples/reference-host/README.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index feb728ed..8d89dd43 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -21,9 +21,10 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
 - `verify-office-handoff.mjs` builds and packs the exact editor artifact, maps its Markdown through the public React-free handoff, renders that bounded request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
-- `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact and bounded Office verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
+- `verify-browser-journey.mjs` builds and packs the current Inkspan source, extracts that exact tarball into an isolated temporary package root, binds the browser harness to the packed public ESM/CSS/font entries, and runs only the reference-host acceptance specs across Chromium, Firefox, and WebKit. `--plan` reports the exact engines/spec inventory without executing it; `--self-test` performs the scoped real-browser journey. The verifier assumes the repository's isolated browser-test dependencies and pinned browser revisions are already installed, makes no production transport/auth/persistence claim, and removes its temporary package root after the run.
+- `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact, bounded Office, and scoped exact-packed real-browser verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
 
-Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or network connection for their deterministic repository checks, and are exercised by repository tests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
+Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or external runtime connection for their deterministic repository checks, and are exercised by repository tests. The browser verifier uses only the local loopback harness at runtime and its browser specs reject unexpected external requests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
 ## Copy this, replace that
 
@@ -61,7 +62,7 @@ Inkspan owns deterministic editor/revision/autosave/conversion/package behavior.
 
 ## Executable fixture checks
 
-From a repository checkout with the supported Node runtime and the dependencies required by the exact packed-artifact and local Office verification already installed, the currently implemented partial reference journey can be exercised with one command:
+From a repository checkout with the supported Node runtime, root and isolated browser-test dependencies, pinned Playwright browser revisions, and the dependencies required by the exact packed-artifact and local Office verification already installed, the currently implemented partial reference journey can be exercised with one command:
 
 ```sh
 node examples/reference-host/verify-current-reference-journey.mjs
@@ -80,9 +81,11 @@ node examples/reference-host/synthetic-document-repository.mjs --self-test
 node examples/reference-host/delayed-proposal.mjs --self-test
 node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
+node examples/reference-host/verify-browser-journey.mjs --plan
+node examples/reference-host/verify-browser-journey.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
+The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The one-command helper now invokes `verify-browser-journey.mjs` after the packed-artifact and Office checks so the currently implemented partial buyer journey also runs the reference-host-only Playwright acceptance against an exact extracted tarball. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
 The one-command helper above consolidates only the currently implemented reference-host checks. It is **not** the final #377 clean-checkout command because the complete framework application, authenticated transport/provider/credential journey, richer application-level Office fidelity, and their acceptance evidence do not exist yet.
 

From 52ecab709236264d2293d2cf7243a1baedfc600c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Sun, 23 Aug 2026 11:44:22 -0700
Subject: [PATCH 227/258] test(reference-host): verify packed browser plan
 contract

---
 src/referenceHostOneCommandJourney.test.ts | 34 ++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
index 4661c36d..d23c39fc 100644
--- a/src/referenceHostOneCommandJourney.test.ts
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -9,6 +9,10 @@ const verifierPath = resolve(
   repositoryRoot,
   'examples/reference-host/verify-current-reference-journey.mjs',
 );
+const browserVerifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-browser-journey.mjs',
+);
 
 describe('reference-host one-command journey contract', () => {
   it('exposes one deterministic command for the currently implemented buyer journey', () => {
@@ -58,4 +62,34 @@ describe('reference-host one-command journey contract', () => {
       ],
     });
   });
+
+  it('binds the scoped browser step to an exact packed tarball and all supported engines', () => {
+    expect(existsSync(browserVerifierPath)).toBe(true);
+
+    const output = execFileSync(
+      process.execPath,
+      [browserVerifierPath, '--plan'],
+      {
+        cwd: repositoryRoot,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 10_000,
+      },
+    );
+
+    expect(JSON.parse(output.trim())).toEqual({
+      command: 'node examples/reference-host/verify-browser-journey.mjs',
+      contractVersion: 1,
+      packageAuthority: 'exact-packed-tarball',
+      projects: ['chromium', 'firefox', 'webkit'],
+      specs: [
+        'reference-host-dirty-state.browser.spec.ts',
+        'reference-host-forced-colors.print.browser.spec.ts',
+        'reference-host-hydration.browser.spec.ts',
+        'reference-host-readonly.browser.spec.ts',
+        'reference-host.print.browser.spec.ts',
+      ],
+      status: 'plan',
+    });
+  });
 });

From ff72919bb5aa64a9ab85d3bbfec5403c5c39d421 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:13:13 -0700
Subject: [PATCH 228/258] test(reference-host): require self-contained Office
 journey

---
 src/referenceHostOneCommandJourney.test.ts | 31 ++++++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
index d23c39fc..79c7daa6 100644
--- a/src/referenceHostOneCommandJourney.test.ts
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -13,6 +13,10 @@ const browserVerifierPath = resolve(
   repositoryRoot,
   'examples/reference-host/verify-browser-journey.mjs',
 );
+const packedOfficeVerifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-packed-office-journey.mjs',
+);
 
 describe('reference-host one-command journey contract', () => {
   it('exposes one deterministic command for the currently implemented buyer journey', () => {
@@ -52,8 +56,8 @@ describe('reference-host one-command journey contract', () => {
           path: 'examples/reference-host/verify-packed-artifact.mjs',
         },
         {
-          args: [],
-          path: 'examples/reference-host/verify-office-handoff.mjs',
+          args: ['--self-test'],
+          path: 'examples/reference-host/verify-packed-office-journey.mjs',
         },
         {
           args: ['--self-test'],
@@ -63,6 +67,29 @@ describe('reference-host one-command journey contract', () => {
     });
   });
 
+  it('binds the scoped Office step to a self-contained exact packed tarball', () => {
+    expect(existsSync(packedOfficeVerifierPath)).toBe(true);
+
+    const output = execFileSync(
+      process.execPath,
+      [packedOfficeVerifierPath, '--plan'],
+      {
+        cwd: repositoryRoot,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 10_000,
+      },
+    );
+
+    expect(JSON.parse(output.trim())).toEqual({
+      command:
+        'node examples/reference-host/verify-packed-office-journey.mjs',
+      contractVersion: 1,
+      packageAuthority: 'exact-packed-tarball',
+      status: 'plan',
+    });
+  });
+
   it('binds the scoped browser step to an exact packed tarball and all supported engines', () => {
     expect(existsSync(browserVerifierPath)).toBe(true);
 

From 7ca2f8f1bedfd590961d6d9490ea003ee8801d6e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:17:45 -0700
Subject: [PATCH 229/258] feat(reference-host): self-contain packed Office
 journey

---
 .../verify-packed-office-journey.mjs          | 148 ++++++++++++++++++
 1 file changed, 148 insertions(+)
 create mode 100644 examples/reference-host/verify-packed-office-journey.mjs

diff --git a/examples/reference-host/verify-packed-office-journey.mjs b/examples/reference-host/verify-packed-office-journey.mjs
new file mode 100644
index 00000000..917babbc
--- /dev/null
+++ b/examples/reference-host/verify-packed-office-journey.mjs
@@ -0,0 +1,148 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import {
+  existsSync,
+  mkdtempSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const referenceHostDirectory = dirname(fileURLToPath(import.meta.url));
+const repositoryRoot = resolve(referenceHostDirectory, '..', '..');
+const command =
+  'node examples/reference-host/verify-packed-office-journey.mjs';
+
+function writeJson(value) {
+  process.stdout.write(`${JSON.stringify(value)}\n`);
+}
+
+function planReceipt() {
+  return {
+    command,
+    contractVersion: 1,
+    packageAuthority: 'exact-packed-tarball',
+    status: 'plan',
+  };
+}
+
+function run(commandName, args, options = {}) {
+  const result = spawnSync(commandName, args, {
+    cwd: options.cwd ?? repositoryRoot,
+    encoding: 'utf8',
+    env: options.env ?? process.env,
+    maxBuffer: 8 * 1024 * 1024,
+    stdio: ['ignore', 'pipe', 'pipe'],
+    timeout: options.timeout ?? 180_000,
+  });
+
+  if (
+    result.error !== undefined ||
+    result.signal !== null ||
+    result.status !== 0
+  ) {
+    throw new Error('Reference-host packed Office journey verification failed.');
+  }
+
+  return result.stdout;
+}
+
+function verifyPackedOfficeJourney() {
+  const packageMetadata = JSON.parse(
+    readFileSync(resolve(repositoryRoot, 'package.json'), 'utf8'),
+  );
+  const temporaryRoot = mkdtempSync(join(tmpdir(), 'inkspan-office-journey-'));
+
+  try {
+    run('pnpm', ['build'], { timeout: 240_000 });
+
+    const packDirectory = join(temporaryRoot, 'pack');
+    mkdirSync(packDirectory, { recursive: true });
+    run('pnpm', ['pack', '--pack-destination', packDirectory]);
+
+    const tarballs = readdirSync(packDirectory).filter((name) =>
+      name.endsWith('.tgz'),
+    );
+    assert.equal(tarballs.length, 1, 'Expected exactly one packed Inkspan tarball.');
+
+    const packageDirectory = join(
+      temporaryRoot,
+      'host',
+      'node_modules',
+      '@contextualwisdomlab',
+      'cwl-editor',
+    );
+    mkdirSync(packageDirectory, { recursive: true });
+    run(
+      'tar',
+      [
+        '-xzf',
+        join(packDirectory, tarballs[0]),
+        '--strip-components=1',
+        '-C',
+        packageDirectory,
+      ],
+      { timeout: 60_000 },
+    );
+
+    const packedMetadata = JSON.parse(
+      readFileSync(join(packageDirectory, 'package.json'), 'utf8'),
+    );
+    assert.equal(packedMetadata.name, packageMetadata.name);
+    assert.equal(packedMetadata.version, packageMetadata.version);
+
+    const packageEntry = join(packageDirectory, 'dist', 'cwl-editor.js');
+    assert.equal(
+      existsSync(packageEntry),
+      true,
+      'Packed Office journey is missing the public ESM entrypoint.',
+    );
+
+    run(
+      process.execPath,
+      [resolve(referenceHostDirectory, 'verify-office-handoff.mjs')],
+      {
+        env: {
+          ...process.env,
+          INKSPAN_BROWSER_PACKAGE_ENTRY: packageEntry,
+        },
+        timeout: 180_000,
+      },
+    );
+
+    writeJson({
+      contractVersion: 1,
+      packageAuthority: 'exact-packed-tarball',
+      status: 'completed',
+    });
+  } finally {
+    rmSync(temporaryRoot, { recursive: true, force: true });
+  }
+}
+
+function main(argv) {
+  if (argv.length === 1 && argv[0] === '--plan') {
+    writeJson(planReceipt());
+    return;
+  }
+  if (argv.length === 1 && argv[0] === '--self-test') {
+    verifyPackedOfficeJourney();
+    return;
+  }
+  throw new Error(`Usage: ${command} --plan | --self-test`);
+}
+
+try {
+  main(process.argv.slice(2));
+} catch (error) {
+  const message =
+    error instanceof Error
+      ? error.message
+      : 'Reference-host packed Office journey verification failed.';
+  process.stderr.write(`${message}\n`);
+  process.exitCode = 1;
+}

From 8f34d648e05dcfa862efbcc49c4edecd7894ab4f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:18:11 -0700
Subject: [PATCH 230/258] fix(reference-host): execute self-contained packed
 Office step

---
 examples/reference-host/verify-current-reference-journey.mjs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/verify-current-reference-journey.mjs b/examples/reference-host/verify-current-reference-journey.mjs
index d174dd33..72c06882 100644
--- a/examples/reference-host/verify-current-reference-journey.mjs
+++ b/examples/reference-host/verify-current-reference-journey.mjs
@@ -27,8 +27,8 @@ const steps = Object.freeze([
     path: 'examples/reference-host/verify-packed-artifact.mjs',
   }),
   Object.freeze({
-    args: Object.freeze([]),
-    path: 'examples/reference-host/verify-office-handoff.mjs',
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/verify-packed-office-journey.mjs',
   }),
   Object.freeze({
     args: Object.freeze(['--self-test']),

From 10438f6f7645219e50b7275d7404789fb5f68525 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:19:30 -0700
Subject: [PATCH 231/258] docs(reference-host): distinguish packed Office
 orchestration

---
 examples/reference-host/README.md | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 8d89dd43..f0e9ea6e 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -19,10 +19,11 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
 - `native-form-host.tsx` demonstrates public-package native-form integration: Inkspan synchronizes `message_body` through `formFieldName`, reset behavior is expressed through `formResetValue`, the host reads `FormData` only on submit, and authorization plus durable persistence remain behind the injected `onAuthorizedSubmit` host boundary rather than being embedded in the component.
 - `office-handoff.mjs` maps bounded editor Markdown through Inkspan's public React-free Markdown projection into the strict DOCX paragraph-request shape expected by the Office component. It does not render Office bytes, authorize export, choose an output path, persist or distribute artifacts, use network/credential state, or claim Markdown-to-OOXML round-trip fidelity; those remain Office/host responsibilities.
-- `verify-office-handoff.mjs` builds and packs the exact editor artifact, maps its Markdown through the public React-free handoff, renders that bounded request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
+- `verify-office-handoff.mjs` consumes an already extracted exact package entry supplied by repository verification orchestration through `INKSPAN_BROWSER_PACKAGE_ENTRY`, maps bounded Markdown through that public React-free package handoff, renders the request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. It does not build, pack, or choose the artifact itself. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
+- `verify-packed-office-journey.mjs` is the self-contained package-authority wrapper for that bounded Office path: `--self-test` builds and packs the current Inkspan source, extracts the exact tarball into an isolated consumer-shaped package root, binds `verify-office-handoff.mjs` to that public package entry, runs the bounded DOCX rendering/validation, and removes the temporary consumer; `--plan` reports the exact-packed-tarball authority without executing it. It still assumes the repository's local Office Python dependencies are installed and makes no production export/storage/distribution claim.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
 - `verify-browser-journey.mjs` builds and packs the current Inkspan source, extracts that exact tarball into an isolated temporary package root, binds the browser harness to the packed public ESM/CSS/font entries, and runs only the reference-host acceptance specs across Chromium, Firefox, and WebKit. `--plan` reports the exact engines/spec inventory without executing it; `--self-test` performs the scoped real-browser journey. The verifier assumes the repository's isolated browser-test dependencies and pinned browser revisions are already installed, makes no production transport/auth/persistence claim, and removes its temporary package root after the run.
-- `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact, bounded Office, and scoped exact-packed real-browser verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
+- `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact, self-contained exact-packed bounded Office, and scoped exact-packed real-browser verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
 
 Executable fixtures and helpers remain reference-only host code, require no service, database, credential, provider SDK, model, or external runtime connection for their deterministic repository checks, and are exercised by repository tests. The browser verifier uses only the local loopback harness at runtime and its browser specs reject unexpected external requests. The presentation/native-form/hydration examples reference only public package entrypoints. The complete reference-host directory is deliberately outside the package `files` inventory so example host logic cannot silently become published Inkspan runtime authority.
 
@@ -81,11 +82,13 @@ node examples/reference-host/synthetic-document-repository.mjs --self-test
 node examples/reference-host/delayed-proposal.mjs --self-test
 node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
+node examples/reference-host/verify-packed-office-journey.mjs --plan
+node examples/reference-host/verify-packed-office-journey.mjs --self-test
 node examples/reference-host/verify-browser-journey.mjs --plan
 node examples/reference-host/verify-browser-journey.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The one-command helper now invokes `verify-browser-journey.mjs` after the packed-artifact and Office checks so the currently implemented partial buyer journey also runs the reference-host-only Playwright acceptance against an exact extracted tarball. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-office-handoff.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
+The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The one-command helper invokes `verify-packed-office-journey.mjs` after the packed-artifact consumer check and then `verify-browser-journey.mjs`, so the currently implemented partial buyer journey supplies exact tarball authority to both the bounded Office path and the reference-host-only Playwright acceptance. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-packed-office-journey.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
 The one-command helper above consolidates only the currently implemented reference-host checks. It is **not** the final #377 clean-checkout command because the complete framework application, authenticated transport/provider/credential journey, richer application-level Office fidelity, and their acceptance evidence do not exist yet.
 

From 559800e456d7fc54c537a86a30945cd252b6b894 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:25:02 -0700
Subject: [PATCH 232/258] test(reference-host): bind Office docs to packed
 authority split

---
 ...ferenceHostOfficeExecutionContract.test.ts | 28 +++++++++++++++----
 1 file changed, 23 insertions(+), 5 deletions(-)

diff --git a/src/referenceHostOfficeExecutionContract.test.ts b/src/referenceHostOfficeExecutionContract.test.ts
index 75d3ba43..951d9265 100644
--- a/src/referenceHostOfficeExecutionContract.test.ts
+++ b/src/referenceHostOfficeExecutionContract.test.ts
@@ -8,15 +8,21 @@ function repositoryFile(path: string): string {
 }
 
 describe('reference-host Office execution acceptance', () => {
-  it('renders the exact packed Markdown handoff through the local Office CLI and validates the DOCX', () => {
+  it('executes the self-contained exact-packed Office journey and documents the package-authority split', () => {
     const verifierPath = resolve(
       process.cwd(),
       'examples/reference-host/verify-office-handoff.mjs',
     );
+    const packedVerifierPath = resolve(
+      process.cwd(),
+      'examples/reference-host/verify-packed-office-journey.mjs',
+    );
     expect(existsSync(verifierPath)).toBe(true);
-    if (!existsSync(verifierPath)) return;
+    expect(existsSync(packedVerifierPath)).toBe(true);
+    if (!existsSync(verifierPath) || !existsSync(packedVerifierPath)) return;
 
     const verifier = readFileSync(verifierPath, 'utf8');
+    const packedVerifier = readFileSync(packedVerifierPath, 'utf8');
     const workflow = repositoryFile('.github/workflows/ci.yml');
     const readme = repositoryFile('examples/reference-host/README.md');
 
@@ -30,20 +36,32 @@ describe('reference-host Office execution acceptance', () => {
     expect(verifier).toContain('mkdtemp');
     expect(verifier).toContain('rm(temporaryDirectory');
 
+    expect(packedVerifier).toContain("packageAuthority: 'exact-packed-tarball'");
+    expect(packedVerifier).toContain("run('pnpm', ['build']");
+    expect(packedVerifier).toContain(
+      "run('pnpm', ['pack', '--pack-destination', packDirectory])",
+    );
+    expect(packedVerifier).toContain("'verify-office-handoff.mjs'");
+    expect(packedVerifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY: packageEntry');
+
     expect(workflow).toContain(
-      'Verify exact packed reference-host Office handoff',
+      'Verify self-contained exact-packed reference-host Office journey',
     );
     expect(workflow).toContain(
       'python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt',
     );
     expect(workflow).toContain(
-      'node examples/reference-host/verify-office-handoff.mjs',
+      'node examples/reference-host/verify-packed-office-journey.mjs --self-test',
     );
 
     expect(readme).toContain('`verify-office-handoff.mjs`');
+    expect(readme).toContain('consumes an already extracted exact package entry');
     expect(readme).toContain(
-      'renders that bounded request through the local Inkspan Office CLI',
+      'renders the request through the local Inkspan Office CLI',
     );
+    expect(readme).toContain('does not build, pack, or choose the artifact itself');
+    expect(readme).toContain('`verify-packed-office-journey.mjs`');
+    expect(readme).toContain('self-contained package-authority wrapper');
     expect(readme).not.toContain(
       'Complete Office-renderer execution and validation also remain pending',
     );

From d6bbf034577d6e199d39aa1f36634ad83fd98d46 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 00:25:58 -0700
Subject: [PATCH 233/258] ci(reference-host): execute self-contained packed
 Office journey

---
 .github/workflows/ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 28bfb8be..89a34959 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -93,8 +93,8 @@ jobs:
           cache-dependency-path: office/requirements-ci.txt
       - name: Install hash-locked Office handoff dependencies
         run: "python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt"
-      - name: Verify exact packed reference-host Office handoff
-        run: node examples/reference-host/verify-office-handoff.mjs
+      - name: Verify self-contained exact-packed reference-host Office journey
+        run: node examples/reference-host/verify-packed-office-journey.mjs --self-test
       - name: Install Playwright browser revisions pinned by 1.62.0
         run: pnpm --dir tests/browser exec playwright install --with-deps chromium firefox webkit
       - name: Verify real-engine rich clipboard release evidence

From 4249c5e4334c0048b769edd597f67c495d36b498 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 04:12:31 -0700
Subject: [PATCH 234/258] test(reference-host): require narrow client hydration
 boundary

---
 ...referenceHostApplicationHydration.test.tsx | 57 ++++++++++++-------
 1 file changed, 36 insertions(+), 21 deletions(-)

diff --git a/src/referenceHostApplicationHydration.test.tsx b/src/referenceHostApplicationHydration.test.tsx
index e1b04762..210cf641 100644
--- a/src/referenceHostApplicationHydration.test.tsx
+++ b/src/referenceHostApplicationHydration.test.tsx
@@ -1,47 +1,57 @@
-import { readFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 
 import { describe, expect, it } from 'vitest';
 
-const applicationSource = readFileSync(
-  resolve(process.cwd(), 'examples/reference-host/reference-host-app.tsx'),
-  'utf8',
+const applicationPath = resolve(
+  process.cwd(),
+  'examples/reference-host/reference-host-app.tsx',
+);
+const clientBoundaryPath = resolve(
+  process.cwd(),
+  'examples/reference-host/reference-host-client.tsx',
 );
+const applicationSource = readFileSync(applicationPath, 'utf8');
+const clientBoundarySource = existsSync(clientBoundaryPath)
+  ? readFileSync(clientBoundaryPath, 'utf8')
+  : '';
 const nativeFormSource = readFileSync(
   resolve(process.cwd(), 'examples/reference-host/native-form-host.tsx'),
   'utf8',
 );
 
 describe('reference-host application hydration contract', () => {
-  it('keeps a deterministic server shell and mounts the real native-form host through the client hydration gate', () => {
-    expect(applicationSource.startsWith("'use client';\n")).toBe(true);
+  it('keeps the deterministic server shell outside a narrow client hydration boundary', () => {
+    expect(applicationSource.startsWith("'use client';\n")).toBe(false);
     expect(applicationSource).toContain(
-      "from './hydration-gate.js'",
-    );
-    expect(applicationSource).toContain(
-      "from './native-form-host.js'",
+      "from './reference-host-client.js'",
     );
+    expect(clientBoundarySource.startsWith("'use client';\n")).toBe(true);
     expect(applicationSource).toContain(
       '<main aria-labelledby="reference-host-heading">',
     );
-    expect(applicationSource).toContain(
-      '<ReferenceHostHydrationGate',
-    );
-    expect(applicationSource).toContain(
-      'renderEditor={() => (',
+    expect(applicationSource).toContain('<ReferenceHostClient');
+    expect(applicationSource).not.toContain('<ReferenceHostHydrationGate');
+    expect(applicationSource).not.toContain('<NativeFormHost');
+    expect(clientBoundarySource).toContain(
+      "from './hydration-gate.js'",
     );
-    expect(applicationSource).toContain(
-      '<NativeFormHost',
+    expect(clientBoundarySource).toContain(
+      "from './native-form-host.js'",
     );
-    expect(applicationSource).toContain(
+    expect(clientBoundarySource).toContain('<ReferenceHostHydrationGate');
+    expect(clientBoundarySource).toContain('renderEditor={() => (');
+    expect(clientBoundarySource).toContain('<NativeFormHost');
+    expect(clientBoundarySource).toContain(
       'onAuthorizedSubmit={onAuthorizedSubmit}',
     );
-    expect(applicationSource).toContain('readOnly={readOnly}');
+    expect(clientBoundarySource).toContain('readOnly={readOnly}');
   });
 
-  it('forwards the declared controlled or uncontrolled composition mode into the hydrated native-form host', () => {
+  it('forwards the declared controlled or uncontrolled composition mode through the client boundary', () => {
     expect(applicationSource).toContain("controlMode = 'uncontrolled'");
     expect(applicationSource).toContain('controlMode={controlMode}');
+    expect(clientBoundarySource).toContain('controlMode={controlMode}');
   });
 
   it('preserves the public-package and host-authority boundary for the hydrated form', () => {
@@ -54,5 +64,10 @@ describe('reference-host application hydration contract', () => {
     expect(applicationSource).not.toContain('fetch(');
     expect(applicationSource).not.toContain('localStorage');
     expect(applicationSource).not.toContain('process.env');
+    expect(clientBoundarySource).not.toContain('/src/');
+    expect(clientBoundarySource).not.toContain('../../src');
+    expect(clientBoundarySource).not.toContain('fetch(');
+    expect(clientBoundarySource).not.toContain('localStorage');
+    expect(clientBoundarySource).not.toContain('process.env');
   });
-});
+});
\ No newline at end of file

From a8012c5283781dc735f25f3d46c8c933a1295b52 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 04:16:14 -0700
Subject: [PATCH 235/258] feat(reference-host): isolate client hydration
 boundary

---
 .../reference-host/reference-host-client.tsx  | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 examples/reference-host/reference-host-client.tsx

diff --git a/examples/reference-host/reference-host-client.tsx b/examples/reference-host/reference-host-client.tsx
new file mode 100644
index 00000000..2be2db2f
--- /dev/null
+++ b/examples/reference-host/reference-host-client.tsx
@@ -0,0 +1,40 @@
+'use client';
+
+import { ReferenceHostHydrationGate } from './hydration-gate.js';
+import {
+  NativeFormHost,
+  type NativeFormHostProps,
+} from './native-form-host.js';
+
+export interface ReferenceHostClientProps extends NativeFormHostProps {
+  /** Host-localized label rendered before the interactive editor hydrates. */
+  loadingLabel: string;
+}
+
+/**
+ * Narrow client boundary for the reference-host editor composition.
+ *
+ * Browser-only hydration and the native form/editor lifecycle stay behind this
+ * boundary. The embedding host still owns authorization and durable persistence
+ * through onAuthorizedSubmit; this component adds no transport, credential, or
+ * storage authority.
+ */
+export function ReferenceHostClient({
+  loadingLabel,
+  onAuthorizedSubmit,
+  controlMode,
+  readOnly,
+}: ReferenceHostClientProps) {
+  return (
+    <ReferenceHostHydrationGate
+      loadingLabel={loadingLabel}
+      renderEditor={() => (
+        <NativeFormHost
+          onAuthorizedSubmit={onAuthorizedSubmit}
+          controlMode={controlMode}
+          readOnly={readOnly}
+        />
+      )}
+    />
+  );
+}

From 743ce42018418552192ff0fea33acb1c2a8c5024 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 04:16:58 -0700
Subject: [PATCH 236/258] fix(reference-host): keep server shell outside client
 boundary

---
 .../reference-host/reference-host-app.tsx     | 32 +++++++------------
 1 file changed, 11 insertions(+), 21 deletions(-)

diff --git a/examples/reference-host/reference-host-app.tsx b/examples/reference-host/reference-host-app.tsx
index 268a35e4..8b3a268a 100644
--- a/examples/reference-host/reference-host-app.tsx
+++ b/examples/reference-host/reference-host-app.tsx
@@ -1,22 +1,16 @@
-'use client';
-
-import { ReferenceHostHydrationGate } from './hydration-gate.js';
 import {
-  NativeFormHost,
-  type NativeFormHostProps,
-} from './native-form-host.js';
+  ReferenceHostClient,
+  type ReferenceHostClientProps,
+} from './reference-host-client.js';
 
-export interface ReferenceHostAppProps extends NativeFormHostProps {
-  /** Host-localized label rendered in the deterministic server shell. */
-  loadingLabel: string;
-}
+export interface ReferenceHostAppProps extends ReferenceHostClientProps {}
 
 /**
  * Minimal buyer-facing application composition for the reference host.
  *
- * The server render is deliberately limited to deterministic host chrome and a
- * hydration placeholder. The real Inkspan native-form integration is created
- * only after client hydration, while authorization and durable persistence stay
+ * This module is deliberately server-safe: it owns only deterministic host
+ * chrome and delegates browser-only hydration/editor behavior to the narrow
+ * ReferenceHostClient boundary. Authorization and durable persistence remain
  * behind the host-supplied onAuthorizedSubmit callback.
  */
 export function ReferenceHostApp({
@@ -28,15 +22,11 @@ export function ReferenceHostApp({
   return (
     <main aria-labelledby="reference-host-heading">
       <h1 id="reference-host-heading">Inkspan reference host</h1>
-      <ReferenceHostHydrationGate
+      <ReferenceHostClient
         loadingLabel={loadingLabel}
-        renderEditor={() => (
-          <NativeFormHost
-            onAuthorizedSubmit={onAuthorizedSubmit}
-            controlMode={controlMode}
-            readOnly={readOnly}
-          />
-        )}
+        onAuthorizedSubmit={onAuthorizedSubmit}
+        controlMode={controlMode}
+        readOnly={readOnly}
       />
     </main>
   );

From 64c371454219fbe9f6a837a0bb60b2dfcd5fb98c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 04:18:35 -0700
Subject: [PATCH 237/258] docs(reference-host): describe server and client
 boundary

---
 examples/reference-host/README.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index f0e9ea6e..92220967 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -13,7 +13,8 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `host-authorized-collaboration.mjs` demonstrates a host-owned synchronous admission gate around provider construction. The authorization callback receives only bounded room, actor, and provider-generation identity; only the exact boolean `true` admits construction; thrown, asynchronous, false, or otherwise indeterminate decisions fail closed with a payload-redacted error. The host re-authorizes every provider generation before the host-owned `Y.Doc` reaches the provider constructor. This reference adapter contains no production identity service, credential store, provider SDK, or network transport and does not make Inkspan an authorization authority.
 - `single-flight-submission.ts` provides the synchronous host-local admission guard used by the form example so same-turn submit/reset races cannot invoke the durable host callback twice.
 - `hydration-gate.tsx` demonstrates an application-facing client hydration gate around the public Inkspan editor contract. It is deterministic boundary evidence, not a complete framework application or browser acceptance journey.
-- `reference-host-app.tsx` composes the deterministic application shell, hydration gate, and native-form host while preserving host authority; it is source-contract evidence rather than complete framework/browser acceptance.
+- `reference-host-client.tsx` is the narrow `'use client'` composition boundary: it owns the hydration gate plus native-form editor lifecycle while leaving authorization and durable persistence behind the injected host callback.
+- `reference-host-app.tsx` is the server-safe deterministic application shell. It renders host chrome and delegates all browser-only editor behavior to `reference-host-client.tsx`; this remains source-contract evidence rather than complete framework/browser acceptance.
 - `browser-host.tsx` loads the local `presentation-full.css` buyer entrypoint, which resolves Inkspan's public `styles.css` plus complete multilingual `fonts.css`, and hydrates the deterministic `browser-host.html` shell into `ReferenceHostApp` for exact-packed Chromium/Firefox/WebKit execution. The browser harness binds the package root and public presentation subpaths to the exact extracted tarball rather than workspace/source authority. It supports deterministic read-only and deferred-submission states, native-form hydration/submission, narrow-viewport, print, forced-colors, and no-unexpected-network acceptance while recording only host-local test submissions. It remains repository test-host evidence, not an authorized durable host or the complete framework application required by #377.
 - `presentation-full.css` imports Inkspan's public `styles.css` and complete multilingual `fonts.css` subpaths for hosts that want the bundled offline multilingual font set.
 - `presentation-latin.css` imports the same public editor stylesheet plus the smaller public `fonts-latin.css` option for Latin-only hosts.
@@ -94,6 +95,6 @@ The one-command helper above consolidates only the currently implemented referen
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current gate, isolated SSR consumer, and browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current server-safe shell/client-boundary composition, isolated SSR consumer, and browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, host-authorization adapter, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, authorization, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From f2368c656ab1768cd439ceb64b8fa12b15728fa7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:07:00 -0700
Subject: [PATCH 238/258] chore(reference-host): restore canonical CI ownership

---
 .github/workflows/ci.yml | 32 --------------------------------
 1 file changed, 32 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 89a34959..210bbdb8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -64,43 +64,11 @@ jobs:
         run: pnpm install --frozen-lockfile
       - name: Install browser-test dependencies from the isolated immutable lock
         run: pnpm --dir tests/browser install --frozen-lockfile
-      - name: Pack exact editor artifact for browser verification
-        run: |
-          set -euo pipefail
-          pnpm build
-          pack_json="$(npm pack --ignore-scripts --json)"
-          package_file="$(printf '%s' "$pack_json" | node -e "let input=''; process.stdin.on('data', chunk => input += chunk); process.stdin.on('end', () => process.stdout.write(JSON.parse(input)[0].filename));")"
-          package_target="$GITHUB_WORKSPACE/tests/browser/node_modules/@contextualwisdomlab/cwl-editor"
-          package_sha="$(sha256sum -- "$package_file" | awk '{print $1}')"
-          rm -rf "$package_target"
-          mkdir -p "$package_target"
-          tar -xzf "$package_file" --strip-components=1 -C "$package_target"
-          test -f "$package_target/package.json"
-          test -f "$package_target/dist/cwl-editor.js"
-          package_name="$(node -e "const fs=require('node:fs'); const p=JSON.parse(fs.readFileSync(process.argv[1], 'utf8')); process.stdout.write(p.name || '')" "$package_target/package.json")"
-          if [[ "$package_name" != '@contextualwisdomlab/cwl-editor' ]]; then
-            echo "::error::Packed browser artifact has an unexpected package identity."
-            exit 1
-          fi
-          echo "INKSPAN_BROWSER_PACKAGE_ENTRY=$package_target/dist/cwl-editor.js" >> "$GITHUB_ENV"
-          echo "INKSPAN_EXPECTED_PACKAGE_SHA256=$package_sha" >> "$GITHUB_ENV"
-          rm -f -- "$package_file"
-      - name: Set up Python for reference-host Office handoff
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
-        with:
-          python-version: "3.13"
-          cache: pip
-          cache-dependency-path: office/requirements-ci.txt
-      - name: Install hash-locked Office handoff dependencies
-        run: "python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt"
-      - name: Verify self-contained exact-packed reference-host Office journey
-        run: node examples/reference-host/verify-packed-office-journey.mjs --self-test
       - name: Install Playwright browser revisions pinned by 1.62.0
         run: pnpm --dir tests/browser exec playwright install --with-deps chromium firefox webkit
       - name: Verify real-engine rich clipboard release evidence
         env:
           INKSPAN_EXPECTED_HEAD_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-          INKSPAN_EXPECTED_PACKAGE_SHA256: ${{ env.INKSPAN_EXPECTED_PACKAGE_SHA256 }}
         run: pnpm --dir tests/browser exec playwright test --config playwright.config.ts
 
   office:

From 325d07c2272e328cbfcd3724ad7778d4b442d6f5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:09:11 -0700
Subject: [PATCH 239/258] test(reference-host): keep Office contract
 source-owned

---
 src/referenceHostOfficeExecutionContract.test.ts | 13 ++-----------
 1 file changed, 2 insertions(+), 11 deletions(-)

diff --git a/src/referenceHostOfficeExecutionContract.test.ts b/src/referenceHostOfficeExecutionContract.test.ts
index 951d9265..4e08595f 100644
--- a/src/referenceHostOfficeExecutionContract.test.ts
+++ b/src/referenceHostOfficeExecutionContract.test.ts
@@ -23,7 +23,6 @@ describe('reference-host Office execution acceptance', () => {
 
     const verifier = readFileSync(verifierPath, 'utf8');
     const packedVerifier = readFileSync(packedVerifierPath, 'utf8');
-    const workflow = repositoryFile('.github/workflows/ci.yml');
     const readme = repositoryFile('examples/reference-host/README.md');
 
     expect(verifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY');
@@ -43,16 +42,8 @@ describe('reference-host Office execution acceptance', () => {
     );
     expect(packedVerifier).toContain("'verify-office-handoff.mjs'");
     expect(packedVerifier).toContain('INKSPAN_BROWSER_PACKAGE_ENTRY: packageEntry');
-
-    expect(workflow).toContain(
-      'Verify self-contained exact-packed reference-host Office journey',
-    );
-    expect(workflow).toContain(
-      'python -m pip install --require-hashes --only-binary=:all: -r office/requirements-ci.txt',
-    );
-    expect(workflow).toContain(
-      'node examples/reference-host/verify-packed-office-journey.mjs --self-test',
-    );
+    expect(packedVerifier).toContain("argv[0] === '--self-test'");
+    expect(packedVerifier).toContain('verifyPackedOfficeJourney();');
 
     expect(readme).toContain('`verify-office-handoff.mjs`');
     expect(readme).toContain('consumes an already extracted exact package entry');

From e86c27a5f3b59377da6c50c22545717ffc4c5bf4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:36:29 -0700
Subject: [PATCH 240/258] test(reference-host): drop foreign CI assertion

---
 scripts/release-metadata.test.mjs | 24 ------------------------
 1 file changed, 24 deletions(-)

diff --git a/scripts/release-metadata.test.mjs b/scripts/release-metadata.test.mjs
index 641549b4..768e4ec4 100644
--- a/scripts/release-metadata.test.mjs
+++ b/scripts/release-metadata.test.mjs
@@ -69,27 +69,3 @@ test('preserves historical 0.5.29 release evidence and doctoring identity', () =
     true,
   );
 });
-
-test('CI browser evidence installs the exact packed editor instead of source fallback', () => {
-  const ciWorkflow = readRepositoryText('.github/workflows/ci.yml');
-  const packIndex = ciWorkflow.indexOf(
-    '- name: Pack exact editor artifact for browser verification',
-  );
-  const entryIndex = ciWorkflow.indexOf('INKSPAN_BROWSER_PACKAGE_ENTRY=');
-  const playwrightIndex = ciWorkflow.indexOf(
-    '- name: Verify real-engine rich clipboard release evidence',
-  );
-
-  assert.notEqual(packIndex, -1);
-  assert.notEqual(entryIndex, -1);
-  assert.notEqual(playwrightIndex, -1);
-  assert.equal(ciWorkflow.includes('npm pack --ignore-scripts --json'), true);
-  assert.equal(
-    ciWorkflow.includes(
-      "if [[ \"$package_name\" != '@contextualwisdomlab/cwl-editor' ]]; then",
-    ),
-    true,
-  );
-  assert.equal(packIndex < entryIndex, true);
-  assert.equal(entryIndex < playwrightIndex, true);
-});

From 031ac149fb8f3cae4347715347add687841c0f1e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:43:38 -0700
Subject: [PATCH 241/258] test(reference-host): require exact-packed app SSR
 proof

---
 ...referenceHostApplicationSsrJourney.test.ts | 47 +++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 src/referenceHostApplicationSsrJourney.test.ts

diff --git a/src/referenceHostApplicationSsrJourney.test.ts b/src/referenceHostApplicationSsrJourney.test.ts
new file mode 100644
index 00000000..67f3305f
--- /dev/null
+++ b/src/referenceHostApplicationSsrJourney.test.ts
@@ -0,0 +1,47 @@
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const repositoryRoot = process.cwd();
+const verifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-application-ssr.mjs',
+);
+const packageMetadata = JSON.parse(
+  readFileSync(resolve(repositoryRoot, 'package.json'), 'utf8'),
+) as { name: string; version: string };
+
+describe('reference-host application SSR acceptance', () => {
+  it(
+    'server-renders the application shell against the exact packed package while deferring the client editor boundary',
+    () => {
+      const output = execFileSync(
+        process.execPath,
+        [verifierPath, '--self-test'],
+        {
+          cwd: repositoryRoot,
+          encoding: 'utf8',
+          stdio: ['ignore', 'pipe', 'pipe'],
+          timeout: 180_000,
+        },
+      );
+
+      const result = JSON.parse(output.trim()) as {
+        packageName?: unknown;
+        packageVersion?: unknown;
+        packageAuthority?: unknown;
+        applicationServerRendered?: unknown;
+        clientEditorDeferred?: unknown;
+      };
+
+      expect(result.packageName).toBe(packageMetadata.name);
+      expect(result.packageVersion).toBe(packageMetadata.version);
+      expect(result.packageAuthority).toBe('exact-packed-tarball');
+      expect(result.applicationServerRendered).toBe(true);
+      expect(result.clientEditorDeferred).toBe(true);
+    },
+    180_000,
+  );
+});

From 20fdb0b234077db959d59eb66939d9df384034c4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:46:45 -0700
Subject: [PATCH 242/258] feat(reference-host): verify exact-packed app SSR

---
 .../reference-host/verify-application-ssr.mjs | 175 ++++++++++++++++++
 1 file changed, 175 insertions(+)
 create mode 100644 examples/reference-host/verify-application-ssr.mjs

diff --git a/examples/reference-host/verify-application-ssr.mjs b/examples/reference-host/verify-application-ssr.mjs
new file mode 100644
index 00000000..4cd0381a
--- /dev/null
+++ b/examples/reference-host/verify-application-ssr.mjs
@@ -0,0 +1,175 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import {
+  mkdtempSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  realpathSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { build } from 'vite';
+
+const repositoryRoot = resolve(
+  dirname(fileURLToPath(import.meta.url)),
+  '..',
+  '..',
+);
+const packageMetadata = JSON.parse(
+  readFileSync(join(repositoryRoot, 'package.json'), 'utf8'),
+);
+const packageName = packageMetadata.name;
+const packageVersion = packageMetadata.version;
+
+function run(command, argumentsList, cwd) {
+  return execFileSync(command, argumentsList, {
+    cwd,
+    encoding: 'utf8',
+    env: process.env,
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+}
+
+function isContained(parentPath, childPath) {
+  const relation = relative(realpathSync(parentPath), realpathSync(childPath));
+  return relation === '' || (!relation.startsWith(`..${sep}`) && relation !== '..');
+}
+
+const requestedMode = process.argv.slice(2);
+assert.equal(
+  requestedMode.length === 0 ||
+    (requestedMode.length === 1 && requestedMode[0] === '--self-test'),
+  true,
+  'Expected no arguments or --self-test.',
+);
+
+const temporaryRoot = mkdtempSync(join(tmpdir(), 'inkspan-reference-host-app-ssr-'));
+
+try {
+  run('pnpm', ['build'], repositoryRoot);
+
+  const packDirectory = join(temporaryRoot, 'pack');
+  mkdirSync(packDirectory, { recursive: true });
+  run('pnpm', ['pack', '--pack-destination', packDirectory], repositoryRoot);
+
+  const tarballs = readdirSync(packDirectory).filter((name) => name.endsWith('.tgz'));
+  assert.equal(tarballs.length, 1, 'Expected exactly one packed Inkspan tarball.');
+  const tarballPath = join(packDirectory, tarballs[0]);
+
+  const extractDirectory = join(temporaryRoot, 'extracted');
+  mkdirSync(extractDirectory, { recursive: true });
+  run('tar', ['-xzf', tarballPath, '-C', extractDirectory], repositoryRoot);
+
+  const packedPackageDirectory = join(extractDirectory, 'package');
+  const packedMetadata = JSON.parse(
+    readFileSync(join(packedPackageDirectory, 'package.json'), 'utf8'),
+  );
+  assert.equal(packedMetadata.name, packageName);
+  assert.equal(packedMetadata.version, packageVersion);
+
+  const packedEntry = join(packedPackageDirectory, 'dist', 'cwl-editor.js');
+  assert.equal(
+    isContained(packedPackageDirectory, packedEntry),
+    true,
+    'Packed application dependency escaped the exact tarball.',
+  );
+  assert.equal(
+    relative(realpathSync(packedPackageDirectory), realpathSync(packedEntry)).startsWith(
+      `dist${sep}`,
+    ),
+    true,
+    'Packed application dependency did not resolve through dist/.',
+  );
+
+  const applicationEntry = join(temporaryRoot, 'application-ssr.tsx');
+  const referenceHostApplication = join(
+    repositoryRoot,
+    'examples',
+    'reference-host',
+    'reference-host-app.tsx',
+  );
+  writeFileSync(
+    applicationEntry,
+    `import React from 'react';
+import { renderToString } from 'react-dom/server';
+import { ReferenceHostApp } from ${JSON.stringify(referenceHostApplication)};
+
+const loadingLabel = 'Loading exact-packed Inkspan editor';
+const serverHtml = renderToString(
+  React.createElement(ReferenceHostApp, {
+    loadingLabel,
+    onAuthorizedSubmit() {
+      throw new Error('Host submit authority must not execute during server rendering.');
+    },
+  }),
+);
+
+const applicationServerRendered =
+  serverHtml.includes('<main') &&
+  serverHtml.includes('Inkspan reference host') &&
+  serverHtml.includes('aria-labelledby="reference-host-heading"');
+const clientEditorDeferred =
+  serverHtml.includes('aria-busy="true"') &&
+  serverHtml.includes(loadingLabel) &&
+  !serverHtml.includes('name="message_body"');
+
+if (!applicationServerRendered) {
+  throw new Error('Reference-host application shell did not server-render deterministically.');
+}
+if (!clientEditorDeferred) {
+  throw new Error('Reference-host client editor crossed the server hydration boundary.');
+}
+
+process.stdout.write(JSON.stringify({
+  applicationServerRendered,
+  clientEditorDeferred,
+}));
+`,
+    'utf8',
+  );
+
+  const outputDirectory = join(temporaryRoot, 'ssr-build');
+  await build({
+    configFile: false,
+    logLevel: 'silent',
+    resolve: {
+      alias: [{ find: packageName, replacement: packedEntry }],
+    },
+    build: {
+      ssr: applicationEntry,
+      outDir: outputDirectory,
+      emptyOutDir: true,
+      rollupOptions: {
+        output: {
+          entryFileNames: 'reference-host-ssr.mjs',
+        },
+      },
+    },
+    ssr: {
+      noExternal: true,
+    },
+  });
+
+  const applicationReceipt = JSON.parse(
+    run(process.execPath, [join(outputDirectory, 'reference-host-ssr.mjs')], repositoryRoot),
+  );
+  assert.equal(applicationReceipt.applicationServerRendered, true);
+  assert.equal(applicationReceipt.clientEditorDeferred, true);
+
+  process.stdout.write(
+    `${JSON.stringify({
+      packageName,
+      packageVersion,
+      packageAuthority: 'exact-packed-tarball',
+      applicationServerRendered: true,
+      clientEditorDeferred: true,
+    })}\n`,
+  );
+} finally {
+  rmSync(temporaryRoot, { recursive: true, force: true });
+}

From 23529fe77972fef654f667a7547b44bbcedb89b5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:52:06 -0700
Subject: [PATCH 243/258] fix(reference-host): resolve SSR through packed
 consumer

---
 .../reference-host/verify-application-ssr.mjs | 71 ++++++++++++++-----
 1 file changed, 53 insertions(+), 18 deletions(-)

diff --git a/examples/reference-host/verify-application-ssr.mjs b/examples/reference-host/verify-application-ssr.mjs
index 4cd0381a..330b31b1 100644
--- a/examples/reference-host/verify-application-ssr.mjs
+++ b/examples/reference-host/verify-application-ssr.mjs
@@ -61,32 +61,59 @@ try {
   assert.equal(tarballs.length, 1, 'Expected exactly one packed Inkspan tarball.');
   const tarballPath = join(packDirectory, tarballs[0]);
 
-  const extractDirectory = join(temporaryRoot, 'extracted');
-  mkdirSync(extractDirectory, { recursive: true });
-  run('tar', ['-xzf', tarballPath, '-C', extractDirectory], repositoryRoot);
-
-  const packedPackageDirectory = join(extractDirectory, 'package');
-  const packedMetadata = JSON.parse(
-    readFileSync(join(packedPackageDirectory, 'package.json'), 'utf8'),
+  const hostDirectory = join(temporaryRoot, 'host');
+  mkdirSync(hostDirectory, { recursive: true });
+  writeFileSync(
+    join(hostDirectory, 'package.json'),
+    `${JSON.stringify(
+      {
+        name: 'inkspan-reference-host-app-ssr-consumer',
+        private: true,
+        type: 'module',
+        packageManager: packageMetadata.packageManager,
+        dependencies: {
+          [packageName]: `file:${tarballPath}`,
+          react: packageMetadata.devDependencies.react,
+          'react-dom': packageMetadata.devDependencies['react-dom'],
+        },
+      },
+      null,
+      2,
+    )}\n`,
+    'utf8',
+  );
+  run(
+    'pnpm',
+    ['install', '--prefer-offline', '--ignore-scripts', '--no-frozen-lockfile'],
+    hostDirectory,
   );
-  assert.equal(packedMetadata.name, packageName);
-  assert.equal(packedMetadata.version, packageVersion);
 
-  const packedEntry = join(packedPackageDirectory, 'dist', 'cwl-editor.js');
+  const installedPackageDirectory = join(
+    hostDirectory,
+    'node_modules',
+    ...packageName.split('/'),
+  );
+  const installedMetadata = JSON.parse(
+    readFileSync(join(installedPackageDirectory, 'package.json'), 'utf8'),
+  );
+  assert.equal(installedMetadata.name, packageName);
+  assert.equal(installedMetadata.version, packageVersion);
   assert.equal(
-    isContained(packedPackageDirectory, packedEntry),
+    isContained(join(hostDirectory, 'node_modules'), installedPackageDirectory),
     true,
-    'Packed application dependency escaped the exact tarball.',
+    'Installed application dependency escaped the isolated consumer.',
   );
+
+  const packedEntry = join(installedPackageDirectory, 'dist', 'cwl-editor.js');
   assert.equal(
-    relative(realpathSync(packedPackageDirectory), realpathSync(packedEntry)).startsWith(
+    relative(realpathSync(installedPackageDirectory), realpathSync(packedEntry)).startsWith(
       `dist${sep}`,
     ),
     true,
-    'Packed application dependency did not resolve through dist/.',
+    'Installed application dependency did not resolve through packed dist/.',
   );
 
-  const applicationEntry = join(temporaryRoot, 'application-ssr.tsx');
+  const applicationEntry = join(hostDirectory, 'application-ssr.tsx');
   const referenceHostApplication = join(
     repositoryRoot,
     'examples',
@@ -133,12 +160,20 @@ process.stdout.write(JSON.stringify({
     'utf8',
   );
 
-  const outputDirectory = join(temporaryRoot, 'ssr-build');
+  const outputDirectory = join(hostDirectory, 'ssr-build');
   await build({
+    root: hostDirectory,
     configFile: false,
     logLevel: 'silent',
     resolve: {
-      alias: [{ find: packageName, replacement: packedEntry }],
+      alias: [
+        { find: packageName, replacement: packedEntry },
+        { find: 'react', replacement: join(hostDirectory, 'node_modules', 'react') },
+        {
+          find: 'react-dom',
+          replacement: join(hostDirectory, 'node_modules', 'react-dom'),
+        },
+      ],
     },
     build: {
       ssr: applicationEntry,
@@ -156,7 +191,7 @@ process.stdout.write(JSON.stringify({
   });
 
   const applicationReceipt = JSON.parse(
-    run(process.execPath, [join(outputDirectory, 'reference-host-ssr.mjs')], repositoryRoot),
+    run(process.execPath, [join(outputDirectory, 'reference-host-ssr.mjs')], hostDirectory),
   );
   assert.equal(applicationReceipt.applicationServerRendered, true);
   assert.equal(applicationReceipt.clientEditorDeferred, true);

From cfc18fea2af17e5bd0eb0440cfb5f1681a278381 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 05:54:26 -0700
Subject: [PATCH 244/258] docs(reference-host): bind exact-packed app SSR
 evidence

---
 examples/reference-host/README.md | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/examples/reference-host/README.md b/examples/reference-host/README.md
index 92220967..3ba03768 100644
--- a/examples/reference-host/README.md
+++ b/examples/reference-host/README.md
@@ -4,7 +4,7 @@ Status: Active PR / partial reference-host implementation
 
 This directory is buyer-facing integration evidence for issue #377. It is intentionally **host code**, not a new Inkspan runtime surface. Protected `main` remains the shipped product authority, and this example is not production-ready until its remaining complete framework-host/collaboration/Office acceptance work is implemented and the release boundary permits integration.
 
-The current slice contains deterministic host fixtures and helpers, public-package presentation entrypoints, a buyer-facing native-form component, an SSR/hydration gate, and exact-packed-artifact package/browser verification:
+The current slice contains deterministic host fixtures and helpers, public-package presentation entrypoints, a buyer-facing native-form component, an SSR/hydration gate, exact-packed application-level SSR evidence, and exact-packed-artifact package/browser verification:
 
 - `synthetic-document-repository.mjs` demonstrates host-owned strong-validator / `If-Match` persistence behavior. `ambiguous_failure` models a pre-commit failure, while `ambiguous_commit_failure` commits durable state but returns the same ambiguous error without a replacement validator. After either ambiguous outcome, re-read durable state before retrying instead of advancing or blindly reusing the caller's last known validator. A stale validator returns a conflict. A confirmed failure can be retried with the unchanged current validator. A restore is a normal confirmed save against the current validator and advances it only after success. A fork requires the current validator, copies the current document into an independent reference repository, and starts that fork at a fresh validator.
 - `delayed-proposal.mjs` demonstrates a provider-free delayed proposal captured against one expected revision. If the current revision changes before application, the proposal returns a conflict instead of overwriting newer content. Host apply callback failures are normalized to a stable payload-free error rather than reflecting private causes through the proposal boundary.
@@ -23,6 +23,7 @@ The current slice contains deterministic host fixtures and helpers, public-packa
 - `verify-office-handoff.mjs` consumes an already extracted exact package entry supplied by repository verification orchestration through `INKSPAN_BROWSER_PACKAGE_ENTRY`, maps bounded Markdown through that public React-free package handoff, renders the request through the local Inkspan Office CLI, validates the resulting DOCX title/body, and removes its temporary output. It does not build, pack, or choose the artifact itself. This is deterministic component-execution evidence only: host export authorization, output-location policy, durable storage, distribution, and broader document-fidelity acceptance remain outside the example's authority.
 - `verify-packed-office-journey.mjs` is the self-contained package-authority wrapper for that bounded Office path: `--self-test` builds and packs the current Inkspan source, extracts the exact tarball into an isolated consumer-shaped package root, binds `verify-office-handoff.mjs` to that public package entry, runs the bounded DOCX rendering/validation, and removes the temporary consumer; `--plan` reports the exact-packed-tarball authority without executing it. It still assumes the repository's local Office Python dependencies are installed and makes no production export/storage/distribution claim.
 - `verify-packed-artifact.mjs` builds and packs the current Inkspan source, installs that exact tarball into an isolated consumer, proves public ESM/CommonJS/SSR and React-free subpath consumption plus CSS/font resolution, exercises exact packed autosave observer wiring into the host lifecycle projection, and rejects source-tree authority leakage. This is exact package-consumer evidence, not a complete buyer framework application.
+- `verify-application-ssr.mjs` builds and packs the current Inkspan source, installs that exact tarball plus host-owned React/ReactDOM dependencies into an isolated buyer-shaped consumer, binds the real `ReferenceHostApp` application shell to the installed packed public entry, server-bundles it with Vite, and requires deterministic host chrome plus a deferred client-editor hydration boundary. The host submit callback must not execute during server rendering and the client-only `message_body` field must not cross the server boundary. The verifier removes its temporary consumer after execution. This is exact-packed application-level SSR evidence, not a complete Next.js or other production framework host.
 - `verify-browser-journey.mjs` builds and packs the current Inkspan source, extracts that exact tarball into an isolated temporary package root, binds the browser harness to the packed public ESM/CSS/font entries, and runs only the reference-host acceptance specs across Chromium, Firefox, and WebKit. `--plan` reports the exact engines/spec inventory without executing it; `--self-test` performs the scoped real-browser journey. The verifier assumes the repository's isolated browser-test dependencies and pinned browser revisions are already installed, makes no production transport/auth/persistence claim, and removes its temporary package root after the run.
 - `verify-current-reference-journey.mjs` is the single entrypoint for the **currently implemented partial** journey. `--plan` emits the exact ordered verification contract without running it; the default invocation runs the deterministic repository/proposal/autosave/collaboration checks followed by exact packed-artifact, self-contained exact-packed bounded Office, and scoped exact-packed real-browser verification. It deliberately does not claim the complete framework-host, authenticated transport/provider, richer Office-fidelity, or final clean-checkout acceptance still required by #377.
 
@@ -83,18 +84,19 @@ node examples/reference-host/synthetic-document-repository.mjs --self-test
 node examples/reference-host/delayed-proposal.mjs --self-test
 node examples/reference-host/autosave-view-model.mjs --self-test
 node examples/reference-host/collaboration-provider-lifecycle.mjs --self-test
+node examples/reference-host/verify-application-ssr.mjs --self-test
 node examples/reference-host/verify-packed-office-journey.mjs --plan
 node examples/reference-host/verify-packed-office-journey.mjs --self-test
 node examples/reference-host/verify-browser-journey.mjs --plan
 node examples/reference-host/verify-browser-journey.mjs --self-test
 ```
 
-The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts and runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer. The one-command helper invokes `verify-packed-office-journey.mjs` after the packed-artifact consumer check and then `verify-browser-journey.mjs`, so the currently implemented partial buyer journey supplies exact tarball authority to both the bounded Office path and the reference-host-only Playwright acceptance. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-packed-office-journey.mjs`, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
+The repository test suite independently exercises those fixtures plus the host-authorization, hydration/native-form/single-flight/Office-handoff contracts, runs `verify-packed-artifact.mjs` to build, pack, install, and consume the exact current tarball in an isolated consumer, and runs `verify-application-ssr.mjs` to install the same exact current package authority into a buyer-shaped application SSR consumer. The application-level SSR verifier binds the real server-safe reference-host shell to the installed packed editor, requires deterministic host chrome, proves the client editor remains behind the hydration gate, and proves host submit authority is not invoked during server rendering. The one-command helper invokes `verify-packed-office-journey.mjs` after the packed-artifact consumer check and then `verify-browser-journey.mjs`, so the currently implemented partial buyer journey supplies exact tarball authority to both the bounded Office path and the reference-host-only Playwright acceptance. The cross-engine Playwright suite additionally builds and extracts the exact tarball, binds the package root plus public styles/font subpaths to that artifact, and exercises the repository browser-test host shell with real native-form hydration/submission, deterministic read-only and delayed-submission transitions, a 320px narrow-viewport journey, print media, forced colors, and no-unexpected-network acceptance across Chromium, Firefox, and WebKit. The read-only journey proves the editor remains readable while its hidden native form field, Save action, Reset action, and host submission callback all fail closed. The narrow-viewport journey requires the editor and Save/Reset controls to remain visible and in-viewport while rejecting document or body horizontal overflow. The print journey requires the toolbar to be absent from print presentation, checks the package print overflow/border/surface/content contract, and rejects external runtime requests. The suite also asserts stale-write conflict, failure-safe retry, ambiguous pre-commit and post-commit reconciliation, restore, fork isolation, lifecycle recovery, exact packed-package autosave observer-to-host-view-model integration, real host-created `Y.Doc`, provider replacement after ambiguous connect failure, reconnect/teardown, per-generation host authorization before provider construction, exact-synchronous-true admission, authorization-failure redaction, proposal-failure redaction, full public presentation-package behavior, native-form published-package/host-authority boundaries, the bounded React-free Markdown-to-DOCX-request mapping, deterministic exact-packed Office rendering/validation through `verify-packed-office-journey.mjs`, exact-packed application-shell SSR, and exact package authority. These checks do **not** yet satisfy #377's complete packed-artifact framework-application acceptance. The verified Office journey is intentionally bounded to the documented Markdown subset and local renderer contract; broader fidelity and production export operations remain host-owned acceptance work.
 
 The one-command helper above consolidates only the currently implemented reference-host checks. It is **not** the final #377 clean-checkout command because the complete framework application, authenticated transport/provider/credential journey, richer application-level Office fidelity, and their acceptance evidence do not exist yet.
 
 ## Deliberate omissions in this partial slice
 
-Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real application rather than only through the repository browser-test harness; deterministic application-level SSR/hydration proof beyond the current server-safe shell/client-boundary composition, isolated SSR consumer, and browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
+Still required before #377 can close: a complete reference-host application (preferably a supported Next.js App Router host) that installs and runs the exact packed tarball as a real framework application rather than only through repository acceptance harnesses; full framework hydration and interactive acceptance beyond the current deterministic exact-packed application-level SSR plus browser-shell evidence; a real authenticated transport-provider/credential integration journey that consumes the demonstrated per-generation host authorization boundary around the host-owned `Y.Doc` lifecycle; richer application-level converter/Office fidelity acceptance beyond the verified bounded handoff; and one documented clean-checkout command for the complete end-to-end reference journey.
 
 Do not use the synthetic repository, synthetic identifiers, deterministic proposal fixture, presentation projection, deterministic collaboration provider, host-authorization adapter, hydration gate, native-form example callback, or Office request helper as a production persistence, authentication, authorization, collaboration, model, deployment, export-authorization, storage, or distribution implementation.

From a41000b91a470906c6d66656f9379156e8fe54a8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 07:24:34 -0700
Subject: [PATCH 245/258] test(reference-host): require app SSR in one-command
 journey

---
 src/referenceHostOneCommandJourney.test.ts | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
index 79c7daa6..de70120b 100644
--- a/src/referenceHostOneCommandJourney.test.ts
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -9,6 +9,10 @@ const verifierPath = resolve(
   repositoryRoot,
   'examples/reference-host/verify-current-reference-journey.mjs',
 );
+const applicationSsrVerifierPath = resolve(
+  repositoryRoot,
+  'examples/reference-host/verify-application-ssr.mjs',
+);
 const browserVerifierPath = resolve(
   repositoryRoot,
   'examples/reference-host/verify-browser-journey.mjs',
@@ -55,6 +59,10 @@ describe('reference-host one-command journey contract', () => {
           args: [],
           path: 'examples/reference-host/verify-packed-artifact.mjs',
         },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/verify-application-ssr.mjs',
+        },
         {
           args: ['--self-test'],
           path: 'examples/reference-host/verify-packed-office-journey.mjs',
@@ -67,6 +75,10 @@ describe('reference-host one-command journey contract', () => {
     });
   });
 
+  it('keeps exact-packed application SSR in the one-command buyer journey', () => {
+    expect(existsSync(applicationSsrVerifierPath)).toBe(true);
+  });
+
   it('binds the scoped Office step to a self-contained exact packed tarball', () => {
     expect(existsSync(packedOfficeVerifierPath)).toBe(true);
 

From e02b7bcc1649b7613c46444e04a5b23faccb8ed1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 07:25:00 -0700
Subject: [PATCH 246/258] fix(reference-host): include app SSR in current
 journey

---
 examples/reference-host/verify-current-reference-journey.mjs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/examples/reference-host/verify-current-reference-journey.mjs b/examples/reference-host/verify-current-reference-journey.mjs
index 72c06882..0c70e687 100644
--- a/examples/reference-host/verify-current-reference-journey.mjs
+++ b/examples/reference-host/verify-current-reference-journey.mjs
@@ -26,6 +26,10 @@ const steps = Object.freeze([
     args: Object.freeze([]),
     path: 'examples/reference-host/verify-packed-artifact.mjs',
   }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/verify-application-ssr.mjs',
+  }),
   Object.freeze({
     args: Object.freeze(['--self-test']),
     path: 'examples/reference-host/verify-packed-office-journey.mjs',

From 2805bdccb30de789c1699d1e5b3ac74fb94e023b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 20:06:07 -0700
Subject: [PATCH 247/258] test(reference-host): require authorized
 collaboration in buyer journey

---
 src/referenceHostOneCommandJourney.test.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/referenceHostOneCommandJourney.test.ts b/src/referenceHostOneCommandJourney.test.ts
index de70120b..844e7b8e 100644
--- a/src/referenceHostOneCommandJourney.test.ts
+++ b/src/referenceHostOneCommandJourney.test.ts
@@ -55,6 +55,10 @@ describe('reference-host one-command journey contract', () => {
           args: ['--self-test'],
           path: 'examples/reference-host/collaboration-provider-lifecycle.mjs',
         },
+        {
+          args: ['--self-test'],
+          path: 'examples/reference-host/host-authorized-collaboration.mjs',
+        },
         {
           args: [],
           path: 'examples/reference-host/verify-packed-artifact.mjs',

From ffba55435f3fa57196dd2327bd9df6b9a94e7dbd Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 20:10:30 -0700
Subject: [PATCH 248/258] feat(reference-host): verify host collaboration
 authorization

---
 .../host-authorized-collaboration.mjs         | 92 +++++++++++++++++++
 1 file changed, 92 insertions(+)

diff --git a/examples/reference-host/host-authorized-collaboration.mjs b/examples/reference-host/host-authorized-collaboration.mjs
index 734a32d8..b44b3558 100644
--- a/examples/reference-host/host-authorized-collaboration.mjs
+++ b/examples/reference-host/host-authorized-collaboration.mjs
@@ -111,3 +111,95 @@ export function createHostAuthorizedProviderFactory(source) {
     );
   };
 }
+
+function runSelfTest() {
+  const events = [];
+  const document = Object.freeze({ reference: 'host-owned-document' });
+  const authorizedFactory = createHostAuthorizedProviderFactory({
+    authorize(context) {
+      if (Object.prototype.hasOwnProperty.call(context, 'document')) {
+        throw new Error('authorization context must not receive the host document.');
+      }
+      events.push(
+        `authorize:${context.actorId}:${context.roomId}:${context.generation}`,
+      );
+      return true;
+    },
+    createProvider(context) {
+      if (context.document !== document) {
+        throw new Error('provider construction lost the host-owned document.');
+      }
+      events.push(`provider:create:${context.generation}`);
+      return Object.freeze({ generation: context.generation });
+    },
+  });
+
+  const provider1 = authorizedFactory({
+    document,
+    roomId: 'reference-room',
+    actorId: 'reference-actor',
+    generation: 1,
+  });
+  const provider2 = authorizedFactory({
+    document,
+    roomId: 'reference-room',
+    actorId: 'reference-actor',
+    generation: 2,
+  });
+
+  let deniedProviderConstructed = false;
+  let deniedError = null;
+  const deniedFactory = createHostAuthorizedProviderFactory({
+    authorize() {
+      events.push('authorize:denied');
+      return false;
+    },
+    createProvider() {
+      deniedProviderConstructed = true;
+      return {};
+    },
+  });
+  try {
+    deniedFactory({
+      document,
+      roomId: 'reference-room',
+      actorId: 'denied-actor',
+      generation: 3,
+    });
+  } catch (error) {
+    deniedError = error instanceof Error ? error.message : 'unexpected error';
+  }
+
+  const expectedEvents = [
+    'authorize:reference-actor:reference-room:1',
+    'provider:create:1',
+    'authorize:reference-actor:reference-room:2',
+    'provider:create:2',
+    'authorize:denied',
+  ];
+  if (
+    provider1.generation !== 1 ||
+    provider2.generation !== 2 ||
+    deniedProviderConstructed ||
+    deniedError !== AUTHORIZATION_FAILURE ||
+    events.length !== expectedEvents.length ||
+    events.some((event, index) => event !== expectedEvents[index])
+  ) {
+    throw new Error('host-authorized collaboration self-test failed.');
+  }
+
+  process.stdout.write(
+    `${JSON.stringify({
+      authorizationBeforeConstruction: true,
+      deniedProviderConstructed,
+      deniedError,
+      events,
+      hostDocumentPreserved: true,
+      status: 'completed',
+    })}\n`,
+  );
+}
+
+if (process.argv.includes('--self-test')) {
+  runSelfTest();
+}

From a76849ba38dfa7685e60e29eb0e74f0024ebf3ff Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 20:11:01 -0700
Subject: [PATCH 249/258] fix(reference-host): run authorized collaboration
 journey

---
 examples/reference-host/verify-current-reference-journey.mjs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/examples/reference-host/verify-current-reference-journey.mjs b/examples/reference-host/verify-current-reference-journey.mjs
index 0c70e687..551af993 100644
--- a/examples/reference-host/verify-current-reference-journey.mjs
+++ b/examples/reference-host/verify-current-reference-journey.mjs
@@ -22,6 +22,10 @@ const steps = Object.freeze([
     args: Object.freeze(['--self-test']),
     path: 'examples/reference-host/collaboration-provider-lifecycle.mjs',
   }),
+  Object.freeze({
+    args: Object.freeze(['--self-test']),
+    path: 'examples/reference-host/host-authorized-collaboration.mjs',
+  }),
   Object.freeze({
     args: Object.freeze([]),
     path: 'examples/reference-host/verify-packed-artifact.mjs',

From 3426b1f68d6e84845991f9082ebe9a73aaba80cf Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 22:06:16 -0700
Subject: [PATCH 250/258] test(reference-host): preserve Office paragraph
 boundaries

---
 src/referenceHostOfficeHandoff.test.ts | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/referenceHostOfficeHandoff.test.ts b/src/referenceHostOfficeHandoff.test.ts
index c56872fc..c6e5409c 100644
--- a/src/referenceHostOfficeHandoff.test.ts
+++ b/src/referenceHostOfficeHandoff.test.ts
@@ -20,6 +20,16 @@ describe('reference-host Office handoff', () => {
     expect(source).toContain("type: 'paragraph'");
   });
 
+  it('preserves deterministic plain-text block boundaries as separate DOCX paragraphs', () => {
+    const source = repositoryFile('examples/reference-host/office-handoff.mjs');
+
+    expect(source).toContain("const paragraphs = text.split('\\n\\n');");
+    expect(source).toContain(
+      "paragraphs.map((paragraphText) => Object.freeze({ type: 'paragraph', text: paragraphText }))",
+    );
+    expect(source).not.toContain('blocks: Object.freeze([paragraph])');
+  });
+
   it('keeps Office rendering, authorization, storage, and transport outside the reference helper', () => {
     const source = repositoryFile('examples/reference-host/office-handoff.mjs');
 

From 33ff62d305a3e2e58c89b0db340351c8d6151ed5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 22:10:56 -0700
Subject: [PATCH 251/258] fix(reference-host): preserve Office paragraph
 boundaries

---
 examples/reference-host/office-handoff.mjs | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/examples/reference-host/office-handoff.mjs b/examples/reference-host/office-handoff.mjs
index 0935c5f0..99716c3a 100644
--- a/examples/reference-host/office-handoff.mjs
+++ b/examples/reference-host/office-handoff.mjs
@@ -22,15 +22,16 @@ function readOfficeHandoffInput(input) {
  * Create a bounded reference-only DOCX request from editor Markdown.
  *
  * The host deliberately projects Markdown to plain text through Inkspan's
- * React-free public package surface before constructing the strict Office
- * request. This example does not claim Markdown-to-OOXML round-trip fidelity,
- * perform Office rendering, authorize export, choose a filesystem path, or
- * persist/distribute the resulting artifact; those remain host responsibilities.
- * Host input reflection failures are normalized at this boundary instead of
- * exposing caller-controlled exception values.
+ * React-free public package surface, preserves that projection's deterministic
+ * block boundaries as separate DOCX paragraphs, and then constructs the strict
+ * Office request. This example does not claim Markdown-to-OOXML round-trip
+ * fidelity, perform Office rendering, authorize export, choose a filesystem
+ * path, or persist/distribute the resulting artifact; those remain host
+ * responsibilities. Host input reflection failures are normalized at this
+ * boundary instead of exposing caller-controlled exception values.
  *
  * @param {{ title: string, markdown: string }} input host-owned export input
- * @returns {{ format: 'docx', title: string, blocks: readonly [{ type: 'paragraph', text: string }] }}
+ * @returns {{ format: 'docx', title: string, blocks: readonly { type: 'paragraph', text: string }[] }}
  */
 export function createReferenceDocxRequest(input) {
   const { title, markdown } = readOfficeHandoffInput(input);
@@ -40,11 +41,14 @@ export function createReferenceDocxRequest(input) {
   }
 
   const text = markdownToPlainText(markdown);
-  const paragraph = Object.freeze({ type: 'paragraph', text });
+  const paragraphs = text.split('\n\n');
+  const blocks = Object.freeze(
+    paragraphs.map((paragraphText) => Object.freeze({ type: 'paragraph', text: paragraphText })),
+  );
 
   return Object.freeze({
     format: 'docx',
     title: acceptedTitle,
-    blocks: Object.freeze([paragraph]),
+    blocks,
   });
 }

From 99a02f1d2df85d72027621675f9152f27c3e92b2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Mon, 24 Aug 2026 22:12:31 -0700
Subject: [PATCH 252/258] test(reference-host): verify multi-paragraph Office
 handoff

---
 examples/reference-host/verify-office-handoff.mjs | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/examples/reference-host/verify-office-handoff.mjs b/examples/reference-host/verify-office-handoff.mjs
index 2898b4bc..b8df95dc 100644
--- a/examples/reference-host/verify-office-handoff.mjs
+++ b/examples/reference-host/verify-office-handoff.mjs
@@ -4,8 +4,8 @@ import { dirname, delimiter, resolve } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
 const TITLE = 'Inkspan acquisition handoff';
-const MARKDOWN = '**Buyer-ready** body.';
-const EXPECTED_BODY = 'Buyer-ready body.';
+const MARKDOWN = '**Buyer-ready** body.\n\nSecond acquisition paragraph.';
+const EXPECTED_BODY = ['Buyer-ready body.', 'Second acquisition paragraph.'];
 
 function requiredEnvironment(name) {
   const value = process.env[name]?.trim();
@@ -80,9 +80,11 @@ async function main() {
     if (
       request.format !== 'docx' ||
       request.title !== TITLE ||
-      request.blocks?.length !== 1 ||
-      request.blocks[0]?.type !== 'paragraph' ||
-      request.blocks[0]?.text !== EXPECTED_BODY
+      request.blocks?.length !== EXPECTED_BODY.length ||
+      request.blocks.some(
+        (block, index) =>
+          block?.type !== 'paragraph' || block.text !== EXPECTED_BODY[index],
+      )
     ) {
       throw new Error('packed Markdown handoff produced an unexpected Office request');
     }
@@ -118,7 +120,7 @@ document = Document(output)
 if document.core_properties.title != ${JSON.stringify(TITLE)}:
     raise SystemExit("DOCX title metadata does not match the handoff")
 paragraphs = [paragraph.text for paragraph in document.paragraphs]
-if paragraphs != [${JSON.stringify(TITLE)}, ${JSON.stringify(EXPECTED_BODY)}]:
+if paragraphs != ${JSON.stringify([TITLE, ...EXPECTED_BODY])}:
     raise SystemExit(f"unexpected DOCX paragraphs: {paragraphs!r}")
 `;
     run(python, ['-c', validation, outputPath], {

From 46e0349b57a6a8968d8f56e08d5c943c4f45b2c6 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 04:35:36 -0700
Subject: [PATCH 253/258] test(reference-host): prove packed framework-free
 buyer boundary

---
 ...nceHostFrameworkFreePackedBoundary.test.ts | 164 ++++++++++++++++++
 1 file changed, 164 insertions(+)
 create mode 100644 src/referenceHostFrameworkFreePackedBoundary.test.ts

diff --git a/src/referenceHostFrameworkFreePackedBoundary.test.ts b/src/referenceHostFrameworkFreePackedBoundary.test.ts
new file mode 100644
index 00000000..fc33a123
--- /dev/null
+++ b/src/referenceHostFrameworkFreePackedBoundary.test.ts
@@ -0,0 +1,164 @@
+import { execFileSync } from 'node:child_process';
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  readdirSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+
+const repositoryRoot = process.cwd();
+const packageMetadata = JSON.parse(
+  readFileSync(resolve(repositoryRoot, 'package.json'), 'utf8'),
+) as { name: string; version: string };
+
+const temporaryRoot = mkdtempSync(
+  join(tmpdir(), 'inkspan-reference-host-framework-free-'),
+);
+const extractionDirectory = join(temporaryRoot, 'extracted');
+const consumerDirectory = join(temporaryRoot, 'consumer');
+const packageDirectory = join(
+  consumerDirectory,
+  'node_modules',
+  ...packageMetadata.name.split('/'),
+);
+
+function run(command: string, argumentsList: string[], cwd = repositoryRoot) {
+  return execFileSync(command, argumentsList, {
+    cwd,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+    timeout: 180_000,
+  });
+}
+
+beforeAll(() => {
+  run('pnpm', ['build']);
+  mkdirSync(extractionDirectory, { recursive: true });
+  mkdirSync(dirname(packageDirectory), { recursive: true });
+
+  const packResult = JSON.parse(
+    run('npm', [
+      'pack',
+      '--json',
+      '--ignore-scripts',
+      '--pack-destination',
+      temporaryRoot,
+    ]),
+  ) as Array<{ filename: string; name: string; version: string }>;
+
+  expect(packResult).toHaveLength(1);
+  expect(packResult[0]?.name).toBe(packageMetadata.name);
+  expect(packResult[0]?.version).toBe(packageMetadata.version);
+
+  const tarballPath = join(temporaryRoot, packResult[0]!.filename);
+  expect(existsSync(tarballPath)).toBe(true);
+  run('tar', ['-xzf', tarballPath, '-C', extractionDirectory]);
+  renameSync(join(extractionDirectory, 'package'), packageDirectory);
+  writeFileSync(
+    join(consumerDirectory, 'package.json'),
+    '{"name":"inkspan-reference-host-framework-free-consumer","private":true,"type":"module"}\n',
+    'utf8',
+  );
+});
+
+afterAll(() => {
+  rmSync(temporaryRoot, { recursive: true, force: true });
+});
+
+describe('reference-host framework-free packed package boundary', () => {
+  it('contains no installed framework or editor dependency beside the exact packed Inkspan artifact', () => {
+    expect(readdirSync(join(consumerDirectory, 'node_modules'))).toEqual([
+      '@contextualwisdomlab',
+    ]);
+    expect(
+      readdirSync(join(consumerDirectory, 'node_modules', '@contextualwisdomlab')),
+    ).toEqual(['cwl-editor']);
+  });
+
+  it('executes the packed autosave, converter, and Markdown ESM subpaths without React, TipTap, Yjs, browser, network, credential, or model dependencies', () => {
+    const consumerPath = join(consumerDirectory, 'consumer.mjs');
+    writeFileSync(
+      consumerPath,
+      `import assert from 'node:assert/strict';
+Object.defineProperty(globalThis, 'document', {
+  configurable: true,
+  get() { throw new Error('browser document authority is forbidden'); },
+});
+Object.defineProperty(globalThis, 'window', {
+  configurable: true,
+  get() { throw new Error('browser window authority is forbidden'); },
+});
+globalThis.fetch = () => { throw new Error('network authority is forbidden'); };
+
+const autosave = await import('${packageMetadata.name}/autosave');
+const converter = await import('${packageMetadata.name}/converter');
+const markdown = await import('${packageMetadata.name}/markdown');
+
+assert.equal(typeof autosave.createDocumentAutosaveQueue, 'function');
+assert.deepEqual(
+  Array.from(converter.dataUriToBytes('data:text/plain;base64,SGk=').bytes),
+  [72, 105],
+);
+assert.equal(markdown.markdownToPlainText('# Buyer boundary'), 'Buyer boundary');
+assert.equal(
+  markdown.markdownToHtml('**Buyer boundary**'),
+  markdown.markdownToHtml('**Buyer boundary**'),
+);
+
+for (const specifier of ['autosave', 'converter', 'markdown']) {
+  const resolved = import.meta.resolve(\`${packageMetadata.name}/\${specifier}\`);
+  assert.match(resolved, /\\/dist\\/cwl-(?:autosave|converter|markdown)\\.js$/u);
+}
+`,
+      'utf8',
+    );
+
+    expect(() => run(process.execPath, [consumerPath], consumerDirectory)).not.toThrow();
+  });
+
+  it('executes the same packed CommonJS subpaths without installing framework dependencies', () => {
+    const consumerPath = join(consumerDirectory, 'consumer.cjs');
+    writeFileSync(
+      consumerPath,
+      `const assert = require('node:assert/strict');
+Object.defineProperty(globalThis, 'document', {
+  configurable: true,
+  get() { throw new Error('browser document authority is forbidden'); },
+});
+Object.defineProperty(globalThis, 'window', {
+  configurable: true,
+  get() { throw new Error('browser window authority is forbidden'); },
+});
+globalThis.fetch = () => { throw new Error('network authority is forbidden'); };
+
+const autosave = require('${packageMetadata.name}/autosave');
+const converter = require('${packageMetadata.name}/converter');
+const markdown = require('${packageMetadata.name}/markdown');
+
+assert.equal(typeof autosave.createDocumentAutosaveQueue, 'function');
+assert.deepEqual(
+  Array.from(converter.dataUriToBytes('data:text/plain;base64,T0s=').bytes),
+  [79, 75],
+);
+assert.equal(markdown.markdownToPlainText('# Buyer boundary'), 'Buyer boundary');
+for (const specifier of ['autosave', 'converter', 'markdown']) {
+  assert.match(
+    require.resolve(\`${packageMetadata.name}/\${specifier}\`),
+    /\\/dist\\/cwl-(?:autosave|converter|markdown)\\.cjs$/u,
+  );
+}
+`,
+      'utf8',
+    );
+
+    expect(() => run(process.execPath, [consumerPath], consumerDirectory)).not.toThrow();
+  });
+});

From 94d2e813a3da4aa41e72b117edec5d5d1c17b779 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 04:36:26 -0700
Subject: [PATCH 254/258] test(reference-host): bound packed package setup time

---
 ...nceHostFrameworkFreePackedBoundary.test.ts | 61 ++++++++++---------
 1 file changed, 32 insertions(+), 29 deletions(-)

diff --git a/src/referenceHostFrameworkFreePackedBoundary.test.ts b/src/referenceHostFrameworkFreePackedBoundary.test.ts
index fc33a123..3213f701 100644
--- a/src/referenceHostFrameworkFreePackedBoundary.test.ts
+++ b/src/referenceHostFrameworkFreePackedBoundary.test.ts
@@ -39,35 +39,38 @@ function run(command: string, argumentsList: string[], cwd = repositoryRoot) {
   });
 }
 
-beforeAll(() => {
-  run('pnpm', ['build']);
-  mkdirSync(extractionDirectory, { recursive: true });
-  mkdirSync(dirname(packageDirectory), { recursive: true });
-
-  const packResult = JSON.parse(
-    run('npm', [
-      'pack',
-      '--json',
-      '--ignore-scripts',
-      '--pack-destination',
-      temporaryRoot,
-    ]),
-  ) as Array<{ filename: string; name: string; version: string }>;
-
-  expect(packResult).toHaveLength(1);
-  expect(packResult[0]?.name).toBe(packageMetadata.name);
-  expect(packResult[0]?.version).toBe(packageMetadata.version);
-
-  const tarballPath = join(temporaryRoot, packResult[0]!.filename);
-  expect(existsSync(tarballPath)).toBe(true);
-  run('tar', ['-xzf', tarballPath, '-C', extractionDirectory]);
-  renameSync(join(extractionDirectory, 'package'), packageDirectory);
-  writeFileSync(
-    join(consumerDirectory, 'package.json'),
-    '{"name":"inkspan-reference-host-framework-free-consumer","private":true,"type":"module"}\n',
-    'utf8',
-  );
-});
+beforeAll(
+  () => {
+    run('pnpm', ['build']);
+    mkdirSync(extractionDirectory, { recursive: true });
+    mkdirSync(dirname(packageDirectory), { recursive: true });
+
+    const packResult = JSON.parse(
+      run('npm', [
+        'pack',
+        '--json',
+        '--ignore-scripts',
+        '--pack-destination',
+        temporaryRoot,
+      ]),
+    ) as Array<{ filename: string; name: string; version: string }>;
+
+    expect(packResult).toHaveLength(1);
+    expect(packResult[0]?.name).toBe(packageMetadata.name);
+    expect(packResult[0]?.version).toBe(packageMetadata.version);
+
+    const tarballPath = join(temporaryRoot, packResult[0]!.filename);
+    expect(existsSync(tarballPath)).toBe(true);
+    run('tar', ['-xzf', tarballPath, '-C', extractionDirectory]);
+    renameSync(join(extractionDirectory, 'package'), packageDirectory);
+    writeFileSync(
+      join(consumerDirectory, 'package.json'),
+      '{"name":"inkspan-reference-host-framework-free-consumer","private":true,"type":"module"}\n',
+      'utf8',
+    );
+  },
+  180_000,
+);
 
 afterAll(() => {
   rmSync(temporaryRoot, { recursive: true, force: true });

From 9536306b1258a75415de9e7a8a5616a2e56780d4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 08:11:12 -0700
Subject: [PATCH 255/258] test(reference-host): reproduce same-turn reset
 admission gap

---
 src/referenceHostNativeFormAdmission.test.ts | 54 ++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 src/referenceHostNativeFormAdmission.test.ts

diff --git a/src/referenceHostNativeFormAdmission.test.ts b/src/referenceHostNativeFormAdmission.test.ts
new file mode 100644
index 00000000..1fab32bc
--- /dev/null
+++ b/src/referenceHostNativeFormAdmission.test.ts
@@ -0,0 +1,54 @@
+import { describe, expect, it, vi } from 'vitest';
+
+import {
+  createSingleFlightSubmission,
+  shouldBlockReferenceHostFormMutation,
+} from '../examples/reference-host/single-flight-submission.js';
+
+describe('reference-host native-form synchronous admission', () => {
+  it('blocks a same-turn reset after durable submission admission before presentation commits', async () => {
+    let releaseAuthorizedSubmit: (() => void) | undefined;
+    const authorizedSubmit = new Promise<void>((resolve) => {
+      releaseAuthorizedSubmit = resolve;
+    });
+    let savingPresentationCommitted = false;
+    const submit = createSingleFlightSubmission(
+      async () => authorizedSubmit,
+      (state) => {
+        if (state === 'saving') {
+          queueMicrotask(() => {
+            savingPresentationCommitted = true;
+          });
+        }
+      },
+    );
+
+    expect(
+      shouldBlockReferenceHostFormMutation(false, submit.isInFlight),
+    ).toBe(false);
+
+    const pendingSubmission = submit('# Durable write');
+
+    expect(submit.isInFlight()).toBe(true);
+    expect(savingPresentationCommitted).toBe(false);
+
+    const preventDefault = vi.fn();
+    if (shouldBlockReferenceHostFormMutation(false, submit.isInFlight)) {
+      preventDefault();
+    }
+
+    expect(preventDefault).toHaveBeenCalledOnce();
+    expect(savingPresentationCommitted).toBe(false);
+
+    await Promise.resolve();
+    expect(savingPresentationCommitted).toBe(true);
+
+    releaseAuthorizedSubmit?.();
+    await expect(pendingSubmission).resolves.toBe(true);
+    expect(submit.isInFlight()).toBe(false);
+  });
+
+  it('also blocks host writes while read-only without consulting presentation state', () => {
+    expect(shouldBlockReferenceHostFormMutation(true, () => false)).toBe(true);
+  });
+});

From da627ef85b78344cbbcfae28f9626af84fe37bef Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 08:15:04 -0700
Subject: [PATCH 256/258] fix(reference-host): expose synchronous form mutation
 admission

---
 .../reference-host/single-flight-submission.ts     | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/examples/reference-host/single-flight-submission.ts b/examples/reference-host/single-flight-submission.ts
index 8817c8c3..838a6070 100644
--- a/examples/reference-host/single-flight-submission.ts
+++ b/examples/reference-host/single-flight-submission.ts
@@ -8,6 +8,20 @@ export type SubmissionStateObserver = (
   state: ReferenceHostSubmissionState,
 ) => void;
 
+/**
+ * Return whether a reference-host native-form write must be rejected now.
+ *
+ * Read-only host policy and the synchronous durable-submission admission gate
+ * are the only authority inputs. Presentation state is deliberately excluded so
+ * a submit/reset event in the same turn cannot race a deferred React commit.
+ */
+export function shouldBlockReferenceHostFormMutation(
+  readOnly: boolean,
+  isDurableSubmissionInFlight: () => boolean,
+): boolean {
+  return readOnly || isDurableSubmissionInFlight();
+}
+
 /**
  * Serialize host-owned authorized persistence attempts without assuming any
  * transport or storage authority in Inkspan.

From 37cfc42e1ac86576d98d96f970a0ee9bdfd70bca Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 08:15:48 -0700
Subject: [PATCH 257/258] fix(reference-host): bind form handlers to
 synchronous admission

---
 examples/reference-host/native-form-host.tsx | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/examples/reference-host/native-form-host.tsx b/examples/reference-host/native-form-host.tsx
index 4f12528f..9a17803c 100644
--- a/examples/reference-host/native-form-host.tsx
+++ b/examples/reference-host/native-form-host.tsx
@@ -2,6 +2,7 @@ import { useRef, useState, type FormEvent } from 'react';
 import { CwlEditor } from '@contextualwisdomlab/cwl-editor';
 import {
   createSingleFlightSubmission,
+  shouldBlockReferenceHostFormMutation,
   type ReferenceHostSubmissionState,
 } from './single-flight-submission.js';
 
@@ -97,7 +98,12 @@ export function NativeFormHost({
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
-    if (readOnly || submitAuthorized.isInFlight()) {
+    if (
+      shouldBlockReferenceHostFormMutation(
+        readOnly,
+        submitAuthorized.isInFlight,
+      )
+    ) {
       return;
     }
 
@@ -117,7 +123,12 @@ export function NativeFormHost({
   }
 
   function handleReset(event: FormEvent<HTMLFormElement>) {
-    if (readOnly || submitAuthorized.isInFlight()) {
+    if (
+      shouldBlockReferenceHostFormMutation(
+        readOnly,
+        submitAuthorized.isInFlight,
+      )
+    ) {
       event.preventDefault();
       return;
     }

From 1fb2d317838ff0ed71001d470af650692ebd36b2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Tue, 25 Aug 2026 08:16:23 -0700
Subject: [PATCH 258/258] test(reference-host): assert shared synchronous form
 admission

---
 src/referenceHostNativeFormJourney.test.ts | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/referenceHostNativeFormJourney.test.ts b/src/referenceHostNativeFormJourney.test.ts
index 18ce200d..0a5f4ff0 100644
--- a/src/referenceHostNativeFormJourney.test.ts
+++ b/src/referenceHostNativeFormJourney.test.ts
@@ -42,7 +42,7 @@ describe('reference-host native form journey', () => {
   it('binds submit/reset admission to the synchronous durable gate rather than deferred presentation state', () => {
     expect(
       nativeFormHostSource.match(
-        /if \(readOnly \|\| submitAuthorized\.isInFlight\(\)\) \{/gu,
+        /shouldBlockReferenceHostFormMutation\(\s*readOnly,\s*submitAuthorized\.isInFlight,\s*\)/gu,
       ),
     ).toHaveLength(2);
     expect(nativeFormHostSource).not.toContain(
@@ -54,7 +54,10 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).toMatch(
       /onInput=\{handleNativeInput\}\s+onSubmit=\{handleSubmit\}\s+onReset=\{handleReset\}/u,
     );
-    expect(nativeFormHostSource).toContain('submitAuthorized.isInFlight()');
+    expect(nativeFormHostSource).toContain(
+      'shouldBlockReferenceHostFormMutation',
+    );
+    expect(nativeFormHostSource).toContain('submitAuthorized.isInFlight,');
     expect(nativeFormHostSource).toContain('event.preventDefault();');
     expect(nativeFormHostSource).toContain("setSubmissionState('idle');");
     expect(nativeFormHostSource).toMatch(
@@ -91,7 +94,7 @@ describe('reference-host native form journey', () => {
     expect(nativeFormHostSource).toContain('editable={!readOnly}');
     expect(nativeFormHostSource).toContain('formFieldDisabled={readOnly}');
     expect(nativeFormHostSource).toContain(
-      'if (readOnly || submitAuthorized.isInFlight()) {',
+      'shouldBlockReferenceHostFormMutation',
     );
     expect(nativeFormHostSource).toMatch(
       /type="submit"\s+disabled=\{readOnly \|\| submissionState === 'saving'\}/u,