Document guardian launch hash cycles and the missing authenticated entry

research/h25-installation-order-obstruction/INTEGRITY.json

@@ -0,0 +1,48 @@
+{
+  "schema": "h25-publication-integrity-v1",
+  "self_excluded_to_avoid_self_hash": true,
+  "files": [
+    {
+      "path": "CERTIFICATE-v1.json",
+      "bytes": 28723,
+      "sha256": "d375792b5fd798f0ac6e9138207cb772f017c5929049909339577693c433a1f8",
+      "git_blob": "a2de90d4046284405d80a62c969e21f725515beb"
+    },
+    {
+      "path": "FINAL-TUPLE-INSTALL-GRAPH.json",
+      "bytes": 38219,
+      "sha256": "791f30cf0a09de0a2afed0f9d07972797d9e5ac9af2401ac70dba14752f4745f",
+      "git_blob": "0bad95b1e9c921a113eb865026c2196e44e4bb0a"
+    },
+    {
+      "path": "INDEPENDENT-REVIEW.md",
+      "bytes": 40412,
+      "sha256": "810f0bf2876b277868a3df98e010498d3b9ea71b41f43d835cc76d653a5f4750",
+      "git_blob": "ce82eb7b75192e77f8e491c862541351ab87a65d"
+    },
+    {
+      "path": "PASSIVE-VERIFICATION.json",
+      "bytes": 1609,
+      "sha256": "b6b308cb4baea49ff5efadef824a8f79ab1d5c9bcf57dd77cd2a39cea09c4da2",
+      "git_blob": "1419fb57f6ff81f9d7cb0438096841b7b44bed51"
+    },
+    {
+      "path": "README.md",
+      "bytes": 4691,
+      "sha256": "232f893ea3ba424fcc940dd9963fe32ca1092c9095d4f8fc89d2338f05608387",
+      "git_blob": "70971a755ee95b50738a756c045aaff8d2be5be6"
+    },
+    {
+      "path": "REVIEW-SCOPE.json",
+      "bytes": 1049,
+      "sha256": "53d99d95f54ac6dfa530299588a52cf2e1b3e8b4412250ea7570f9db5b2951bb",
+      "git_blob": "f681bf1b7cea1f992801e55915fba0c643ebd789"
+    },
+    {
+      "path": "SOURCE-DECISION.md",
+      "bytes": 43845,
+      "sha256": "548c2af39246c7c8675cf9ed0faf8fe32202eba0baf08f60f15b979513638006",
+      "git_blob": "4151a1525a0b6735e28ceba4120b68973bbfe119"
+    }
+  ]
+}

research/h25-installation-order-obstruction/PASSIVE-VERIFICATION.json

@@ -0,0 +1,32 @@
+{
+  "schema": "h25-source-decisions-passive-verification-v1",
+  "source_head": "319ea1c5f4097ef87cc0b037327f26374e93e54d",
+  "canonical_main_refreshed": "7c49fe32c55de02c2c873655c804b16e4c3fef0a",
+  "matched_current_mapped_leaves": 66,
+  "matched_detached_manifest": true,
+  "current_inventory_url": "https://github.com/Clear1nsight/integer-mult-bounds/blob/1144f0a715e84b3f08ebe7d0e8ed8a06543f2fad/research/h25-complete-source-binding-reconciliation/CURRENT-LEAVES.json",
+  "public_certificate_full_git_blob_readback": {
+    "bytes": 1201989,
+    "sha256": "1ed6b0e4775d8d21dacbade5536cfbf7464592edd81004395cb7b3817f22508a",
+    "git_blob": "09de85d72fc7ff9e8778811adf273e34d3d24e28"
+  },
+  "scope": "Passive public text, retained exact-source bytes, JSON, hashes, source proof, and cross-review. Matching is applicability evidence, not a substitute for semantics.",
+  "source_modules_executed": 0,
+  "native_or_scientific_runs": 0,
+  "archives_decoded_or_decompressed": 0,
+  "controls_rerun": 0,
+  "new_guarded_execution_debit_seconds": "0",
+  "policy_used_seconds": "2376.890533479",
+  "policy_remaining_seconds": "23.109466521",
+  "preparation_review_reporting_publication_and_historical_physical_costs": "OPEN_NOT_ZERO",
+  "installation_symbolic_checks": {
+    "interior_forward_nodes": 22,
+    "interior_forward_edges": 33,
+    "rank_check_for_interior_only": true,
+    "direct_literal_counterexample_nodes": 8,
+    "direct_literal_counterexample_edges": 9,
+    "two_closed_cycles_verified": true,
+    "complete_installation_accepted": false,
+    "no_target_code_executed_by_symbolic_check": true
+  }
+}

research/h25-installation-order-obstruction/README.md

@@ -0,0 +1,29 @@
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# H25 S07.05 installation-order obstruction and closing route
+
+**S07.05 and the separate full S07 source gate remain open.** This independent AI source review identifies two concrete dependency cycles in a proposed direct literal native-G installation. It preserves the completed all-six and genuine-consumer source arguments, and does not demand target execution to complete a source criterion.
+
+The subject is unchanged [#6867](https://github.com/CrocSwap/integer-mult-bounds/pull/6867) at `319ea1c5f4097ef87cc0b037327f26374e93e54d`. The original completion test remains “Obtain independent acceptance of the complete combined stage and installation order.”
+
+## Contents and decisive result
+
+The complete source decision and constructive route are in [SOURCE-DECISION.md](SOURCE-DECISION.md). [CERTIFICATE-v1.json](CERTIFICATE-v1.json) records exact source anchors, the two countercycles, the missing original external owner/interface, and the dependency and error-custody obligations of the smallest credible integrated route. [INDEPENDENT-REVIEW.md](INDEPENDENT-REVIEW.md) retains the separate challenging review. [FINAL-TUPLE-INSTALL-GRAPH.json](FINAL-TUPLE-INSTALL-GRAPH.json) preserves the exact final tuple, a valid internal preparation prefix, and the explicit cyclic dependencies that prevent treating that prefix as a complete installation DAG. [PASSIVE-VERIFICATION.json](PASSIVE-VERIFICATION.json), [REVIEW-SCOPE.json](REVIEW-SCOPE.json), and [INTEGRITY.json](INTEGRITY.json) record verification, scope, and exact publication bytes.
+
+The first dependency is candidate document to original request/role contracts to guardian configuration to configuration digest in the literal exact shell, then back to the candidate document. The second uses the actual CAPTURE grant and its actor-policy binding, its digest in role argv, and the resulting configuration. It does not assume equality between the distinct outer-actor and inner actor policy fields. Removing one direct candidate field does not remove that second route.
+
+The result is a failure of the proposed acyclic construction. It is not a proof that SHA256 fixed points are impossible or that every permitted exact shell is cyclic. An existing authenticated original entry owner may supply a valid late parameter transport, but its actual source/interface was not located in the inspected subject. The selected role-data derivation returns DATA and does not implement that external launch edge.
+
+## Preserved source decisions
+
+[S07.02](https://github.com/Clear1nsight/integer-mult-bounds/blob/b467aae70ef3b63ea3c56caa37dfeb8e9ad9eae1/research/h25-all-six-source-freeze/SOURCE-DECISION.md) and [S07.03](https://github.com/Clear1nsight/integer-mult-bounds/blob/167b4f7babb00fff832114bc7cec25d3060b6b73/research/h25-genuine-consumer-source-binding/SOURCE-DECISION.md) are accepted within their unchanged source scopes. The exact [S07.04 reconciliation](https://github.com/CrocSwap/integer-mult-bounds/pull/6869) remains reusable. These results do not automatically complete S07.05 or the full gate.
+
+## Open next questions
+
+Supply the actual original external candidate-document/native-G entry owner and its authenticated parameter-transport contract. The selected integrated route reuses that owner's actual publication, native-call, reservation, capture, and terminal custody together with existing `derive_fixed_role_data`, `construct`, and `guardian_config`. It preserves the original candidate and exact-shell identities and charges all added work. No surrogate helper, permission model, source-domain assumption, or completed patch is supplied. The exact owning patch cannot honestly be written without that owner/interface.
+
+## Verification and attribution
+
+Only passive public text, JSON, hashes, source reasoning, and a small symbolic graph check were used. No archived module was imported, no payload decoded/decompressed, and no target, native/compiler/scientific, financial, or control execution occurred. Guarded debit is zero. The remaining policy balance remains 23.109466521 of the unchanged 2400 seconds. Preparation, review, reporting, publication, final metadata, and historical physical gaps remain OPEN_NOT_ZERO.
+
+Prepared for Chris R / Clear1nsight with substantial OpenAI ChatGPT Pro and Codex assistance, separate challenging AI review, and a root precision audit. This is not human, proof-kernel, or maintainer approval. Original source/proof notices remain intact; new prose and metadata are Apache-2.0. The archive changes no selected source, recipe, original predicate/oracle, protocol, frontier, or historical ledger, and includes no replay hook.

research/h25-installation-order-obstruction/REVIEW-SCOPE.json

@@ -0,0 +1,23 @@
+{
+  "schema": "h25-exact-source-decision-scope-v1",
+  "activity": "S07.05",
+  "completion_test": "Obtain independent acceptance of the complete combined stage and installation order.",
+  "decision": "OPEN_NOT_ACCEPTED",
+  "full_S07_gate": "OPEN_NOT_ACCEPTED",
+  "subject_head": "319ea1c5f4097ef87cc0b037327f26374e93e54d",
+  "prior_reconciliation_head": "1144f0a715e84b3f08ebe7d0e8ed8a06543f2fad",
+  "source_window": {
+    "start": "2026-11-08T05:38:54Z",
+    "reassess": "2026-11-08T06:08:54Z",
+    "hard_stop": "2026-11-08T06:38:54Z"
+  },
+  "reason": "Two concrete original-command content cycles for direct literal native G launch; no selected authenticated original external late-parameter transport supplied.",
+  "universal_impossibility_claim": false,
+  "completed_patch": false,
+  "separate_AI_review_and_root_precision_audit": true,
+  "human_proof_kernel_or_maintainer_approval": false,
+  "execution_permission": false,
+  "historical_ledger_or_frontier_change": false,
+  "new_guarded_debit_seconds": "0",
+  "physical_gaps": "OPEN_NOT_ZERO"
+}