Retain guardian descendants in the authenticated parent through source-owned retirement

research/h25-authenticated-guardian-parent/NOTICE.md

@@ -0,0 +1 @@
+Original integer-mult-bounds/H25 source and predecessor authors retain credit. New source/proof work used OpenAI ChatGPT Pro and Codex. The independent review is an AI source review; no human, maintainer, proof-kernel or runtime approval is asserted. Historical source and negative findings are preserved.

research/h25-authenticated-guardian-parent/PUBLICATION-INTEGRITY.json

@@ -0,0 +1,141 @@
+{
+  "files": [
+    {
+      "bytes": 306,
+      "path": "NOTICE.md",
+      "sha256": "9610eb054d93cd4eef5ca41c83e7f8b7bf9c1b4b65e30b42a9dd1b6cdefaa750"
+    },
+    {
+      "bytes": 7959,
+      "path": "README.md",
+      "sha256": "84913814bf3243f03a33898ca69ce6587d99bc2f2b232a3706d9cfa49b18783c"
+    },
+    {
+      "bytes": 9450,
+      "path": "REVIEWED-PATH-MAP.json",
+      "sha256": "e519bf2658963722763592dd03d7c9ab0b3ce9bdccb96c7a6b0c0d079a66a83d"
+    },
+    {
+      "bytes": 2769,
+      "path": "contracts/ORIGINAL-ACCEPTED-PREMISES.json",
+      "sha256": "f7aa83cd3dc75258239912749a4b01a4de8e3eb4e6195932edd4e42376c79cae"
+    },
+    {
+      "bytes": 6474,
+      "path": "history/rejected-IMPLEMENTED-ENTRY-CHALLENGE.txt.txt",
+      "sha256": "4216f2a41ce0c4bb296bc8c68194f1a53fc5f461bcba7820608eb84791bed931"
+    },
+    {
+      "bytes": 6982,
+      "path": "history/rejected-encode_host_parent.py.txt",
+      "sha256": "2d6a0baeaf5596048f6a4e8acd07ca65cc342a851c5139e1f991a41813a4d1a8"
+    },
+    {
+      "bytes": 7135,
+      "path": "history/rejected-host_parent.js.in.txt",
+      "sha256": "570ce7f5a453524b578cfe5a71d97d612ae9fbcbc2478fc456bf6b25329cf4d4"
+    },
+    {
+      "bytes": 17831,
+      "path": "history/rejected-target_entry.py.txt",
+      "sha256": "b32e4c6e9e14fe42ad1a44ea410ea8095f53e8ef3d2d5c1b2440236a9b63d2c8"
+    },
+    {
+      "bytes": 10274,
+      "path": "reviewed/CERTIFICATE-v1.json",
+      "sha256": "51db8c8ffebb3ae40afcba015d827afe29af17d2feaf92ae2e29d01d9d046135"
+    },
+    {
+      "bytes": 917,
+      "path": "reviewed/INSTALLATION.json",
+      "sha256": "8f7b5252ddaf3cc7e792603bd848d0511bdb8186fa50d224b6542e591d8ef63a"
+    },
+    {
+      "bytes": 3243,
+      "path": "reviewed/INTEGRITY-v1.json",
+      "sha256": "7d5984f3b57da45c1bcccf5427f9ec9c34f85b8e2772ed3a71d0c82b0ea4b6ce"
+    },
+    {
+      "bytes": 17179,
+      "path": "reviewed/OUTER-CUSTODY-ARGUMENT.md",
+      "sha256": "3dbad91aa8a91a659cff3264b4d51459a307ddd889490b8748f1d26a3e02e1f8"
+    },
+    {
+      "bytes": 9311,
+      "path": "reviewed/README.md",
+      "sha256": "e232e9b186ebe5ce7efe16a3f690545fed83cbf42f80cf984f10685b17f0642b"
+    },
+    {
+      "bytes": 661,
+      "path": "reviewed/REVIEW-FREEZE.json",
+      "sha256": "896141470ab23ca277894e89a7d4d948516245980e7e6d30dda9307147031832"
+    },
+    {
+      "bytes": 12909,
+      "path": "reviewed/SOURCE-DECISION.md",
+      "sha256": "0cac140e92d5335bd2a9faac2f86bb2ebeeb4de06f0224c291dc4e1d23ebea71"
+    },
+    {
+      "bytes": 1124,
+      "path": "reviewed/SOURCE-FREEZE.json",
+      "sha256": "efd06c707b949c02b927069dde52030467c3307e8800c0ebcb10a32d43287578"
+    },
+    {
+      "bytes": 6975,
+      "path": "reviewed/implementation/encode_host_parent.py.txt",
+      "sha256": "2066a68cbdbcfc9f7cc33072cfc936b85d015856b10392647b3bae5b9a37059f"
+    },
+    {
+      "bytes": 8210,
+      "path": "reviewed/implementation/host_parent.js.in.txt",
+      "sha256": "a809564236acfafd1ea2271da36449f6bd24216df894f5815f22c0fb2b2b55d3"
+    },
+    {
+      "bytes": 28567,
+      "path": "reviewed/implementation/outer_retirement.py.txt",
+      "sha256": "28f72ed4294b9fbd273cbad56177dd4fc926ed08884b8185af6e1dc89270127f"
+    },
+    {
+      "bytes": 25836,
+      "path": "reviewed/implementation/target_entry.py.txt",
+      "sha256": "4a0f7cce7d22036634aa24ceb26c922eb1820ae56d9ad16a1dc5415ef6a95422"
+    },
+    {
+      "bytes": 23114,
+      "path": "reviewed/proof/FINAL-TUPLE-INSTALL-DAG.json",
+      "sha256": "b56c9b91564cf4d2ed1367a4e200b30d1661fad214df932e1bda8d1d89b77863"
+    },
+    {
+      "bytes": 8323,
+      "path": "reviewed/proof/HOST-SOURCE-DELTA.md",
+      "sha256": "e103c9e17cae10f06f4e988bf93ae1b7207e55fee41200c2a76d87d2d1b99042"
+    },
+    {
+      "bytes": 13810,
+      "path": "reviewed/proof/INSTALLER-AND-SCOPE.md",
+      "sha256": "47e0ec0c0464b6b06971c315a7fa132f87b75178bd8b71a41a6e3cfdb0aac540"
+    },
+    {
+      "bytes": 12806,
+      "path": "reviewed/proof/SOURCE-ACTIVITY-APPLICABILITY.md",
+      "sha256": "7cf2bc6d21d65cab33c62c09fe3b59d3d9e58e4dc2f497d970e63b540859fc7e"
+    },
+    {
+      "bytes": 19626,
+      "path": "reviewed/proof/TARGET-COMPOSITION.md",
+      "sha256": "a3a1bb270e59157098ec233fa7a2b16cc22764ac606e3fce5c1b435b961bebf3"
+    },
+    {
+      "bytes": 23882,
+      "path": "reviewed/proof/UNCHANGED-INTERIOR-BYTES.json",
+      "sha256": "9ce8eaa64d56fd1d3238c1743e09487110fe287ec946775f9aac2599b05e6a48"
+    },
+    {
+      "bytes": 24725,
+      "path": "reviewed/review/INDEPENDENT-FINAL-SOURCE-REVIEW.md",
+      "sha256": "259130b1d1ec7a055ae7ef066cab78aafbfb4f21e7ff6888a8fdfb2c2fe74ec8"
+    }
+  ],
+  "schema": "plaintext-publication-integrity-v1",
+  "self_hash_excluded": true
+}

research/h25-authenticated-guardian-parent/README.md

@@ -0,0 +1,43 @@
+# Authenticated guardian entry with surviving descendant custody
+
+The earlier external entry could kill the guardian's process group and wait for the guardian while a child in a new session remained alive. This contribution implements a surviving parent owner and the actual authenticated caller path around the unchanged native guardian. The parent installs the selected native subreaper before birth, retains the real child behind a gate, and follows actual adopted descendants through generation-bound pidfds and exclusive waits.
+
+A positive retirement result requires an exact empty child census, kernel ECHILD, a second empty census, and known-holder retirement. If native custody remains uncertain, the same parent stays alive with the real owner and forbids a replacement attempt or successful terminal claim. Complete capture reads use independent readers acquired before birth; an earlier working error does not suppress either stream. Work and retirement share the original absolute deadline. Unresolved continuing cost stays open.
+
+## What is included
+
+* Four complete source files: the native-custody owner, reached target entry, actual Tool parent dispatcher, and deterministic host encoder.
+* The complete source-composition argument, native-interface analysis, installation DAG, independent challenging AI review, exact-byte certificate and freeze records.
+* The original accepted trust-premise body, and the earlier rejected source and counterexample retained as history.
+
+The source is delivered as individual readable files. The four implementation leaves carry a .txt suffix to keep this research archive inert. REVIEWED-PATH-MAP.json maps them back to the exact reviewed names. Remove no bytes from the originals when reconstructing them. The original INTEGRITY-v1.json paths are relative to the reviewed tree before those four suffixes; PUBLICATION-INTEGRITY.json separately hashes the actual repository leaves and excludes itself.
+
+The declared installation paths, source modes, shell and cwd are retained in reviewed/INSTALLATION.json and the code. They are part of the inspected prospective construction, not portable defaults or an instruction to execute it. The exact reviewed source bytes have also been delivered to those local source paths; no target execution or current runtime qualification was performed.
+
+## Exact dependencies and provenance
+
+The unchanged interior is [the retained-child repair in PR #6867](https://github.com/CrocSwap/integer-mult-bounds/pull/6867), commit 319ea1c5f4097ef87cc0b037327f26374e93e54d, under [research/h25-retained-child-lock-repair](https://github.com/Clear1nsight/integer-mult-bounds/tree/319ea1c5f4097ef87cc0b037327f26374e93e54d/research/h25-retained-child-lock-repair). It is a dependency, not copied into or silently modified by this contribution. Its separate 66-leaf manifest retains SHA256 3742b1a7e83dddaed87ffd147a18c0002474aa0772174a9c5d4d01e9f5d17d6f. All 66 selected leaves and the detached manifest were compared byte for byte with the prior published export. Both 197-member recipes and distinct normal/optimised scientific drivers are preserved.
+
+This correction completes the concrete outer path left open by [PR #6872's installation-order finding](https://github.com/CrocSwap/integer-mult-bounds/pull/6872). It retains the all-six compatibility review in [#6870](https://github.com/CrocSwap/integer-mult-bounds/pull/6870), genuine consumer bindings in [#6871](https://github.com/CrocSwap/integer-mult-bounds/pull/6871), and internal binding reconciliation in [#6869](https://github.com/CrocSwap/integer-mult-bounds/pull/6869). The negative result in #6872 and the rejected intermediate source are not retroactively changed into positive results.
+
+Original lineage: [PR #6029](https://github.com/CrocSwap/integer-mult-bounds/pull/6029), [PR #6321](https://github.com/CrocSwap/integer-mult-bounds/pull/6321), [the plain-English verification overview](https://github.com/CrocSwap/integer-mult-bounds/pull/6321#issuecomment-6713710045), and [research discussion #1166](https://github.com/CrocSwap/integer-mult-bounds/discussions/1166). The exact source-owned native installer is reused from fresh_supervisor.py in #6867. The publication pattern credits the inspected manual parent in [#6709](https://github.com/CrocSwap/integer-mult-bounds/pull/6709).
+
+## Verification and acceptance boundary
+
+The separate AI reviewer directly challenged the final code, caller, provenance joins, native ownership, signal/wait/close uncertainty, capture paths and installation order. It accepts the complete source construction under the unchanged original genuine factual premises. The exact verdict, evidence pins, invalidators and exclusions are in reviewed/review/INDEPENDENT-FINAL-SOURCE-REVIEW.md and reviewed/CERTIFICATE-v1.json. A second local readback verified all delivered file hashes, parsed Python AST without importing code, checked all 35 DAG edges against 23 ordered nodes, reconstructed the exact shell, and matched the unchanged interior.
+
+This is AI-authored implementation and separate AI source review, followed by Codex source audit. It is not human, maintainer or proof-kernel approval. No target, compiler, native function, control, financial owner or scientific workload was executed. No archive decoding, unchanged-suite rerun or new guarded operation occurred. The archive intentionally adds no replay hook.
+
+Implementation froze at 2026-11-08T08:34:51.793005Z. The independent review was written at 08:38:11.265023Z and read back at 08:40:08.112036Z. These are Pro-reported freeze times retained in the source records. Codex observed the complete response before the 08:49:09.466443Z stop, then retrieved and audited the already frozen files afterwards. The earlier rejected round's deadline overrun remains recorded. No time was backdated.
+
+Recorded policy debit remains 2376.890533479 of 2400 seconds, with 23.109466521 seconds remaining. This is not complete physical cost. Preparation, consultation, review, reporting, publication, final metadata and historical gaps remain OPEN_NOT_ZERO. This source contribution creates no budget or execution admission.
+
+## Open next questions
+
+Contributors can independently inspect the complete source argument and native/caller joins at this exact tuple, or establish the unchanged original runtime/profile and resource prerequisites for a separately authorised qualification. Full old/new controls in both modes, actual terminal cleanup and failed-attempt accounting, original-primary transfer, the fixed comparison protocol and successful original financial CLOSE remain separate work. The original-primary source route is [#6837](https://github.com/CrocSwap/integer-mult-bounds/pull/6837) with correction [#6847](https://github.com/CrocSwap/integer-mult-bounds/pull/6847); the later successful-CLOSE graph in [#6762](https://github.com/CrocSwap/integer-mult-bounds/pull/6762) remains distinct. Neither a successful signal nor a native failure's live pending owner proves bounded physical completion.
+
+Preserve all original helper identities, contexts, command records, independent oracles, original compiler subject, equality relation, financial namespace, reservations and no-reroll rules. Any change to source pins, fixed paths, interpreter/native profile, caller bindings, deadlines or custody branches requires an explicit delta review and repinning.
+
+## Credit and licence
+
+Original H25 and integer-mult-bounds contributors retain credit for the reused scientific, native, financial, caller and retention work. OpenAI ChatGPT Pro assisted with the new source and proof; a separately tasked AI reviewer challenged it, and Codex verified the delivered bytes and prepared this archive. Existing source SPDX notices are preserved. The four new source files are provided under Apache-2.0, consistent with their source notices and upstream licensing. No authorship or upstream merge is implied by an archive's submission.