governance: close ticket 005 publication

project/ticket-005/README.md

@@ -2,7 +2,7 @@
 
 - **ID**: ticket-005
 - **Owner**: unresolved:human
-- **Status**: IN_PROGRESS
+- **Status**: DONE
 - **Workflow state**: PUBLICATION
 - **Created**: 2026-09-01
 
@@ -30,7 +30,7 @@ dependency resolver or isolated build environment.
   require no package resolver.
 - [x] AC-05: Both images build; production CLI, package tests, Compose,
   governance and Docker checks pass.
-- [ ] AC-06: Exact-head protected publication closes TestQL issue #10 and
+- [x] AC-06: Exact-head protected publication closes TestQL issue #10 and
   provides an immutable revision for Koru.
 
 ## Authorization
@@ -60,6 +60,15 @@ ticket resumes on merged revision `2528dcfcfe95b1b786016bf9956900f6f1797843`.
   all 1713 previously collected cases completed without failure.
 - Both Docker build checks and all three root Compose configurations pass.
 
+## Publication evidence
+
+Required CI passed and Validator run `33570788110` approved exact HEAD
+`24fb08858c75ba3bca4fcd17fa97d64a93a0836d` with protected review
+`5084068174`. PR #17 merged as
+`d08d033607eb57f9c094856d0fb0d1adef88c8d5` on 2026-09-01 and closed TestQL
+issue #10. Its remote ticket branch was deleted; the clean disposable
+implementation worktree and fully reachable local branch were removed.
+
 ## Participants
 
 - Human participant: unresolved; no user-* file was created by this script.

project/ticket-005/ai-codex-logs.txt

@@ -6,3 +6,5 @@
 2026-09-01T23:07:26Z RESUME prerequisite=ticket-006 main=2528dcfcfe95b1b786016bf9956900f6f1797843 status=IN_PROGRESS workflow=EDIT.
 2026-09-01T23:10:41Z VALIDATION runtime_image=sha256:a78e6ba5e881b196eac6a12839fc93aca299664413260127433d6f68c2cf1fd1 cli=1.2.67 uv=0.11.28 nlp2env=0.1.6.
 2026-09-01T23:10:41Z VALIDATION e2e_image=sha256:a68a4fbe88dfc505771f9aebb2f2e3ae09c83e37651aa9208d31ac74a26f4744 entrypoints=graphql,proto,sql tests="1701 passed, 12 skipped, 1 warning" workflow=PUBLICATION.
+2026-09-01T23:24:34Z PUBLICATION validator_run=33570788110 review=5084068174 exact_head=24fb08858c75ba3bca4fcd17fa97d64a93a0836d merge=d08d033607eb57f9c094856d0fb0d1adef88c8d5 required_check=test issue_10=closed branch_deleted=true.
+2026-09-01T23:25:11Z DONE ticket=ticket-005.

project/ticket-005/ai-codex.md

@@ -34,7 +34,15 @@ published plugin sources allow both paths to be resolver-free.
 - Built both images from scratch on immutable base digests. Production reports
   TestQL 1.2.67, uv 0.11.28 and `nlp2env` 0.1.6; the E2E image exposes all
   required plugin entry points and passes 1701 tests with 12 skips.
+- Required CI passed; Validator run `33570788110` approved exact HEAD
+  `24fb08858c75` and merged PR #17 as `d08d033607eb`. TestQL issue #10 closed,
+  and the verified implementation worktree and branch were removed.
 
 ## Blockers
 
 - None. Ticket 006 supplied and validated the frozen build-tool prerequisite.
+
+## Publication
+
+Complete. Protected review `5084068174` binds the repository, PR, exact
+implementation HEAD, ticket and validator actor.

project/ticket-005/changelog.md

@@ -9,3 +9,5 @@
 - Installed local E2E plugin metadata without build isolation or dependency
   resolution and validated the full 1713-case container suite.
 - Planned digest-pinned, frozen-lock Docker builds for runtime and E2E.
+- Recorded trusted exact-head publication, closed issue #10 and closed the
+  implementation ticket.