CK-07R1A0: freeze lifecycle source-digest authority

AGENTS.md

@@ -33,8 +33,10 @@ corrective proof. CK-08R0 froze `corrective-gates-v1`; CK-08R2 is complete and
 CK-09 remains blocked. CK-08R1A freezes corrected answer meaning before
 disjoint R1B/R1C implementation and final R1 requalification. CK-QG1A must
 remove two R2 page-executor complexity findings without changing behavior or
-the frozen baseline before existing QG1 PR #392 resumes. CK-07R1A must correct
-the exact hosted Python 3.14 lifecycle-tail blocker before PR #394 resumes.
+the frozen baseline before existing QG1 PR #392 resumes. CK-07R1A corrected
+the exact hosted Python 3.14 lifecycle-tail blocker; the linked CK-07R1A0
+source-digest authority must be merged and exact-main verified before the
+existing CK-07R1 worker may resume. PR #394 remains stale failed read-only.
 Retained R3 evidence proved the EvidenceService outer query
 physically unbounded; CK-08R3A owns that isolated fix and R3 awaits its
 accepted, merged, exact-main-verified result.

docs/INDEX.md

@@ -28,9 +28,13 @@ CK-07R1A0 is accepted at exact main `519b503aa3b23019033b6481687c08b23fc6c31e`.
 Its transition authority makes the planner-valid receipt a CK-07R1 successor
 acceptance output rather than a pre-dispatch dependency. PR #394 remains a
 stale failed read-only witness; it is not updated, rerun, or merged. CK-07R1
-is Conditional Ready only after this authority merges and exact-main verifies;
-no other successor is advanced. Reclassification and maintainability remain
-open. The central authority is
+is held behind the linked [source-digest authority](decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json),
+which freezes predecessor `408d18e4…` to the permitted successor
+`d192c858…` and requires exact-main worker revalidation before any one-run
+gate can be considered. CK-07R1 is Conditional Ready only after that
+source-digest authority merges and exact-main verifies; no other successor is
+advanced and the one-run gate remains unspent. Reclassification and
+maintainability remain open. The central authority is
 [REMAINING_EXECUTION_PLAN.md](roadmap/REMAINING_EXECUTION_PLAN.md).
 
 ## Authority set

docs/decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json

@@ -0,0 +1,158 @@
+{
+  "schema": "codex-usage-tracker.lifecycle-source-digest-authority.v1",
+  "authority_version": 1,
+  "owner": "CK-07R1A0",
+  "authority_base_sha": "d911b1f0d17596890a6a0a608be904330c96e9a6",
+  "source_path": "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+  "predecessor": {
+    "sha256": "408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872",
+    "accepted_merge_sha": "d911b1f0d17596890a6a0a608be904330c96e9a6",
+    "authority": {
+      "path": "docs/decisions/evidence/ck08r0/corrective-gates-v1.json",
+      "sha256": "8f2bc6762b3b12f3c42ad72fb23ccaa49bfde3124280082fa65766bb9ceb9936"
+    }
+  },
+  "selected_successor": {
+    "sha256": "d192c858b48e44b5aa7a7e39ef524e5ec2f08085655fe485639f5e875a727aa1",
+    "status": "permitted_not_accepted",
+    "blocked_task": "019fbfe2-8fe4-7de2-9264-d58572366727",
+    "retained_branch": "feature/ck-07r1-lifecycle-path-requalification",
+    "retained_worktree": "2026-08-01/codex-usage-tracker-ck07r1-lifecycle-path-requalification",
+    "base_sha": "d911b1f0d17596890a6a0a608be904330c96e9a6",
+    "witness_status": "retained_uncommitted_read_only",
+    "diff_identity": {
+      "modified": [
+        {
+          "path": "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+          "from_sha256": "408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872",
+          "to_sha256": "d192c858b48e44b5aa7a7e39ef524e5ec2f08085655fe485639f5e875a727aa1",
+          "patch_sha256": "7961e6922f7088a5ca1970ef9fa2a1762364dc257b0f751e87546feaa44e9a01"
+        }
+      ],
+      "untracked": [
+        {
+          "path": "scripts/benchmark_ck07r1_lifecycle_scale.py",
+          "sha256": "c0cd2d64109b4b39340699b153d6645dc11aaa6185151cd4b38c9320244eaea5"
+        },
+        {
+          "path": "tests/agent_kernel/publication/test_lifecycle_scale.py",
+          "sha256": "66d464a4348ef83ced7c2bff20c218393e7e2485ca11d40ef84630e06efce608"
+        }
+      ]
+    }
+  },
+  "allowed_scope": {
+    "files": [
+      "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+      "scripts/benchmark_ck07r1_lifecycle_scale.py",
+      "tests/agent_kernel/publication/test_lifecycle_scale.py"
+    ],
+    "lifecycle_symbols": [
+      "codex_usage_tracker.agent_kernel.publication.preparation._WriteSetPreparer._build_lifecycle"
+    ],
+    "forbidden_files": [
+      "src/codex_usage_tracker/agent_kernel/publication/planner.py",
+      "src/codex_usage_tracker/agent_kernel/publication/writer.py",
+      "src/codex_usage_tracker/agent_kernel/publication/recovery.py",
+      "src/codex_usage_tracker/agent_kernel/storage/",
+      "src/codex_usage_tracker/agent_kernel/query/",
+      "src/codex_usage_tracker/agent_kernel/evidence/"
+    ]
+  },
+  "reachable_consumer_path": {
+    "producer_to_preparation": [
+      "codex_usage_tracker.agent_kernel.publication.writer.prepare_write_set_from_changes",
+      "codex_usage_tracker.agent_kernel.publication.preparation.prepare_write_set",
+      "codex_usage_tracker.agent_kernel.publication.preparation._WriteSetPreparer.prepare",
+      "codex_usage_tracker.agent_kernel.publication.preparation._WriteSetPreparer._build_lifecycle"
+    ],
+    "preparation_to_consumer": [
+      "PublicationWriteSet.lifecycle",
+      "codex_usage_tracker.agent_kernel.publication.recovery.publish_small_with_pointer",
+      "codex_usage_tracker.agent_kernel.publication.writer.PublicationWriter.publish_with_pointer",
+      "codex_usage_tracker.agent_kernel.publication.writer.PublicationWriter.publish"
+    ],
+    "required_ordering": "recovery_read_first; planner_before_writer_lock; selected_plan_unchanged_through_writer",
+    "mismatch_result": "fail_closed_before_acceptance_no_stitched_artifacts_or_cross_run_identity_binding"
+  },
+  "independent_truth": {
+    "reference_path": "tests/agent_kernel/contracts/reference/lifecycle.py",
+    "reference_symbol": "fold_lifecycle",
+    "vector_tests": "tests/agent_kernel/contracts/test_lifecycle_vectors.py",
+    "consumer_tests": [
+      "tests/agent_kernel/publication/test_preparation.py",
+      "tests/agent_kernel/publication/test_lifecycle_scale.py"
+    ],
+    "required_comparisons": [
+      "lifecycle transition identity and version",
+      "independent fold state and transition count",
+      "publication lifecycle counts and postconditions"
+    ],
+    "forbidden_sources": [
+      "codex_usage_tracker.agent_kernel.publication.preparation",
+      "codex_usage_tracker.agent_kernel.publication.planner",
+      "codex_usage_tracker.agent_kernel.publication.writer",
+      "codex_usage_tracker.agent_kernel.publication.recovery",
+      "SQLite rows as expected answers"
+    ]
+  },
+  "worker_revalidation": {
+    "required": true,
+    "worker_task": "019fbfe2-8fe4-7de2-9264-d58572366727",
+    "start": "fresh worktree from the exact merged main SHA of this authority",
+    "reapply": "deliberately reapply the retained candidate diff; never rebase, stash, reset, clean, delete, overwrite, or mutate the witness",
+    "checks_before_end_to_end_run": [
+      "verify the exact-main predecessor digest",
+      "verify the selected successor digest after reapplying the retained candidate",
+      "verify the exact candidate base, changed paths, and lifecycle symbol",
+      "run all focused authority, digest, schema, DAG, and scope gates",
+      "run the worker pre-run gates before considering the one-run gate"
+    ],
+    "different_digest": "fail_closed",
+    "one_run_gate": "unspent_unavailable_until_authority_merge_exact_main_and_all_worker_pre_run_gates_pass"
+  },
+  "preserved_authority": {
+    "path": "docs/decisions/evidence/ck07r1a0/lifecycle-path-authority.json",
+    "sha256": "315f143661efa89f572484a7fc1e17754be5537c143fa2be1d97a041ad7b44b1",
+    "schema_path": "docs/decisions/evidence/ck07r1a0/lifecycle-path-authority.schema.json",
+    "schema_sha256": "181fa2290457e1149764b5f5952559838e70d4f81a512bc920aeb52592fc7856",
+    "writer_only_receipt_digest": "935e4427b93e67c5ca649b773b0b3895dafac87f49bc76d7ed8917dff2f0250d",
+    "prior_attempt_ids": [
+      "all-profile-initial-serializer",
+      "all-profile-corrected-serializer-tail-oracle",
+      "all-profile-pid-60367-recovery",
+      "production-only-valid-profile"
+    ],
+    "preservation": "all prior attempt identities, timestamps, failures, receipts, and statuses remain retained read-only and are never reused or upgraded"
+  },
+  "pr_394_policy": {
+    "number": 394,
+    "head_sha": "98a9b5b82951d136644a5fe5f8a70d320131ba08",
+    "workflow_run_id": "30685780055",
+    "failed_job_id": "91331138768",
+    "failure": "ordinary.2000_call_tail",
+    "status": "stale_failed_superseded_read_only",
+    "policy": "do_not_update_rerun_merge_or_reinterpret"
+  },
+  "runtime_budgets_ms": {
+    "first_publication_30_day": 5000,
+    "production_all_time": 120000,
+    "no_change": 100,
+    "one_call_tail": 500,
+    "one_tool_tail": 500
+  },
+  "package_ceilings_bytes": {
+    "sdist": 2000000,
+    "wheel": 1000000
+  },
+  "maximum_new_end_to_end_runs": 1,
+  "run_status": "unspent_unavailable",
+  "constraints": [
+    "generic_digest_drift_forbidden",
+    "any_different_preparation_digest_fails_closed",
+    "selected_successor_is_permitted_not_accepted",
+    "candidate_witness_is_retained_uncommitted_read_only",
+    "worker_must_revalidate_on_exact_merged_main_before_any_end_to_end_run",
+    "no_new_worker_or_downstream_ready_task_from_this_authority"
+  ]
+}