douglasmonsky · douglasmonsky · Aug 20, 2026 · Aug 19, 2026 · Aug 19, 2026 · Aug 20, 2026
diff --git a/docs/INDEX.md b/docs/INDEX.md
@@ -199,6 +199,18 @@ readiness. A corrected implementation may be reviewed and prequalified only
 through deterministic synthetic non-consuming evidence; the existing
 receipt-required runtime acceptance gate remains unsatisfied and CK-07R1,
 CK-08R4, CK-08RG, and CK-09 remain blocked pending a separate roadmap decision.
+The additive versioned
+[`lifecycle-terminal-failure-clean-commit-authority-v1`](decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json)
+preserves the terminal-failure v1 authority byte-for-byte and binds PR #448
+base `652f2166…`, source head `927aa06f…`, and its exact seven candidate and
+terminal-evidence paths. It admits either the exact all-or-none dirty
+prepublication representation over the byte-identical authority-main tree or
+the exact clean committed PR/integrated representation. Mixed, partial, extra,
+wrong-base, wrong-tree, wrong-head, or wrong-byte states fail closed. This
+clean-committed transition representation bridge grants no implementation or
+runtime acceptance and
+does not authorize a command, launch, token refund, retry, restart,
+replacement, receipt, or downstream transition.
 
 The V11 candidate must construct and validate the exact overlay/cohort-bound
 receipt and non-null stdout/stderr/output evidence before its first durable

diff --git a/docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json b/docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json
@@ -0,0 +1,137 @@
+{
+  "schema": "codex-usage-tracker.ck07r1-lifecycle-terminal-failure-clean-commit-authority.v1",
+  "version": 1,
+  "task": "CK-07R1",
+  "status": "permitted_not_accepted",
+  "authority_base_sha": "652f2166b58b9ee0d719348a769901577d11e6fd",
+  "authority_base_tree_sha": "cc148aa820962c084655017e404cce54430313bd",
+  "source_authority": [
+    {
+      "path": "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.json",
+      "sha256": "7752565abd5c5f27a852b8a8814ea1b7afde03d967de46419856eae85583f97b"
+    },
+    {
+      "path": "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.schema.json",
+      "sha256": "f4affab070de6aa1ed54cfc648051b7b6398bd57011fed8d942309894714744e"
+    }
+  ],
+  "implementation_transition": {
+    "pull_request": 448,
+    "base_sha": "652f2166b58b9ee0d719348a769901577d11e6fd",
+    "head_sha": "927aa06f7c4c88319cc30247343c40db8e9b817e",
+    "paths": [
+      {
+        "path": "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+        "role": "unchanged_preparation_source",
+        "sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea"
+      },
+      {
+        "path": "scripts/benchmark_ck07r1_lifecycle_scale.py",
+        "role": "corrected_planner_path_benchmark",
+        "sha256": "8f4900b1ecc841fe04f6cd1232c3741efef105e8b997c7fd15cc61b5d8d14cc1"
+      },
+      {
+        "path": "tests/agent_kernel/publication/test_lifecycle_scale.py",
+        "role": "corrected_planner_path_tests",
+        "sha256": "8364c4387b8e588cb18f420805d47e48241da22d6fb793e838a522cc7fb29e33"
+      },
+      {
+        "path": "output/ck07r1/lifecycle-requalification-v1.launch-token.json",
+        "role": "immutable_v1_terminal_ledger",
+        "sha256": "5c2b42eca6a3e54cf4163226bc55f3c75aa35112c4ed0342c11f4e39cb9922be"
+      },
+      {
+        "path": "output/ck07r1/lifecycle-requalification-v2.launch-token.json",
+        "role": "immutable_v2_terminal_ledger",
+        "sha256": "570e27824ee04a51aa4012adb461bd4aebb00b61541f2477fd9e1665854325a2"
+      },
+      {
+        "path": "output/ck07r1/lifecycle-requalification-v2.stderr.txt",
+        "role": "immutable_v2_terminal_stderr",
+        "sha256": "4cf4b10fd04f20a190e4ac41898d25b9295b3dc9d7addead8a81edd27b3aca2f"
+      },
+      {
+        "path": "output/ck07r1/lifecycle-requalification-v2.stdout.txt",
+        "role": "immutable_v2_terminal_stdout",
+        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+      }
+    ],
+    "representations": {
+      "dirty_prepublication": {
+        "head_tree": "authority_base_tree",
+        "worktree_delta": "exact_candidate_scope",
+        "committed_delta": "none"
+      },
+      "clean_pr_head": {
+        "head": "exact_bound_implementation_head",
+        "worktree_delta": "empty",
+        "committed_delta": "exact_candidate_scope"
+      },
+      "clean_integrated": {
+        "base": "exact_authority_base",
+        "worktree_delta": "empty",
+        "committed_delta": "exact_authority_scope_plus_candidate_scope",
+        "source_identity": "bound_pr_head_or_exact_tree_equivalent_squash"
+      }
+    }
+  },
+  "decision": {
+    "root_cause": "clean_committed_ci_representation_was_not_modeled",
+    "dirty_prepublication_remains_valid": true,
+    "clean_committed_transition_permitted": true,
+    "implementation_acceptance": "not_claimed",
+    "runtime_acceptance": "not_claimed",
+    "new_command_invocations_permitted": 0,
+    "launch_authorized": false,
+    "token_consumed": true,
+    "token_refund": false,
+    "retry": "none",
+    "restart": "none",
+    "replacement": "none",
+    "receipt_fabrication": "forbidden",
+    "post_single_run": "unavailable_without_complete_planner_valid_receipt",
+    "final_accepted": "unavailable"
+  },
+  "scope": {
+    "authority_write_scope": [
+      "docs/INDEX.md",
+      "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json",
+      "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.schema.json",
+      "docs/roadmap/REMAINING_EXECUTION_PLAN.md",
+      "docs/roadmap/TASK_PACKETS.md",
+      "docs/roadmap/tasks/ck-07r1-correct-lifecycle-preparation-scale.md",
+      "scripts/check_kernel_scope.py",
+      "scripts/ck07r1_terminal_failure_correction.py",
+      "tests/kernel/test_ck07r1_shared_successor_overlay.py",
+      "tests/kernel/test_ck07r1_terminal_failure_correction_authority.py",
+      "tests/kernel/test_documentation_authority.py",
+      "tests/kernel/test_kernel_scope.py"
+    ],
+    "candidate_scope": [
+      "output/ck07r1/lifecycle-requalification-v1.launch-token.json",
+      "output/ck07r1/lifecycle-requalification-v2.launch-token.json",
+      "output/ck07r1/lifecycle-requalification-v2.stderr.txt",
+      "output/ck07r1/lifecycle-requalification-v2.stdout.txt",
+      "scripts/benchmark_ck07r1_lifecycle_scale.py",
+      "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+      "tests/agent_kernel/publication/test_lifecycle_scale.py"
+    ],
+    "forbidden": [
+      "mixed_partial_or_extra_candidate_delta",
+      "wrong_authority_base_or_tree",
+      "wrong_implementation_head_or_candidate_bytes",
+      "v1_authority_rewrite",
+      "terminal_evidence_mutation",
+      "qualification_command_invocation",
+      "child_or_fork",
+      "token_refund_or_new_invocation",
+      "retry_restart_or_replacement",
+      "receipt_fabrication",
+      "implementation_files_in_authority_pr",
+      "PR_394_mutation",
+      "live_or_real_data",
+      "downstream_dispatch",
+      "cleanup_or_witness_loss"
+    ]
+  }
+}
diff --git a/...isions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.schema.json b/...isions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.schema.json
@@ -0,0 +1,176 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://local.codex/schemas/ck07r1-lifecycle-terminal-failure-clean-commit-authority-v1.json",
+  "title": "CK-07R1 lifecycle terminal failure clean committed transition authority v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "version",
+    "task",
+    "status",
+    "authority_base_sha",
+    "authority_base_tree_sha",
+    "source_authority",
+    "implementation_transition",
+    "decision",
+    "scope"
+  ],
+  "properties": {
+    "schema": {
+      "const": "codex-usage-tracker.ck07r1-lifecycle-terminal-failure-clean-commit-authority.v1"
+    },
+    "version": {
+      "const": 1
+    },
+    "task": {
+      "const": "CK-07R1"
+    },
+    "status": {
+      "const": "permitted_not_accepted"
+    },
+    "authority_base_sha": {
+      "const": "652f2166b58b9ee0d719348a769901577d11e6fd"
+    },
+    "authority_base_tree_sha": {
+      "const": "cc148aa820962c084655017e404cce54430313bd"
+    },
+    "source_authority": {
+      "const": [
+        {
+          "path": "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.json",
+          "sha256": "7752565abd5c5f27a852b8a8814ea1b7afde03d967de46419856eae85583f97b"
+        },
+        {
+          "path": "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.schema.json",
+          "sha256": "f4affab070de6aa1ed54cfc648051b7b6398bd57011fed8d942309894714744e"
+        }
+      ]
+    },
+    "implementation_transition": {
+      "const": {
+        "pull_request": 448,
+        "base_sha": "652f2166b58b9ee0d719348a769901577d11e6fd",
+        "head_sha": "927aa06f7c4c88319cc30247343c40db8e9b817e",
+        "paths": [
+          {
+            "path": "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+            "role": "unchanged_preparation_source",
+            "sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea"
+          },
+          {
+            "path": "scripts/benchmark_ck07r1_lifecycle_scale.py",
+            "role": "corrected_planner_path_benchmark",
+            "sha256": "8f4900b1ecc841fe04f6cd1232c3741efef105e8b997c7fd15cc61b5d8d14cc1"
+          },
+          {
+            "path": "tests/agent_kernel/publication/test_lifecycle_scale.py",
+            "role": "corrected_planner_path_tests",
+            "sha256": "8364c4387b8e588cb18f420805d47e48241da22d6fb793e838a522cc7fb29e33"
+          },
+          {
+            "path": "output/ck07r1/lifecycle-requalification-v1.launch-token.json",
+            "role": "immutable_v1_terminal_ledger",
+            "sha256": "5c2b42eca6a3e54cf4163226bc55f3c75aa35112c4ed0342c11f4e39cb9922be"
+          },
+          {
+            "path": "output/ck07r1/lifecycle-requalification-v2.launch-token.json",
+            "role": "immutable_v2_terminal_ledger",
+            "sha256": "570e27824ee04a51aa4012adb461bd4aebb00b61541f2477fd9e1665854325a2"
+          },
+          {
+            "path": "output/ck07r1/lifecycle-requalification-v2.stderr.txt",
+            "role": "immutable_v2_terminal_stderr",
+            "sha256": "4cf4b10fd04f20a190e4ac41898d25b9295b3dc9d7addead8a81edd27b3aca2f"
+          },
+          {
+            "path": "output/ck07r1/lifecycle-requalification-v2.stdout.txt",
+            "role": "immutable_v2_terminal_stdout",
+            "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+          }
+        ],
+        "representations": {
+          "dirty_prepublication": {
+            "head_tree": "authority_base_tree",
+            "worktree_delta": "exact_candidate_scope",
+            "committed_delta": "none"
+          },
+          "clean_pr_head": {
+            "head": "exact_bound_implementation_head",
+            "worktree_delta": "empty",
+            "committed_delta": "exact_candidate_scope"
+          },
+          "clean_integrated": {
+            "base": "exact_authority_base",
+            "worktree_delta": "empty",
+            "committed_delta": "exact_authority_scope_plus_candidate_scope",
+            "source_identity": "bound_pr_head_or_exact_tree_equivalent_squash"
+          }
+        }
+      }
+    },
+    "decision": {
+      "const": {
+        "root_cause": "clean_committed_ci_representation_was_not_modeled",
+        "dirty_prepublication_remains_valid": true,
+        "clean_committed_transition_permitted": true,
+        "implementation_acceptance": "not_claimed",
+        "runtime_acceptance": "not_claimed",
+        "new_command_invocations_permitted": 0,
+        "launch_authorized": false,
+        "token_consumed": true,
+        "token_refund": false,
+        "retry": "none",
+        "restart": "none",
+        "replacement": "none",
+        "receipt_fabrication": "forbidden",
+        "post_single_run": "unavailable_without_complete_planner_valid_receipt",
+        "final_accepted": "unavailable"
+      }
+    },
+    "scope": {
+      "const": {
+        "authority_write_scope": [
+          "docs/INDEX.md",
+          "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json",
+          "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.schema.json",
+          "docs/roadmap/REMAINING_EXECUTION_PLAN.md",
+          "docs/roadmap/TASK_PACKETS.md",
+          "docs/roadmap/tasks/ck-07r1-correct-lifecycle-preparation-scale.md",
+          "scripts/check_kernel_scope.py",
+          "scripts/ck07r1_terminal_failure_correction.py",
+          "tests/kernel/test_ck07r1_shared_successor_overlay.py",
+          "tests/kernel/test_ck07r1_terminal_failure_correction_authority.py",
+          "tests/kernel/test_documentation_authority.py",
+          "tests/kernel/test_kernel_scope.py"
+        ],
+        "candidate_scope": [
+          "output/ck07r1/lifecycle-requalification-v1.launch-token.json",
+          "output/ck07r1/lifecycle-requalification-v2.launch-token.json",
+          "output/ck07r1/lifecycle-requalification-v2.stderr.txt",
+          "output/ck07r1/lifecycle-requalification-v2.stdout.txt",
+          "scripts/benchmark_ck07r1_lifecycle_scale.py",
+          "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
+          "tests/agent_kernel/publication/test_lifecycle_scale.py"
+        ],
+        "forbidden": [
+          "mixed_partial_or_extra_candidate_delta",
+          "wrong_authority_base_or_tree",
+          "wrong_implementation_head_or_candidate_bytes",
+          "v1_authority_rewrite",
+          "terminal_evidence_mutation",
+          "qualification_command_invocation",
+          "child_or_fork",
+          "token_refund_or_new_invocation",
+          "retry_restart_or_replacement",
+          "receipt_fabrication",
+          "implementation_files_in_authority_pr",
+          "PR_394_mutation",
+          "live_or_real_data",
+          "downstream_dispatch",
+          "cleanup_or_witness_loss"
+        ]
+      }
+    }
+  }
+}
diff --git a/docs/roadmap/REMAINING_EXECUTION_PLAN.md b/docs/roadmap/REMAINING_EXECUTION_PLAN.md
@@ -206,6 +206,14 @@ the token, authorize any launch, fabricate a receipt, or make
 corrective implementation prequalification because the existing
 receipt-required runtime acceptance contract remains unsatisfied; CK-08R4,
 CK-08RG, and CK-09 remain blocked pending an explicit future roadmap decision.
+The linked
+[clean-committed transition authority](../decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json)
+keeps the v1 authority immutable while binding PR #448 base `652f2166…`,
+source head `927aa06f…`, and the exact seven-path cohort. The same bytes may be
+represented only as an all-or-none dirty prepublication delta over the exact
+authority-main tree or as a clean committed PR/integrated delta with exact
+base, scope, and hashes. Neither representation reopens the consumed run or
+changes the existing blocked state.
 
 The exact V11 launcher contract constructs and validates the fully
 overlay/cohort-bound receipt and non-null stdout/stderr/output evidence before

diff --git a/docs/roadmap/TASK_PACKETS.md b/docs/roadmap/TASK_PACKETS.md
@@ -69,7 +69,7 @@ locks are unchanged.
 - [x] **CK-08R3 — Qualify evidence service scale** · PR #425 hosted-green and squash-merged at `0fad272b`; both frozen synthetic profiles accepted and exact-main verified · [packet](tasks/ck-08r3-qualify-evidence-scale.md)
 - [x] **CK-07R1A — Correct hosted lifecycle tail** · Accepted/merged at `4d807495`; exact-main verified · [packet](tasks/ck-07r1a-correct-hosted-lifecycle-tail.md)
 - [x] **CK-07R1A0 — Freeze lifecycle planner/recovery path authority** · Path, finite source/runtime, run-invocation authority, and argv-correction authority merged through `479cbdb`; retained witnesses remain read-only · [packet](tasks/ck-07r1a0-freeze-lifecycle-path-authority.md)
-- [ ] **CK-07R1 — Correct lifecycle preparation scale** · Blocked after the prelaunch-recovery-authorized sole v2 child handshake consumed the non-refundable token and terminated `failed_after_launch`; the versioned [terminal-failure correction authority](../decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.json) permits only deterministic non-consuming benchmark/test correction prequalification, never another run or receipt-based acceptance; PR #394 remains read-only · [packet](tasks/ck-07r1-correct-lifecycle-preparation-scale.md)
+- [ ] **CK-07R1 — Correct lifecycle preparation scale** · Blocked after the prelaunch-recovery-authorized sole v2 child handshake consumed the non-refundable token and terminated `failed_after_launch`; the versioned [terminal-failure correction authority](../decisions/evidence/ck07r1a0/lifecycle-terminal-failure-correction-authority-v1.json) permits only deterministic non-consuming benchmark/test correction prequalification, while its [clean-committed transition bridge](../decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json) binds exact PR #448 dirty and clean representations without authorizing another run or receipt-based acceptance; PR #394 remains read-only · [packet](tasks/ck-07r1-correct-lifecycle-preparation-scale.md)
 - [x] **CK-QG1A — Correct page-executor complexity** · PR #408 merged/exact-main `30983d4`; authorized successor `9e80c867…` accepted without behavior or baseline change · [packet](tasks/ck-qg1a-correct-page-executor-complexity.md)
 - [x] **CK-QG1 — Enforce replacement-kernel maintainability** · PR #392 hosted-green, squash-merged at `68050b93`, exact-main verified, and its [v2 writer transition authority](../decisions/evidence/ckqg1/maintainability-baseline-transition-authority.json) is linked for the reviewed PR #430 successor · [packet](tasks/ck-qg1-enforce-agent-kernel-maintainability.md)
 - [ ] **CK-08R4 — Reclassify physical named plans** · Blocked on CK-07R1; CK-08R1/R2/R3 are complete · [packet](tasks/ck-08r4-reclassify-physical-plans.md)

diff --git a/docs/roadmap/tasks/ck-07r1-correct-lifecycle-preparation-scale.md b/docs/roadmap/tasks/ck-07r1-correct-lifecycle-preparation-scale.md
@@ -102,7 +102,13 @@ WAL bound. The benchmark incorrectly asserted `APPEND_SAFE_SMALL` for every
 chunk and therefore never exercised the selected large-artifact path.
 
 The terminal-failure correction authority permits the same worker to correct
-only the benchmark and its lifecycle test. Every chunk must preserve the exact
+only the benchmark and its lifecycle test. The additive
+[clean-committed transition authority](../../decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json)
+preserves the v1 authority bytes and binds exact PR #448 base `652f2166…`,
+source head `927aa06f…`, and seven-path scope. It accepts only the exact dirty
+all-or-none prepublication representation or the exact clean committed
+PR/integrated representation; mixed, partial, extra, wrong-lineage, and
+wrong-byte states remain forbidden. Every chunk must preserve the exact
 `plan_refresh` result: small plans use the pointer-coordinated short writer;
 large plans use the production-reachable isolated-artifact build, validation,
 durable promotion, recovery, rollback, and prior-readability path. Tail limits,

diff --git a/scripts/check_kernel_scope.py b/scripts/check_kernel_scope.py
@@ -890,6 +890,13 @@
     }
 )
 
+CK07R1_TERMINAL_CLEAN_COMMIT_AUTHORITY_ADDITIONS = frozenset(
+    {
+        "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.json",
+        "docs/decisions/evidence/ck07r1a0/lifecycle-terminal-failure-clean-commit-authority-v1.schema.json",
+    }
+)
+
 CK08_PREREQUISITE_BLOCKER_ADDITIONS = frozenset(
     {
         "docs/decisions/evidence/ck08/fact-backed-oracle-prerequisite-gap.json",
@@ -969,6 +976,7 @@
     | CK07R1_CONSUMING_BOUNDARY_AUTHORITY_ADDITIONS
     | CK07R1_PRELAUNCH_RECOVERY_AUTHORITY_ADDITIONS
     | CK07R1_TERMINAL_FAILURE_CORRECTION_AUTHORITY_ADDITIONS
+    | CK07R1_TERMINAL_CLEAN_COMMIT_AUTHORITY_ADDITIONS
     | CK08_PREREQUISITE_BLOCKER_ADDITIONS
     | {
         "config/agent-kernel/maintainability-baseline-v1.json",