Prepare revised retained update from merged source repair

docs/kit-friction-log.md

@@ -24,6 +24,19 @@
 >
 > Tracker board: https://github.com/topij/agentic-dev-kit/issues
 
+## 2026-09-11
+
+- **The review runtime stopped before delivering required adversarial coverage.**
+  PR #733's [receipt at `88c5b044d5a42e33d2c4b0158be0957b4014678a`](https://github.com/topij/agentic-dev-kit/pull/733#issuecomment-5633065607)
+  and [receipt at `207683b073f4d34cf22c5d9e1635f1c23239b6d4`](https://github.com/topij/agentic-dev-kit/pull/733#issuecomment-5633204702)
+  preserve the actual `codex exec` argv, private review directories, compute readback
+  and terminal cybersecurity-content flags on 2026-09-11. **M** — required review
+  could not reach a final report. The runtime supplied no classifier diagnosis;
+  no kit mechanism or repair is established. Parked for runtime-access diagnosis,
+  with the unfinished commands distinguished from completed verification. No
+  tracker payload or sweep is authorized by this record, and incomplete coverage
+  is not merge clearance.
+
 ## 2026-09-09
 
 - **ITEM5-B exposed a drift-check applicability mismatch after #705.** The

docs/kit-handoff.md

@@ -14,25 +14,37 @@
 > Older session blocks graduate to [`kit-handoff-history.md`](kit-handoff-history.md) once
 > this file crosses its line budget (`scripts/check_doc_budget.py`).
 
-Last updated: 2026-09-11 — ITEM5-B source follow-up approved; retained update remains separate.
+Last updated: 2026-09-11 — source repair delivered; revised retained-update decision prepared.
 Phase 5 delivery item 5 remains incomplete; item 6's replay remains complete.
 
-## Latest session — 2026-09-11 (ITEM5-B source-review follow-up, in Codex)
-
-The operator approved the kit-only source repair, tests/release metadata, required
-review and merge when clean, followed by preparation of a revised retained-update
-packet. The [source repair record](../saved_plans/phase5-item5-b-source-review-repair_2026-09-11.md)
-retains the exact approval, complete pre-fix review receipt and author verification.
-[PR #734](https://github.com/topij/agentic-dev-kit/pull/734) carries that work; #733
-preserves the earlier unapproved packet and incomplete review history.
-
-No retained fixture/source update is approved. The special-file-root limitation,
-ownership/function/field-exit distinctions, item 6/replay completion, #723 deferral,
-#585 placement and delivered #724/#722 batch remain. The friction sweep stays parked.
-
-▶ Next: complete PR #734's required review and pr-watch, merge under the explicit
-operator authority, then prepare the revised packet against the delivered source.
-Obtain its exact retained-update approval before execution. Fixture merge stays excluded.
+## Latest session — 2026-09-11 (ITEM5-B revised retained-update packet, in Codex)
+
+The operator-approved source repair [#734](https://github.com/topij/agentic-dev-kit/pull/734)
+merged as `7e0232ed871b37a315c5509c97b83d3b00b1a3fd`, from reviewed head `7224547da0c766a4fd9ee5791e53ddb3f7db6cdf`. Its
+[delivery checkpoint](https://github.com/topij/agentic-dev-kit/pull/734#issuecomment-5637494093)
+retains the exact-head watch/merge, complete panel receipts, CodeRabbit disposition
+and local #393 versus hosted verification limits. Separate shell parses account for
+#561's recipe gap. The source repair did not update the retained installation.
+
+The [UPDATE-03 packet](../saved_plans/phase5-item5-b-update03-decision_2026-09-11.md)
+selects that immutable source and binds payloads, write ledger, baseline prediction,
+preservation, verification, limits, rollback and an exact approval question. Its
+read-only audit and forge records retain post-acceptance checkpoint comparisons.
+The packet retains complete review receipts before its audit-ordering correction,
+with earlier UPDATE-03 questions/evidence preserved and the current `-r5` binding
+explicit. The packet records unresolved generic-upgrade bootstrap findings outside
+its proposed execution; no further source repair or approved deferral is claimed. PR #733 owns packet review/delivery. UPDATE-01 is consumed; UPDATE-02 and its old
+questions, payloads, ledgers and incomplete review receipts remain preserved.
+
+No retained update is approved. Ownership acceptance does not establish custom
+wrap-up functionality, client verification or field exit. The accepted inherited
+special-file-root limitation remains. Item 6/replay, #723's approved deferral,
+#585's earlier placement and #724's delivered #722 batch are preserved. The friction
+sweep stays parked; no credited exercise is repeated.
+
+▶ Next: revalidate UPDATE-03's bound inputs and obtain its exact approval before
+retained execution. Fixture PR continuation requires a separate decision; fixture
+merge stays excluded.
 
 ______________________________________________________________________
 
@@ -59,7 +71,7 @@ Ownership acceptance does not establish functionality or field exit. The repair
 not update the retained installation. Item 6's replay, #723's deferral, #585's earlier
 placement and #724's delivered #722 batch are preserved. The friction sweep stays parked.
 
-The latest session block owns the subsequent source follow-up and next decision.
+The latest session block owns the revised packet and next decision.
 
 ______________________________________________________________________
 

saved_plans/codex-parity-plan_2026-08-23.md

@@ -451,11 +451,19 @@ historical observation it was and is not silently refreshed.
      inherited FIFO-root gap and P3 root-symlink coverage gap; the [follow-up packet](phase5-item5-b-review-followup-decision_2026-09-10.md)
      was approved as ITEM5-B-KIT-REVIEW-02 on 2026-09-11. The [follow-up execution](phase5-item5-b-review-followup-execution_2026-09-11.md)
      records the applied scope, final panel and separately authorized merge of kit #731 as
-     `e6d6e77d118454349f8e8bb046e99ef3009c5f5c`. The subsequent UPDATE-02 preparation
-     in #733 led to the separately approved [source-review repair](phase5-item5-b-source-review-repair_2026-09-11.md)
-     in #734. Complete its required review and merge when clean, then prepare the
-     revised exact retained-update packet. Neither repair approval nor kit merge
-     authorizes retained execution. Preserve the old packet and review receipts.
+     `e6d6e77d118454349f8e8bb046e99ef3009c5f5c`. UPDATE-02 preparation in #733 led
+     to the separately approved [source-review repair](phase5-item5-b-source-review-repair_2026-09-11.md),
+     delivered by #734 at `7e0232ed871b37a315c5509c97b83d3b00b1a3fd`. The
+     [UPDATE-03 packet](phase5-item5-b-update03-decision_2026-09-11.md) proposes the
+     revised exact local retained update after fresh read-only checkpoint checks.
+     Its current `-r5` binding retains the audit and dependent-command isolation correction,
+     corrects copied provenance, and preserves unresolved generic-upgrade source findings
+     outside the proposed execution;
+     earlier UPDATE-03 questions and evidence remain historical and unanswered.
+     Obtain its exact approval before execution; neither repair approval nor kit
+     record merge supplies it. UPDATE-02's old question, payloads, ledger and review
+     evidence remain preserved. Fixture PR continuation needs a separate exact
+     CI/body/publication decision.
      Fixture merge remains excluded; the nonfunctional custom
      wrap-up carries ownership acceptance only. No original continuity or prior field
      credit was recreated.

saved_plans/phase5-item5-b-review-followup-execution_2026-09-11.md

@@ -92,8 +92,12 @@ field exit are separate. Item 6's completed replay is preserved without repeat o
 credit for cs-toolkit #2222/#2223/#2255. Kit #723 remains the approved upstream deferral;
 #585 stays earlier outside Phase 6; #724 delivered the #722 batch. The friction sweep stays parked.
 
-**Next:** prepare the exact retained-update decision packet for the merged #731 repair.
-Revalidate read-only against the
+**Next:** revalidate the [UPDATE-03 packet](phase5-item5-b-update03-decision_2026-09-11.md)
+and obtain its exact approval before retained execution. The separately approved
+source follow-up was delivered by #734; the revised packet selects its immutable
+merge. Historical UPDATE-02 questions, payloads, ledgers and review evidence remain
+preserved. Neither source repair nor kit record merge authorizes retained execution.
+The revised packet revalidates read-only against the
 [post-acceptance retention checkpoint](phase5-item5-b-review-followup-evidence_2026-09-10/retained-final.json.gz)
 and [fixture forge checkpoint](phase5-item5-b-acceptance-execution-evidence_2026-09-10/forge-after-exit.json).
 Use the current checkpoint inventory/identity comparison, not the historical UPDATE

saved_plans/phase5-item5-b-source-review-repair_2026-09-11.md

@@ -44,16 +44,20 @@ with the assigned heading in the working tree. This targeted correction does not
 turn the earlier full run into a passing one. The focused workflow/hook run and
 individual shell parses covering #561 are retained alongside it.
 
-Required independent review and delivery receipts belong to PR #734. Do not infer
-source coverage from retained-fixture results or incomplete reviewers. The repair
-preserves #393 and #561 as separate limitations; it changes neither implementation.
-
-**Next:** complete PR #734's required review and pr-watch, then merge under the
-operator's scoped authority. Prepare a replacement retained-update packet against
-the delivered immutable source with a fresh read-only checkpoint comparison, new
-hash-bound payloads/ledger/baseline prediction, preservation/verification/rollback
-and exact approval question. Preserve UPDATE-01's consumed decision and historical
-UPDATE-02 records. No retained update follows without its separate exact approval.
+The [delivery checkpoint](https://github.com/topij/agentic-dev-kit/pull/734#issuecomment-5637494093)
+retains the completed independent reports, CodeRabbit disposition and exact-head
+watch/merge. `gh pr view 734 --repo topij/agentic-dev-kit` with the JSON fields in
+that checkpoint, from `/Users/topi/Coding/agentic-dev-kit` at
+`7224547da0c766a4fd9ee5791e53ddb3f7db6cdf` on 2026-09-11, read back merge `7e0232ed871b37a315c5509c97b83d3b00b1a3fd`.
+The source repair preserves #393 and #561 as separate limitations; their
+implementations are unchanged. No source coverage is inferred from retained-fixture
+results or historically incomplete reviewers.
+
+**Next decision:** the [UPDATE-03 packet](phase5-item5-b-update03-decision_2026-09-11.md)
+selects the delivered immutable source with fresh checkpoint evidence, bound payloads,
+ledger/baseline prediction, preservation/verification/rollback and an exact question.
+UPDATE-01 remains consumed and historical UPDATE-02 records remain unchanged.
+No retained update follows without its separate exact approval.
 
 Phase 5 item 5 remains incomplete; item 6 and replay evidence remain complete.
 Do not repeat or re-credit cs-toolkit #2222/#2223/#2255. #723 remains the approved