[Dong1017]

Bind the single additional pair to its reviewed v2 freeze

Refs #248; follows merged #287. This data/locator-only PR binds the already approved single additional A2/A3 comparison to the exact public v2 freeze and retained original model-free qualification.

• Preserve the original task/K/controls/verifier, visible/final metrics and equal 8+8 request budgets. No runtime, worker, workflow, provider or credential-setting change. The 14-file delta retains the elapsed window and adds its prospective replacement.
• Keep PR275 as the sole charge identity, with its scoped $350 lifetime cap. Retain the first unknown-cost $162.72 claim and every carryover; one new $162.72 bound would make PR liability $325.44 and observed daily liability $816.79. Other PRs stay at $200; daily/pilot ceilings remain $1,000. No third attempt, refund or automatic retry.
• Pin the new diagnostic-capable source/actor identities, reviewed exact exception, original hosted actor ZIP/receipt and fresh public price evidence. Existing source-bound qualification and independently recomputed synthetic outputs are not live model or efficacy evidence.
• Expiry is 2026-10-31 12:00 UTC, with actual admission no later than 11:38 UTC because 1,320 seconds of runway is required. Queue/preflight time counts. Missed or uncertain gates stop execution; this PR does not extend the window or dispatch itself.

Bounded verification and provenance

• 65 local policy/inventory tests, Ruff and diff checks passed. Actual strict plan/qualification validation, pure staging and authorization parsing passed without candidate/model execution, credentials or ledger writes.
• Independent source/data/privacy and cost reviewers checked both versioned data plans and their inventory bindings, 64 dependencies, exact historical task/K/metrics/common contracts and new qualification. The real public locator is separately read back and reviewed; the elapsed 10:00-window plan remains byte-identical historical data.
• Selected Ready run 41182807900 passed all five jobs; task and actor original evidence were independently checked. Actor timing retained A2 FAIL/PASS and A3 PASS/PASS. Missing raw host inventory lists and live /proc snapshots are not invented.
• Current-head Ready 41193373378 passed all five jobs; native review completed without findings, and the independent data/locator review found no material issue. The superseded opened-event run 41193350647 was cancelled, not passed. The test-merge tree exactly matches the reviewed activation tree.
• New task/actor original artifacts from 41193373378 are retained locally with hash/CRC and source-closure identity checks; this is not a repeat raw audit. The freeze continues to select the independently audited 41182807900 evidence. No efficacy verdict follows from software CI or scripted qualification. The first paid run's reason and actual bill remain unknown.
• Current head: ed677d84c4e3cc30b8f9487e005d12c79de8661f. The publication wrapper preserves the reviewed local source tree. Only data, provenance, inventory counts and the exact public locator differ from merged main.

Authorship

Actual implementation and independent review: Codex / gpt-6-astra / xhigh. Parent-owned manual execution remains subject to fresh prices/accounting, current-main identity, same-host preflight and durable admission; no request was made by preparing this PR.

{"schema_version":1,"head_sha":"ed677d84c4e3cc30b8f9487e005d12c79de8661f","human_only":false,"material_ai_authors":[{"tool":"Codex (single additional KV freeze binding)","model_id":"gpt-6-astra","effort":"xhigh","role":"author"}]}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-31T10:36:56.869496Z	ed677d8	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Dong1017]

Scoped data/locator software LGTM at ed677d84c4e3cc30b8f9487e005d12c79de8661f; no additional material finding.

All 14 published changed blobs and tree c0c453ddc357dec7e29a165a4c74a734de729014 match independently reviewed local fe7522ab, against base d5e17195. No runtime, worker, workflow or credential-setting change. The refreshed plan changes only two expiry fields and two price-evidence URLs relative to the preserved 10:00-window plan; task/K, controls, metrics, budgets, prior claims/checkpoints and source-bound qualification remain unchanged.

Independently fetched the actual owner freeze: exact 17,671 bytes, SHA-256 085c799c5cf907254802d07edef5f58587a957b837fa36a70ceb1cc0a15c3549. The production parser accepted that captured public response with the final locator, binding canonical plan d79e49f96e5373fa5305c38c9c86ad4b7dd4e9daba7cc7cfc441f5c1d508f8a7.

Reused evidence, incremental checks and remaining gates

Reused the completed source/raw/privacy audits; no candidate/model replay or duplicate full suite. Independent pure plan/qualification validation, staging, exact public-identity parsing and inventory validation passed (385 hashes). The original eight-file public archive was read back byte-for-byte, including ZIP SHA-256 checks. This remains model-free trusted-host evidence, not efficacy or independent hostile-host forensics.

The 12:00 UTC expiry / 11:38 latest admission boundary was checked: 11:38 accepted, 11:38:01 and expiry rejected. This is the same unused additional 8+8 pair under the exact PR275-only exception, not a new attempt or refund. The first run’s omitted cause and actual bill remain unknown.

Current Ready 41193373378 and native review are still running at this review; declarations pass. Superseded cancelled/skipped jobs are not passes. The author owns terminal monitoring. Applicable current-head CI/review completion, exact current-main/run identity, fresh prices/accounting, same-host preflight and durable admission remain required before execution.

COMMENTED only: not formal approval, merge authorization or paid-execution clearance.