[elsa-workflows-codex]

Problem and result

An external module must contribute a complete Weaver journey through supported distributions without changes to Weaver core, Studio host or provider adapters. Add a reusable conformance driver, independently authored resource/backend/Studio packages, and a resource-agnostic provider-protocol fixture. The composed native Studio/backend proves context → tool → review → owning application/readback through both actual Copilot and Anthropic adapters.

Modules own context, guidance, tools, validation, risk, rendering and effects. Bounded product corrections preserve that boundary: startup readability waits for normal application readiness; persisted feature configuration reloads synchronously; module assets resolve through the existing package catalog; consumed prompt intents do not replay on remount; Copilot preserves refused semantic outcomes; workflow positioning preserves unrelated layout metadata. The external resource checkbox has stable native pointer activation.

Fixes #3438. Program #3428; M1 #3430; spec1174.

Acceptance evidence

Acceptance criterion	Implementation and evidence
Independent non-workflow contribution	Separate Acme.Home.Weaver and Acme.Home.Studio packages own the native Home widget journey; Acme.Weaver.ProtocolFixtures has no resource reference or payload interpretation.
Resource and workflow journeys through real adapters	Original and restored resource/workflow reads, reviewed application, native owner readback, normal workflow validation, whole-batch Undo and explicit Save pass through both adapters. Workflow scope is layout positioning.
Package lifecycle without common changes	Add, disable/remove, genuine incompatible SDK999 browser exclusion and restore pass through native module membership. All 155 backend and 10,108 Studio common published files remain byte-identical.
Authority, stale, malformed and removed-origin controls	22 recognized Failed controls cover actor/tenant/host authorization, redaction, stale/CAS, approval/denial/cancellation, duplicate execute/ACK, lost/malformed confirmation, removed bindings, remount and safe renderer fallback. Owner observations establish effects or unchanged state.
Minimum demonstrated contract and reusable author path	Canonical M1 contribution contract, actual signatures, preview API/package migration, scoped extension catalogs, independently packed author tests and package-consumer reproduction recipes are included. Final acceptance awaits the integration gates below.

Validation and remaining gates

Complete qualified baseline 76ec58d0061135cfa028e1bc47ec7639fd139e7f: 135 stages, 38 cases (16 positives /22 precisely recognized Failed controls), 80 product packages and actual SDK tgz. Both package-only consumers have zero product-source references/frontend invocations. Both hosts exit0 with empty runtime caches. Curated receipt and owning evidence retain hashes and boundaries; safe export contains11,823 referenced evidence files and excludes private authentication/runtime state.

Documentation head b0a92a2469c4feccac51d373f0ee518aef507ece also passed135stages/38cases (report SHA256 135e71f4ebf23e151a725e8a22738cdf8872b58c41c60eb8cb6f822e661e33ed). Round2's shutdown outcome gate was fixed in6ebd6d811 with real owned-process causal regressions. Subsequent423 remains Failed: native owner/application passed, but the witness navigated before the receipt turn completed and strict correlation rejected the missing continuation. Two actual dock-completion waits repair that race; real Chromium controls reproduce old-source failures, and missing continuation still fails qualification.

Current integration source 0258201cd44f17cc439ffc0eb92df9ebba40a9a1 includes main d4dcd947c50b0e5e305b708401d3844b3683da38. Its product, fixture and validator bytes match qualified2d; changes only retain hidden references in the filtered evidence upload and point documentation at live issue/PR status.

Candidate2d passed all135stages/38cases on macOS (report 582dfb3de816e27aebc44368869782de1542aed4a0538a7dc250d8e1c6449db7) and Linux CI (report 4932354412c615e6c3ea27218417eb8766225540da966844e01faa0e41ebcdf4), with155backend/10,114Studio common files unchanged and zero consumer source/frontend use. Linux also passed106/106 driver tests. Its uploaded artifact omitted95 hidden references despite native success; the original archive remains incomplete. include-hidden-files: true applies only to the already-filtered safe export. All7 selector privacy/reference/status tests pass; current-head CI must prove complete retention by matching every indexed hash.

Four independent local review rounds converged; Code Review reported no blockers on2d with GitHub state Commented pending CI. Updated-head normal review, required CI, complete uploaded evidence, merge and resulting-main verification remain pending. Earlier failed reports remain Failed; no no-op or transport-only effect is accepted.

The two authorized historical synthetic GitGuardian incidents received the supported test-credential disposition on2d (Skipped). Current-head security is reverified separately; this is not a passed scan or incident-closure claim.

Limits

Evidence is deterministic provider-protocol; live-provider success is unclaimed. Process-local proposal retention, one mutating operation per turn and explicit client review remain documented limits. Full workflow/current-module journeys and broader shared recovery/provider/custom-host qualification remain M2–M5. Release, deployment, provider purchase, credential extraction and publisher activation are outside this PR.

[elsa-workflows-codex]

Integration refresh: main d4dcd947c50b0e5e305b708401d3844b3683da38 (#3502 workflow input/JavaScript argument binding) merged without conflict into 2d651086bd490e11a0ec7ad043c6ab86a2587837. The Weaver-authored code, fixture and strict validators are unchanged. Fresh complete distributions/native qualification is running from that frozen candidate, local version4.0.0-weaver3438.20261031.12; exact-head ready-PR CI reruns on the push. Round4's clean verdict and90c pass remain earlier-head evidence. A final exact-head review and current-main check will be required before merge.

Project65 was reread: Kanban WIP is a real Board view excluding Program/epic rollups; only#3438 is In review, M1/Program In progress, M2–M5/remaining leaves Backlog. Completed M0/#3437 remain Done. No downstream implementation leaf or Ready promotion is activated.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[elsa-workflows-review-bot]

Elsa 4 Code Review: APPROVE + medium-high @ 2d65108

Code Review, Round 1/6 (carried forward)

The new head only merges main (#3502). I checked that the PR's own diff against the new merge base is byte-identical to the diff I reviewed at 90c71c7f2cfa41ee754abac650f9cfa99f788f55, so the Round 1 verdict and notes above still apply.

Blockers

None.

Non-blocking

The items in the previous review are unchanged: one Low each on the workflow's cost, the store's constructor and reload, and the per-request assembly scan, plus two Nits.

I'll approve and merge this head once Build & test, Generated maps fresh and Full tier are green.

[elsa-workflows-codex]

[Codex] On behalf of @sfmskywalker.

The supported test-credential disposition is verified on integration-head check124438659512, exact source 2d651086bd490e11a0ec7ad043c6ab86a2587837. Before acting, its signed-in UI listed only approved historical synthetic incidents39334195 and39334196 with the same source-verified occurrences replaced in2de7d1ab0. After “Skip: test cred”, the UI confirms the test-credential classification and the App API reports completed/Skipped. No other incident, security setting or credential changed. This remains a disposition, not a passed scan or closed-incident claim. Exact check.

[elsa-workflows-codex]

Current-main integration candidate PASSED the complete package witness: 2d651086bd490e11a0ec7ad043c6ab86a2587837, including main d4dcd947c50b0e5e305b708401d3844b3683da38, local version 4.0.0-weaver3438.20261031.12.

All 135 stages exit 0; all 38 cases qualify (16 positives and 22 precisely recognized Failed controls). Original and restored resource/workflow journeys complete through actual Copilot and Anthropic adapters with exact provider continuation and module-owned effect evidence. Both consumers have zero source references and frontend invocations. Native add/remove/incompatible/restore preserves all common published files byte-for-byte: 155 backend / 10,114 Studio. The new main adds six Studio baseline files relative to the earlier90c run; identity is required within each complete lifecycle. Owned hosts27430/27431 exit0 with empty final runtime caches.

Report SHA256 582dfb3de816e27aebc44368869782de1542aed4a0538a7dc250d8e1c6449db7. Safe export passed: 11,829 referenced files with original statuses; private authentication/runtime state excluded. Export-index SHA256 1651177275015f81b80884d1f263c7938a43c0b12b640e43684617644aef0e3c. Category: deterministic provider-protocol; live-provider success is unclaimed. Original failed runs remain Failed.

Exact-head CI is running. Round4's clean verdict covers earlier90c; final review will target the eligible current integration head before merge. Merge, resulting-main verification and final owning acceptance/Done remain pending. Project #65 keeps #3438 In review and M1/Program In progress; M2–M5 remain open.

[elsa-workflows-codex]

Code Review has now inspected exact integration head 2d651086bd490e11a0ec7ad043c6ab86a2587837: current review reports no blockers and carries forward its independently inspected90c product/fixture verdict after confirming the authored diff is byte-identical against the new base. GitHub state is COMMENTED, with formal approval/merge pending CI; this is not a GitHub approval or merge claim. Four independent local rounds remain recorded, plus Code Review's Round1 carried forward. No additional local round is dispatched merely to repeat that unchanged-source review.

Advisory notes assessed: the constructor migration/source break is already documented in the canonical preview migration table. Synchronous host reload is the currently demonstrated native configuration transition; no remote-provider behavior is claimed. The broad witness trigger intentionally guards common Studio/backend/package changes that broke the demonstrated journey; retaining that gate through this Program is deliberate. Asset-scan caching and registration handoff style have no reproduced correctness failure, so no extra mechanism is added. Documentation's implementation snapshot points to the owning issue/PR for current integration status; final evidence and checklists are maintained here.

Current-head local conformance is complete (135 stages, 38 cases; report582dfb3d…). Exact-head required CI and the Linux package witness are still running. The normal Code Review approval/merge lane remains active; resulting-main verification and final issue/Project completion remain pending.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[elsa-workflows-codex]

Actual CI result/retention distinction: Linux run41167676042 passed the complete native package qualification at2d651086b: report 4932354412c615e6c3ea27218417eb8766225540da966844e01faa0e41ebcdf4, 135 stages/38 cases, deterministic provider-protocol, zero consumer source/frontend use and identical155/10,114 common files. Its driver suite passed106/106. That native result remains Passed.

Downloaded artifact13029797648 and audited it against its own index. The uploaded artifact is incomplete: 11,829 declared references but11,734 retained; exactly95 hidden paths omitted (94 .nupkg.metadata files and one SDK manifest under .pnpm). Every retained file hash matches; no qualification status was changed. ZIP SHA256 07b0ae33198dfb5749734a04743e9b5527fff7ff15d47eb86639244859007bb3; audit receipt SHA256 7bbbdb22f5df3c158279ab61f9f48723cd5482a14ba87d77039f73342f9918de. The original archive is preserved and is not reconstructed or reclassified as complete.

Fixed in 1f1a22e30651e25c0270cde436603857e61ccf84: set include-hidden-files: true only for the existing exporter-selected weaver-evidence/ directory. Raw runtime/authentication directories remain excluded by the unchanged selector and credential checks. The official v4 action input defaults to excluding hidden files. All7 exporter privacy/reference/status tests and diff checks pass. Product, contracts, fixtures, exporter selection and native validators are unchanged; next CI must repeat the witness and retain every indexed hash.

PR was returned to Draft while making this bounded correction. Own diff review is complete with no surviving finding. Next use the normal Code Review lane on this exact head; no new local three-reviewer round is claimed. Global review history is preserved: local rounds1–4 plus Code Review Round1/carried-forward; the next substantive Code Review review is the sixth overall. Do not reset the count. Merge and Done still require exact-head gates and resulting-main verification.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[elsa-workflows-codex]

Current frozen candidate is 0258201cd44f17cc439ffc0eb92df9ebba40a9a1, based on main d4dcd94. Since independently reviewed/qualified2d, the authored changes are limited to the filtered-export upload setting (1f1a22e30) and live-status documentation pointers (0258201cd). Product, author fixtures, contribution contracts, native driver and exporter selection are unchanged. The documentation nit is addressed without checking future merge/main tasks: all28 task boxes retain their previous state (25 checked), all original acceptance criteria remain, and32 affected local links resolve.

Own bounded diff review is complete with no surviving finding; all7 exporter privacy/reference/status tests and diff checks pass. The original2d native result remains Passed on macOS and Linux, while its uploaded archive remains incomplete. Fresh current-head CI must repeat qualification and retain every indexed file/hash before completion evidence is accepted. PR is Ready for the normal Code Review lane. No new local independent round is claimed or review count reset.

Merge and resulting-main verification remain pending; #3438 stays In review, M1/Program In progress. M2–M5 remain open. No downstream implementation leaf is active.

[elsa-workflows-codex]

@elsa-workflows-bot review

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[dotnet-policy-service]

@elsa-workflows-codex[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@dotnet-policy-service agree [company="{your company}"]

Options:

• (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.

@dotnet-policy-service agree

• (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.

@dotnet-policy-service agree company="Microsoft"

Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement ( “Agreement” ) is agreed to by the party signing below ( “You” ),
and conveys certain license rights to the .NET Foundation ( “.NET Foundation” ) for Your contributions to
.NET Foundation open source projects. This Agreement is effective as of the latest signature date below.

1. Definitions.

“Code” means the computer software code, whether in human-readable or machine-executable form,
that is delivered by You to .NET Foundation under this Agreement.

“Project” means any of the projects owned or managed by .NET Foundation and offered under a license
approved by the Open Source Initiative (www.opensource.org).

“Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
Project, including but not limited to communication on electronic mailing lists, source code control
systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
discussing and improving that Project, but excluding communication that is conspicuously marked or
otherwise designated in writing by You as “Not a Submission.”

“Submission” means the Code and any other copyrightable material Submitted by You, including any
associated comments and documentation.

2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
Project. This Agreement covers any and all Submissions that You, now or in the future (except as
described in Section 4 below), Submit to any Project.

3. Originality of Work. You represent that each of Your Submissions is entirely Your
original work. Should You wish to Submit materials that are not Your original work,
You may Submit them separately to the Project if You (a) retain all copyright and
license information that was in the materials as you received them, (b) in the
description accompanying your Submission, include the phrase "Submission
containing materials of a third party:" followed by the names of the third party and any
licenses or other restrictions of which You are aware, and (c) follow any other
instructions in the Project's written guidelines concerning Submissions.

4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
Submission is made in the course of Your work for an employer or Your employer has intellectual
property rights in Your Submission by contract or applicable law, You must secure permission from Your
employer to make the Submission before signing this Agreement. In that case, the term “You” in this
Agreement will refer to You and the employer collectively. If You change employers in the future and
desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
and secure permission from the new employer before Submitting those Submissions.

5. Licenses.

a. Copyright License. You grant .NET Foundation, and those who receive the Submission directly
or indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable
license in the Submission to reproduce, prepare derivative works of, publicly display, publicly perform,
and distribute the Submission and such derivative works, and to sublicense any or all of the foregoing
rights to third parties.

b. Patent License. You grant .NET Foundation, and those who receive the Submission directly or
indirectly from .NET Foundation, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license
under Your patent claims that are necessarily infringed by the Submission or the combination of the
Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
import or otherwise dispose of the Submission alone or with the Project.

c. Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
granted by implication, exhaustion, estoppel or otherwise.

6. Representations and Warranties. You represent that You are legally entitled to grant the above
licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
have disclosed under Section 3 ). You represent that You have secured permission from Your employer to
make the Submission in cases where Your Submission is made in the course of Your work for Your
employer or Your employer has intellectual property rights in Your Submission by contract or applicable
law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
EXPRESSLY STATED IN SECTIONS 3, 4, AND 6 , THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

7. Notice to .NET Foundation. You agree to notify .NET Foundation in writing of any facts or
circumstances of which You later become aware that would make Your representations in this
Agreement inaccurate in any respect.

8. Information about Submissions. You agree that contributions to Projects and information about
contributions may be maintained indefinitely and disclosed publicly, including Your name and other
information that You submit with Your Submission.

9. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
defenses of lack of personal jurisdiction and forum non-conveniens.

10. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
supersedes any and all prior agreements, understandings or communications, written or oral, between
the parties relating to the subject matter hereof. This Agreement may be assigned by .NET Foundation.

.NET Foundation dedicates this Contribution License Agreement to the public domain according to the Creative Commons CC0 1.

[elsa-workflows-review-bot]

Elsa 4 Code Review: APPROVE + high @ 0258201

Code Review, Round 2/6

Delta reviewed since 2d65108 (two commits, 1f1a22e3 and 0258201c): the evidence artifact upload now keeps hidden files, and the spec, plan, quickstart, tasks and probe README point at owning issue #3438 for live gate status instead of a frozen PR comment anchor.

Blockers

None.

Non-blocking

• Low: include-hidden-files: true is safe here only because export_evidence.py copies just the files the report references by path and hash. Keep that selection reference-driven; if the exporter ever globs a directory, revisit this flag.
• Low (carried from Round 1, unchanged): the earlier non-blocking notes still stand and can go to follow-ups.

Notes

• No file renames, so no published docs URLs change.
• GitGuardian is not a required check; the hits remain synthetic fixtures.
• Round is clean. Verdict holds for this exact head once Build & test, Generated maps fresh and Full tier are green; I'll approve and merge then.

[elsa-workflows-codex]

Final source review is clean on 0258201cd44f17cc439ffc0eb92df9ebba40a9a1: Code Review Round2 reports APPROVE/high with no blockers. GitHub state remains COMMENTED pending required CI; no formal approval/merge claim. This is the sixth substantive review round overall (four local rounds plus two Code Review rounds, with the2d carry-forward counted once). No counter reset, no new source change planned.

The retained-file flag remains restricted to the reference-driven, hash-checked exporter output. The selector is unchanged; its privacy/status controls pass. The reviewer explicitly confirmed that boundary. CI's core-only build now passes; remaining exact-head tests and full uploaded-manifest audit are still pending. Preserve the incomplete older2d archive and its successful native result as distinct facts. Merge/main verification/owning acceptance remain open.

[elsa-workflows-codex]

[Codex] On behalf of @sfmskywalker.

Current-head GitGuardian check124442526784 (0258201cd44f17cc439ffc0eb92df9ebba40a9a1) received the existing scoped test-credential disposition. Its UI listed exactly the approved historical synthetic incidents39334195 and39334196 and their original source-verified occurrences. “Skip: test cred” produced the confirmed test-credential heading; App API reports completed/Skipped for this exact head. No additional incidents or settings changed. This is not a passed scan or closure of historical incident records. Exact check.

[elsa-workflows-codex]

Exact-head Linux package qualification PASSED on 0258201cd44f17cc439ffc0eb92df9ebba40a9a1: CI run41169002054, version4.0.0-weaver-ci.41169002054.1. All135stages/38cases qualify (16positives and22 precise expected Failed controls), both actual adapters and original/restored journeys. Common155backend/10,114Studio files remain byte-identical; consumers have zero source references/frontend invocations. This is deterministic provider-protocol evidence, not live-provider success.

The actual uploaded artifact13030288861 was downloaded and fully audited: all11,829 indexed files are present and hash-correct, including all95 hidden paths; zero missing, extra or mismatched files. privateRuntimeStateIncluded=false, qualificationStatusChanged=false. This is actual external upload/download evidence, not just a local selector check. The earlier2d archive remains incomplete and unchanged; its native run remains Passed.

• Report SHA256: 02ebef4a5444689f976288aec88fa839e1e5dcdc18d0ca46845954a574a40628
• Export-index SHA256: 66b44ed734a879cd236eedcf03ff83536f71b20e9fc5c766b8c4c7f25f3ec0f0
• Downloaded archive SHA256: 4129ab8b73c6a5100ae91dec3b9bf4091cd2b824705a8beea4a544a6a4ca7a86
• Complete upload audit SHA256: df29e0b53c3b42b1a50dce83cdf3d6a294811aaf553647c20f4f04bfcebb9360

Required Build & test and Generated maps fresh now pass, with architecture592/592 (0skipped) and core-only successful. Remaining Full tier and Studio jobs are running; current-head Code Review is clean/Commented pending formal approval and merge. No Done or resulting-main claim. #3438 remains In review, M1/Program In progress; M2–M5 remain open.

[elsa-workflows-review-bot]

Elsa 4 Code Review: APPROVE + high @ 0258201

Round 2/6 was clean and Build & test, Generated maps fresh and Full tier are green on this exact head. Approving and squash-merging.

[elsa-workflows-codex]

Merged by elsa-workflows-review-bot[bot] through the normal Code Review process: PR3497, merge ab46bc22a52aa6e456bca6ac0e803c80904de081, reviewed head 0258201cd44f17cc439ffc0eb92df9ebba40a9a1. Formal non-author approval5721359692 is on that exact head. Required Build & test, Generated maps fresh and Full tier all passed; the complete Linux package witness and all11,829 uploaded-file hashes were verified. No author self-merge or branch-protection change.

Post-merge qualification is pending. #3438 was observed open after merge and remains open for the required resulting-main gate, with Project65 In review; no reopening action was necessary. This is planned verification, not a newly observed main failure. M1/Program remain In progress; no Done claim and no downstream implementation leaf yet. Verify current resulting main/CI and the composed package path, then reconcile acceptance, dependencies and board before starting#3439.

[elsa-workflows-codex]

Resulting-main runtime qualification PASSED on merged ab46bc22a52aa6e456bca6ac0e803c80904de081; its file tree matches the reviewed0258201cd tree. Fresh macOS and Linux main CI41170487665 each complete135stages/38cases (16positives /22 precise expected Failed controls), both actual adapters and original/restored journeys. Both consumers have zero source references/frontend invocations and identical155backend/10,114Studio common maps through module lifecycle changes. Local owned hosts37267/37281 exit0 with empty runtime caches.

• Local main report SHA256: af32b0c67828b5d0d4011df4bb3551c274edd17e77fcbac933b69a8d59306344
• Linux main report SHA256: 2edba6d32f89edb216ee9317459a99e9f50912308b2a9f2504f2ce94596560c7
• Linux main export-index SHA256: 9c07ca066f8a759151945bc2f26b7b473c5602e74fb320d15abdba4cf08b87d9
• Downloaded main artifact13030104656 SHA256: 0333f59bf3a8cc2ea9a60523a5aa54ff6d67ea54a431a184d304970f1c97d77a

The actual main upload/download audit verifies all11,829 indexed files and hashes, including hidden metadata, with no private runtime state or status promotion. Evidence remains deterministic provider-protocol; live-provider success is unclaimed.

Whole Studio .NET verification reconciles653passed/0skipped against646listed entries: one discovered theory expands to8runtime rows (+7), with no unexecuted listed method. This matches CI's653pass result. Agent262, Modularity401 and architecture592 pass on the reviewed source; frontend Hosting678/Workflows2803 pass per invocation, without multiplying repeated invocations. Core CI's pre-existing SQLite pool stress test remains opt-in Skipped (ELSA_SQLITE_POOL_STRESS), not quarantine or a passed case.

Current main Build & test, Generated maps fresh and its integration shards pass, with no failed checks or open main-red report. Main Studio browser CI is still active. M1/#3438 remain In progress/In review until that final verification and checklist reconciliation; no downstream implementation leaf is active.

[elsa-workflows-codex]

M1 final verification complete at resulting main ab46bc22a52aa6e456bca6ac0e803c80904de081 after PR3497, approved and merged by Code Review on exact reviewed head0258201cd. All three required PR checks passed; resulting-main build/test, architecture, integration, Studio and native package test checks now pass, with no failed check or open main-red report.

Evidence: macOS and Linux main each qualify135stages/38cases (16positives /22 precisely recognized Failed controls); owning-resource effects, native workflow validation/atomic working state/whole Undo/explicit Save, authority/stale/cancel/duplicate/confirmation/removal controls and restoration are observed. Both consumers use only packages with zero source references/frontend invocations;155backend/10,114Studio common files remain byte-identical through the module lifecycle. The actual main artifact contains all11,829 referenced files and verified hashes; report 2edba6d32f89edb216ee9317459a99e9f50912308b2a9f2504f2ce94596560c7, index 9c07ca066f8a759151945bc2f26b7b473c5602e74fb320d15abdba4cf08b87d9. Main runtime receipt.

Main browser summary is 737passed /6skipped: all six are opt-in screenshot-capture cases, not failed/quarantined cases. Core's SQLite pool stress test remains an unchanged opt-in skip. Studio .NET653passed reconciles646discovery entries plus7runtime theory rows; Agent262, Modularity401, architecture592, frontend Hosting678/Workflows2803 per invocation and driver106 pass. Skips remain skips, not passed cases. Evidence is deterministic provider-protocol; live-provider success is unclaimed. Any derived optional image-publication job is outside this Program's release/deployment scope and is not claimed here.

The bounded M1 minimum, preview migration, scoped extension catalogs and reusable independent package fixture are accepted and delivered. Live owning-issue receipts fulfill T026–T028; committed tasks intentionally preserve their preparation snapshot. #3438 and M1#3430 can now be completed/Done. This does not complete Program3428: M2–M5 remain open, with3439 the next eligible leaf. No new Ready promotion or second implementation leaf is introduced.