[pcvantol]

Current candidate qualification — correction3

Exact source 7a10a2e1b7e3783b5fa08ade84ac5089ad7062fc, tree ed564965ed9cca413dbfb4506398064c422edc6e, canonical EP2.3.124 wheel SHA256 36f751f00769b18f48ad6b66bc2f97968582b76ac1369e7706c48b68eac9f7de. Same writer/branch/history; source changes now frozen.

Small actual hosted product probe39259505106 succeeded on macOS14.8.9 arm64 and targeted Linux installed components. All214 packaged files were bound to this wheel. macOS original18 group checks ESRCH, real lost response/Server crash/restart, nonmutating GET, current-authority resume, original operation/commit/tree/B8R and replay; cleanup0. Linux83 discovered/77 executed/6 explicit Darwin-only skips; all four changed production modules strictly above80.2% executable-line coverage. No Linux native qualification claim.

Old a034b71 fullCI39252047755 is CANCELLED after a later independent finding; completed browser subsets remain bound to that earlier tree and are not current fullCI PASS. Its TDEobserve workflow success remains separate from actual policyFAIL/qualificationFAILED. Historical failures and original archives remain retained. One old full qualification consumed, no resets or administrative cap.

Fresh full17/native-negative/normalCI2, exact-head normalOwnerAuthorization, protected source delivery, separate nonempty protected Finalization and NEW exact-final-main installed evidence/readback/JOIN/cleanup remain required. No merge/DoD or R57 acceptance claim.

---

Earlier candidate history (superseded pins; retained evidence)

Scope

ASSIGNMENT_ID=L2-GENESIS-MACOS-PROCESS-GROUP-CLOSURE-V1-20261019
JOIN_ID=L2-L3-GENESIS-APPLY-HOST-QUALIFICATION-V1-20261019

Same L2 sole source writer/session and preserved branch history. Base 4d0c0461d7a5ec7fb7a50aa42f775cc4be09faa5; selected head a034b712c9d95d0540143195238ed2472e44a435, tree 8ac02f3c95a95d8b34728c26c05d8b05af4b24fc.

EP2.3.124 adds an operation-bound OS-selected physical Git host mode on macOS, original-operation readiness migration, and strictly bounded original empty-Git capability recovery. Current authority, original native filesystem/network profile, exact documents, five/30-second deadlines and whole-group closure remain mandatory. No arbitrary command/path, same-owner atomic-exec guarantee, target adoption, network/signing/model effect or Forge Mission acceptance is introduced.

Original EP2.3.123 delivery, R50/inspection/progress pins and closed predecessors remain unchanged. R57 PR298/writer/timer/budgets remain untouched and blocked until the owning slice is actually qualified. No automatic successor.

Validation

• Canonical committed build/install/import and all214 installed product files checked.
• Small real noneditable local installed HTTP/native/Git/B8R chain with actual crash/restart, nonmutating GET, same-operation explicit resume and replay;18 original group ESRCH checks.
• Small real macOS14.8.9/arm64 installed chain 39250704075: actual source 1c979964ec3cd3b3024619b93fabd7ed496dd212, wheel a500fe38278eb94ebedbc59f08227f125d6d782bd02528210da0e386aa7e72e1;214 files/18 ESRCH checks, original encrypted receipts independently read back.
• Actual old-installed→new-installed original-operation WRITE_FILES crash/restart migration; same grant/root/history, no synthesized ledger or historical Git failure claim.
• [x]67 focused component tests; executable-line coverage runtime97.015%, service85.370%, worker88.646%.
• Extraction baseline audit.
• Full normal owning installed coverage, behavior/browser/profileCI and all strict unchanged thresholds.
• Full owning installed negative/recovery matrix and exact-source readback.
• Normal exact-head OwnerAuthorization, protected delivery and separate nonempty protected Finalization.
• NEW exact-final-main installed evidence, readback, JOIN handoff and safe own cleanup.

Candidate/failure evidence retains its original pins; earlier failures remain failures. The shim comparison does not establish a unique cache/warming cause. Workflow success is not TDE policy PASS. No candidate evidence is represented as final-main or Forge R57 acceptance.

Risk and rollback

Trusted installation owner/system administrator remains a trusted host boundary. Runtime selection/inode/byte drift refuses without silently repinning. Current-mode missing/corrupt pins are not legacy migration permission. Unsupported old unproved nonempty Git state remains preserved and uncertain. No old user target or existing installation is modified by qualification. Production action: NONE.

Revert requires normal protected source delivery; it does not authorize reset, deletion, adoption or replay of uncertain external effects. Public whitelist facts and encrypted original owning evidence are retained; raw paths, logs and synthetic credentials stay private.

Documentation and security

• Concrete supported-host/recovery contract and evidence limits documented.
• Independent Quality/Security review, with private original reports and exact source binding; ordinary required gates remain mandatory.