feat: coordinate exact authorized Genesis apply through EP

[pcvantol]

Selected result

R57/plan1 — L3-GENESIS-EP-APPLY-COORDINATOR-V1-20261016 / L2-L3-GENESIS-APPLY-V1-20261016.

Bounded authenticated Forge HTTP and ordinary CLI request/read/explicit-resume for one original approved R52/R54/R56 Genesis plan. Durable original dispatch claim, current source/authority and protected-publication fences, separate private owner-configured EP authority, exact qualified producer contract and original-operation recovery. EP owns target/Git/B8R effects. Technical COMPLETE does not imply project/Mission readiness.

Qualified producer EP2.3.123 source4d0c046/treeb095ba0/canonical wheelbc49e7a. Forge2.23.0/schema46 allocated once from2.22.0; repairs do not bump it. Predecessors and consumer pins unchanged.

Observed candidate assurance

• First actual small ordinary noneditable Forge→separate installed EP HTTP chain passed before heavy validation: original37 document bytes/modes, trusted native validator, one rootcommit/tree/B8R, lost reply→original GET and replay without duplicates. All355+213 product files/entrypoints checked.
• All14 selected actual local Mac cases PASS/cleanuptrue: separate both-server OS restart after ACCEPT/GIT_REF/VERIFY_COMMIT/REGISTER; genuine R54/R56 supersession; original binding and real READ/INSPECT/PROGRESS refusals; unavailable-peer recovery; original/concurrent conflicting intents, both final original GET200/samecommit/attempt1; late publication revocation; actual EP expiry/revoke before and between steps; target race and genuine conflicting reservation.
• Literal PARTIAL/EFFECT_UNCERTAIN persisted by actual owning execute error handling after genuine completed native steps, read via actual HTTP, both servers independently restarted, no effect on original GET, explicit same-original resume→singlecommit/B8R/attempt2.
• Missing/corrupt initialized Forge journal/R54/R56/EP ledger refused, original inode/bytes/facts restored. Actual installed readiness defect specifically RED then exact original bytes restored/GREEN. Primary failures/secondary retention errors and unsafe ledger slots covered by15 passing guards. Original36 directed suite PASS;44 distinct scoped tests observed passing cumulatively. Full current suite/whole per-filecoverage still pending.
• Seven new production modules >80.2% executable lines in directed measurement; existing server_runtime requires full owning suite. Complete independent product-source Quality/Security PASS with subsequent bounded findings independently closed; actual final CI/TDE assurance remains open.

Qualified CI hosting and preserved failures

L2's read-only JOIN clarification confirms full native Genesis qualification on Mac; Linux has byte-identical wheel/component/generalnative evidence, not full new native Genesis. Three original Ubuntu native failures remain FAIL with original logs/verified artifacts; third primary BrokenPipeError32 during PREFLIGHT before target/Git/B8R. No Linux full-chain PASS or unknown root-cause fix claimed.

Same14 unchanged native cases run on ordinary macos-14 CI, same25-minute boundary. Existing required Ubuntu Test and static validation uses needs-native + always + first explicit native-result=success check. Native failure/skip/cancel cannot turn into a successful skipped required job; all original Ubuntu tests, strict changed-filecoverage and installed gates remain unchanged. No sandbox/criteria/producer-policy relaxation. Hosted operator fixture explicitly modeled; actual local Mac owner identity separately identified. Public JSON receipts only; sensitive archives/credentials excluded.

Current exact-head CI38973715382 on3250e3e is FAIL: two real source-recovery cases PASS; VERIFY stops at actual producer GIT_INIT/PARTIAL. Nested original primary is BOOTSTRAP_HOST_GROUP_ACTIVE_OR_UNCERTAIN (genesis_service.py386/480), secondary same410/480; CleanupFailure wrapper451. No determination of live versus zombie-only versus uncertain group. Qualified EP4d0c046/b095ba0/wheelbc49e7 unchanged. Original artifact12077873370 ZIP SHA256 ff0910d155ee85b7fc8c6532798f734c504767fd8f8bcd85553689af5c7fd4b9 retained/digest+CRC verified. Earlier MacCI38972341617 also FAIL. No unchanged rerun or producer policy weakening. Existing L2 JOIN asked only read-only qualified-hostcontext/authority readback, without reopening L2. R57 is BLOCKED_EXTERNAL_PRODUCER_QUALIFICATION, not CLOSED. Current register. TDE remains unchanged observe-only; actual assessment/qualification must be audited separately from workflow success.

Remaining delivery

Current full CI/strict8-filecoverage/TDE and complete independent final assurance; protected exact-head implementation; own separate nonempty reviewed/protected finalization; NEW exact-final-main noneditable14-case installed HTTP/Git/B8R/recovery proof, readback and own cleanup. No successor.

Latest detailed progress: #207 (comment)