Implemented paths and dated controls
Control states, specific refusals and source implementations are summarized below with their original dates, environments and integrity references.
Follow summary, scope and source →Public engineering results retain their source, measured population and limits. Original records stay available at their original dates; a new summary does not rewrite an earlier observation.
Control states, specific refusals and source implementations are summarized below with their original dates, environments and integrity references.
Follow summary, scope and source →Output interpretation and failure cleanup are tested on their actual paths, including negative controls that reject broken implementations.
The 2026-10-10 reconciliation links preserved findings to later source and candidate CI observations. It does not establish operating closure.
Read what was implemented or observed, then follow the record that supports the exact claim. Different windows, environments and test populations remain separate.
Implemented and observed in the stated scope
Record observed/reviewed ·
The inspection reported the portfolio kill switch as ARMED, separately from the approval-axis summary.
Environment / scope: Control-plane state report in the original inspection.
Limit: ARMED is a reported configuration state. This record does not demonstrate a triggered portfolio stop, its reach across every order path, or the current state.
Implemented and observed in the stated scope
Record observed/reviewed ·
The original inspection records identified order attempts refused by the server-side risk check and the core sell block.
Environment / scope: Identified primary-engine attempts in the record's stated period.
Event window stated in the original: 26 September (KST). The record date above is the inspection date.
Limit: This is an internal dated observation on a particular execution context. The executing commit was not recorded; accepted-case testing, universal enforcement and present operating state are not established by it.
Implemented and observed in the stated scope
Record observed/reviewed ·
Every autonomous submission attempt in the stated half-hour was skipped while opt-in, admission-lease and certified-trial conditions were inactive or not ready.
Environment / scope: Autonomous submission attempts in the inspected half-hour.
Limit: This records refused or skipped progression, not successful issuance, certification or release. Development/testnet observations elsewhere refer to another service and must not be read as this same path changing over time.
Implementation present; runtime effect not verified
Record observed/reviewed ·
The source review records event identity in the kill and release producer.
Environment / scope: Merged and installed source inspected in the original review.
Limit: The inspected live ledger was empty and no event was triggered for that review. An actual event identifier and natural trigger/clear execution remain unknown.
Implementation present; runtime effect not verified
Record observed/reviewed ·
The recorded selection passed 18 cases and rejected six defective controls. It separates actual child behavior from controlled cleanup dependencies.
Environment / scope: Private isolated process-observer validation.
Limit: The record does not prove descendant reaping, current installation or natural operating adoption. The core repository is private; the public checksum does not reproduce the private run.
Implementation present; runtime effect not verified
Record observed/reviewed ·
The direct risk-verdict selection changed from 16 failures to 18 passing cases. The broader selection retained 431 existing cases and passed 433 after the patch.
Environment / scope: Private isolated Guardian candidate and compatibility selection.
Limit: The direct 18 cases are included in the broader 433, so they are not added together. Candidate CI is distinct from later-main compatibility, current consumer identity and natural operating effect.
Implementation present; runtime effect not verified
Record observed/reviewed ·
The review covers input measurement, observation freshness and decision identity through their producer and consumer paths.
Environment / scope: Frozen local source candidates with separately recorded populations.
Limit: The measurement, freshness and lineage selections have different sources and may overlap. Their counts are not a whole-system total, and local validation is not natural operating adoption.
Implementation present; runtime effect not verified
Record observed/reviewed ·
The source selections cover heartbeat validity, retained observation time and direct affected-component recovery evidence.
Environment / scope: Private focused producer-to-consumer validation.
Limit: These are separately scoped internal selections. Historical publication runs also recorded skipped cases; those cases were not evaluated. No natural deployment or recovery result is created by presenting these tests.
A verification limitation qualifies a particular claim. It is not automatically a verdict that the underlying function does not exist. Source presence alone also does not prove a reachable or verified execution path.
IMPLEMENTED_AND_OBSERVED
A specified behavior or state was observed in the recorded environment and window. This is not universal coverage or a fresh live-state claim.
IMPLEMENTED_NOT_RUNTIME_VERIFIED
Source, an installed-source inspection or a local candidate exists. The relevant natural consumer behavior or current operating effect has not been established.
PARTIALLY_IMPLEMENTED
Named paths exist, while another named part is incomplete, sealed or not connected. Read the exact gap rather than treating the whole system as absent.
DESIGN_ONLY
An intended responsibility or interface is described, without an implementation bound to this particular claim.
UNKNOWN
The necessary source, observation or consumer identity was not available or not read. Unknown is neither permission nor evidence that a function is missing.
Implementation existence, path reachability, a dated observation and verified operating effect are separate questions. Evidence that was not read cannot establish absence.
This requires evidence about a named searched code or execution scope. An unread artifact, a missing runtime observation or a design limitation alone is insufficient.
Keep the specific behavior, environment, original time and measured population. A refused attempt is a narrower observation than testing all accepted and refused cases.
The actual consuming path, applicable inputs and accepted/refused or defective/corrected cases must be bound to the tested source and population.
Evidence for one path can coexist with missing coverage across other engines or markets. It does not erase the path that was actually examined.
Inspected operating footprint
Mesh registration: 9 devices, 9 online. These are network identities, not the physical operating-box count. A dedicated-fabric compute host is outside this mesh; inactive client devices are inside it.
Read-only inspection of the known operating fleet. Point-in-time internal disclosure, not live telemetry or independent attestation.
This record contains the original service, input-lineage, permission-setting and infrastructure observations. It is a fixed internal inspection, not live telemetry or an independent attestation.
All original files remain available. Their dates, populations, field meanings and disclosure limits are historical facts; they are not current website acceptance goals.
Engineering · record 01
Verification · record 02
System review · record 03
System review · record 04
Operational proof · record 05
Operational proof publication · record 06
Engineering progress · record 07
Engineering progress round2 · record 08
System review · record 09
System review · record 10
Development review · record 11
Current · record 12
Pm receipt · record 13
Am · record 14
A checksum identifies the public file. It does not reproduce a private run. Local tests establish the specific behavior and population recorded; deployment, natural consumer behavior and external reproduction require separate observations.
Public scope and technical limits →