fix(agent): refresh final carry safety baseline

[ArchonVII]

Summary

• Refresh only the repo-template snapshot from e413928c0d029b8d6f0d718b64ea939fe5033fbe to reviewed provider merge e1cb10f0f4f0fefc85718d6be0a6230b49341bf4 from repo-template PR feat(ecosystem): registry seed+overlay store, repo-registry schema, port policy, MAINTENANCE.md (lane 1) #214.
• Self-apply the derived root carry implementation through the sanctioned installer path while preserving the github-workflows and org-default pins.
• Record the bounded provider refresh in the existing catalog, status, changelog, and update-log surfaces without adding a new policy or plan layer.

Verification

• Every recorded provider snapshot verifies against its pinned source.

  command: npm run snapshots:verify
  location: local
  result: passed; githubWorkflows@f34893a (18), repoTemplate@e1cb10f (135), orgDefaults@fe48c2f (1)
  timestamp: 2026-07-21T07:45:00-05:00
  

• Root self-apply is idempotent after the scoped refresh.

  command: npm run agent:self-apply -- --check
  location: local
  result: passed; all eight self-apply tasks reported already-done
  timestamp: 2026-07-21T07:45:00-05:00
  

• Provider, snapshot, and root carry implementations are byte-identical.

  command: Get-FileHash -Algorithm SHA256 C:\GitHub\repo-template\scripts\agent\carry.mjs, src\snapshots\repo-template\scripts\agent\carry.mjs, scripts\agent\carry.mjs
  location: local
  result: all three equal BA4F4DAC2AC0E26434117ABFBE3DAAAA3567C0A7AB090073CB3167B3C135107D
  timestamp: 2026-07-21T07:46:00-05:00
  

Verification Notes

Runtime and snapshot verification was run against behavior HEAD 5454ea07e4ac652c7dff2d1bcd31d8fe3709b96d. Exact PR HEAD 1294ce7d7119edaf59d087e6e850f6710c71cc27 adds only the merge-safe status corrections requested by independent review:

• npm test passed: 771 tests, 769 passed, 2 platform skips, 0 failed.
• node --test src/snapshots/repo-template/test/agent/carry.test.mjs passed on Windows: 42 tests, 37 passed, 5 platform skips, 0 failed.
• wsl.exe bash -lc 'cd /mnt/c/GitHub/archon-setup-393-task-refresh-final-carry-safety-provider/src/snapshots/repo-template && node --test test/agent/carry.test.mjs' passed: 42 tests, 40 passed, 2 platform skips, 0 failed.
• npm run snapshots:verify, npm run agent:self-apply -- --check, npm run update-ecosystem-overview -- --check, npm run docs:render -- --check, and git diff --check origin/main...HEAD passed.
• node scripts/doc-health/health.mjs --repo . --json reported 0 blocking findings and 8 existing advisory warnings.
• GitHub Actions run 29831887627 passed the required decision, Node CI, PR contract, and change-detection jobs on behavior HEAD 5454ea07e4ac652c7dff2d1bcd31d8fe3709b96d.
• On exact PR HEAD 1294ce7d7119edaf59d087e6e850f6710c71cc27, npm run update-ecosystem-overview -- --check, npm run docs:render -- --check, node scripts/doc-health/health.mjs --repo . --json, and git diff --check passed after the docs-only review fix.

The mechanical snapshot/self-apply checkpoint is commit dff8806e9c1700d8b3c18535bb91c9b26578be45; the catalog and project-facing record checkpoint is commit 5454ea07e4ac652c7dff2d1bcd31d8fe3709b96d; the merge-safe review correction is commit 1294ce7d7119edaf59d087e6e850f6710c71cc27.

Docs / Changelog

This PR updates the existing README, canonical/current-work/status/update-log surfaces, global update catalog, generated ecosystem overview, and a mode-2 changelog fragment for issue #393. No new plan document is being created; issue #393 is the bounded work record.

Plan/status artifacts: issue #393 remains open until this PR lands; Hudson Bend PR #383 remains the next consumer lane and issue #370 remains paused.

Linked Issue

Closes #393

Risks

• Risk level: High; this snapshot distributes filesystem cleanup behavior used by generated consumers.
• Rollback: Revert this PR to restore the prior repo-template pin and root carry implementation.
• Follow-ups: Refresh the existing Hudson Bend repair PR [Task]: Make the documentation feature contract execution-closed #383 only after this PR merges and passes exact-head Codex review.

[ArchonVII]

@codex review exact HEAD 1294ce7

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1294ce7d71

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ArchonVII]

@codex review exact HEAD 1294ce7; prior finding was addressed with supported-runtime reproduction evidence in the resolved thread

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Can't wait for the next one!

Reviewed commit: 1294ce7d71

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".