[V2-LEARN] Deliver the actual command-recipe preparation CLI source #4681

Owner: Programme /root is accountable and completed the recovered source continuation. Historical source executor /root/review_v2_adoption, accepted #4513 and original operations retain their provenance.

Done when: The existing PersistentV3.ImageClosure command-line entrypoint emits canonical CommandProgram bytes through maintained ImageClosure and CommandRecipe preparation from closed supplied selection, trusted-native-selection and recipe-selection inputs. Actual maintained runner controls invoke this real entrypoint, prove byte correspondence and refuse malformed, duplicate, stale or mismatched identities and invalid custody/nonces/roots/targets/bounds. Normal source review and required CI pass on the reconciled final base. This is a SOURCE delivery; it emits preparation only, with no execution, authenticated admission or installed/native acceptance claim.

Current deliverable: None

Next action: This accepted SOURCE delivery remains closed and explicitly triaged Done/Active delivery/Delivery, outside protected enrollment. The former Atlas capture gap is delivered through PR4700/main0941ecb7 as stable ID learn/command-recipe-preparation-cli-source (0a862ee4); retrieve and verify its immutable source citations. Parent4647 retains actual production/controller/profile/inventory, installed execution, actor attribution, causal acceptance and recovery obligations.

Blocked on: None for this accepted SOURCE scope. The production selection remains acquisition-required; genuine activation still needs independently acquired selection, trusted profile/inventory, authentic root/controller capabilities and the mapped execution profile supplied by Home/SystemAdmin and the execution owner.

Acceptance evidence: User-directed missing-Status intake reconciled2026-10-19T14:49:10.398122+00:00: actual108 prepared exactly12absent planning/classification values across three existing cards, one original intent per selected value, completed with zero remaining changes. Separate readback/full-snapshot comparison preserves17fields/eightviews/25memberships and unrelated native/planning values (private readbackdcb786f9). Fresh full25-member census has zero missing Status. This card is Done as accepted SOURCE only; it remains unenrolled and gains no scheduling authority. Earlier evidence retained: Accepted2026-10-19T04:50:32Z through PR #4684, reviewed source28ad727fe019f63ac9ccb82dd2e0bb2abbcfe5f3 and protected merge18179c5f2debd2afa27ecb779c06afd16f05dbfb. The maintained routine-delivery readback verifies identical tested/delivered tree3bfd61efdf6bbc3ed7cb2902a7fb96be9797b39b and all required exact-head checks. Complete Host/source package qualification39200445695 passed, including real CLI controls, repaired linked-source composition, full source/native-fixture boundary controls, Host/browser tests and reproducible producer packaging. Independent review applies to the final exact candidate. Local locked isolated-package restore, zero-warning build, real CLI byte-correspondence/refusal tests and an intended-invariant wrong-output causal failure are retained. Original hosted failure39199771863, local unprivileged inactive-fixture failure and earlier restore/compile/focused-fixture failures remain history in the PR; none is relabelled passing. Telemetry attribution is advisory-unavailable for this delivery. This closes only command-recipe CLI SOURCE preparation, with no execution, authentic operation admission, installed/native acceptance or parent-outcome closure. Prepared Atlas stable ID learn/command-recipe-cli-preparation remains an explicit Programme/root capture gap. Parent #4647 and the owning LEARN plan retain their full remaining promise.