Qualify published Fable COMPLETE provider knowledge composition #4798

## Current deliverable
Source slice delivered: PR https://github.com/FS-GG/.github/pull/4803 merged at `c9621e2d6ea65355fb7cf9b973160db2f10b5246` (adapter `tests/new-sdd-workspace/knowledge-fable-game-complete-provider-public.py`). The root-admitted finite two-row public runtime was attempted once on 2026-10-22 and FAILED at row 1 (explicit typed) with `complete-owner-bytes:SvgFoundation/Examples/Wasm/guest/policy.c`; row 2 never started. No runtime acceptance exists. Independent review of the actual result: HOLD. Atlas capture was not performed (it is conditional on runtime acceptance).

## Next action
A disposition owner decision is required before any further runtime. The published Workspace.Template 0.19.0 `bundle=complete` scaffold passes `policy.c` through the .NET template engine's C-style `#if` processing (package 1308 bytes, scaffolded 1130 bytes; the three `POLICY_TRAP/LOOP/MALFORMED` conditional blocks are removed), while `SvgFoundation/Examples/Wasm/build-guests.sh` builds variants with `-DPOLICY_<VARIANT>`. This looks like a Templates/Workspace product defect (template.json declares specialCustomOperations only for `**/*.fs`), not only an adapter assumption. Options: (a) Templates owner repairs and republishes (changes the pinned package identity, new adapter generation), or (b) an explicit, documented adapter acceptance of the engine-rendered form with rationale. Either way the same COMPLETE owner repairs the adapter on the same item through a normal PR with independent review, then root separately admits a FRESH finite two-row runtime (explicitly re-approving the admission census and memory-monitor semantics used here), then independent complete-result acceptance, then Atlas/driver-manifest capture and native readbacks. No automatic retry; the original failure stays retained.

## Blocked on
Template disposition for the `policy.c` conditional processing (owner: Templates/Workspace for option (a); Programme/root plus COMPLETE owner for option (b)). Runtime rows, initial Git, knowledge probes, ALL-shared export/restore, Git recovery, 10485760/+1 checker controls, supplier union/provenance/initial identity against a real COMPLETE scaffold past the first assertion, independent result acceptance, Atlas/manifest capture and native readbacks all remain unproven. Historical Unknowns, PLAYER original failures and accepted PLAYER/non-SVG acceptance are unchanged.

## Acceptance evidence
Actual runtime attempt 2026-10-22 (FAILED, no acceptance). Published packages from nuget.org: Workspace.Template 0.19.0 sha256 `187c995806bb2f22db67c8a9a67c251f46f339bf6350b8051035935d308b497f`, SDD.Cli 2.2.0 sha256 `46b4b172eac65df00db43f813bd3d3fbafac5c6376da62a6d3c08fb05750cf28`, both equal to the pinned identities and prior custody copies. With both supplied, all 23 controls (21 pure plus the 2 opt-in real-package controls) passed, 0 skipped. Sealed source = main c9621e2d (adapter sha256 `b66f2ab8...ba2e7d`), manifest sha256 `10c69f497f4f576078870886ff15d4ce421060f1f04c31c07abe8b41776e7854`, 4,120 sealed inputs, 4,079 SDK files/modes unchanged from the PLAYER custody. Bounds: affinity 4 CPUs, 600 s original window, peak process-tree RSS 355 MB, both coordination locks held, umask 0022. Admission refusal01 (before any child or clock): unrelated other-owner dotnet processes (a coord-1043 test run and persistent MSBuild nodes) were present; the entry was then edited to record rather than refuse unrelated concurrent workloads and to bound by the runner's own process-tree RSS (a weaker monitor than cgroup delta; the independent reviewer flagged this as a runner-side relaxation, immaterial to this outcome). The one original attempt then ran: `fsgg-sdd --version` (2.2.0), `dotnet new install`, and `fsgg-sdd scaffold --provider fable-game --param bundle=complete --param lifecycle=typed-sdd` all exited 0, then the adapter refused `complete-owner-bytes:SvgFoundation/Examples/Wasm/guest/policy.c`. Read-only diagnosis (independently reproduced by the reviewer): of the 171 inventory files exactly this one differs in bytes; modes all match; nothing missing; the cause is template-engine `#if` processing as described in Next action. Row 2 not started; no initial commit or knowledge probes ran; the loop stops at the first mismatch so later boundary checks are unexercised. Independent review (fsgg-critic-normal/sonnet) verdict HOLD: runtime Done when not satisfied; ruled out environment, package drift and caller error; no retry occurred; failure preserved verbatim. Private custody (0700): `~/.local/share/fs-gg-private/coord-clearing-4uszqgge/complete4798-runtime-20261022T071703Z-1627983/` (admission-original.json, root-outcome.json, evidence/report.json, evidence/commands.jsonl, evidence/root-entry.stderr, seals in evidence.sha256); partial receiver retained under `~/.cache/complete4798-runtime-20261022T071703Z-1627983/run`. Only this attempt's known allocation is retired; no historical Unknown is released.

Prior evidence (retained verbatim):

Source slice only, 2026-10-22: PR4803 head `db025bec`. Independent exact-head review ACCEPT-WITH-NITS (first candidate `6b3aa413` was REJECTED for a real defect: the compiled SDD2.2.0 supplier union gains five bundle-gated skills for `bundle=complete`; repaired and re-reviewed). 54 checks pass and 5 skip (no failures), including `new-sdd-workspace-selftest` and `routine-eligibility`. Pure controls: 21 hosted plus 2 opt-in controls verified locally against the genuine nuget.org packages whose digests match the pinned identities (Workspace171 applicable/12 exclusions/53 COMPLETE-only; producer compiled delta of exactly five suppliers). No runtime, receiver, hosted publication or qualification has run; actual two-row execution, hosted causal controls beyond the selftest, independent result acceptance, Atlas/manifest capture and native readbacks remain open. Unknowns: the genuine scaffold has not been observed (supplier delta and effective-provenance keys derive from compiled manifests and SDD source); opt-in controls are not in hosted CI.


Proposed under explicit user authorization on2026-10-22 to clear blockers aggressively and allow redesign preserving security and quality. Parent https://github.com/FS-GG/.github/issues/4642 retains its whole promise. Bounded dedup checked current open native issues and accepted provider4773/4780/RAW4766 or original PROC source/custody; this independently useful result is not already an accepted child. Original failures and Unknowns are preserved.

````text
<details><summary>Prior active fields before enrolled4798-source-selection-ready</summary>

Owner: /root/knowledge_player_receiver; Programme/root owns enrollment, integration and native reconciliation.


Next action: Root completes protected Project3 enrollment and typed planning, then the sole owner implements through one continuous normal PR per repository with independent review and applicable qualification.


Blocked on: Protected enrollment and exact installed caller reconciliation pending. No implementation dispatch follows merely from filing. Live publication/installation effects remain separately gated by actual suppliers and full parent acceptance.

</details>

````

<details><summary>Prior active fields before the 2026-10-22 actual runtime attempt (retained)</summary>

````text
Current deliverable:
PR https://github.com/FS-GG/.github/pull/4803 (open, not merged), branch `routine/4798-complete-provider`, exact head `db025becf65df23f6b12568732b2bf2a77d2e40d`: COMPLETE provider source qualification adapter `tests/new-sdd-workspace/knowledge-fable-game-complete-provider-public.py`, one hosted selftest line and the roadmap section. Source slice only.

Next action:
~~~text
Source scope retained from prior deliverable description: New fixed COMPLETE adapter under tests/new-sdd-workspace; existing hosted selftest workflow; knowledge Wizard roadmap; Atlas provider-composition successor with both packaged mirrors and generated driver manifest. Ten-path declared source scope; existing publishedSDD2.2.0/Workspace019 enables this independently ofSDD1113.
~~~

Root integrates the exact-head merge boundary for PR4803 (independent review accepted with nits, required checks green at that head), then owns the shared Atlas/packaged-registry/driver-manifest integration. Root then separately admits the finite two-row actual runtime, supplying both published archives to the two opt-in controls, followed by independent complete-result acceptance and native readbacks. A source merge does not close this Delivery.

Blocked on:
No external prerequisite for initial source work; installed69 read/selection is the next root action. Actual finite receiver runtime remains separately admitted; SDD1113 is not a prerequisite for ASCII COMPLETE selection.

````

</details>