rebind-reader: atomic outputs, scope validation and recipeRevision constraint (follow-up to #5152) #5165

Work level: Delivery · Track: Follow-up · Intended Status: Ready

Owner

Root/fdev retains shared integration, native planning/enrollment and protected-effect admission. /root/constructor5164 carries this whole5165 Delivery while preserving the separately reviewed5164 candidate; /root/context5276 is the independent reviewer.

Done when

enrollment rebind-reader writes its outputs atomically, either all of them or none, or writes the record first so a rerun can recover. The rebound scope is validated with V2Migration.parseScope/validateScope. Preflight's rebound-reader check constrains recipeRevision together with artifactSha256. The import-preparation doc states that authentication happens after the splice. Each change has a causal control.

Current deliverable

Independently reviewed LOCAL candidate4a344a6c05b7621c0ea1838c3296630902d19f54/treee6179969341efd7e3fe243e417b924c858424372 over protected846, seven focused paths. Durable record-first recovery, canonical scope validation, recipe/artifact pairing and after-splice documentation are implemented. Exact frozen source has54 passing tests without skips and seven runtime-detected guard mutants; independent compiled-helper conflict/recovery probes also pass. No remote or live-binding effects occurred.

Next action

Root sequences this reviewed source through protected source integration and required native CI, then applicable coherent publication and installed qualification. Same owner and critic retain the whole Delivery; Root joins the minimal fsproj order delta with future121 additions.

Blocked on

Reviewed source waits Root integration/enrollment and shared capacity. M1 retains the protectedHub846 guard. Current116 and the actual224reader binding/cohort remain unchanged.

Acceptance evidence

SOURCEPASS exact4a344a6c, independent review /home/developer/.fsgg-scratch/critic5165-z0hb_bg4/review.json. Original5152 findings and first harness failure are retained. Atlas proposal c2b0527fd1e111c0682d58befb2cab012faa0c1f049460a1737fc70bcda2d4fa is privately validated; Root owns canonical capture. Native CI, publication, installed qualification and whole acceptance remain open. Refs #5097, Refs #5120.