Repair full-cohort successor reads and fence Creator018 dependency identity

.agents/skills/atlas/assets/seed/records/af6b60ae365a6cbeb140430b030bdb667f53a2a97508ae92dfc9ed91ca73b54a.json

@@ -0,0 +1 @@
+{"citations":[{"path":"docs/coordination/2026-09-29-coordination-v2-board-design.md","repository":"FS-GG/.github","revision":"3ced04fad887e9840bfcb893834020ece4b2424a","sha256":"f3d8fa3da3bb6b2156e6337e12a4b9bfe44d91ff621c96d0c608249cfc5dcc95"},{"path":"tools/BoardV2Import/Program.fs","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"f154be5f98b6a3845ac73c94e50c441400720a3fc654b8483ce23a1633963428"},{"path":"src/FS.GG.Coord.GitHub/V2Projection.fs","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"c6c4907b54028322b13d112e08f8050482c80165fb359f475f3e595c8ed05c96"},{"path":"tests/coord-board-v2-cli-join/INSPECT.md","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"16f754671ed4e94051b230595e3c46b148a4f696bb8f8aa850c059675c9e3403"}],"conflictsWith":[],"id":"github/programme-binding-custody-recovery","kind":"decision","recordedAt":"2026-10-19T08:55:14Z","repository":"FS-GG/.github","schema":"fsgg.atlas/1","status":"recorded","summary":"Programme/root accepts host receipt6262652143 and independent MATCH6262659355 for the5526-byte private archive: exclusive0600host copy, separate0600client restore, full-byte/hash/manifest/pair readback and file/parent fsync. Home retains the exact archive and proof in ~eugen/.local/state/v3-storage/session-recovery-20261019/ as programme-binding-pairs-20261019-0758.tar.gz until explicitrootdisposition. This host-owned0700ext4 directory is NOT mounted into the client; restoration uses the existing bounded private copy/readback route. Host disk loss, off-machine backup, power-loss behavior and actual client replacement remain unqualified. The original lost directory was outside the persistent mount. The telemetry spool remains dedicated to telemetry.\n\nClient staging ~/.local/share/fs-gg-private/programme-custody-20261019-0756/ is volatile, not sufficient custody. The archive holds both distinct new binding4/schema2 and binding5/schema3 original pairs with their exact templates/payloads and closed manifest, selecting22current issues (previous21plus4682), excluding threevisible members. Recovery retrieves this Atlas ID, reconciles4516receipt and4682ownership, restores to a NEW restrictive path, verifies the exact archive/manifest/commitments, and preserves all originals. Public Atlas/Git never holds private identities, nonce/payload, journals, credentials or runtime assets.\n\nPR4690 protected041a60cb carries the new4 commitment. Actual authenticated installed107 inspection2 exits0 within270seconds:22Current sources,25complete memberships, no population/membership/repository gaps,0mutations.21healthVerified and4682Unknown solelypreservedunsetObservation; read/planning complete. Independent review accepts this bounded fresh4 reader baseline. The final runtime file differs from its original only by protected populationRevision. It is not scheduling authority, UI/product acceptance or executed rollback. Constructor9772/artifact430d, publishedadapter75ab/artifact7ab and protected population revision remain distinct authenticated axes; fresh public107archive comparison matches all82installed payload members.\n\nThe successor candidate selects the separately host-custodied5commitment, not installed adoption. Actual pre-activation inspection3 with current protected4 source rejects5private commitment before issue attempts,0mutations. An earlier draft-source attempt failed canonical acquisition and is retained as setupfailure, not causal proof. Installed5positive qualification must follow its exact protected revision. Real bounded rollback must restore4public commitment through normal source delivery and derive an exclusive runtime binding at that protected revision preserving originalnonce/payload; separately restore/requalify5. UI/product/continuation and actualrestart/rollback remain open. Preserve original20-row history unavailable,439inherited/46later Unknown holds unreleased and reported25+5nativeeffects unreconciled without journals. Current metadata never settles those originals; no write replay or receipt reconstruction is selected. Canonical work-board owns4682/4641continuation.\n\nSuperseding qualification findings: after protected5 delivery4691/a0e392c8, actual installed107 inspection3 of all22 reaches500 requests after187.79s,18Current/4Unknown, zero mutations; final barriers refuse. Source-only108 combines successor membership/planning reads with fresh schema, full pagination, exact identities/options and unchanged500/270 limits. Projection125/125 and CLI75/75 pass; unchanged old source with the same22-item regression fails at exactly500sends/exit3. Independent reader review passed. This establishes causal source repair, not installed108 acceptance.\n\nActual public Creator017 all89members match its release, but fresh Rendering fails before target creation: packaged adapter8fb92b18 differs from published107adapter7ab62708. Strict physical identity stays. Bounded Astra-high plan selects promoted108 original full dependency closure reused by prospectiveCreator018; source-only compilation is separate, real108 pin must be absent until publication, and018 candidate/publisher must refuse without it. No fake digests, compiler-rebuild substitute or017replay. Existing frozen016/099 history remains immutable.\n\nUser visual UI check passed2026-10-19 and root accepts that scoped human evidence; no repeat UI check is required. The earlier statement that UI is open is superseded only for that scope. Actual published108/018, installed instruction/caller qualification, product journeys, programme continuation and real restart/rollback remain open. Work-board remains canonical start/continuation, owner4682 under4641. Current private failure/test reports remain client-local; root owns their durable evidence capture gap. Host-held originalpair archive remains retained, with no new disk-loss or restart qualification.","supersedes":["e65e28b172b77d093f5425112bdae7ab93756487226fd7363057f85bb2a2556d"],"tags":["coordination","binding","custody","recovery","enrollment","atlas","qualification"],"title":"Retained pairs and passed visual check leave successor request budget and Creator artifact identity to qualify"}

.agents/skills/publishing-and-deployment/SKILL.md

@@ -34,9 +34,9 @@ Registry release inventory: 18 package-bearing contracts across 9 producers; 16
 | `game` | `game-scene-adapter` | `0.17.0` | `0.17.0` | `game:0.17.0` | FS.GG.Game.Render package — Adapter (sim-state -> FS.GG.UI.Scene drawables) |
 | `audio` | `fs-gg-audio` | `0.6.0` | `0.6.0` | `audio:0.6.0` | FS.GG.Audio.Core/.Host/.Engine/.Elmish/.WebBrowser public .fsi surfaces — AudioEffect vocabulary + IAudioBackend/IMixingBackend seam + mixing Engine + Audio.Cmd Elmish bridge + browser Web Audio host |
 | `net` | `fs-gg-net` | `0.6.0` | `0.6.0` | `net:0.6.0` | FS.GG.Net.Core/.WebSocket/.WebSocket.Server/.Protobuf/.Grpc/.Elmish public .fsi surfaces — ITransport/IMessageChannel seam + Sequential/Multiplexed correlation + serve/ServerEcho + WebSocket client/server transport + Google.Protobuf/protobuf-net codecs + gRPC lifecycle bridge + Elmish Cmd/Sub |
-| `github` | `coord-engine` | `0.107.0` | `0.107.0` | `github:0.107.0` | the `fsgg-coord-engine` CLI verb surface (claim/take/batch/who/widen/set-paths/say/landable/done/release/flush/…) + its exit-code contract, emitted from src/FS.GG.Coord.Core/Protocol.fs; shipped as the FS.GG.Coord.Cli dotnet tool |
+| `github` | `coord-engine` | `0.108.0` | `0.107.0` | `github:0.107.0` | the `fsgg-coord-engine` CLI verb surface (claim/take/batch/who/widen/set-paths/say/landable/done/release/flush/…) + its exit-code contract, emitted from src/FS.GG.Coord.Core/Protocol.fs; shipped as the FS.GG.Coord.Cli dotnet tool |
 | `github` | `telemetry-host` | `0.7.0` | `0.7.0` | `github:0.7.0` | optional Linux x64 FS.GG.Telemetry.Host dotnet tool — authenticated workspace-scoped ingestion, private dashboard, protected native capture and bounded learning export; independently versioned from the github coordination coherent set |
-| `github` | `new-sdd-workspace` | `0.17.0` | `0.17.0` | `github:0.17.0` | the `new-sdd-workspace` scaffolder CLI (package FS.GG.NewSddWorkspace) — one-command full-stack SDD workspace creation, wrapping the FS.GG.Templates `rendering` provider (ADR-0016); shipped as a dotnet tool |
+| `github` | `new-sdd-workspace` | `0.18.0` | `0.17.0` | `github:0.17.0` | the `new-sdd-workspace` scaffolder CLI (package FS.GG.NewSddWorkspace) — one-command full-stack SDD workspace creation, wrapping the FS.GG.Templates `rendering` provider (ADR-0016); shipped as a dotnet tool |
 | `templates` | `fs-gg-workspace-template` | `0.19.0` | `0.19.0` | `templates:0.19.0` | FS.GG.Workspace.Template package, eight template configurations and seven `dotnet new` selectors: workspace-provider identities — `fs-gg-console` (provider `console` — minimal F# executable, no npm lane, ADR-0072 §2); `fs-gg-web` (provider `web` — F# ASP.NET Core + plain TypeScript/Vite website, ADR-0071 §3); `fs-gg-fable-game` (provider `fable-game` — F# ASP.NET Core + Fable/Elmish game client, SignalR for connection-oriented real-time traffic + plain HTTP endpoints with explicit versioned DTOs for typed request/response per ADR-0073, consuming the published `fs-gg-game-core-fable-lockstep-v1` profile per ADR-0069); `fs-gg-fable-bindings` (provider `fable-bindings` — Fable interop library over an exactly pinned npm package/declaration closure, ADR-0072 §3, first proved by the unreleased EHotwagner/babylonjsBindings reference) — plus `fs-gg-governance`, the separately registered pre-existing governance overlay template folded into this package at the same rename; `fs-gg-project-knowledge` and `fs-gg-python` are also already packaged. The current and legacy fable-game configurations share one selector.  |
 | `game` | `game-skills` | `0.9.0` | `0.9.0` | `game:0.9.0` | FS.GG.Game.Skills 0.9.0 package — owner-sourced game, Fable, replay and rules guidance with schema-v2 per-file digests and workspace bundle predicates; embedded by the SDD 1.8 receiver |
 | `rendering` | `rendering-skills` | `0.2.0` | `0.2.0` | `rendering:0.2.0` | FS.GG.Rendering.Skills 0.2.0 package — owner-sourced SVG assets/performance and Fable workspace guidance with schema-v2 per-file digests and bundle predicates; embedded by the SDD 1.8 receiver |

.claude/skills/atlas/assets/seed/records/af6b60ae365a6cbeb140430b030bdb667f53a2a97508ae92dfc9ed91ca73b54a.json

@@ -0,0 +1 @@
+{"citations":[{"path":"docs/coordination/2026-09-29-coordination-v2-board-design.md","repository":"FS-GG/.github","revision":"3ced04fad887e9840bfcb893834020ece4b2424a","sha256":"f3d8fa3da3bb6b2156e6337e12a4b9bfe44d91ff621c96d0c608249cfc5dcc95"},{"path":"tools/BoardV2Import/Program.fs","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"f154be5f98b6a3845ac73c94e50c441400720a3fc654b8483ce23a1633963428"},{"path":"src/FS.GG.Coord.GitHub/V2Projection.fs","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"c6c4907b54028322b13d112e08f8050482c80165fb359f475f3e595c8ed05c96"},{"path":"tests/coord-board-v2-cli-join/INSPECT.md","repository":"FS-GG/.github","revision":"9772af87da9cf299754ab106bba051e65bed88c0","sha256":"16f754671ed4e94051b230595e3c46b148a4f696bb8f8aa850c059675c9e3403"}],"conflictsWith":[],"id":"github/programme-binding-custody-recovery","kind":"decision","recordedAt":"2026-10-19T08:55:14Z","repository":"FS-GG/.github","schema":"fsgg.atlas/1","status":"recorded","summary":"Programme/root accepts host receipt6262652143 and independent MATCH6262659355 for the5526-byte private archive: exclusive0600host copy, separate0600client restore, full-byte/hash/manifest/pair readback and file/parent fsync. Home retains the exact archive and proof in ~eugen/.local/state/v3-storage/session-recovery-20261019/ as programme-binding-pairs-20261019-0758.tar.gz until explicitrootdisposition. This host-owned0700ext4 directory is NOT mounted into the client; restoration uses the existing bounded private copy/readback route. Host disk loss, off-machine backup, power-loss behavior and actual client replacement remain unqualified. The original lost directory was outside the persistent mount. The telemetry spool remains dedicated to telemetry.\n\nClient staging ~/.local/share/fs-gg-private/programme-custody-20261019-0756/ is volatile, not sufficient custody. The archive holds both distinct new binding4/schema2 and binding5/schema3 original pairs with their exact templates/payloads and closed manifest, selecting22current issues (previous21plus4682), excluding threevisible members. Recovery retrieves this Atlas ID, reconciles4516receipt and4682ownership, restores to a NEW restrictive path, verifies the exact archive/manifest/commitments, and preserves all originals. Public Atlas/Git never holds private identities, nonce/payload, journals, credentials or runtime assets.\n\nPR4690 protected041a60cb carries the new4 commitment. Actual authenticated installed107 inspection2 exits0 within270seconds:22Current sources,25complete memberships, no population/membership/repository gaps,0mutations.21healthVerified and4682Unknown solelypreservedunsetObservation; read/planning complete. Independent review accepts this bounded fresh4 reader baseline. The final runtime file differs from its original only by protected populationRevision. It is not scheduling authority, UI/product acceptance or executed rollback. Constructor9772/artifact430d, publishedadapter75ab/artifact7ab and protected population revision remain distinct authenticated axes; fresh public107archive comparison matches all82installed payload members.\n\nThe successor candidate selects the separately host-custodied5commitment, not installed adoption. Actual pre-activation inspection3 with current protected4 source rejects5private commitment before issue attempts,0mutations. An earlier draft-source attempt failed canonical acquisition and is retained as setupfailure, not causal proof. Installed5positive qualification must follow its exact protected revision. Real bounded rollback must restore4public commitment through normal source delivery and derive an exclusive runtime binding at that protected revision preserving originalnonce/payload; separately restore/requalify5. UI/product/continuation and actualrestart/rollback remain open. Preserve original20-row history unavailable,439inherited/46later Unknown holds unreleased and reported25+5nativeeffects unreconciled without journals. Current metadata never settles those originals; no write replay or receipt reconstruction is selected. Canonical work-board owns4682/4641continuation.\n\nSuperseding qualification findings: after protected5 delivery4691/a0e392c8, actual installed107 inspection3 of all22 reaches500 requests after187.79s,18Current/4Unknown, zero mutations; final barriers refuse. Source-only108 combines successor membership/planning reads with fresh schema, full pagination, exact identities/options and unchanged500/270 limits. Projection125/125 and CLI75/75 pass; unchanged old source with the same22-item regression fails at exactly500sends/exit3. Independent reader review passed. This establishes causal source repair, not installed108 acceptance.\n\nActual public Creator017 all89members match its release, but fresh Rendering fails before target creation: packaged adapter8fb92b18 differs from published107adapter7ab62708. Strict physical identity stays. Bounded Astra-high plan selects promoted108 original full dependency closure reused by prospectiveCreator018; source-only compilation is separate, real108 pin must be absent until publication, and018 candidate/publisher must refuse without it. No fake digests, compiler-rebuild substitute or017replay. Existing frozen016/099 history remains immutable.\n\nUser visual UI check passed2026-10-19 and root accepts that scoped human evidence; no repeat UI check is required. The earlier statement that UI is open is superseded only for that scope. Actual published108/018, installed instruction/caller qualification, product journeys, programme continuation and real restart/rollback remain open. Work-board remains canonical start/continuation, owner4682 under4641. Current private failure/test reports remain client-local; root owns their durable evidence capture gap. Host-held originalpair archive remains retained, with no new disk-loss or restart qualification.","supersedes":["e65e28b172b77d093f5425112bdae7ab93756487226fd7363057f85bb2a2556d"],"tags":["coordination","binding","custody","recovery","enrollment","atlas","qualification"],"title":"Retained pairs and passed visual check leave successor request budget and Creator artifact identity to qualify"}