Retain installed Fable dependency proof with exact package provenance

docs/atlas/catalog.json

@@ -1 +1 @@
-{"records":["0863093e69a16355fa9b90f8e7e29156ea4ad88c4523bc4883568bde831bdf35","231df3792931ad2333d00970a5993b3e13fa9dc38f687899f9fa2c966ed9fbfa","24fdc3980640ba58bedcae6f16d5b467eb7383c31161fb9b6ff10fd2e667b0e5","264a2f7887a9b6473cbc24102e1bf9be70e57f6d7ba224138140efa094d541f4","2b7dfb3a2f76368cb603161cdb6f8fa8c2b8afc3e96659dd37c975921ba5ba66","33df463263533529cca24a0b09937573f836d197cc1a739e9960b1cdd4deb1fd","343077d02ddd266b21d8677f7c256854134f7e3e2d18137b55ebe3f32564c5c0","34391bda3fb56135a2bddf74ab790958c175bc6a69c38175e6f8db792cfd50a0","36a19fefd7024f54f3391ffed19019c10222a514719edd7a44f0cde2a1c48258","3d3a0a302c02cd0bfee86715d09b0211baa8dad3e47402c638fc95c7cfa02e87","3de8718fb3ca9b15212e8bd84fba205995d24636087090a61c63c28a96a745b1","3df4f31fda99ad137c651322ad29809e36380400516399274870b4a4332b4a92","3f09ee199e3c2e808e0f6e74f197f2fdd8158ae099a7195c498ce9466bb78b03","44bda82d6f9a9625a83283bf56a15a1831f287037214dc134eeeae87f1faa869","6c5b38ee260d1f15f8029d699ec1cebceafb5e1407a6341dc7a4b96f4d9d3521","72742cbaa561237f10251e94aa5c61153ab5c7f14fc5771b7a5ebdece1e1cb11","87d6de6f3730cecd75d9a4411bf4dbac4e058127a3ce9f46b07f6de110bc26de","8b1cf51c5f03c0ae19c46ca3ea4a1158acbb6e47bf109ca8c506c5417b51cf9f","95115e1052b5ea4fcd393f5c9b9c6f0298657f0028eee84e16215ede97576cfa","ab4502eff76606ac8e58b623878f3d76e1e0b18f30796aec7c446e2aab8b57c8","c01c2c98f13a65b49113916a2f295e46a03fc4c185ece880267dd86c3f3dee8b","d557525e3ebfad227c8d6db9bb6350d42506fb02b1de8058cb443f4f008c0f67"],"schema":"fsgg.atlas/1"}
+{"records":["0863093e69a16355fa9b90f8e7e29156ea4ad88c4523bc4883568bde831bdf35","2056fa8b653c2240afdad2a16f572a07019109254847829610a9468bb2f95248","231df3792931ad2333d00970a5993b3e13fa9dc38f687899f9fa2c966ed9fbfa","24fdc3980640ba58bedcae6f16d5b467eb7383c31161fb9b6ff10fd2e667b0e5","264a2f7887a9b6473cbc24102e1bf9be70e57f6d7ba224138140efa094d541f4","2b7dfb3a2f76368cb603161cdb6f8fa8c2b8afc3e96659dd37c975921ba5ba66","33df463263533529cca24a0b09937573f836d197cc1a739e9960b1cdd4deb1fd","343077d02ddd266b21d8677f7c256854134f7e3e2d18137b55ebe3f32564c5c0","34391bda3fb56135a2bddf74ab790958c175bc6a69c38175e6f8db792cfd50a0","36a19fefd7024f54f3391ffed19019c10222a514719edd7a44f0cde2a1c48258","3d3a0a302c02cd0bfee86715d09b0211baa8dad3e47402c638fc95c7cfa02e87","3de8718fb3ca9b15212e8bd84fba205995d24636087090a61c63c28a96a745b1","3df4f31fda99ad137c651322ad29809e36380400516399274870b4a4332b4a92","3f09ee199e3c2e808e0f6e74f197f2fdd8158ae099a7195c498ce9466bb78b03","44bda82d6f9a9625a83283bf56a15a1831f287037214dc134eeeae87f1faa869","6c5b38ee260d1f15f8029d699ec1cebceafb5e1407a6341dc7a4b96f4d9d3521","72742cbaa561237f10251e94aa5c61153ab5c7f14fc5771b7a5ebdece1e1cb11","87d6de6f3730cecd75d9a4411bf4dbac4e058127a3ce9f46b07f6de110bc26de","8b1cf51c5f03c0ae19c46ca3ea4a1158acbb6e47bf109ca8c506c5417b51cf9f","95115e1052b5ea4fcd393f5c9b9c6f0298657f0028eee84e16215ede97576cfa","ab4502eff76606ac8e58b623878f3d76e1e0b18f30796aec7c446e2aab8b57c8","c01c2c98f13a65b49113916a2f295e46a03fc4c185ece880267dd86c3f3dee8b","d557525e3ebfad227c8d6db9bb6350d42506fb02b1de8058cb443f4f008c0f67"],"schema":"fsgg.atlas/1"}

docs/atlas/records/2056fa8b653c2240afdad2a16f572a07019109254847829610a9468bb2f95248.json

@@ -0,0 +1 @@
+{"citations":[{"path":"scripts/wasm-release/installed-evidence.py","repository":"FS-GG/FS.GG.Game","revision":"d971032fa6607cb81931f2e1e52d61f34a8620b1","sha256":"d7f74acf8a6b1502e7537055e021c5c998f87e700562bd0805c7248bddc82709"},{"path":"tests/release/wasm/test-installed-evidence.py","repository":"FS-GG/FS.GG.Game","revision":"d971032fa6607cb81931f2e1e52d61f34a8620b1","sha256":"6aa6c9027d2645cd554ed86fbc8e48df445c3c66c977e423151cfe13ffd563b5"},{"path":"scripts/wasm-release/bind-installed-release.py","repository":"FS-GG/FS.GG.Game","revision":"d971032fa6607cb81931f2e1e52d61f34a8620b1","sha256":"dd785951b1f0505533358b180f27b2382e99eea17a8bb7855bcadb5ac85a69a1"},{"path":".github/workflows/wasm-installed-org.yml","repository":"FS-GG/FS.GG.Game","revision":"d971032fa6607cb81931f2e1e52d61f34a8620b1","sha256":"5d9a89a860e6af539ce4c5e99add2a2d5cc50e217ae36b720a2b8f90a9434221"},{"path":"docs/roadmaps/wasm-shared-01.md","repository":"FS-GG/FS.GG.Game","revision":"d971032fa6607cb81931f2e1e52d61f34a8620b1","sha256":"543cb23b9b7cf03cce5f4baeb580b930cd4673838f633fc20177f9f67cd626fe"}],"conflictsWith":[],"id":"game/current-wasm-custody-source-boundary","kind":"boundary","recordedAt":"2026-10-17T09:33:18Z","repository":"FS-GG/FS.GG.Game","schema":"fsgg.atlas/1","status":"recorded","summary":"Publication 0.4.0 remains accepted at immutable producer/publisher P=E 6732d2371d142d5ccc5d2d127f20e4f179800892, original 39015233527/attempt1. PR715 delivered the reviewed read-only P/Q binding and bounded courier at qualifier 5104205393d45fcc1ce5eacbb40f9a237403634d with complete same-tree PR qualification. Original installed 39016307973 remains failed with zero artifacts and public unexecuted. Fresh installed 39020851715/attempt1 ran both feeds independently: each general consumer runtime passed its 32 browser and Rust2/C4 checks, but first evidence collection refused 21 actual Fable source/support paths and returned 1. Both selected supervisor suites were unreached. Final collectors were ineligible/failing; portable diagnostic uploads succeeded and were independently reviewed. This is not full installed acceptance. Runtime 0, collection 1, cleanup 0 and wrapper command 1/tee 0 remain distinct; descendant settlement remains unproved.\nThe connected source correction classifies finite pinned Fable module/context roles across general consumer output, selected compiler output and its browser copy, and both restored Worker policy trees. Copied FS.GG source/primitives must equal retained original package members. Actual compiled .fs.js and transformed .fableproj outputs must have their corresponding original source/project input; they are not claimed byte-identical to that input. Fable-library runtime JavaScript must equal the published Browser package static-library member. Known pinned-library documentation/declarations/metadata and generated bookkeeping are bounded data, not substitutes for executable provenance. Consumer archive admission separately restricts these roles to its own two actual contexts; forged selected-context support refuses during actual merge. Foreign modules/members, library/source byte drift, unexpected executable paths and links refuse; mandatory Core, lock and Worker evidence remains required. Original package/member/signature/P-Q bindings and 512 MiB/256 MiB per file/32 MiB logs/1 MiB metadata/1024 member caps remain unchanged.\nThe complete P-to-current-Q audit still admits only finite reviewed installed-binding/courier/tests/owning-documentation paths. Package/runtime/Worker/model/trace/project/lock/tool/semantic-harness inputs remain unchanged from P; publisher writer predicates retain same-current-source requirements. This functional citation precedes one normal metadata append adding exactly the catalog and this content-addressed record to that finite whitelist, with final exact review; no broad descendant or documentation exemption is implied. Focused inert role/topology/provenance/merge controls and clean static preflight passed. Actual 143 retained dependency files per feed replayed the new data-only provenance predicates, but 21 unretained support-file bytes remain unavailable and were not replayed. Repaired complete native selected topology, coherent CI, actual fit and a separately selected fresh both-feed installed operation remain owed before consumer adoption. Publication and all failed original identities stay unchanged.","supersedes":["264a2f7887a9b6473cbc24102e1bf9be70e57f6d7ba224138140efa094d541f4"],"tags":["wasm","installed","publication","qualification","source","evidence","fable"],"title":"Installed proof classifies Fable dependencies by role and original package provenance"}

docs/roadmaps/wasm-shared-01.md

@@ -17,10 +17,20 @@ Fresh installed operation
 [39016307973](https://github.com/FS-GG/FS.GG.Game/actions/runs/39016307973),
 attempt 1, remains failed. Org's actual consumer qualification passed, then evidence
 upload failed on NuGet HTTP-cache filenames and produced zero artifacts. Public
-was cancelled before execution. The current follow-up separates reviewed qualifier
-Q from this immutable published P, repairs bounded evidence retention, and requires
-complete new coherent qualification plus a separately selected both-feed installed
-operation. Both-feed acceptance and consumer adoption remain open. Earlier source
+was cancelled before execution. PR715 delivered the reviewed P/Q binding and
+bounded evidence collector at qualifier
+`5104205393d45fcc1ce5eacbb40f9a237403634d`, with complete same-tree PR qualification.
+Its fresh both-feed installed operation
+[39020851715](https://github.com/FS-GG/FS.GG.Game/actions/runs/39020851715), attempt 1,
+also remains failed: each feed passed the general consumer's 32 browser tests and
+Rust2/C4 checks, then its first evidence projection refused Fable dependency
+source/support files. Both selected-supervisor phases were unreached. Independent
+review verified both bounded diagnostic archives; final collectors failed as
+ineligible while both uploads succeeded. No both-feed acceptance follows.
+The current correction classifies those dependency roles against original package
+members across the general and selected Fable contexts. Complete new coherent
+qualification and a separately selected installed operation remain required.
+Publication remains accepted at P; consumer adoption remains open. Earlier source
 and operation frontiers below retain their historical scopes.
 
 ## Protected qualification and checkout-reader correction (completed source delivery)
@@ -727,3 +737,28 @@ paths. Complete coherent CI and a separately selected new both-feed installed ru
 remain required; neither local source controls nor the original org-only runtime
 success authorize consumer adoption. Publication bytes and both failed/successful
 original identities remain unchanged.
+
+
+### Fable dependency projection after original installed refusal
+
+Original installed operation 39020851715/attempt1 preserved the precise first
+cause: general consumer runtime 0, collection 1, cleanup 0, command 1 and log-copy
+0 on each feed. Its 21 refused Fable source/support paths prevented both selected
+supervisor suites from starting. Both always-run final collectors returned
+ineligible diagnostics; their two portable uploads succeeded and were independently
+reviewed. This corrects evidence retention, not installed acceptance or descendant
+cleanup proof. The earlier zero-artifact operation remains a separate failure.
+
+Projection now distinguishes finite Fable dependency modules and their roles in
+the actual compiler output, selected output/copy and restored Worker policy
+contexts. Copied FS.GG sources and primitive inputs must match the retained
+original package member; generated JavaScript and transformed Fable projects must
+have the corresponding source/project member in that same original archive.
+Fable-library runtime JavaScript must match the original Browser package's static
+library member. Known pinned-library documentation/declarations/metadata and
+Fable bookkeeping remain bounded data, not runtime or provenance substitutes.
+Foreign modules/members, unexpected executable files, paths, links, changed copied
+sources or library runtime refuse; missing Core, lock and Worker proof still
+refuses. Producer caps and feed isolation do not change. Inert controls cover all
+caller contexts and actual merge provenance, while repaired native execution and
+complete projection fit remain unproved until a separately selected original run.

scripts/wasm-release/bind-installed-release.py

@@ -30,6 +30,7 @@
     'docs/roadmaps/wasm-shared-01.md',
     'docs/atlas/catalog.json',
     'docs/atlas/records/264a2f7887a9b6473cbc24102e1bf9be70e57f6d7ba224138140efa094d541f4.json',
+    'docs/atlas/records/2056fa8b653c2240afdad2a16f572a07019109254847829610a9468bb2f95248.json',
 })