diff --git a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md
index 2c8bb1d..e8c476f 100644
--- a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md
+++ b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md
@@ -53,6 +53,29 @@ pending1/approverowner; no activation attempt. Only local report documents were
 edited through apply_patch; no tests/source/DDL execution, consumer/CLI wiring,
 provider/host/runtime/wake action, task lifecycle change or another landing.
 
+Current owner **08f9** directs a narrow B0 review target, not permission: same6e4
+named Kernel contributor, only new store schema/metadata verification and fixture
+provisioner modules, one new QA store test and append-only TIN. No context/parent/
+adapter/Work protocol code or lifecycle/result/receipt activation. Manager b0f9
+requests actual actionable narrow QA consent; Kernel478 receives exact internal
+executable DDL/framed digest/private harness requirements and Work4ec receives
+current protocol/source-reference handoff request. Conditional78 is not substituted
+for consent; arbiter implementation decision follows actual QA reply. Owner's two
+existing snapshot-helper tests PASS remain narrow evidence. No agreed next scope,
+task reassignment/duplicate or code permission recorded from owner08f alone.
+
+Actual **QA03e2** at15:08:48 now grants USABLE narrow B0 contributor/scenario
+consent for the two store/provisioner modules, one new store test and append-only
+TIN under corrected contract. Five strict scenarios cover independent canonical
+DDL/schema digest preimages, per-connection FK/user_version verification, reachable
+private own-mkdtemp harness/no selectors, expired/reused/drift/registered rejection,
+permanent fixture nonpromotion/no lifecycle/CAS/result/receipt/nativePASS/CLI.
+Manager152 relays exact permission to Kernel; no implementation authorization.
+Protocol report records consent verbatim in scope and its required TIN/exclusions.
+Work's direct current protocol agreement and Kernel exact executable corrected
+contract remain open; conditional six-path review was not broadly upgraded.
+No agreed code scope or parallel assignment is claimed from QA permission alone.
+
 ## Final source-sync and Manager checkpoint at 14:53 UTC
 
 Actual own unread100 delivered owner548: arbiter independently inspected exact316
diff --git a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md
index 9fa5a6f..287a53e 100644
--- a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md
+++ b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md
@@ -63,6 +63,45 @@ weakened by relabelling this bounded prototype. No next code scope is agreed yet
 
 ## Entry conditions and scope decision
 
+Owner **08f9a5f0** supplies a narrower next review target: B0 only, same6e4 named
+Kernel contribution, two new store/provisioner modules, one store test and
+append-only TIN. It excludes context/parent/adapter/Work protocol implementation
+and registered lifecycle/result/receipt activation. Manager **b0f9e319** requests
+explicit actionable QA consent for exactly that slice, **478265ba** routes the
+corrected byte-defined internal DDL/private fixture composition requirements to
+Kernel, and **4ec215f9** requests Work's actual current protocol decision/source
+references. Conditional QA78cd does not authorize it; the arbiter will decide
+implementation only after actual consent. This is a review target, not an agreed
+next implementation scope or code assignment. Owner's two existing snapshot tests
+PASS are narrow reusable evidence, not new parent/input/descendant qualification.
+
+Actual **QA03e2b4ed-0735-4de6-b599-5a5a5633bf9b** at15:08:48 grants usable B0
+contributor/scenario consent, subject to the corrected narrow contract, for exactly
+the two store/provisioner source modules, new store test and append-only TIN.
+Manager **152ce665** relays that exact permission to Kernel without code authority.
+The granted five observable scenarios are:
+
+1. Only internally fixed ordered UTF-8/LF executable CREATE/INDEX bytes execute
+   in the synthetic fixture; independently asserted version-framed DDL/schema
+   digest preimages exclude metadata self-reference. Order/CRLF/version/digest/
+   schema drift refuses; expected values are not generated by the implementation.
+2. Every fixture connection enables and verifies foreign_keys=ON/user_version=1;
+   disabled/unverifiable FK and malformed digest/metadata fields refuse.
+3. The closure factory alone creates mkdtemp and synthetic identity/private
+   WeakMap capability, exposes no raw root/DB and accepts no caller DDL/root/DB/
+   path/manifest/registered selector. Corruption is enumerated, bounded test input.
+4. Expired/closed/reused/foreign/nonempty/drifted/registered-related targets refuse
+   with bounded reason before registered DDL.
+5. Fixture attestation stays permanently nonpromotable; no registered store,
+   lifecycle/CAS/result/receipt/native consumer/CLI or native PASS follows.
+
+TIN is new_tests, five scenarios, hermetic controlled corruption/no retries,
+no assertion relaxation and explicit B0 exclusions. Later CAS/input/fence scopes
+are not silently included. **Work's current direct protocol agreement and Kernel's
+exact corrected executable contract are still open handoffs.** Usable QA consent
+alone does not approve next implementation; arbiter authorization is separate.
+No code assignment, source/test edit or full-task acceptance is recorded here.
+
 Work Phase A corrected candidate b1c4c26b is implemented and currently clean.
 QA1b804 narrowly accepts 13 focused hermetic scenarios and classifies the separate
 five-PNG incident without an archive/dirty-byte claim. Local full checks remain