TASK-conversation-console-workflow pin served metadata proposal and hash contract

.torch/backlog/TASK-conversation-console-workflow.json

@@ -85,14 +85,22 @@
     "message:3e8c4e1e:Console-complete7c434-owned-consumer-proposal-request",
     "message:aebd82f9:Kernel-no-signing-prerequisite-debug-semantics",
     "message:9ab0e108-ac63-4de8-87fe-8986ec05cf21:owner-generated1440x1000-artifact-compactOverview-fullqueue-proposal-no-current-scope-expansion",
-    "integration:0d46fb5c-1027-4ead-b969-f760afb72e9f:separate-attention4fa-landed-livecriteria-still-open"
+    "integration:0d46fb5c-1027-4ead-b969-f760afb72e9f:separate-attention4fa-landed-livecriteria-still-open",
+    "message:5d37742b-6a34-4358-83d5-f71d5d8cb3f3:complete-Release-noargs-runtime-metadata-readonly-proposal",
+    "message:d79126c4-c762-40ed-8b10-f58e8cb54256:exact-synthetic-LF-byte-vectors-not-installed-claims",
+    "message:ee430c77-3924-4204-8163-a3c3bb437f0a:owner-exact-threepath-docsTIN-and-recursive-localeCompare-treeHash-correction-no-codeauthority",
+    "message:7b6623f3-5ebd-4dda-93cd-8954fad27b58:QA-complete-refinement-contributor-review-request",
+    "message:83cb229d-9d46-4cc2-ab38-7f0387792ec7:Kernel-displayonly-native-authority-exclusion-request",
+    "message:d1750568-6205-4bd6-912c-dd03dadf36ab:Console-fixed14allowlist-and-consumer-review-request",
+    "message:9adfc75d-69eb-4da3-b8bc-d081fcb1f63f:Release-exact-scope/hash/vector-corrections",
+    "message:02981960-924b-40ac-817f-6052adaeabc5:QA-exact-threepath/vector-scenario-request-after-existing-B1-review"
   ],
   "commit": "e8c4c4249e49d91393394ac205d918826ddd1891",
   "integrationRequest": "6cbac9cb-445f-45d7-8bb1-10902e840211",
   "blockedReason": "Exact e8c source QA acceptance and native6cb serialized landing remain RESOLVED with four native PASS/11 hashes. Attention cohort exact4fa is independently QA accepted and natively landed once0d46; canonical4fa is clean as observed16:27, not whole-workflow acceptance. Actualownereb1 live4174 eight blocked entries omit blockedReason: activealpha2 and immutablealpha3 omit a field already present canonical316. Served UI/APIengine exact version/artifact/source provenance must be distinct from repositoryHEAD and truthful for mixed/stale/unknown state; alpha3switch75 alone cannot qualify current UI. Full workflow remains blocked on later qualified current release and actual live/installed/desktop/mobile owner-flow/full-criteria acceptance; current owner browser list remains empty. Source/demo artifact PASS is not live acceptance. Human75 remains pending revision1; PNG recovery is not activation. No install/restart/hotpatch/host/provider/wake/schema action.",
   "createdAt": "2026-09-30T19:30:23.720Z",
-  "updatedAt": "2026-10-01T16:28:00.000Z",
-  "revision": 18,
+  "updatedAt": "2026-10-01T16:38:00.000Z",
+  "revision": 19,
   "history": [
     {
       "from": null,
@@ -219,6 +227,13 @@
       "actorId": "session-manager",
       "at": "2026-10-01T16:28:00.000Z",
       "note": "Reviewed metadata-only amendment expected revision17, owner9ab/d2ed current requirements and Release proposals. Append useful observed version/declared commit/hash consistency separately from authentication unknown, no signing prerequisite or memory/browser byte proof. Record compact Overview/full queue/advisory counts proposal on EXISTING workflow, not current implementation expansion. Preserve original criteria/owner/state/e8 candidate/request/history; source integration resolved, genuine later live blockedReason/provenance/desktop/mobile criteria open. No duplicate task or activation75 decision."
+    },
+    {
+      "from": "blocked",
+      "to": "blocked",
+      "actorId": "session-manager",
+      "at": "2026-10-01T16:38:00.000Z",
+      "note": "Metadata-only expectedrev18 records complete actual Release5d377 proposal/vector addendum and owner ee430 precise scope/spec corrections. Future exact contribution only new src/self-host/runtime-metadata.mjs, new QA-owned test/fleet/runtime-metadata.test.mjs, append-only docs/TEST_INTEGRITY.md; excludes proposed test/fleet/TIN. Preserve actual candidate recursive per-directory localeCompare inventory traversal and raw hash preimage, any.git/rootvalidation exclusions; independent nested/case/punctuation vectors reject changed ordering. Full contract forwarded existing QA/Kernel/Console with no code authority/new task/assignment. Useful observations separate authentication unknown, no native E/S/A/memory/deliveredbyte claim, no DB/status/reconcile. All state/owner/e8/request/sevencriteria/history retained."
     }
   ]
 }

reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md

@@ -1,5 +1,49 @@
 # Current pilot remaining-work handoff
 
+## Concrete served metadata proposal and next peer decisions, 16:38 UTC
+
+Actual Release **5d37742b** complete no-argument reader refinement and **d79126c4**
+fixed synthetic byte vectors are read and recorded on SAME workflow19. Exact
+future contribution, corrected by actual owner **ee430c77**, is only NEW
+src/self-host/runtime-metadata.mjs, NEW QA-owned test/fleet/runtime-metadata.test.mjs
+and append-only docs/TEST_INTEGRITY.md; proposed test/fleet/TEST_INTEGRITY.md is excluded.
+No source/test implementation permission yet. Existing QA receives full contract
+7b6623f3 plus exact corrections/vectors02981960, Kernel83cb229d checks display-only
+native exclusion, Consoled1750568 checks fixed14 asset allowlist/consumer boundary.
+Release9adfc75d receives actual corrections; no owner clarification loop required.
+
+Sole readLoadedRuntimeMetadataV1() captures its own module URL/fixed artifact root
+at evaluation, returns frozen startup observations separately from fresh bounded
+current-disk Console assets and active-pointer/registry/journal observations.
+Parseable local versions/declared commit/raw hashes/tree consistency stay visible
+with authenticationConfidence unknown; loadedMemoryCodeDigest/deliveredBytesProof
+remain null. No repositoryHEAD substitution, selector/callback, VersionService/
+status/reconcile/DB/ControlPlane import or write. Fixed regular reads are no-follow,
+bounded before allocation and pre/post identity checked; intended active-pointer
+link is read as a fixed link, never arbitrary traversal. Concurrent same-user
+directory changes remain detection limits, not atomic containment proof.
+
+Actual source src/self-host/service.mjs inventory/treeHash confirms recursive
+per-directory localeCompare name ordering and traversal, path+NUL+type+NUL+
+String(mode&0777)+NUL+raw bytes or link text+NUL. Exclude every .git and only root
+.torch-validation.json for installed validation. A global UTF8-sorted record manifest
+would change existing hash meaning and is excluded. Independent nested filenames,
+case and punctuation vectors must catch it. JSON64KiB, tree8192 entries/64MiBfile/
+512MiBtotal, UI64 files/4MiBfile/16MiBtotal caps must reject before unbounded allocation
+or truncation; partial results cannot be match. Fixed14 assets and per-file hashes
+retain mixed-disk evidence. Seven proposed scenarios cover fixed raw preimages,
+held-startup pointer advancement, malformed/oversize/tamper/partial journal,
+allowlist/disk change, every cap boundary+1, no DB/reconcile/write and synthetic
+old-vs-later feature bytes without live blockedReason claim. Synthetic alpha4 is
+only a test vector, not an installed or qualified release.
+
+Owner **1291e000** reports independent correctedb375 focused file PASS and existing
+QA manually resumed exact review; source verdict remains pending. Kernel prior
+implementation handle is reported terminal; no Manager start or duplicate review
+session. Real parent/input/fence/native consumer next phase follows actual B1 verdict,
+preserving full6e4 criteria rather than promoting fixture success. Human75 and real
+live desktop/mobile acceptance remain open; full56 roadmap preserved.
+
 ## Corrected exact B1 handoff and clean Manager checkpoint, 16:34 UTC
 
 Actual Kernel9cced188 reports fixture B1 candidate9b4 with local focused gates;