Prepare reviewed snapshot-copy rescue in the existing image trial

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade

workplans/ADHOC-2026-10-11.md

@@ -150,3 +150,65 @@ Exact combined packet acknowledgement remains a separate review gate.
 Review: docs/reviews/2026-10-11-purpose-actuator-product-owner-review.md.
 No native reads/backups/export/restore/release, credentials, human disposition,
 founder approval or phase authority was exercised by this review.
+
+## Prepare separately gated provider-derived denial mechanism probe
+
+```task
+id: INFD-WP-ADHOC-2026-10-11-T06
+status: done
+priority: medium
+```
+
+Prepared source-only readonly lifecycle.search provider-derived mechanism probe
+with truthful informed-decision/review SERVICE and no human/StateHub attributes.
+Actual lifecyclev2 permits only StateHub workload or admitted AAL2 humans, so a
+canonical real DENY is required; no claims are invented to obtain ALLOW.
+One actual provider response will remain in Pod memory; ten transformed
+noncanonical purpose copies test installed consumer refusal without further
+provider calls, DB/admin or act effects. This is a denial/binding mechanism
+proof candidate, not actual authorized lifecycle or full T04 acceptance.
+
+Source: docs/evidence/2026-10-11-purpose-provider-probe/.
+Ten synthetic source tests pass; no actual provider, credential, runtime config,
+DB, native data or live action was accessed. Posted frozen112 packet/helper
+remain unchanged. Exact separate founder go for this newly prepared probe and
+its target must precede any execution; current memo has no acceptance and this
+new helper is not hash-bound in that submitted packet. T04 remains progress.
+
+## Review exact existing-snapshot rescue version2 preparation
+
+```task
+id: INFD-WP-ADHOC-2026-10-11-T07
+status: done
+priority: medium
+```
+
+Reviewed exact66-path rescue manifest0867e27a6754dddff3eedbb333ab4ca4faa98ee31d383ebe940b8e054c6cabf7
+under the same informed-decision-owner role. Actual original backupCOMPLETE/copy
+UNCERTAIN are retained; new rescue journal/phase and sourceversion2/newreviewown1
+require fresh founder acceptance. Immutable reads are bounded to proven frozen
+closed snapshots; live/offline writable-clone reads remain WAL-aware/explicitclose.
+Independent existing26 mocked tests plus41 subtests pass, and10 new product scope
+guards pass (including eight refusal mutations and a frozen initial packet check).
+No native command, DB open, credentials or rescue operation occurred.
+
+Initial review decision changes_requested: proposal.json misleadingly names old
+f2fad helper manifest as execution_helper_manifest_sha256 after helper bytes changed;
+label it original/historical and refreeze all dependent packet hashes. Correct
+current bundle/plan digests already exist. The normalized test fixture is not an
+owner edit or approval. Initial review/failure must remain after correction;
+exact amended confirmation is still required before newhuman submission/execution.
+
+Review: docs/reviews/2026-10-11-purpose-rescue-product-owner-review.md.
+Evidence/checks: docs/evidence/2026-10-11-purpose-rescue-product-review/.
+T04 remains progress; original version1 approval is not newversion2 authority.
+
+**Amended source confirmation, same T07 trial:** exact134-path manifest
+`d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d`
+corrects only the historical helper provenance label and dependent packet hashes;
+original66 source and initial changes-requested review remain retained. Current
+helper code/bundle49c9/plan9ce5 are unchanged. Strict typed sourceversion2/CAS1
+and20documents validate:173469packetbytes/240451revisionbytes. Eight scope
+mutations and three packet mutations independently refuse. Final technical
+source acknowledgement approved; no new human acceptance or native rescue.
+Confirmation: docs/reviews/2026-10-11-purpose-rescue-product-owner-final-ack.md.