Record verified custody image and deployment preflight

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29

docs/evidence/2026-10-03-root-grant-delivery-progress.md

@@ -46,8 +46,9 @@ strictly newer revision. No identity is inferred from JWT roles or LLDAP groups.
   AccountAuthority mapping. Isolated PostgreSQL checks verified competing CAS
   updates, cross-connection persistence and reconnect persistence. Final source
   `0d0751d`: suite ran 296 tests with eight skips; layer checks, wheel build and
-  embedded-resource integrity passed. The deployment image digest is pending
-  owner publication/verification.
+  embedded-resource integrity passed. Published image verified by registry manifest and disposable container:
+  `sha256:030fe90232e20bb02b372e3d16b8ff659a5407d54f6405eb85754262b9ad7dc6` (source `0d0751d`). Embedded reader, baseline,
+  bootstrap, canon and AccountAuthority field were checked; owner sync `f85c968`.
 
 ## Safe live preflight
 
@@ -74,3 +75,19 @@ sources unless a real human ceremony explicitly introduces a live grant.
 
 No live admission, publication, workload rollout or actual root grant occurred
 in this receipt. Source/fixture passes are distinct from live acceptance.
+
+
+## Exact deployment preflight
+
+rapp-user-engine rendered the published image into
+`/tmp/user-engine-custody-release.yaml`, manifest SHA256
+`6f2a7b397e8af2a8a78e3978e7228ebfb1f798fa0e18d1af8b29007cffd29d66`.
+Live node `92.205.62.239` Ready; requested CPU 3445m/4000m (86%), memory
+9384Mi (58%). Staged Deployment retains single-replica Recreate and requests
+50m/64Mi. Server dry-run passed eight objects. Client diff returned expected
+changes (exit 1); raw diff output suppressed. No apply or workload mutation.
+
+Image publication is resolved. Actual reader/source admission and publication,
+then reviewed runtime rollout, controlled baseline initialization and live
+no-grant/denial/outage/restart acceptance remain. Off-host publication history
+retention/recovery needs its real receipts before recovery readiness closes.

workplans/NK-WP-0045-root-grant-custody-record.md

@@ -269,8 +269,9 @@ A later real grant needs a genuine ceremony and a strictly newer revision.
   atomic durable PostgreSQL baseline, receipt-bound initial bootstrap and
   AccountAuthority mapping; source `0d0751d`. Final suite ran 296 tests with
   eight skips; layer and packaged-resource checks passed. Isolated PostgreSQL
-  CAS/conflict/reconnect persistence verified. Image publication remains a
-  release dependency until its immutable digest is recorded.
+  CAS/conflict/reconnect persistence verified. Image publication verified: `sha256:030fe90232e20bb02b372e3d16b8ff659a5407d54f6405eb85754262b9ad7dc6`; registry manifest
+  and disposable container import/resource checks passed. Owner final sync
+  `f85c968`. Actual promotion remains pending producer attendance.
 - rapp-user-engine: separate projected openbao JWT and scoped egress, explicit
   immutable-image renderer and release/rollback packet; 7 packaging tests pass,
   `576f5e7`, pushed/clean. Owner plan RAPP-USER-ENGINE-WP-0003.
@@ -288,3 +289,12 @@ until a real ceremony introduces a grant.
 Safe live preflight only: OpenBao initialized/unsealed; anonymous exact-path
 read denied 403, response body discarded. No live admission, publication,
 consumer rollout or actual grant occurred in this session.
+
+
+Published-image release preflight is also complete: staged manifest rendered to
+`/tmp/user-engine-custody-release.yaml` (SHA256
+`6f2a7b397e8af2a8a78e3978e7228ebfb1f798fa0e18d1af8b29007cffd29d66`),
+correct Ready node/headroom verified, eight-object server dry-run passed and
+expected diff inspected with raw output suppressed. No apply. Actual runtime
+promotion still follows attended reader/source delivery and controlled baseline
+initialization. No further image publication or generic approval gate remains.