# G8 — Fleet source-reference sweep, 2026-09-06

CFED-WP-0001-T09 updates current source references across eight owning
repositories and the project ledger's validation command. Identity, actor,
access and shared-evidence references point to InfoTechCanon; repository and
commercial references point to CommerceCanon. No runtime contract, capability
identifier, maturity vector or concept assignment changes.

## Source coverage and preserved references

The [scan result](2026-09-06-reference-sweep.json) covers 141 adjacent Git
repositories and more than 22,000 files: tracked files (including ignored tracked
files), nonignored untracked files, hidden source/configuration files, and
symlink target paths (including dangling pointers). It
finds zero unreviewed legacy references. The
[exception ledger](../../ledger/reference-sweep.json) reviews 164 files / 307
matching lines and fingerprints each exact reference line. Historical research,
accepted ADR context, authored accounts, completed workplans, migration scope
and stable test/scenario identifiers remain deliberate provenance. Changing or
adding a matching line requires a fresh review; exceptions are not directory-wide
suppression rules. G8's own evidence files are excluded as scan metadata.

[State Hub coordinate evidence](2026-09-06-hub-coordinates.json) checks all 133
registered repo records, their source coordinates and all 141 local Git remotes.
No obsolete live coordinate remains. The old State Hub lookup is a protected
alias resolving the same UUID `8c82baea-bb40-435d-ac42-ec7a7c20dbb8` and current
CommerceCanon paths/remote. Two records without adjacent checkouts, inter-hub
and markitect-project, are archived; vergabe_teilnahme resolves to the scanned
vergabe-teilnahme path. This source scan does not certify unregistered external
repositories or stale copies of historical checkouts on other hosts.

Agent config/MCP/settings filename searches under ~/.codex, ~/.config and
~/.claude found no live match; two historical tool-result files were preserved.
Repository-owned MCP/config files are included in the source scan. Untracked ignored
third-party dependency trees and unrelated caches are not treated as source.

## Published changes

| Owner | Result | Published revision |
| --- | --- | --- |
| reuse-surface | Canonical source/roster, refreshed cache and composed index; live registration handover | `5501b8b` |
| repo-manager | CommerceCanon slug/Forge coordinate; existing repository UUID preserved | `6854ea10b278664baee7167efcceb2713bbab754` |
| binky-control | Current ecosystem and inventory references | `143b78e` |
| feature-control | Technical identity/evidence source references | `a555aaa` |
| kaizen-agentic | Identity/organization source references | `894d34c` |
| user-engine | Technical owner references in intent, mapping/card, docs and exporter docstring | `b9ae48b` |
| the-custodian | Current classification example and authoring override; obsolete human-review override retired | `4df570a` |
| commerce-canon | Current downstream owner links; original research proposal explicitly historical | `4a5b3d8fcbfd168ed1b3b326f3ecbedc6689b080` |

Each owning repo has a synchronized native ADHOC-2026-09-06 record, except
reuse-surface, which uses existing REUSE-WP-0021. Consistency also assigned a
missing UUID to Kaizen's existing ADHOC-2026-08-21 record without changing its
body or task identities. The project ledger command now uses the renamed local
source path while retaining the original pinned Git blob.

## Live federation proof

[Registration evidence](2026-09-06-reuse-registration.json) records the enabled
CommerceCanon registration and the old source retained disabled with a replacement
note. Its history is preserved without keeping it in the active composition.
[Composed live proof](2026-09-06-reuse-composed.json) verifies exactly the two
expected capability IDs, owner/source repo, canonical URLs and cache paths:

- capability.identity.subject-resolution — D3 / A0 / C1 / R0
- capability.identity.vocabulary-canonicalize — D4 / A0 / C2 / R0

The fresh live response has no target warning. The local federation composer
refreshed just CommerceCanon, then its source slice replaced the old slice in
the generated index; all 60 unrelated local capability rows were preserved.
The two obsolete local cache files were backed up and removed. Capability
ownership metadata here is registry stewardship, not a competing concept owner.

## Verification

```bash
python3 tools/validate_fleet_references.py --workspace ..
PYTHONDONTWRITEBYTECODE=1 python3 tools/test_fleet_references.py
python3 tools/validate_ownership.py --source-repo ../commerce-canon
python3 tools/validate_corpus.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon
python3 docs/evidence/2026-09-05-counterparty-validate.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon
```

The three sweep regression tests verify tracked ignored/hidden coverage,
rejection of new live references, and exact exception fingerprints. Existing
reuse-surface federation tests: 15 passed. Existing User Engine identity-alignment
tests: 4 passed, run with PYTHONPATH=src. Changed YAML/fenced examples/Python parse;
new relative links resolve; Custodian's example/authoring override match
CommerceCanon source classification. Existing ownership, counterparty and corpus
preservation proofs remain passing.

## Residuals and limits

G8 source-reference acceptance passes. Whole-fleet State Hub consistency is not
claimed. REUSE-WP-0021-T01 is done; T02 remains waiting on supported restoration
of three archived blank bindings to their existing legacy identities. The
missing-identifier tool rejects blank scalars and would derive different UUIDs;
no manual substitution or identity migration was performed. REUSE-WP-0021 remains
active and is the live owner of this repair.

Custodian's 13 historical consistency failures remain owned by CUST-IN-0017
from the prior gate. Other touched native records synchronized successfully.
CFED-WP-0001-T10 retains the final project residual/adoption review.

Acceptance decision: `48be4584-48df-4e81-8190-7a356e20f18b`.