prj-canon-federation/docs/evidence/2026-09-06-reference-sweep.md

G8 — Fleet source-reference sweep, 2026-09-06

CFED-WP-0001-T09 updates current source references across eight owning repositories and the project ledger's validation command. Identity, actor, access and shared-evidence references point to InfoTechCanon; repository and commercial references point to CommerceCanon. No runtime contract, capability identifier, maturity vector or concept assignment changes.

Source coverage and preserved references

The scan result covers 141 adjacent Git repositories and more than 22,000 files: tracked files (including ignored tracked files), nonignored untracked files, hidden source/configuration files, and symlink target paths (including dangling pointers). It finds zero unreviewed legacy references. The exception ledger reviews 164 files / 307 matching lines and fingerprints each exact reference line. Historical research, accepted ADR context, authored accounts, completed workplans, migration scope and stable test/scenario identifiers remain deliberate provenance. Changing or adding a matching line requires a fresh review; exceptions are not directory-wide suppression rules. G8's own evidence files are excluded as scan metadata.

State Hub coordinate evidence checks all 133 registered repo records, their source coordinates and all 141 local Git remotes. No obsolete live coordinate remains. The old State Hub lookup is a protected alias resolving the same UUID 8c82baea-bb40-435d-ac42-ec7a7c20dbb8 and current CommerceCanon paths/remote. Two records without adjacent checkouts, inter-hub and markitect-project, are archived; vergabe_teilnahme resolves to the scanned vergabe-teilnahme path. This source scan does not certify unregistered external repositories or stale copies of historical checkouts on other hosts.

Agent config/MCP/settings filename searches under ~/.codex, ~/.config and ~/.claude found no live match; two historical tool-result files were preserved. Repository-owned MCP/config files are included in the source scan. Untracked ignored third-party dependency trees and unrelated caches are not treated as source.

Published changes

Owner	Result	Published revision
reuse-surface	Canonical source/roster, refreshed cache and composed index; live registration handover	5501b8b
repo-manager	CommerceCanon slug/Forge coordinate; existing repository UUID preserved	6854ea10b278664baee7167efcceb2713bbab754
binky-control	Current ecosystem and inventory references	143b78e
feature-control	Technical identity/evidence source references	a555aaa
kaizen-agentic	Identity/organization source references	894d34c
user-engine	Technical owner references in intent, mapping/card, docs and exporter docstring	b9ae48b
the-custodian	Current classification example and authoring override; obsolete human-review override retired	4df570a
commerce-canon	Current downstream owner links; original research proposal explicitly historical	4a5b3d8fcbfd168ed1b3b326f3ecbedc6689b080

Each owning repo has a synchronized native ADHOC-2026-09-06 record, except reuse-surface, which uses existing REUSE-WP-0021. Consistency also assigned a missing UUID to Kaizen's existing ADHOC-2026-08-21 record without changing its body or task identities. The project ledger command now uses the renamed local source path while retaining the original pinned Git blob.

Live federation proof

Registration evidence records the enabled CommerceCanon registration and the old source retained disabled with a replacement note. Its history is preserved without keeping it in the active composition. Composed live proof verifies exactly the two expected capability IDs, owner/source repo, canonical URLs and cache paths:

• capability.identity.subject-resolution — D3 / A0 / C1 / R0
• capability.identity.vocabulary-canonicalize — D4 / A0 / C2 / R0

The fresh live response has no target warning. The local federation composer refreshed just CommerceCanon, then its source slice replaced the old slice in the generated index; all 60 unrelated local capability rows were preserved. The two obsolete local cache files were backed up and removed. Capability ownership metadata here is registry stewardship, not a competing concept owner.

Verification

python3 tools/validate_fleet_references.py --workspace ..
PYTHONDONTWRITEBYTECODE=1 python3 tools/test_fleet_references.py
python3 tools/validate_ownership.py --source-repo ../commerce-canon
python3 tools/validate_corpus.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon
python3 docs/evidence/2026-09-05-counterparty-validate.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon

The three sweep regression tests verify tracked ignored/hidden coverage, rejection of new live references, and exact exception fingerprints. Existing reuse-surface federation tests: 15 passed. Existing User Engine identity-alignment tests: 4 passed, run with PYTHONPATH=src. Changed YAML/fenced examples/Python parse; new relative links resolve; Custodian's example/authoring override match CommerceCanon source classification. Existing ownership, counterparty and corpus preservation proofs remain passing.

Residuals and limits

G8 source-reference acceptance passes. Whole-fleet State Hub consistency is not claimed. REUSE-WP-0021-T01 is done; T02 remains waiting on supported restoration of three archived blank bindings to their existing legacy identities. The missing-identifier tool rejects blank scalars and would derive different UUIDs; no manual substitution or identity migration was performed. REUSE-WP-0021 remains active and is the live owner of this repair.

Custodian's 13 historical consistency failures remain owned by CUST-IN-0017 from the prior gate. Other touched native records synchronized successfully. CFED-WP-0001-T10 retains the final project residual/adoption review.

Acceptance decision: 48be4584-48df-4e81-8190-7a356e20f18b.