diff --git a/.kaizen/agents/custodian-codex/supervision.json b/.kaizen/agents/custodian-codex/supervision.json
index 0beae271..50e073c3 100644
--- a/.kaizen/agents/custodian-codex/supervision.json
+++ b/.kaizen/agents/custodian-codex/supervision.json
@@ -766,8 +766,8 @@
     },
     {
       "proposal_id": "STATE-WP-0095-T06-cluster-frozen-receiving-r1",
-      "disposition": "pending",
-      "outcome": "not_executed",
+      "disposition": "accepted_revised",
+      "outcome": "succeeded",
       "proposal_ref": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/revisions/r4-rollout-review/proposal-metadata.json",
       "original_revision": 1,
       "original_digest_sha256": "5bef9e7818ce1ebc64b81e300b6b40dcfc710a8625d6e0595534f8284dc2052d",
@@ -776,21 +776,21 @@
       "current_digest_sha256": "63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32",
       "target": "railiance01 state-hub release/API/MCP and exact-new-trial migration Job only",
       "expected_result": "Normal owner image promotion makes exact frozen cluster receiving available; API/MCP ready, expected c4 schema and exact three historical parents/15 tasks preserved; only then is later registrar admission eligible. No original TLS/identity native acceptance is inferred.",
-      "verification_ref": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/revisions/r4-rollout-review/FINAL-PROPOSAL.md",
+      "verification_ref": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/verified-receiving-return.json",
       "rollback_ref": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/revisions/r4-rollout-review/MIGRATION-JOB-RECOVERY.md",
       "cost_estimate_eur": null,
       "risk_estimate_eur": null,
       "cost_estimate": "Unknown attributable execution/network/operator recovery cost on existing infrastructure; no zero-cost claim or budget reservation inferred.",
       "risk_estimate": "Unpriced production coordination outage, message migration locks/data compatibility, retained active migration Job, uncertain connection/lock mapping and recovery time; three-minute Helm wait is not a bound on outage or DB effects. Explicit supervised risk disposition required.",
       "supervisor": "Bernd Worsch",
-      "approval_ref": null,
-      "approved_revision": null,
-      "approved_digest_sha256": null,
-      "executed_revision": null,
-      "executed_digest_sha256": null,
+      "approval_ref": "e3798419-8aa9-5425-8c08-20df6bd82a19",
+      "approved_revision": 4,
+      "approved_digest_sha256": "63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32",
+      "executed_revision": 4,
+      "executed_digest_sha256": "63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32",
       "refinement_or_rescue": true,
       "promotion_evidence": false,
-      "reason": "Exact native rollout proposal remains pending. Source preparation, synthetic compatibility and public artifact verification are evidence only; earlier preparation failures and revisions remain one trial.",
+      "reason": "Founder-approved revision4 executed successfully. Helm76, exact image/module, expected schema, 18 unchanged historical full rows and five rollback-only native cases verified. Original proposal refinements retained; no unchanged-success credit.",
       "revisions": [
         {
           "revision": 1,
@@ -813,6 +813,60 @@
           "disposition": "not_submitted_or_unadjudicated",
           "executed": false
         }
+      ],
+      "approved_digest": "63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32",
+      "approved_at": "2026-10-16T23:55:32.549865+00:00",
+      "supervisor_disposition": "Founder approved exact presented revision4 unchanged; original r1 was refined before submission, so this remains accepted_revised for original-trial scoring.",
+      "approval_scope": "Exact pinned receiver rollout including inbox migration and documented conditional recovery; no authority promotion.",
+      "executed_digest": "63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32",
+      "execution_started_at": "2026-10-16T23:57:03.186884+00:00",
+      "execution_ref": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/execution.json",
+      "verified_at": "2026-10-17T00:07:47.015454+00:00",
+      "recovery_required": false,
+      "post_execution_findings_ref": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/ordinary-pipeline-preservation-finding.json",
+      "post_execution_finding": "Later ordinary Cluster deep-consistency binding refresh changed three historical parent hashes; original delivered-rollout preservation and five rollback probes passed before that separate pipeline. Further acceptance stays open."
+    },
+    {
+      "proposal_id": "STATE-WP-0095-T10-frozen-bindings-guard-r1",
+      "disposition": "pending",
+      "outcome": "not_executed",
+      "proposal_ref": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/proposal-metadata.json",
+      "original_revision": 1,
+      "original_digest_sha256": "81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932",
+      "original_digest": "81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932",
+      "current_revision": 2,
+      "current_digest_sha256": "5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e",
+      "target": "railiance01/92.205.62.239 state-hub release API/MCP and exact-new-trial migration Job",
+      "expected_result": "New API binding guard delivered and current-baseline native/whole-pipeline preservation verified, with earlier parent mismatch retained as explicit exception.",
+      "verification_ref": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/FINAL-PROPOSAL.md",
+      "rollback_ref": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/RECOVERY.md",
+      "cost_estimate_eur": null,
+      "risk_estimate_eur": null,
+      "cost_estimate": "Unpriced incremental execution and recovery costs on existing infrastructure.",
+      "risk_estimate": "Unpriced coordination outage, hook lifetime, lock mapping and recovery; reviewed conditional limits stop for attended owner on unknown state.",
+      "supervisor": "Bernd Worsch",
+      "approval_ref": null,
+      "approved_revision": null,
+      "approved_digest_sha256": null,
+      "executed_revision": null,
+      "executed_digest_sha256": null,
+      "refinement_or_rescue": true,
+      "promotion_evidence": false,
+      "related_proposal_id": "STATE-WP-0095-T06-cluster-frozen-receiving-r1",
+      "reason": "Separate new-code runtime request follows retained ordinary-pipeline and stale-installed-client failures. Six source refinements and real writeback regression remain visible; no extra success or authority is inferred.",
+      "revision_history": [
+        {
+          "revision": 1,
+          "digest_sha256": "81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932",
+          "outcome": "not_executed",
+          "refinement": "Normal secret scan flagged probe source-hash metadata; original retained locally and by digest."
+        },
+        {
+          "revision": 2,
+          "digest_sha256": "5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e",
+          "outcome": "not_executed",
+          "refinement": "Typed module/SHA256 records; unchanged runtime and probe logic."
+        }
       ]
     }
   ],
diff --git a/docs/changes/netkingdom-target-2026-10-17/rollout-publication-inputs.json b/docs/changes/netkingdom-target-2026-10-17/rollout-publication-inputs.json
new file mode 100644
index 00000000..34388916
--- /dev/null
+++ b/docs/changes/netkingdom-target-2026-10-17/rollout-publication-inputs.json
@@ -0,0 +1,1107 @@
+{
+  "schema": "custodian.scoped-publication-inputs.v1",
+  "files": [
+    {
+      "path": ".kaizen/agents/custodian-codex/supervision.json",
+      "sha256": "76c5b5d771425df2ef20ef11bdd5095480218b0873e13881f01c92ffd24b2fc8",
+      "bytes": 78705
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r1/conditional-T07-completion-overlay.json",
+      "sha256": "400666682a421ac35e0b347b19e43adfec8336f49dd2049f36e26f4fac708ec4",
+      "bytes": 1370
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r1/manifest.json",
+      "sha256": "2b167a638636b3e6b30c317d4ce48256c9915940942b0b581beb9a96fcc4b55f",
+      "bytes": 2398
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r1/state-hub-followthrough.patch",
+      "sha256": "3a2f8446262062a9183aff6f219fd6c300ed447624355cb778bb050cdb14a2b9",
+      "bytes": 9506
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r1/validation.json",
+      "sha256": "65ffdd0b9c1f755d96e9eaab2742279b6e2973b5ccaff8f4e7f8d48a8bc29e7a",
+      "bytes": 656
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r2/conditional-T07-completion-overlay.json",
+      "sha256": "81518c241d379633b5dc21b08b976d4a46d5f4e8d89772464dad0a2ea47a16a5",
+      "bytes": 1370
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r2/generated-copy-exact-diff.patch",
+      "sha256": "ef5d9f2373f491a23259417b33d5784b616557e714e8e05717c5b1c982301c91",
+      "bytes": 618
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r2/manifest.json",
+      "sha256": "2c02dd4953e0f0beb09d5b6450ab4912921d63e5090d42701f9bef37a013129c",
+      "bytes": 2898
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r2/state-hub-followthrough.patch",
+      "sha256": "12ee2ab6f4cc45ff8cfcb4c03ef84a7e207eff13fdaa194a7281734f5cbc4021",
+      "bytes": 10949
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r2/validation.json",
+      "sha256": "acdf8d11033a63e6076692d15b9ca3927e306a698c93b61ab1e3c0c7dd81ef4b",
+      "bytes": 807
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r3/REVIEW.md",
+      "sha256": "5d23da6a180e5b4a941217a2cc30403261122217deaada7e0bf44a4f4b3e8cab",
+      "bytes": 4317
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r3/manifest.json",
+      "sha256": "95fd49db49c5881a8c3674891e6448b5725d737ba4d5e4b186b35fcc6f4ba2ad",
+      "bytes": 3397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r3/state-hub-followthrough.patch",
+      "sha256": "e9bc2ba9f81b6290945b6de6e0a00ba4c995478b17da786605f5a0466e300b3d",
+      "bytes": 33056
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r3/validation.json",
+      "sha256": "d435174a4539ef10dcd339b2f980787f6036c685eb6b5be7321dc3b345511ba8",
+      "bytes": 840
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r4/REVIEW.md",
+      "sha256": "8d8d8bb6e8020cb40e571fb4d88d7f3887087c7edb33d0d6bfeb3def8ab4ab88",
+      "bytes": 5974
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r4/manifest.json",
+      "sha256": "2a6345e1181262eed80ce5e5cf7b3e398396b208d014fb15602874e1018d63b0",
+      "bytes": 3397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r4/state-hub-followthrough.patch",
+      "sha256": "c06bc0a3e667e9ae6407f60887ba8feddc66d19a2c21dfc86d1bbe3718361708",
+      "bytes": 39218
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r4/validation.json",
+      "sha256": "897f28d2b2f551cb5153c4b17c09d02538d48b66f16c2789fcb52395876e81e2",
+      "bytes": 840
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/PUBLICATION.md",
+      "sha256": "b4c192cb5b4dd79ef0ccf5400e8838dd8d6dbf289959d85f8a4cf940732f6d79",
+      "bytes": 1768
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/REVIEW.md",
+      "sha256": "3ea2b5c93c0201d256fd0c3f4c802802de98b67cacaf47d67331cef3decabbcc",
+      "bytes": 6599
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/STATE95-final-reviewed-overlay.md",
+      "sha256": "a9aa50f5772ac985dcee9b1b65228e5f909ab25209f80dea9d6f0248029855ca",
+      "bytes": 17286
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/T09-completion-overlay.patch",
+      "sha256": "0cf317f0187f631bce3eea4ba65bb70792f296105d19e3185179c736cb9dcd5b",
+      "bytes": 1184
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/apply_reviewed_overlay.py",
+      "sha256": "1e527d1e5b40a701f50283e59f8f690e2f08bb488f48362ba8d9ccccd9fec9a2",
+      "bytes": 909
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/canonical-validation.json",
+      "sha256": "18af55b66d8506c94236965ec1ba4ea5537caf569895534fc9254f09be148294",
+      "bytes": 445
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/integrate_source.py",
+      "sha256": "d881c1f829d9889ffb33c58b57cc76b8151eb6de8da61de6ac0dbe936b4addd5",
+      "bytes": 3103
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/local-integration-result.publication.json",
+      "sha256": "17a2f1c96dd4e6dc4c297f168ca21b8e2ec32a263494fb5a746f60752f8cfda2",
+      "bytes": 299036
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/manifest.json",
+      "sha256": "fc8656d53309199b6789d50351221428abfd9b2311d877723f42001926785bc4",
+      "bytes": 3397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/publication-manifest.json",
+      "sha256": "31e000a5bfa02ba28b85ef99b737ff77ed65d22361e3e5ccfa05252fed87e212",
+      "bytes": 4000
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/publish_followthrough_source.py",
+      "sha256": "32b4509479845f8d29d7a9dbb3aaef5bbf237693e9312572b55b1afedb1b2668",
+      "bytes": 6333
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/run_source_commit.py",
+      "sha256": "28a9dd0608b0687f322f54c737076105fe331b0925752d44686089d64bf17db1",
+      "bytes": 597
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/source-commit-result.publication.json",
+      "sha256": "672bb4b714ca1a2530cf764ffb565630db57a82d3083840ca7fc76d529b3df8e",
+      "bytes": 298721
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/source-publication-readback.json",
+      "sha256": "4f63ce61983fd0c1bd2c7b206980fcdf9e6f4d3dd1ae588c2a73358b44b860b2",
+      "bytes": 2278
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/state-hub-followthrough.patch",
+      "sha256": "ad3d49b83435dd026118ee1e4a25779b5a7739473619bbda256f160c4eb0e56a",
+      "bytes": 40931
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/test_publication_helper.py",
+      "sha256": "349fc7a5b79cfaf5c11092088598dbbe5659b748c73e78e33c0234a9de2e53dd",
+      "bytes": 3462
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r5/validation.json",
+      "sha256": "5b086b2923b566edc32607a30b70c1e76a956014d94bb0df6466de04d10d7e11",
+      "bytes": 841
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/integrate_source.py",
+      "sha256": "be1dd9c69c682b004f8de143be2146873f94eba2e919a56fe7022a9bc250841e",
+      "bytes": 1494
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/local-integration-result.publication.json",
+      "sha256": "bb211f0693194e5bd5432517257b749fa9b5a19934bcabf8841ad762a0fee870",
+      "bytes": 300952
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/manifest.json",
+      "sha256": "f935e88f6d989cf7cf1bac1df954add9b0581b7e9b9c99ee930b454cfd552607",
+      "bytes": 1089
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/normal-sync-result.json",
+      "sha256": "a2210aa71db915634dc3282477562be4ba697d98992d796b4da0c55b8ae83840",
+      "bytes": 6046
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/run_normal_sync.py",
+      "sha256": "5f57998481b05d54f289dbe6a7740599c875c1310574de3d9c7b31d250b909a4",
+      "bytes": 889
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/run_source_commit.py",
+      "sha256": "d8a968bfa0df57009c9f25c936b2a96f68c8a8343497e10fef12b81b816933e2",
+      "bytes": 593
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/source-commit-result.publication.json",
+      "sha256": "c9e0a943eddc63c79a09b3c63229fb12a7d922f5777590691d36cae982c53dd6",
+      "bytes": 301313
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/source-publication-readback.json",
+      "sha256": "74faca6274af9a144774e6e25690daebcb6575feb5a45e1ef3d8129231aa20a6",
+      "bytes": 2274
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/state-hub-writeback.patch",
+      "sha256": "a99b02b2e2f745c23e7fb33821fdd17656ad22b0e040abe4ff7124f25487b825",
+      "bytes": 5858
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r6/validation.json",
+      "sha256": "72a95164574fa497195f133550041967ded4c9ab07be3ee6f024732b3c729924",
+      "bytes": 701
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/manifest.json",
+      "sha256": "340ec2084bd43f918187474bd6c75c3e908c0033f50af424ac9f354b0572f987",
+      "bytes": 624
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/normal-sync-result.json",
+      "sha256": "8baff941e79d37ab9587108f5eac8f8b5357231b13a0b4e283ceec9df5c694ab",
+      "bytes": 6472
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/publish_workplan.py",
+      "sha256": "1d35c8df48bc843b8048609d14d5b943c25719766bd7d032f346edee82c1cb13",
+      "bytes": 1372
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/run_normal_sync.py",
+      "sha256": "5f57998481b05d54f289dbe6a7740599c875c1310574de3d9c7b31d250b909a4",
+      "bytes": 889
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/source-commit-result.publication.json",
+      "sha256": "b5408c26abf16a4a585b7a2546ab4651d3b3832f2690f3e0378bc9c98387b327",
+      "bytes": 301925
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/source-publication-readback.json",
+      "sha256": "acbd10e9a9f54872cf57b5d299f77494764e462346cfbcf89e3072d9a36e60c2",
+      "bytes": 2631
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/state-hub-workplan.patch",
+      "sha256": "db6856796303234221b35c4c473822b14b591946c9283e0dfd1dd86a01a478ea",
+      "bytes": 2235
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r7/validation.json",
+      "sha256": "40d57504120d440a71f91d561a70dbd2be09284742fb025c253143b28ebca37a",
+      "bytes": 249
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/manifest.json",
+      "sha256": "d97892017291dac31d72dcdc33524edac0fa068e4f76ee53d49bff4c2e848091",
+      "bytes": 631
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/normal-sync-result.json",
+      "sha256": "8fdebbba377ca2933822f31aaea1b76d22f65317c9ee8785bd6ac03ab3fbbeaf",
+      "bytes": 6046
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/publish_workplan.py",
+      "sha256": "6539c361d9fa98187086524fca1134b7c075071d6e5bd01e9f820c6081802dd6",
+      "bytes": 1372
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/run_consistency_check.py",
+      "sha256": "443dca179252959b6efa4c2c9be72615e7cd147288c5fa4af6d286e0c8a00848",
+      "bytes": 921
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/run_normal_sync.py",
+      "sha256": "5f57998481b05d54f289dbe6a7740599c875c1310574de3d9c7b31d250b909a4",
+      "bytes": 889
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/source-commit-result.publication.json",
+      "sha256": "eece3a06542a7f7e708cabdede1ffc35670a14b89dfb65c775b113f43f0c991e",
+      "bytes": 301836
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/state-hub-workplan.patch",
+      "sha256": "83bf9a6d6f7dc9de6856aca30b3d10c5e715214132ab715f15a8f0caeef9c935",
+      "bytes": 2001
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/owner-followthrough-r8/validation.json",
+      "sha256": "5a74460f2d6ddfba77a0c6dc4d36338c05ac717a6ef37559a3f2dbaf475050d3",
+      "bytes": 110
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/README.md",
+      "sha256": "f432c3bcb29ee0715ef8e72d5ae806a800f07338cd9b5faea9d71c470c51d699",
+      "bytes": 3233
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/api-baseline-receipt.json",
+      "sha256": "8f6da30c33482b552392d16584f704265750f3a0263fa6ec4f20f5175b7bd852",
+      "bytes": 448
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/compare_snapshots.py",
+      "sha256": "fe38d1268a8c4bb54f0941f87a9aab5ee24410cc0197b082dbebe71bc94b0b78",
+      "bytes": 1089
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/manifest.json",
+      "sha256": "ec5cdc0a5d6d757315f21f42045462dfcfb24a916fb80938b277e76a268e602f",
+      "bytes": 1211
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/native_rollback_refusal_probes.py",
+      "sha256": "839d90fd336fe56bbd73d101b0770e8eba3d7517a3953b8afd075feccdd0b94d",
+      "bytes": 9600
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/private-published-source-payload-receipt.json",
+      "sha256": "df2c438c455578d778b00363203b69aedd46e8bcdbdb3e0bd6650de6bde14bb9",
+      "bytes": 445
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/postdeployment-verifier-r1/snapshot_full_row_hashes.py",
+      "sha256": "f01e93c0fcb4ca155bdf76813626c33e4343f6a8caec2870ab1d785243c60479",
+      "bytes": 5912
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/WP18.candidate.md",
+      "sha256": "96d52b6dbae056399159632d50b32ccc6662e4f6d3677af154f7c8a3d618334b",
+      "bytes": 7423
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/WP18.preimage.md",
+      "sha256": "ec6213ddedd82a872f727ba030268d253ffbc8363e56df8b0f85c8d2168f1a49",
+      "bytes": 6016
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/apply_forward_correction.py",
+      "sha256": "02b028822e07cc1612a2e5dea3c9f271f0020f9adfb656c0aac42555b0805502",
+      "bytes": 4158
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/brief.committed-preimage.md",
+      "sha256": "973c36a552854aa801708aecf45f80d07ce2215dfc7bfa58e1ab8c9e78b2de67",
+      "bytes": 1164
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/brief.forward-restore.md",
+      "sha256": "ce9a06a6e85437781f090615d989b82cb1fa2e8c509ed0dd99b6dc28152128b5",
+      "bytes": 912
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/execution-plan.json",
+      "sha256": "c374c9299bf30b5a746955e7ab3f883d76350a4eb0823f26ff5abccab1d5e69c",
+      "bytes": 1323
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/execution-start.json",
+      "sha256": "cb40396a81a9b1fe677f9c598f0afffc4d9ed4b71ed152071611e7729ccf4698",
+      "bytes": 13377
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/forward-correction-commit.json",
+      "sha256": "d93f1d84b052b786332bc2238301cecf9d68f5a73d5ddc1376f25c859a765ed8",
+      "bytes": 925
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/forward-correction-publication-readback.json",
+      "sha256": "cd1903b634511da269d19dd6d367482933ce06a175f8392db82b5655bd1b1de0",
+      "bytes": 2653
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/forward-correction-sync.json",
+      "sha256": "e022e5f8b92d154babe76de39dbc799d4cb04d4349f8642ed69f8587de18cb58",
+      "bytes": 7691
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/forward-correction.patch",
+      "sha256": "a50c419c4ab3a35a6f953559546c88fe0cfb75605ef63b51fe30307180262610",
+      "bytes": 2882
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/manifest.json",
+      "sha256": "9ac8f5e43f84add61ec8560be78e4d10e55bdd2918467581f367e816a4592385",
+      "bytes": 1476
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/publication-final-manifest.json",
+      "sha256": "100bb4d225185ee876a7a03957517f0ab9024709cbd71cc2f00463af26394e4b",
+      "bytes": 1616
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-forward-correction-r1/verify_forward_publication.py",
+      "sha256": "ccf1776a2a8b3de5b1cc75f90ba4c10fbf8ade1b79fa4ba721be1c908be11d7d",
+      "bytes": 8435
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/cluster-publication-readback.json",
+      "sha256": "d3a6e4db0195416fdadcf94ba21b956ac74ccd23d71a5a4ce577cbe2fe1f923b",
+      "bytes": 2652
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/corrected-client-cluster-consistency.json",
+      "sha256": "6af07b6b1bfb1a441cc6a41714ac212436bf681c6df4e687fc71d8b35834c33e",
+      "bytes": 23932
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/corrected-client-cluster-projection.json",
+      "sha256": "e4710a292cb68ef1ec1d7ade55ddb51b618b05e0fee205ca33f8a3d1a53ac386",
+      "bytes": 7653
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/e9bc-reviewed-manifest.json",
+      "sha256": "95fd49db49c5881a8c3674891e6448b5725d737ba4d5e4b186b35fcc6f4ba2ad",
+      "bytes": 3397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/intermediate-review.json",
+      "sha256": "412e3dd579a5aafb9ceb09f91e5ad4c8bff56e6fe03d1e61446084c9d7d99387",
+      "bytes": 843
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/r5-final-review.json",
+      "sha256": "8c702ae164886d8ce0c88e7fc4cbe752415af4f3548ccf860b9e30660ec13b50",
+      "bytes": 1436
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/r5-reviewed-manifest.json",
+      "sha256": "fc8656d53309199b6789d50351221428abfd9b2311d877723f42001926785bc4",
+      "bytes": 3397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/r5-test-independent-review.py",
+      "sha256": "fa2a347d8a2f0a28f9e81752de42d151138f71f5d1e83adb86f7cfe3e530486f",
+      "bytes": 2667
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/frozen-binding-independent-review-r1/test_independent_review.py",
+      "sha256": "6896ec48f02829cbc97954c78f29284024727330af38997149e7f03b01f36abc",
+      "bytes": 2085
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-image-a25b62f-inspection.json",
+      "sha256": "4fb84d331bbfcd618afaba9c5f62fedac71c58e06216efa4546fcf88c95d6dc5",
+      "bytes": 52116
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-image-c103cbf-inspection.json",
+      "sha256": "21b4ddd3fa65743bed5eae568e0c08f2d150fcecacb7949263cef06bab99a683",
+      "bytes": 52116
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/FINAL-PROPOSAL.md",
+      "sha256": "7addca35af1973be4a2f2c1aeec658a00b581108da03e6509e645045f2767ae4",
+      "bytes": 4253
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/RECOVERY.md",
+      "sha256": "dc72dea7cdf519a712ee8f6d28fc6aa5667b44655d948f2c0160869383f33cef",
+      "bytes": 2320
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/SUPERSEDED.md",
+      "sha256": "2f69102d598fd0687fa53abb99c7c9b0c6ac6944ef4b9cfbd0a9667bdc1e0321",
+      "bytes": 618
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/exact-server-dryrun.json",
+      "sha256": "2bfb02130876aeb71a773585dae8b446ad5c671050ebc14d0fc7bcce86dffea5",
+      "bytes": 5916
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/fresh-readonly-preflight.json",
+      "sha256": "01bbdc94ebd6fb266ab21bdc0851eac6eddeafbabcd7105cce23806931ebfbce",
+      "bytes": 1516
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/pending-decision.json",
+      "sha256": "b1dbd9b700555c0081231d49ca03522bd0af1a635b6e11ecbd72ff0797b27de5",
+      "bytes": 1687
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/probe-helper-preparation-check.json",
+      "sha256": "e11f48b18cdb57e1b8f2bddcf7e6ffc7473ab2ab2b031c3c1a26afae609f831c",
+      "bytes": 245
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/proposal-metadata.json",
+      "sha256": "81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932",
+      "bytes": 6950
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/reuse_values_dryrun.py",
+      "sha256": "5e653ae8439c773b27a167464b620805055e9d820a907761ab30652e65fae200",
+      "bytes": 7318
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/watch_rollout.py",
+      "sha256": "a496da3c9a415ac800921ce755446be4bb55bc17e4e6b913143a5d6baf48f815",
+      "bytes": 3274
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/FINAL-PROPOSAL.md",
+      "sha256": "5ff105f0eb66e85f6d5c64a496e5f1ce7b816a32fb93351f4cd07133b9a053fd",
+      "bytes": 4607
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/RECOVERY.md",
+      "sha256": "dc72dea7cdf519a712ee8f6d28fc6aa5667b44655d948f2c0160869383f33cef",
+      "bytes": 2320
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/exact-server-dryrun.json",
+      "sha256": "2bfb02130876aeb71a773585dae8b446ad5c671050ebc14d0fc7bcce86dffea5",
+      "bytes": 5916
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/fresh-readonly-preflight.json",
+      "sha256": "01bbdc94ebd6fb266ab21bdc0851eac6eddeafbabcd7105cce23806931ebfbce",
+      "bytes": 1516
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/native_binding_probes.py",
+      "sha256": "ce492d0713c987e47eefc991a6312c1c63ed72056a597e9e28aee959d06e71d5",
+      "bytes": 5653
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/pending-decision.json",
+      "sha256": "9ef8f61b4b89354cb199688bd57650202bbcc4c1d300394a1bacf725727b601e",
+      "bytes": 1904
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/probe-helper-preparation-check.json",
+      "sha256": "36feaa02e17850c56685ccaf78556d12447fdeddae9c483721cd996da848f400",
+      "bytes": 395
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/proposal-metadata.json",
+      "sha256": "5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e",
+      "bytes": 7193
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/reuse_values_dryrun.py",
+      "sha256": "5e653ae8439c773b27a167464b620805055e9d820a907761ab30652e65fae200",
+      "bytes": 7318
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/revision1-preimage-reconstruction.json",
+      "sha256": "f29610da92f367fd8a4d2d2c99ea89fd404cd89cc2c7422f6506df177fc6b418",
+      "bytes": 239
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/verify_revision1_helper_preimage.py",
+      "sha256": "d7563ed0f36cb2fb46f8d8bb219f6bd0c0c2c5e4a16f3ebbc96042972253699b",
+      "bytes": 1424
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/watch_rollout.py",
+      "sha256": "a496da3c9a415ac800921ce755446be4bb55bc17e4e6b913143a5d6baf48f815",
+      "bytes": 3274
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/inspect_guard_image.py",
+      "sha256": "9d0c9ec14206872a0686daab5619eab81d537a45cd9dcf0cf9cd0b7a4e1ed590",
+      "bytes": 5485
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/local-cli-refresh-r1.json",
+      "sha256": "e79b34b8ac1ce02c94df254b29f8d0b475bcde9b22330239acf8f28e7360c74a",
+      "bytes": 621
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/publish_cluster_after_receiver.py",
+      "sha256": "ed9e423f82a31aad1a89721b42005575d1595b136f999859b2755e670d64f90f",
+      "bytes": 3123
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/publish_rollout_checkpoint.py",
+      "sha256": "5e1b5ffe2360351b4fd976ce19118100fe99ad5115da698a9f27eec5afa21696",
+      "bytes": 1839
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/r1-rollout-owner-bindings-failure.json",
+      "sha256": "35fc72dc89679fffcd5ec86c2d872c0ea1ff0b4e50078c40028973d1dfc4514f",
+      "bytes": 271
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/r1-verify_rollout_owner_bindings.py",
+      "sha256": "a349eeb1885b34f5d4c322ac4536591e45484b96db70023ecf73d8beb5abe875",
+      "bytes": 3951
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/r2-rollout-owner-bindings-9eaa.json",
+      "sha256": "98d333cf92d8c421542c0e129ea0bae54e4e0e2c12693b0df9662fd5aeb6409f",
+      "bytes": 9952
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/railiance-cluster-commit.json",
+      "sha256": "3dd5408936b2aebaefa1f439ab23a1607873c4567827c53e1ee4c80118b35ff4",
+      "bytes": 8307
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/railiance-cluster-consistency.json",
+      "sha256": "98ca209ad956702075e995bf9ffd5078781ecb9cb899db12ba43a95821d4e977",
+      "bytes": 23936
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/railiance-cluster-projection.json",
+      "sha256": "c92d96f54fe7afcdfdf54fd666ce0f697219e9864d331ccddff41a246179115e",
+      "bytes": 9520
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/after-corrected-client.json",
+      "sha256": "7ff14663180f308a55f4f3092d2091717f10b054d59f0a55913fca3e3f2572ec",
+      "bytes": 5195
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/after-full-row-hashes.json",
+      "sha256": "2156aad18f190384838c27e792706a156a7423391408afbc6107e6c28c5872d8",
+      "bytes": 4939
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/after-verified-client.json",
+      "sha256": "8cd8921271cd647fe40dde0f00bc55b714313426e14091397d8fd11314c5e610",
+      "bytes": 5193
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/approval-decision.json",
+      "sha256": "b51554c004daa882f3709f67bdae7f2e939d611120383e61be04ec6969878134",
+      "bytes": 1519
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/before-corrected-client.json",
+      "sha256": "0b1d9ef08eac72d71bde79c8e7e70a5f24ca0573d9a12b9fd018f3b7a45cb27d",
+      "bytes": 5154
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/before-full-row-hashes.json",
+      "sha256": "75cdd87eef79059ff3f484ed24ca69e285899cdf8d851cc4e472653c417eb0ee",
+      "bytes": 5086
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/before-verified-client.json",
+      "sha256": "ee41be2d74085603abf2bfe2c91c1bb430b4ea0539a6cbf988528b18f3f5ef46",
+      "bytes": 5153
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/delivered-runtime.json",
+      "sha256": "89681066e8fe139456163ebfafa3efe77ffae8534ea167219230b0a74367f129",
+      "bytes": 1551
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/exact-dryrun.json",
+      "sha256": "73f8ff4094a929c2ec87e28487aa0bc73faa6a02d9377a9ccaad40295d1a084d",
+      "bytes": 5916
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/execution.json",
+      "sha256": "45c1f402bd5fae457eb977e9aefbe5400525dff70775f2bb8226dde69198e226",
+      "bytes": 560
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/final-runtime-check.json",
+      "sha256": "cba0560dc39402afa532424e965c0af9b8d854b51628dee86df1e32a6def5e2c",
+      "bytes": 749
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/final_runtime_check.py",
+      "sha256": "245aa566f01bc2510890f7f0ce9ea3e4530da513e3d77dac3a4d4e3aa688a06f",
+      "bytes": 1877
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/fresh-preflight.json",
+      "sha256": "30bd1a7104850b9f7506b171095d76cb6165dd9423902f3bdeb96a9aee553567",
+      "bytes": 2255
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/frozen-archives-after-publication.json",
+      "sha256": "95995c0184c707238d531d5113ae3798ef66051a507bf5a0b70af2966900b217",
+      "bytes": 643
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/helm-return.json",
+      "sha256": "61727deacf22d37da2d28cbaf04f5a3ddee0f9ff7571c77f1e85dba97963b572",
+      "bytes": 804
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/helm-start.json",
+      "sha256": "ca4ce17ad9f11cd7b0ed13dbd4ab0c610caca79c9fe281428a28dba50f10da17",
+      "bytes": 699
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/job-observation.json",
+      "sha256": "b0db49a54f040142be46f0caa76bfd3f09e4ac060fbc1e88c74c4077eeb0552c",
+      "bytes": 1134
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/native-refusal-probes.json",
+      "sha256": "673ccef965c820704dc310a1bf7832b583c30c3edfeb814528cf892555199172",
+      "bytes": 2029
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/ordinary-pipeline-preservation-finding.json",
+      "sha256": "43d4adc0ffbf61345865eebb3f8948f82a3c33a28fd0436eccd08bc93ba973c1",
+      "bytes": 1810
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/pipeline-failure-progress.json",
+      "sha256": "4acbc9f6bf0d8a72a58eabe7cebaecfc418c383f2e55dd56e598ca77c6b29957",
+      "bytes": 1161
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/post-publication-full-row-hashes-FAILED.json",
+      "sha256": "ea08b8f5581e6fb335359427a4b24f990bc814b452d3733f7d4174bb1b6ed6df",
+      "bytes": 5048
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/pre-publication-full-row-hashes.json",
+      "sha256": "bf01a632d7185705bce44b96210f7376e7f94c65cc5b858924eb0bed19c73dfd",
+      "bytes": 5073
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/progress-receipt.json",
+      "sha256": "59b6b9a4405c9a09399756d0b640df91b2fcd62fd7fe3738754613553487831e",
+      "bytes": 959
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/snapshot_after_publication.py",
+      "sha256": "14a3098ea4aacb3bee1a02144db5e4866a7f43ff83da9e94cf8028089ccf2f99",
+      "bytes": 2028
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/snapshot_current_stage.py",
+      "sha256": "d4e8f35ad128ac1ed511c8994a76b0ad1624c47a5fe4cd7dc1e5b5694f845e51",
+      "bytes": 2049
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/staging-cleanup.json",
+      "sha256": "3f7f674da48e3e883bf16476b97ff7c8e1c83ab45276fca707bee78e7810d9b8",
+      "bytes": 46
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/verified-receiving-return.json",
+      "sha256": "d088c336d62c7bdde0e586b0f1b73c3aa3d4031a4debd9ac90206128728257f4",
+      "bytes": 2064
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/watch_rollout.py",
+      "sha256": "e26234b14a103c07e947857e3e8adba73ded3bb43f3a14edaba197b93a2b6744",
+      "bytes": 3274
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/PUBLISH-AFTER-RECEIVING.md",
+      "sha256": "e7119344687a46de66b38814f31b87cc5f399af4496f9c1f972609f8ea409e54",
+      "bytes": 4609
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/RMGR-WP-0019.conditional-completion.md",
+      "sha256": "4aa0aad970d31e9e08fd38a676c289e74d293b4484b3ae0fd2f40d7b72376183",
+      "bytes": 11958
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/RMGR-WP-0019.verified-completion.md",
+      "sha256": "eb8bda226be2ad3cb91fe771b27fe106715aa5d61e44d43f4f534f9f5ee4ad83",
+      "bytes": 11981
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/RMGR-WP-0019.wait.preimage.md",
+      "sha256": "6378d96b70259ae81435b6ce8f97864698bdc5b6679cabbe9dc61a1fc1d09699",
+      "bytes": 9882
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/T05-conditional-completion.patch",
+      "sha256": "b88efdd3b62b056ef53b9498a5c04e699593853a96332e4c86264825a9fbe1cb",
+      "bytes": 2622
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/actual-cluster-allocator-preview.json",
+      "sha256": "78725ea97b70b26eed0b0ac8c3b72161eacd893343f6b087548540e784a0e792",
+      "bytes": 6663
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/apply_registrar_source.py",
+      "sha256": "d54988c12263d4994a9e54b6e1d1e2423c485ca6055cbf2df89e5f93e02ebe4a",
+      "bytes": 4388
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/canonical-test-confirmation.json",
+      "sha256": "242a3eb25744a41c99646e69870cf85f395aaa543a2768815e6a71cb514471da",
+      "bytes": 406
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/isolated-47-tests.txt",
+      "sha256": "da4f11fa49d639096b0010461a642db91ebb31771671a8a0f9225e4c35d14d42",
+      "bytes": 99
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/manifest.json",
+      "sha256": "6c34afe49455b5e95da3b784d8c226dd62efe35fe2f7a2e87c15bcf5f910fbcc",
+      "bytes": 1527
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/own-managed-application.json",
+      "sha256": "6d5672786575cf6e13c27619d562b03fe23d2b82fd09b345a38c4e28dcaf4593",
+      "bytes": 928
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/own-managed-preview.json",
+      "sha256": "6989fd9e70cae86d7013e596d8182622e5eff4f58c59f73613b0c0fc797ca895",
+      "bytes": 929
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/publication-final-manifest.json",
+      "sha256": "2eab1c12b369e36519bf615a97c0e97d8af6148b32eab4c25d818a3660d3834f",
+      "bytes": 1883
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/publish_registrar.py",
+      "sha256": "afed552b62d432ba5e117d0474dd0f03cd5d9192f3131c53de66824de3761ea6",
+      "bytes": 3889
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/r1-registrar-publication-readback.json",
+      "sha256": "5570f34c598cc8e15459e450dc7b8ce8dffda900217584ce1ebc383d5c1f36bf",
+      "bytes": 450
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/r1-verify_registrar_publication.py",
+      "sha256": "3603e96dd0cec3ea1634561c28eac545d35ae8e4936b5d43d0305aa76094d389",
+      "bytes": 8047
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/receiving-return.json",
+      "sha256": "d088c336d62c7bdde0e586b0f1b73c3aa3d4031a4debd9ac90206128728257f4",
+      "bytes": 2064
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/receiving-return.pending-template.json",
+      "sha256": "0ef70ae4b57045b81d2b226ecc36788b1905cd0dbac84850f906e59e2340c0e6",
+      "bytes": 735
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/registrar-commit.json",
+      "sha256": "02adaa482d7bfbe4db165f071620a36a1e5d37ed01eb44dffa01eec756a528fb",
+      "bytes": 3101
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/registrar-publication-readback.json",
+      "sha256": "26e359c17a342c1155c6d1265398f8f89b43cd3597de567cf9591d73fc05a3cf",
+      "bytes": 4660
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/registrar-sync.json",
+      "sha256": "876c27d4b1464ff024268a8b53aa77767dbeaec110bf8afadb016fc9584f97cd",
+      "bytes": 1383
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/source-application.json",
+      "sha256": "333c12f9f21ec4113cee97711a661ab02bf967a39530f8d7a2d5bc2e18503aca",
+      "bytes": 1456
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/source-review.json",
+      "sha256": "b67463db89789aeae5a347bd09b221d74df0e8da2d0466392634b505902d1244",
+      "bytes": 2072
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/verify_registrar_publication.py",
+      "sha256": "a7ea9793e5d31a1deddecf9422e57178cb8734aad9619dc1ec5c4d01cc8b53f7",
+      "bytes": 8397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-followthrough-r1/wp19-actual-projected-dependencies.json",
+      "sha256": "6f55ab18c74825a26a525ed0e5f3324fe6b2ec202f788f0eb99978d28bfd3292",
+      "bytes": 1111
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/WP19.candidate.md",
+      "sha256": "3c28ff7809a56a2096f58986f1b3d7e6f99d365d42d0e8a97ee786ae7d067cc1",
+      "bytes": 16101
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/WP19.preimage.md",
+      "sha256": "4ff763ea24b9948d59b4bdd4f5ef3e95bee72fef3016f0b6404b5db663cb83ff",
+      "bytes": 13991
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/amendment-commit.json",
+      "sha256": "c73ee532b9018808de14c03cf42ded7eeddf4589dd5521eeae052703644a2748",
+      "bytes": 725
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/amendment-publication-readback.json",
+      "sha256": "ef1a342f12b2007480f7c3bf9039f257a238ebce921be076ce277641642e2f96",
+      "bytes": 5157
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/amendment-sync.json",
+      "sha256": "43467eb3ada96f3207ed97d3809e6b5230636280b400569660ece5813b1535ab",
+      "bytes": 2803
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/manifest.json",
+      "sha256": "5b5600ccc9611b86ef190895a39dca2bda6032caa37e664cd995a6ae36868c2f",
+      "bytes": 1441
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/owner-amendment.patch",
+      "sha256": "8527c5fa953a86dea8bc3f3bcf783084608c6850dd323f3390cfa27157f9cd2a",
+      "bytes": 2785
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/publication-final-manifest.json",
+      "sha256": "06f9d9b1b1adf4e728606a45422e61b4897b86c8f0e6fd6cb9f8d1fc47099184",
+      "bytes": 1866
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/publish_amendment.py",
+      "sha256": "d30ea83e814b32ef603056a8338125e5a5cf49765d698adfda317e8a3f8e3435",
+      "bytes": 1895
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/r1-amendment-publication-readback.json",
+      "sha256": "e4478c48af15dac3a67b8514ce68cf50c4a6502c497dcb7d29e8873c97941737",
+      "bytes": 450
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/r1-verify_amendment_publication.py",
+      "sha256": "f1c08cf2912c894de4825291fc9d56c2813dfd21436a7596781967b139cd4ec8",
+      "bytes": 9047
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-current-client-r1/verify_amendment_publication.py",
+      "sha256": "c794ce4e1b1672982a606dce9bd364de0754dd905d63fbaf3cf6b1b2c42f4764",
+      "bytes": 9406
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/RMGR-WP-0019.candidate.md",
+      "sha256": "4ff763ea24b9948d59b4bdd4f5ef3e95bee72fef3016f0b6404b5db663cb83ff",
+      "bytes": 13991
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/RMGR-WP-0019.preimage.md",
+      "sha256": "c09c685313de13ad4a31891fd67b8a92f3d9a085c37cee92257d15b485a32cde",
+      "bytes": 12155
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/amendment-commit.json",
+      "sha256": "fe3fa69da34257ec2f66fd4d659f925c17b0f80caedbb99092b0bade3de17f73",
+      "bytes": 664
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/amendment-publication-readback.json",
+      "sha256": "8c78373a27d448ddb4dbd9374e389df040866a91d5be669ac23c09af8808f213",
+      "bytes": 4660
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/amendment-sync.json",
+      "sha256": "9bb18ad3881a3b8cb35595c7ddf92d2908a3c9e8fccde38f64546150174b1ef1",
+      "bytes": 2380
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/manifest.json",
+      "sha256": "5d1989cb40f9206d928d023370bbcbd781b835a8e32925d1ce7e21d21d04a640",
+      "bytes": 1307
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/owner-amendment.patch",
+      "sha256": "e8af90d6714b0545d8b78fcb43df42a9d9e6056a0491658b30514ab942a7f23e",
+      "bytes": 2311
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/publication-final-manifest.json",
+      "sha256": "d83958396d09c248c14f46b17f69bffe4f38474145a750fe869baedf5eee4012",
+      "bytes": 1449
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/publish_amendment.py",
+      "sha256": "8521a46b5daed3e268b0569d69b608e9cefbbd87b5454e19eb6413e421ed89e3",
+      "bytes": 1901
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/r1-amendment-publication-readback.json",
+      "sha256": "f4a1d44b4d73e4cd18e52295969d655c1519c93b39813eff1997c2dd7334700e",
+      "bytes": 456
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/r1-verify_amendment_publication.py",
+      "sha256": "d13131f6f1179d082078e7fe87fec2fabf72e8931fa6a320120623869939e1c4",
+      "bytes": 8397
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/registrar-t06-preservation-failure-r1/verify_amendment_publication.py",
+      "sha256": "a2b7842c378a2fcaaecfd006d1549f6451f72e260d4b6fb8e193080fcfb7d472",
+      "bytes": 8988
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-checkpoint-commit-REFUSED-r1.json",
+      "sha256": "5a28b6d3bd31ab115a3b5847a54484a956e4ba4e6413bd06db60ca4f001b8080",
+      "bytes": 21522
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-coordination-receipts.json",
+      "sha256": "e5af7cbe292057978a7954948c7ceadd0c9f6225dcf1cabf31c15e83d372c0e1",
+      "bytes": 3589
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-owner-bindings.json",
+      "sha256": "ab8e44ee08d3aba0ca2d70041734ebcdc514527fc5c0733343bd00af003692d1",
+      "bytes": 9952
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-publication-scanner-block-r1.json",
+      "sha256": "8c023934c91a097eb73c502ef105c0afc3f7fe7c21860cd61bb1cfc383c0ed98",
+      "bytes": 1851
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-scanner-publication-refinement-r2.json",
+      "sha256": "2363f3e2b044458332608c79570a751cab03f5768900aeff9ec2d5a9b8530d6e",
+      "bytes": 2538
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-scanner-redacted-diagnosis-r1.json",
+      "sha256": "e77353b7e78db0c21198981e618704e91630e3471814e1d656a1a6e737ba31fc",
+      "bytes": 48127
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/rollout-typed-metadata-scan-r2.json",
+      "sha256": "56246560e0ce96cd3afcc010be59293d5c1cd66e6422e2970f597fb4e5b92409",
+      "bytes": 1821
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/sync_cluster_after_binding_guard.py",
+      "sha256": "96821826ffa1d2b5e34b0db1611f2d74bfbc3403d8fc0bd3b14cc27eab6079bb",
+      "bytes": 2737
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/sync_cluster_with_verified_cli.py",
+      "sha256": "1798d14e9451254689ec15935032ff88d15c26abad8fcb830949aac00b30c4ef",
+      "bytes": 3784
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/sync_rollout_custodian.py",
+      "sha256": "82c5eace12fb54463fa376e87f5daa50f2498cf55f1d1caabe07ba0b3f7e5021",
+      "bytes": 1790
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verified-client-cluster-consistency.json",
+      "sha256": "fd8a7d58d9e08b4866420ad77d01fbc7c28c0c2c9610ffbe95ddc77dddd9b1a6",
+      "bytes": 22953
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verified-client-cluster-projection.json",
+      "sha256": "c25b43575273df0e648842d447979aca1b41ade16fcdaf9f5f870024e7ca06e9",
+      "bytes": 7691
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verified-loaded-client.json",
+      "sha256": "0745b5df92d2533714e2a87a43c73b3b685e7bab7bcf4444f7a5fbd82dd4722f",
+      "bytes": 183
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verify_cluster_publication.py",
+      "sha256": "a0687ae6e05a6faf4efd2122c9ebd9f9a25a8cfb936741c8971295bb029abb1f",
+      "bytes": 8207
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verify_rollout_close.py",
+      "sha256": "7b15de9333bf0c83cb310e147c567a251f76e4d8c664749b187fe39cab289817",
+      "bytes": 3481
+    },
+    {
+      "path": "docs/changes/netkingdom-target-2026-10-17/verify_rollout_owner_bindings.py",
+      "sha256": "b272f38c8778a2847c59797f1b5651d7dea82bb639496d5dae05235a18883789",
+      "bytes": 4247
+    },
+    {
+      "path": "docs/netkingdom-target-implementation.md",
+      "sha256": "07f81adbb419ee4a3384d17e64ee63f8f071d7be11b47717c1261be5a2ef99a8",
+      "bytes": 66010
+    },
+    {
+      "path": "workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
+      "sha256": "c944478b08ef4c4736553f7428516e4aee5fd3a9db84e3b2136af92e65cddc87",
+      "bytes": 73442
+    }
+  ],
+  "excludes": "All pre-existing staged/dirty brief, WORK-RECORDS, six assessment JSONs, unrelated untracked work and private backup directories.",
+  "publication_refinement": "Normal scanner false positives resolved through explicitly typed SHA metadata; original preparatory blobs retained locally and reversible source receipt companions published. Pending proposal revision2, unchanged scope."
+}
diff --git a/docs/changes/netkingdom-target-2026-10-17/verify_rollout_owner_bindings.py b/docs/changes/netkingdom-target-2026-10-17/verify_rollout_owner_bindings.py
new file mode 100644
index 00000000..6e7f9176
--- /dev/null
+++ b/docs/changes/netkingdom-target-2026-10-17/verify_rollout_owner_bindings.py
@@ -0,0 +1,34 @@
+"""Read-only final source/remote/Hub binding check, retaining only public identifiers."""
+from pathlib import Path
+import hashlib,json,re,subprocess,urllib.request,yaml
+here=Path(__file__).resolve().parent
+specs=[('state-hub','STATE-WP-0095','4c03c9d2c6a47f5c7247473f74b2e2f188b787bd',10),('repo-manager','RMGR-WP-0019','1dacdd4a31c8e9b1bb1ddfb0c349dfb87e29e8cd',6),('repo-manager','RMGR-WP-0021','1dacdd4a31c8e9b1bb1ddfb0c349dfb87e29e8cd',5),('railiance-cluster','RCLUSTER-WP-0018','6ae3f847c83da3402883453ee7110457bfb2d0d6',5)]
+def git(root,*a):return subprocess.check_output(['git','--no-optional-locks','-C',str(root),*a],stderr=subprocess.PIPE,timeout=30).decode().strip()
+def get(path):return json.load(urllib.request.urlopen('http://127.0.0.1:8000'+path,timeout=20))
+health=get('/state/health');assert health['instance_role']=='primary' and health['instance_label']=='railiance01'
+rows=[];snapshots={};targets={'NK-WP-0049-T33':'56c8d469-7a10-5d50-a30e-95cbf3cd4756'}
+for repo,wp,head,count in specs:
+ root=Path('/home/worsch')/repo;assert git(root,'rev-parse','HEAD')==head
+ paths=list((root/'workplans').glob(wp+'-*.md'));assert len(paths)==1;path=paths[0];raw=path.read_text();assert git(root,'show',head+':'+str(path.relative_to(root)))==raw.strip()
+ front=yaml.safe_load(raw.split('---',2)[1]);tasks=[yaml.safe_load(v) for v in re.findall(r'```task\n(.*?)\n```',raw,re.S)];assert len(tasks)==count
+ for task in tasks:targets[task['id']]=task['state_hub_task_id']
+ rows.append(dict(repo=repo,wp=wp,head=head,source_path=str(path),front=front,tasks=tasks,source_sha256=hashlib.sha256(path.read_bytes()).hexdigest()))
+result=[]
+for item in rows:
+ repo=item['repo'];root=Path('/home/worsch')/repo
+ remote=git(root,'ls-remote','origin','refs/heads/main').split()[0];assert remote==item['head']
+ snapshot=snapshots.setdefault(repo,get('/repos/'+repo+'/work-record-projection/snapshot'))
+ plan=next(p for p in snapshot['workplans'] if p['id']==item['front']['state_hub_workstream_id']);assert plan['status']==item['front']['status']
+ actual=[t for t in snapshot['tasks'] if t.get('workplan_id',t.get('workstream_id'))==plan['id']];assert len(actual)==len(item['tasks']);byid={t['id']:t for t in actual}
+ for task in item['tasks']:
+  t=byid[task['state_hub_task_id']];assert t['record_id']==task['id'] and t['status']==task['status']
+  if 'needs_human' in task:assert bool(t.get('needs_human'))==task['needs_human']
+ expected={(t['state_hub_task_id'],targets[d],'starts_after') for t in item['tasks'] for d in t.get('depends_on',[]) if d in targets}
+ edges=[e for e in snapshot['dependencies'] if e['from_workplan_id']==plan['id'] and e.get('from_task_id')]
+ observed={(e['from_task_id'],e.get('to_task_id'),e['relationship_type']) for e in edges}
+ assert observed<=expected,'undeclared-projected-edge'
+ required_pairs={'RMGR-WP-0019':[('RMGR-WP-0019-T06','STATE-WP-0095-T10')],'STATE-WP-0095':[('STATE-WP-0095-T07','STATE-WP-0095-T10')],'RCLUSTER-WP-0018':[('RCLUSTER-WP-0018-T03','RCLUSTER-WP-0018-T02'),('RCLUSTER-WP-0018-T04','RCLUSTER-WP-0018-T02'),('RCLUSTER-WP-0018-T04','RCLUSTER-WP-0018-T03')]}
+ assert all((targets[a],targets[b],'starts_after') in observed for a,b in required_pairs.get(item['wp'],[])),'required-current-edge-missing'
+ result.append({'repo':repo,'workplan_id':item['wp'],'commit':item['head'],'remote_exact':True,'source_sha256':item['source_sha256'],'status':plan['status'],'tasks':[{k:t[k] for k in ['id','record_id','status','needs_human'] if k in t} for t in actual],'projected_edges':[{'from_task_id':a,'to_task_id':b,'relationship_type':c} for a,b,c in sorted(observed)],'unprojected_source_declarations':[{'from_task_id':a,'to_task_id':b,'relationship_type':c} for a,b,c in sorted(expected-observed)]})
+v={'schema':'custodian.rollout-owner-bindings.v1','status':'verified','primary':'primary/railiance01','task_bindings':sum(len(r['tasks']) for r in result),'rows':result,'runtime_deployed_source':'51bc70d1ff8f25450a8650d8e50caf053093a02e','successor_runtime_source_not_deployed':'c103cbf3c8bed5dba87a03e320595ddded9301a3','native_target_gates_closed':0}
+(here/'rollout-owner-bindings.json').write_text(json.dumps(v,indent=2)+'\n');print(json.dumps({'status':'verified','task_bindings':v['task_bindings']}))
diff --git a/docs/netkingdom-target-implementation.md b/docs/netkingdom-target-implementation.md
index 091aaca9..46123d0e 100644
--- a/docs/netkingdom-target-implementation.md
+++ b/docs/netkingdom-target-implementation.md
@@ -772,3 +772,134 @@ driver, external message or worker wake was created. The
 verifies all 58 NetKingdom and eight State Hub task IDs/UUIDs/statuses against
 source, plus exact remote heads. Earlier Repo Manager/Secrets readback verifies
 nine more owner bindings and the two Secrets dependency edges.
+
+
+## Approved coordination receiver execution, 2026-10-17
+
+This checkpoint supersedes the pending-rollout state recorded above. The founder's
+“good, go ahead” approved exact revision 4 of
+`STATE-WP-0095-T06-cluster-frozen-receiving-r1`, digest
+`63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32`.
+Decision `e3798419-8aa9-5425-8c08-20df6bd82a19` records
+`ADMINISTER @ realm:kubernetes/railiance01`, `activation=APPROVED` for that
+proposal and its exact conditional recovery, with no autonomy grant.
+
+The owner Helm upgrade succeeded as revision 76. API and MCP are Ready on the
+approved image digest `c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015`;
+primary/railiance01 reports applied and expected schema `c4d5e6f7a8b9`.
+Delivered historical projection module hash matches the reviewed image. Full-row
+hashes and column sets of all three historical workplans and fifteen tasks are
+identical before and after deployment. Five actual native receiving cases pass:
+preserve, foreign holder, missing task, nonterminal parent and nonterminal task.
+Every probe rolled back; zero commits and a fresh-transaction full-row comparison
+confirm preservation. Helm succeeded and the migration Job disappeared after
+its exact UID and owned Pod were observed; no Job Succeeded event is claimed.
+No recovery was needed. The exact owned staging archive/directory was removed.
+
+Only after these observations was the frozen seven-file registrar source applied.
+Canonical focused checks pass 47; the actual read-only Cluster allocator preview
+proposes exactly seven missing UUID fields in the new WP0018 and one existing
+ADHOC task. Fifteen invalid historical labels and five collisions remain reported;
+no archive rewrite, direct database UUID repair or broad syntax exception occurred.
+Owner publication and receiving follow-through are recorded separately below.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/verified-receiving-return.json`
+and its hash-bound actual native receipts; registrar source/application and preview
+receipts in `registrar-followthrough-r1/`. The same original supervision trial
+retains all preparation revisions and failures; accepted-revised execution earns
+no unchanged-success credit. All sixteen native target gates remain open.
+
+
+## Ordinary Cluster publication and retained acceptance failure, 2026-10-17
+
+Cluster owner commit `c562d7134c38679952a8ffd17a8a893a900aef0d` is published and
+reconciled on primary/railiance01 at the exact expected/derived revision. WP0018's
+five task ID/UUID/status bindings and three internal edges match source and the
+remote. Exactly seven missing fields were assigned by the normal managed path,
+including one existing ADHOC task field. All three frozen archive hashes remain
+unchanged, and original staged/dirty generated files were restored exactly.
+Registrar source admission `70cd7549` is published and verified, with T05 done;
+source preparation and actual Cluster acceptance remain separate outcomes.
+
+The stronger full-row guard FAILED after the required legacy deep consistency
+pass: the three historical parent hashes changed, while all fifteen task full
+rows remain identical. The native forge projection reports preservation, but
+that does not establish preservation for the whole pipeline. Source review found
+that `PUT /workplans/index/bindings` writes backing fields and a new sync timestamp
+without consulting the frozen-history guard; ORM update timestamps also advance.
+The checker calls this route even during checks. Only whole-row baseline hashes
+were retained, so exact changed columns/values cannot be reconstructed from the
+baseline. No guessed timestamp or database restoration is performed.
+
+This later failure does not erase the earlier passing rollout and rollback-only
+probe results. It prevents RMGR-WP-0019-T06 and STATE-WP-0095-T07 completion.
+The existing State Hub owner record carries the source guard and regression
+follow-up plus its separate reviewed runtime-delivery obligation. Source edits,
+fixtures and successful publication do not stand in for that new native return.
+No further production rollout is authorized by the earlier revision-4 approval.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/cluster-publication-readback.json`,
+`railiance-cluster-projection.json`, and
+`receiver-rollout-r4/ordinary-pipeline-preservation-finding.json`, including the
+retained `post-publication-full-row-hashes-FAILED.json` and exact archive checks.
+All sixteen native target gates remain open.
+
+
+## Verified installed-client repair and exact runtime successor, 2026-10-17
+
+State Hub source guards and real writeback regression are published through
+`c103cbf3c8bed5dba87a03e320595ddded9301a3`; the later WP-only checkpoint is
+`9eaa36143ea18111c522ea14d32978495b4e5030`. Canonical guard checks pass 102,
+independent review passes 109, and five actual disposable Git checks verify
+file-scoped commits with unrelated staged/dirty state and hook refusal preserved.
+Normal chart rendering and classification checks pass. The first attempted
+client rerun loaded an older installed package and failed again; its actual
+receipts stay retained. The installed owner package was then refreshed and its
+loaded checker hash verified against R6 source before the next run.
+
+The corrected actual ordinary Cluster maintenance passes: 20/20 ordinary
+bindings, three frozen bindings omitted, and all eighteen CURRENT full-row
+hashes unchanged before/after. Original failed parent hashes are not restored
+or relabeled as successes. The old writeback helper also included an unrelated
+staged brief during legitimate C23 activation. Forward correction
+`6ae3f847c83da3402883453ee7110457bfb2d0d6` preserves active WP18, restores the
+prior committed brief, and reinstates its exact original staged/worktree bytes;
+dirty WORK-RECORDS and archive hashes are preserved. No history was rewritten.
+Repo Manager `1dacdd4a31c8e9b1bb1ddfb0c349dfb87e29e8cd` retains T05 done/T06 wait
+and projects T06's actual dependency on STATE-WP-0095-T10. State Hub T07 also
+waits on T10; all ten own task UUIDs remain exact, T09 done/T10 human wait.
+
+The normal CI guard image at
+`sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1`
+is inspected read-only against runtime source `c103cbf`. Selected guard/receiver/
+migration/build files match; package metadata and hub-core source hashes equal
+the deployed image's observations. Exact pinned-package reuse-values server
+dry-run passes eight identities and only three image changes. Fresh explicit
+target/headroom/schema checks pass. The prepared eight native cases enforce
+commit interception and rollback; their actual schema/interception contracts
+are checked without a DB connection, but these new native cases are not executed.
+
+Exact successor `STATE-WP-0095-T10-frozen-bindings-guard-r1` revision 1 is pending,
+metadata digest `81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932`,
+decision `df703266-6719-4c04-ae1b-ba9afd3bca1c`. It requests scoped new-image
+approval, current-baseline acceptance with the old failure retained as an
+exception, and exact conditional recovery/rollback to Helm 76. Unknown EUR
+cost/risk or Job/DB mapping is not a free or bounded exposure. The prior
+revision-4 approval does not approve this successor. Current runtime remains
+healthy Helm 76 on the approved `51bc70d` image; no new API guard delivery or
+native security-gate closure is inferred. The original supervision record
+retains successful earlier-stage execution plus later failures; its new request
+is pending/not executed and grants no authority.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/`,
+`receiver-rollout-r4/before-verified-client.json`, `after-verified-client.json`,
+`verified-loaded-client.json`, `verified-client-cluster-consistency.json`,
+`verified-client-cluster-projection.json`, the exact owner publication packets
+and `rollout-owner-bindings.json`. The original receiver/registrar case is
+satisfied; the successor attaches to the existing retirement driver and stops
+at the human gate. TLS metadata work remains an owner wait. No worker was woken.
+All sixteen native target gates remain open.
+
+The same pending API guard proposal now has revision 2, SHA256 `5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e`, at `docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/FINAL-PROPOSAL.md`. Only the probe source-hash metadata representation changed after the normal scanner flagged hashes as generic API keys. Revision 1 remains unapproved and unexecuted; the runtime image, probe case logic, acceptance exception and recovery scope are unchanged. Source-publication receipt hashes are exposed through reversible typed metadata companions; original bytes and the refused scan remain retained.
+
+The owner’s WP-only revision-2 reference amendment is published at State Hub `4c03c9d2c6a47f5c7247473f74b2e2f188b787bd`. Final source/remote/primary readback verifies all 26 affected owner task bindings; runtime source remains `51bc70d` and the proposed guard image remains `c103cbf`.
diff --git a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
index b4301b5a..d01ba58f 100644
--- a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
+++ b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
@@ -961,3 +961,134 @@ action is approved or executed. Four coordination receipts attach foreign waits
 without messages or worker wakes. Source/remote/Hub readback verifies 66 new
 checkpoint owner bindings plus the nine Repo Manager/Secrets bindings; source
 counts and native acceptance remain separate.
+
+
+## Approved receiver execution, 2026-10-17
+
+This checkpoint supersedes the pending-rollout state recorded above. The founder's
+“good, go ahead” approved exact revision 4 of
+`STATE-WP-0095-T06-cluster-frozen-receiving-r1`, digest
+`63a02e8296d126c0158b7eb2c4ce79c7eeb6f8d6f61298d473c1065c7557ba32`.
+Decision `e3798419-8aa9-5425-8c08-20df6bd82a19` records
+`ADMINISTER @ realm:kubernetes/railiance01`, `activation=APPROVED` for that
+proposal and its exact conditional recovery, with no autonomy grant.
+
+The owner Helm upgrade succeeded as revision 76. API and MCP are Ready on the
+approved image digest `c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015`;
+primary/railiance01 reports applied and expected schema `c4d5e6f7a8b9`.
+Delivered historical projection module hash matches the reviewed image. Full-row
+hashes and column sets of all three historical workplans and fifteen tasks are
+identical before and after deployment. Five actual native receiving cases pass:
+preserve, foreign holder, missing task, nonterminal parent and nonterminal task.
+Every probe rolled back; zero commits and a fresh-transaction full-row comparison
+confirm preservation. Helm succeeded and the migration Job disappeared after
+its exact UID and owned Pod were observed; no Job Succeeded event is claimed.
+No recovery was needed. The exact owned staging archive/directory was removed.
+
+Only after these observations was the frozen seven-file registrar source applied.
+Canonical focused checks pass 47; the actual read-only Cluster allocator preview
+proposes exactly seven missing UUID fields in the new WP0018 and one existing
+ADHOC task. Fifteen invalid historical labels and five collisions remain reported;
+no archive rewrite, direct database UUID repair or broad syntax exception occurred.
+Owner publication and receiving follow-through are recorded separately below.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/receiver-rollout-r4/verified-receiving-return.json`
+and its hash-bound actual native receipts; registrar source/application and preview
+receipts in `registrar-followthrough-r1/`. The same original supervision trial
+retains all preparation revisions and failures; accepted-revised execution earns
+no unchanged-success credit. All sixteen native target gates remain open.
+
+
+## Ordinary Cluster publication and retained acceptance failure, 2026-10-17
+
+Cluster owner commit `c562d7134c38679952a8ffd17a8a893a900aef0d` is published and
+reconciled on primary/railiance01 at the exact expected/derived revision. WP0018's
+five task ID/UUID/status bindings and three internal edges match source and the
+remote. Exactly seven missing fields were assigned by the normal managed path,
+including one existing ADHOC task field. All three frozen archive hashes remain
+unchanged, and original staged/dirty generated files were restored exactly.
+Registrar source admission `70cd7549` is published and verified, with T05 done;
+source preparation and actual Cluster acceptance remain separate outcomes.
+
+The stronger full-row guard FAILED after the required legacy deep consistency
+pass: the three historical parent hashes changed, while all fifteen task full
+rows remain identical. The native forge projection reports preservation, but
+that does not establish preservation for the whole pipeline. Source review found
+that `PUT /workplans/index/bindings` writes backing fields and a new sync timestamp
+without consulting the frozen-history guard; ORM update timestamps also advance.
+The checker calls this route even during checks. Only whole-row baseline hashes
+were retained, so exact changed columns/values cannot be reconstructed from the
+baseline. No guessed timestamp or database restoration is performed.
+
+This later failure does not erase the earlier passing rollout and rollback-only
+probe results. It prevents RMGR-WP-0019-T06 and STATE-WP-0095-T07 completion.
+The existing State Hub owner record carries the source guard and regression
+follow-up plus its separate reviewed runtime-delivery obligation. Source edits,
+fixtures and successful publication do not stand in for that new native return.
+No further production rollout is authorized by the earlier revision-4 approval.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/cluster-publication-readback.json`,
+`railiance-cluster-projection.json`, and
+`receiver-rollout-r4/ordinary-pipeline-preservation-finding.json`, including the
+retained `post-publication-full-row-hashes-FAILED.json` and exact archive checks.
+All sixteen native target gates remain open.
+
+
+## Verified installed-client repair and exact runtime successor, 2026-10-17
+
+State Hub source guards and real writeback regression are published through
+`c103cbf3c8bed5dba87a03e320595ddded9301a3`; the later WP-only checkpoint is
+`9eaa36143ea18111c522ea14d32978495b4e5030`. Canonical guard checks pass 102,
+independent review passes 109, and five actual disposable Git checks verify
+file-scoped commits with unrelated staged/dirty state and hook refusal preserved.
+Normal chart rendering and classification checks pass. The first attempted
+client rerun loaded an older installed package and failed again; its actual
+receipts stay retained. The installed owner package was then refreshed and its
+loaded checker hash verified against R6 source before the next run.
+
+The corrected actual ordinary Cluster maintenance passes: 20/20 ordinary
+bindings, three frozen bindings omitted, and all eighteen CURRENT full-row
+hashes unchanged before/after. Original failed parent hashes are not restored
+or relabeled as successes. The old writeback helper also included an unrelated
+staged brief during legitimate C23 activation. Forward correction
+`6ae3f847c83da3402883453ee7110457bfb2d0d6` preserves active WP18, restores the
+prior committed brief, and reinstates its exact original staged/worktree bytes;
+dirty WORK-RECORDS and archive hashes are preserved. No history was rewritten.
+Repo Manager `1dacdd4a31c8e9b1bb1ddfb0c349dfb87e29e8cd` retains T05 done/T06 wait
+and projects T06's actual dependency on STATE-WP-0095-T10. State Hub T07 also
+waits on T10; all ten own task UUIDs remain exact, T09 done/T10 human wait.
+
+The normal CI guard image at
+`sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1`
+is inspected read-only against runtime source `c103cbf`. Selected guard/receiver/
+migration/build files match; package metadata and hub-core source hashes equal
+the deployed image's observations. Exact pinned-package reuse-values server
+dry-run passes eight identities and only three image changes. Fresh explicit
+target/headroom/schema checks pass. The prepared eight native cases enforce
+commit interception and rollback; their actual schema/interception contracts
+are checked without a DB connection, but these new native cases are not executed.
+
+Exact successor `STATE-WP-0095-T10-frozen-bindings-guard-r1` revision 1 is pending,
+metadata digest `81d365926fc585a186955d8c98ee83501fd3cec12135b2256d71b46a75097932`,
+decision `df703266-6719-4c04-ae1b-ba9afd3bca1c`. It requests scoped new-image
+approval, current-baseline acceptance with the old failure retained as an
+exception, and exact conditional recovery/rollback to Helm 76. Unknown EUR
+cost/risk or Job/DB mapping is not a free or bounded exposure. The prior
+revision-4 approval does not approve this successor. Current runtime remains
+healthy Helm 76 on the approved `51bc70d` image; no new API guard delivery or
+native security-gate closure is inferred. The original supervision record
+retains successful earlier-stage execution plus later failures; its new request
+is pending/not executed and grants no authority.
+
+Evidence: `docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r1/`,
+`receiver-rollout-r4/before-verified-client.json`, `after-verified-client.json`,
+`verified-loaded-client.json`, `verified-client-cluster-consistency.json`,
+`verified-client-cluster-projection.json`, the exact owner publication packets
+and `rollout-owner-bindings.json`. The original receiver/registrar case is
+satisfied; the successor attaches to the existing retirement driver and stops
+at the human gate. TLS metadata work remains an owner wait. No worker was woken.
+All sixteen native target gates remain open.
+
+The same pending API guard proposal now has revision 2, SHA256 `5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e`, at `docs/changes/netkingdom-target-2026-10-17/guard-successor-review-r2/FINAL-PROPOSAL.md`. Only the probe source-hash metadata representation changed after the normal scanner flagged hashes as generic API keys. Revision 1 remains unapproved and unexecuted; the runtime image, probe case logic, acceptance exception and recovery scope are unchanged. Source-publication receipt hashes are exposed through reversible typed metadata companions; original bytes and the refused scan remain retained.
+
+The owner’s WP-only revision-2 reference amendment is published at State Hub `4c03c9d2c6a47f5c7247473f74b2e2f188b787bd`. Final source/remote/primary readback verifies all 26 affected owner task bindings; runtime source remains `51bc70d` and the proposed guard image remains `c103cbf`.