From fee99c24bd7dedef98d16035996ba0ea902c624a Mon Sep 17 00:00:00 2001
From: codex <codex@local>
Date: Fri, 16 Oct 2026 23:38:46 +0200
Subject: [PATCH] Record published recovery source and remaining native
 acceptance

---
 .../canonical-r7-integration.json             | 49 +++++++++++++++++++
 docs/netkingdom-target-implementation.md      | 15 +++++-
 ...gdom-security-blueprint-and-gap-closure.md |  9 ++++
 3 files changed, 71 insertions(+), 2 deletions(-)
 create mode 100644 docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/canonical-r7-integration.json

diff --git a/docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/canonical-r7-integration.json b/docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/canonical-r7-integration.json
new file mode 100644
index 0000000..ef3668f
--- /dev/null
+++ b/docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/canonical-r7-integration.json
@@ -0,0 +1,49 @@
+{
+  "source_commit": "5fcd5952add1c0167116094298a1d5feaa60cf30",
+  "remote_main": "5fcd5952add1c0167116094298a1d5feaa60cf30",
+  "canonical_source_hashes_match": true,
+  "canonical_source_tests": {
+    "count": 72,
+    "exit_code": 0,
+    "scope": "R6 runtime before publication encoding"
+  },
+  "publication_encoding_tests": {
+    "count": 73,
+    "exit_code": 0,
+    "scope": "R7 candidate, canonical byte equality checked"
+  },
+  "runtime_actual_cases": [
+    "positive",
+    "hard-parent-loss",
+    "deadline",
+    "nonzero-after-accept"
+  ],
+  "host_cleanup_review": "coordinator-r6-all-review.json",
+  "normal_sync_summary": {
+    "fail": 0,
+    "automation_error": 0,
+    "warn": 30,
+    "info": 5
+  },
+  "projected_task_count": 33,
+  "all_task_statuses_match": true,
+  "original_brief_restored": true,
+  "native_acceptance": false,
+  "tasks": [
+    {
+      "id": "NK-WP-0049-T18",
+      "status": "wait",
+      "state_hub_task_id": "141dd773-c1fa-56c1-a852-bbe2372e5125"
+    },
+    {
+      "id": "NK-WP-0049-T32",
+      "status": "done",
+      "state_hub_task_id": "cd78dbb7-a8f2-5754-8788-6eb1b7d97741"
+    },
+    {
+      "id": "NK-WP-0049-T33",
+      "status": "todo",
+      "state_hub_task_id": "56c8d469-7a10-5d50-a30e-95cbf3cd4756"
+    }
+  ]
+}
diff --git a/docs/netkingdom-target-implementation.md b/docs/netkingdom-target-implementation.md
index c750c09..43693c9 100644
--- a/docs/netkingdom-target-implementation.md
+++ b/docs/netkingdom-target-implementation.md
@@ -560,8 +560,10 @@ bounded tmpfs at that path. It adds public phase markers without disclosing
 diagnostics or private payload. The coordinator passed 72 checks, then the exact
 frozen R6 positive Docker fixture passed: original hostname/TLS/signer, native
 service authentication, wrong-secret/excess-scope denial, unchanged durable bytes
-and cleanup. The [actual receipt](changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/actual-fixture-r6-positive.json)
-uses generated test material only. It is not actual owner-held recovery, human
+and cleanup. The [independent review](changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/coordinator-r6-all-review.json)
+binds generated test material only. Full original fixture receipts and frozen
+preparation packets remain workspace-local; published owner source and retained
+review/reaper receipts provide the source and cleanup record. It is not actual owner-held recovery, human
 MFA or downstream consumer acceptance. R5's failure remains retained; its missing
 phase marker prevents a retrospective claim about the first failing check.
 
@@ -605,3 +607,12 @@ refusal passed. The [measurement](changes/netkingdom-target-2026-10-16/resume-au
 is a local baseline, not a throughput improvement or remote receive-path result.
 Per-blob process startup is a concrete owner optimization candidate; control
 coverage and attribution must be preserved before claiming TSA-15 improvement.
+
+Recovery source `5fcd5952` is published through the normal owner path. The
+[canonical integration check](changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/canonical-r7-integration.json)
+verifies all eight added files, all 33 projected task statuses and preservation
+of the pre-existing staged/working brief. Native archive/identity/consumer gates
+remain open. Continue with NK-WP-0049-T33's exact owner-held attempt preparation,
+NK-WP-0048-T16's evidence/revocation/custody integration, and the other owner
+actions in the full target audit. No historical handle or model-limit failure
+establishes a running worker. The goal remains active.
diff --git a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
index 664aa9f..d84c3a4 100644
--- a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
+++ b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md
@@ -877,3 +877,12 @@ baseline and refusal cases completed with temporary fixtures removed. Two model
 workers hit their usage limit after completed commands; coordinator verified the
 receipts and continued integration. No native target gate or rotation deferral
 changed; the full goal remains active.
+
+
+Recovery source publication verified at `5fcd5952`: all eight added files match,
+all33 projected tasks agree (T32 source proof done, T33 preparation todo, T18
+actual recovery wait), normal sync has zero failures/automation errors and30
+warnings, and the original staged/working brief is preserved. Full frozen fixture
+packets remain workspace-local; canonical owner source, published independent
+host cleanup/reaper evidence and the canonical integration receipt retain the
+bounded delivered result. The target-wide goal remains active.