docs(art): reconcile remaining v0.1 plan

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/AUTH_HANDOFF.md

@@ -10,6 +10,19 @@ guards, surface manifests, and feature tests. AUTH owns ActionId/PermissionId
 catalogues, service identities, fixed matrices, evaluator integration, grants,
 activation custody, and availability.
 
+## 2026-08-02 Reconciliation
+
+XINT-002-01 already registered the one contributor action and removed the six
+obsolete upload-session actions. AUTH-04B has an approved corrected contract,
+but its implementation/activation has not merged; guide binding/read remain
+planned. No ART status may describe that planning merge as runtime activation.
+
+The remaining AUTH order requires one correction before submission work can go
+live: split XINT-06 into `06A` (pre-submit materializer only, after hidden
+ART-04B and before XINT-05A) and `06B` (post-submit materializer plus checker
+output write/binding, after ART-06A/06B). This prevents contributor preparation
+from activating while its mandatory fixed materializer still denies.
+
 ## Guide Source Sequence
 
 1. Existing guide-source actions remain planned and unavailable.
@@ -67,9 +80,7 @@ create generic artifact-download authority.
 
 ## Submission Bundle Sequence
 
-Before ART-04A starts, AUTH must merge a separately reviewed registration
-contract, provisionally named
-`WS-AUTH-001-ART-SUBMISSION-BUNDLE-REGISTRATION`, that:
+XINT-002-01 has already merged the registration contract that:
 
 - registers planned ActionId `artifact.submission_bundle.prepare`;
 - maps it only to existing human PermissionId `submission.create`;
@@ -81,16 +92,17 @@ contract, provisionally named
 - deletes the unused planned multi-step upload authority from the live closed
   catalogue, constraints, and service matrix without compatibility aliases.
 
-After that AUTH contract merges, the retired identifiers may remain only in
+The retired identifiers may remain only in
 immutable historical records and the deterministic deletion proof. They are
 not an active design, grant, route, compatibility alias, or permission to
 implement a second intake path.
 
-ART-04A through 04C then implement one hidden continuous surface and publish
+ART-04A1 through 04C2 then implement one hidden continuous surface and publish
 its exact route/resource/guard manifest. After 04C, a separate reviewed AUTH
 activation contract may integrate the evaluator and change only
 `artifact.submission_bundle.prepare` to active. ART-05 cannot start until that
-activation merges.
+activation merges. Before XINT-05A, XINT-06A must separately activate the fixed
+pre-submit materializer required by the locked-guide checker boundary.
 
 The preparation surface authorizes before scratch intake, but the initial
 decision cannot authorize the later durable mutation. Immediately before

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/DECISIONS.md

@@ -501,3 +501,40 @@ incident reference to authorized Operators. A current-generation transient
 cancellation may retry; stale-generation cancellation commits no report. All
 other terminal source-format or content failures require a corrected item in a
 new snapshot. None creates a sufficiency decision.
+
+## D47 - Pre-Submit Materializer Activates Before Contributor Preparation
+
+The continuous submission-bundle request cannot become live while its fixed
+pre-submit materializer is unavailable. AUTH therefore splits checker
+activation: pre-submit materialization activates after hidden ART-04B evidence
+and before XINT-05A activates contributor preparation. Post-submit
+materialization and checker output/binding activate later after ART-06A/06B.
+
+## D48 - Remaining L1 Submission Work Is Split By Durable Boundary
+
+Legacy intake removal, ZIP safety, semantic identity/change detection, durable
+put intent, ready-admission publication, atomic Submission consumption, and
+legacy Submission API cutover are separate PRs. Process-local scratch remains
+continuous across hidden 04A/04B/04C orchestration; no split serializes a
+scratch handle or exposes an intermediate route.
+
+## D49 - Reviewer Access Is An ART Capability, Not An ART Review Aggregate
+
+ART supplies a hidden exact-binding review-packet materialization capability
+that recomputes full digest and size. REV owns packet manifest, lease, queue,
+assignment, decision, and note/findings. v0.1 has no reviewer-uploaded revision
+artifact. Review-evidence binding remains planned unless a separately approved
+REV requirement proves it is needed.
+
+## D50 - Contribution Preserves Identity Without Reading Bytes
+
+CON creates the ContributionRecord and references the accepted immutable
+Submission and ART binding/content identities. Core contribution creation does
+not require provider access or a new ART write. Client delivery is outside the
+v0.1 Workstream lifecycle and requires a future reviewed initiative.
+
+## D51 - Live Proof Is Split From Product Implementation
+
+Local/MinIO product lifecycle proof, AWS deployment activation proof, and final
+cross-domain conformance are separate PRs. AWS readiness cannot bury product
+behavior, and product API proof cannot claim AWS production eligibility.

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/DISCOVERY.md

@@ -159,3 +159,28 @@ containers must pass one bounded classifier that distinguishes DOCX, PPTX, and
 XLSX by internal markers. Audio/video transcription and OCR are not required by
 current v0.1 setup and remain unsupported. PNG/JPEG/WebP classification and
 metadata do not imply OCR or textual sufficiency.
+
+## 2026-08-02 End-to-End v0.1 Planning Audit
+
+Current `main` contains all ART guide implementation through `03B4`. During
+this audit AUTH-04B was still pending; it subsequently merged in PR #245 at
+`6babf81b`. Both fixed-service guide binding/read actions are now active, so
+ART-03C may start after this planning reconciliation merges.
+
+The remaining map had four material defects:
+
+1. statuses still described merged 03B chunks as proposed or active;
+2. 04A, 04C, 05, and 07 crossed too many L1 boundaries for one PR;
+3. XINT-05A would activate contributor preparation before the fixed
+   `artifact.pre_submit.checker_input.materialize` service action, even though
+   hidden 04B makes that authority mandatory inside the continuous request;
+4. ART ended at checker routing while XINT expected later reviewer artifact
+   capabilities and the product intent required accepted contribution records
+   to retain the same artifact identity.
+
+The corrected finish line is bounded: ART owns guide cutover, one-ZIP intake,
+semantic identity, prechecks, durable ready admission, atomic Submission
+binding, checker materialization/output custody, reviewer packet byte access,
+and accepted-contribution identity projection. REV owns review lifecycle and
+notes/findings; CON owns ContributionRecord; client delivery remains a future
+owner and is not silently implemented by ART v0.1.

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/INTENT.md

@@ -130,8 +130,12 @@ v0.1 contribution lifecycle.
 - no candidate storage namespace, promotion copy, or temporary provider
   retention window;
 - no second artifact recovery aggregate;
-- no review packet or reviewer evidence implementation, which remains WS-REV;
+- no reviewer queue, lease, assignment, decision, or finding lifecycle, which
+  remains WS-REV; ART supplies only exact integrity-checking byte access;
 - no payment, reputation, blockchain, or marketplace expansion.
+- no client-delivery lifecycle in v0.1. Contribution records retain the
+  accepted Submission/binding identity; a future delivery owner must consume a
+  separately authorized ART egress capability without changing that identity.
 
 ## Proof
 

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/PLAN.md

@@ -676,3 +676,49 @@ declarations that have no active v0.1 provider meaning. Chunk 03 removes direct
 provider schemes from guide-source identity. Chunk 05 deletes the remaining
 caller transport as part of the submission binding clean cut. Later code must
 not preserve an alias, fallback, or compatibility parser.
+
+## 2026-08-02 Remaining v0.1 Execution Amendment
+
+This section supersedes the earlier unsplit future-chunk sequence. It does not
+change the merged foundation or guide extraction design.
+
+```text
+AUTH-04B implementation/activation [merged PR #245]
+-> ART-03C guide verified-pipeline clean cut
+-> ART-04A1 legacy contributor-intake removal
+-> ART-04A2 bounded outer-ZIP safety/intake
+-> ART-04A3 semantic manifest + unchanged-work gate
+-> ART-04B scratch-bound platform/project prechecks
+-> XINT-06A pre-submit materializer activation
+-> ART-04C1 durable intent + one provider write
+-> ART-04C2 verified ready-admission publication
+-> XINT-05A contributor preparation activation
+-> ART-05A atomic Submission/binding/admission consumption
+-> XINT-05B Submission/binding activation
+-> ART-05B legacy Submission transport/API + automatic dispatch clean cut
+-> ART-06A post-submit checker snapshot/materialization
+-> ART-06B checker output binding and routing
+-> XINT-06B post-submit/output activation
+-> ART-07A lease-scoped reviewer packet materialization
+-> XINT-07A reviewer packet activation only
+-> ART-07B accepted-contribution artifact identity handoff
+-> ART-08A Local/MinIO real API lifecycle proof
+-> ART-08B AWS production-readiness/activation proof
+-> XINT-08 + ART-08C final v0.1 conformance
+```
+
+04A1-04C2 remain hidden internal pieces of one continuous contributor request.
+No intermediate HTTP route, durable upload session, scratch handle, local path,
+or prepared authorization crosses those PR boundaries. 04C2 alone composes the
+hidden endpoint after every internal dependency exists.
+
+XINT-06 must split because live preparation requires the fixed pre-submit
+materializer before XINT-05A can safely activate the human preparation action.
+The later 06B activation owns only post-submit materialization plus checker
+output write/binding. This removes the previous dependency cycle.
+
+Reviewer packet materialization is an ART byte-custody capability consumed by
+REV under an exact active lease. ART creates no review aggregate or decision.
+Reviewer evidence upload/binding is not required by the approved v0.1 reviewer
+workflow and remains unavailable. CON records the accepted Submission and ART
+identity without provider I/O. Client delivery is explicitly deferred.

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/RISKS.md

@@ -62,3 +62,8 @@
 | Stale Celery delivery processes replaced guide content | Critical | Payloads contain identifiers plus setup generation only; executors reload current lineage, binding, extraction, run, and generation before invocation and persistence. |
 | Unsupported image/audio/video content is passed raw to an agent | High | PNG/JPEG/WebP expose bounded structural metadata only; OCR and audio/video are unsupported, and image-only required text stops setup internally. |
 | Extracted guide text performs prompt injection | Critical | Delimit and label extracted material as untrusted data, expose no tools/secrets/provider authority, enforce typed output, and test adversarial embedded instructions. |
+| Contributor preparation activates before its fixed pre-submit materializer | Critical | Split XINT checker activation: activate pre-submit materialization after hidden 04B and before XINT-05A; keep post-submit/output actions planned until ART-06 evidence. |
+| Review packet ownership is confused with review lifecycle ownership | Critical | ART owns exact binding materialization and integrity; REV owns packet manifest, lease, assignment, decision, and notes/findings through a typed joint contract. |
+| Reviewer evidence actions create an unapproved upload path | High | Keep review-evidence binding planned and unavailable unless a separate approved REV requirement adds exact slots and guards; reviewer revision remains note/findings only. |
+| Contribution or delivery silently changes accepted bytes | Critical | ContributionRecord stores accepted Submission/binding/content identity without provider I/O; future delivery requires a separate authorized full-read capability and rehash. |
+| Final live-proof PR hides product or cloud implementation | High | Split Local/MinIO API proof, AWS deployment activation, and final conformance into separate reviewable chunks. |

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/STATUS.md

@@ -1,5 +1,20 @@
 # Status: WS-ART-001 Immutable Artifact Storage
 
+## Audited Durable State At 2026-08-02
+
+ART-03A and every split ART-03B chunk through 03B4 are merged. The complete
+verified guide binding, materialization, classification, extraction, and hidden
+same-generation sufficiency continuation exist on `main`.
+
+AUTH-04B production implementation merged in PR #245 at `6babf81b`. The fixed
+guide binding and guide-reader services are live, and
+`artifact.guide_source.binding.create` plus `artifact.guide_source.read` are
+active under `XINT_002_04B`. ART-03C's dependency is satisfied.
+
+`WS-ART-001-PLAN3` is the planning-only end-to-end audit of remaining v0.1
+work. It splits oversized chunks, repairs activation order, and adds explicit
+reviewer/contribution custody handoffs. It starts no implementation.
+
 ## Completed Foundation
 
 Planning and the artifact foundation merged through PR #97 and PR #101. The
@@ -58,11 +73,11 @@ the guide-content boundary is being corrected explicitly: verified binding,
 full-read materialization, format classification, isolated extraction,
 canonical extraction provenance, incremental complex-format support, and
 same-generation sufficiency continuation are separate PR-sized contracts.
-`WS-ART-001-03B4` is active: its reviewed contract fixes the artifact-owned
+`WS-ART-001-03B4` is merged: its reviewed contract fixes the artifact-owned
 material port, all-items-required semantics, deterministic 12 MiB assembly,
 normalized report-to-extraction provenance, and the hidden pre-submit
-identifier/generation continuation. AUTH binding/read actions remain planned
-and unavailable; ART-03C remains blocked on AUTH-04B.
+identifier/generation continuation. AUTH binding/read production activation
+remains unmerged; ART-03C remains blocked on that implementation.
 
 After 03B3A merged, the original complex-format chunk was found too broad for
 one dependency and parser-security review. It is replaced by 03B3B1 dependency
@@ -76,6 +91,7 @@ package, lock, runtime import, or parser behavior change. Its approval gate
 requires independent protected GitHub review of the exact final PR head before
 merge; repository-authored evidence alone is not authority.
 
+03B1 merged through PR #222, 03B2 through PR #223, and 03B3A through PR #225.
 03B3B2 is merged through PR #231. It installs only the approved `pypdf` wheel
 and adds bounded passive-PDF text extraction inside the existing isolated
 child.
@@ -86,9 +102,9 @@ wheel and adds the shared bounded OPC/OOXML container security capability.
 omission facts on the shared OOXML boundary. 03B3B3C merged through PR #235 and
 adds bounded PPTX slide/notes extraction. 03B3B3D merged through PR #238 and
 adds bounded XLSX cell extraction. 03B3B4 merged through PR #239 and adds only
-bounded PNG/JPEG/WebP structural metadata. 03B4 is now the active hidden
-same-generation sufficiency continuation. AUTH binding/read actions remain
-inactive.
+bounded PNG/JPEG/WebP structural metadata. 03B4 merged through PR #240 and adds
+the hidden same-generation sufficiency continuation. AUTH binding/read actions
+remain planned.
 
 AUTH `WS-XINT-002-04B` follows the complete hidden split-03B series and
 activates only fixed-service binding and guide read. ART-03C then removes the

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/chunks/WS-ART-001-04A-upload-inspection-sealing.md

@@ -1,6 +1,8 @@
 # Chunk Contract: WS-ART-001-04A - One-ZIP Scratch Intake And Manifest
 
-Initiative: `WS-ART-001` | Risk: L1 | Status: Proposed after 03C and AUTH planned registration
+Initiative: `WS-ART-001` | Risk: L1 | Status: Superseded by PLAN3 (`04A1`-`04A3`)
+
+Historical design input only. This file is not an executable chunk contract.
 
 Artifact contract phase: `upload_admission`
 

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/chunks/WS-ART-001-04A1-legacy-contributor-intake-removal.md

@@ -0,0 +1,37 @@
+# Chunk Contract: WS-ART-001-04A1 — Legacy Contributor Intake Removal
+
+Parent initiative: `WS-ART-001` | Risk: L1 | Status: Proposed after 03C
+
+## Goal
+
+Remove legacy multi-step upload-session/item contributor reachability and its
+unused schema before building the one-ZIP replacement.
+
+## Allowed Files
+
+ART upload models/migration/repository/routes/schemas, static architecture and
+migration tests, stale-contract/docs, and scoped CI evidence.
+
+## Not Allowed Changes
+
+Replacement upload route, ZIP parsing, provider I/O, Submission/checker/review,
+AUTH catalogue/availability, compatibility aliases, or fabricated backfill.
+
+## Acceptance Criteria
+
+No route, command, service matrix lookup, model, or schema can create/use the
+old intake; historical audit values remain readable where required; populated
+unsafe downgrade/upgrade refuses honestly; no new intake becomes reachable.
+
+## Verification Commands
+
+Focused Alembic/architecture/route tests, Ruff, stale scans, hosted Backend and
+Agent Gates, repository 78% and changed subsystem 90% coverage.
+
+## Required Reviewers
+
+Architecture, security/auth, QA, product/ops, senior, CI, docs, reuse, test delta.
+
+## Human Review Focus And Stop Conditions
+
+Prove deletion without opening a replacement or losing historical evidence.

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/chunks/WS-ART-001-04A2-outer-zip-safety.md

@@ -0,0 +1,38 @@
+# Chunk Contract: WS-ART-001-04A2 — Bounded Outer-ZIP Safety
+
+Parent initiative: `WS-ART-001` | Risk: L1 | Status: Proposed after 04A1
+
+## Goal
+
+Accept one outer ZIP into canonical private scratch and safely enumerate its
+complete file/directory tree without provider I/O or a public route.
+
+## Allowed Files
+
+ART scratch intake/archive safety capability, bounded configuration use,
+adversarial ZIP tests/fuzz fixtures, docs, and scoped coverage evidence.
+
+## Not Allowed Changes
+
+Semantic manifest/change comparison, project checker, durable admission,
+provider I/O, nested archive extraction, larger limits, or AUTH activation.
+
+## Acceptance Criteria
+
+Reject non-ZIP/additional items, traversal/absolute/UNC/backslash/control paths,
+symlink/special/encrypted/malformed entries, duplicates/NFC/case-fold
+collisions, bombs, and every configured limit breach; nested ZIPs stay opaque;
+all outcomes clean scratch and disclose no path/handle.
+
+## Verification Commands
+
+Focused archive/scratch/fuzz tests, Ruff, stale scans, hosted gates, 90% owned
+subsystem and 78% repository coverage.
+
+## Required Reviewers
+
+Security, architecture, QA, product/ops, senior, CI, docs, reuse, test delta.
+
+## Human Review Focus And Stop Conditions
+
+No unchecked byte may escape scratch and no declared ZIP size is trusted.

.agent-loop/initiatives/WS-ART-001-immutable-artifact-storage/chunks/WS-ART-001-04A3-semantic-manifest-change-gate.md

@@ -0,0 +1,40 @@
+# Chunk Contract: WS-ART-001-04A3 — Semantic Manifest And Change Gate
+
+Parent initiative: `WS-ART-001` | Risk: L1 | Status: Proposed after 04A2
+
+## Goal
+
+Build the canonical archive/tree identities and reject exact or semantic
+unchanged work before checker or provider I/O.
+
+## Allowed Files
+
+ART manifest/executable normalization, TASK predecessor read capability,
+read-only sealed workspace projection, migration only if immutable manifest
+control-plane persistence is required, focused tests/docs/CI.
+
+## Not Allowed Changes
+
+Project checker execution, provider I/O, durable admission, Submission/review,
+arbitrary permission preservation, file execution, or AUTH activation.
+
+## Acceptance Criteria
+
+Manifest commits normalized paths/types/file hashes/sizes/executable flag;
+packaging metadata is excluded; explicit/synthetic directories are canonical;
+same archive or manifest as immediate predecessor rejects under lock; executable
+changes count, timestamp/compression-only changes do not; fixed modes match all
+later materializers.
+
+## Verification Commands
+
+Focused manifest/predecessor/concurrency/mode tests, Ruff, stale scans, hosted
+gates, 90% owned subsystem and 78% repository coverage.
+
+## Required Reviewers
+
+Architecture, security, QA, product/ops, senior, CI, docs, reuse, test delta.
+
+## Human Review Focus And Stop Conditions
+
+Ensure semantic equality ignores packaging only, never actual work.