From 9f6c19b4ed8b2e4f62f1d58eee67cc542baa82f9 Mon Sep 17 00:00:00 2001
From: Alan Szmyt <szmyty@gmail.com>
Date: Mon, 31 Aug 2026 11:34:44 -0400
Subject: [PATCH] Plan safe repository presentation rollout

---
 .github/workflows/validate.yml                |   16 +
 ARCHITECTURE.md                               |   28 +-
 README.md                                     |   28 +-
 ROADMAP.md                                    |   21 +-
 docs/repository-presentation-rollout.md       |  147 +++
 .../repository-presentation.inventory.json    | 1151 +++++++++++++++++
 schemas/README.md                             |    4 +
 ...tory-presentation-inventory-v1.schema.json |  156 +++
 ...epository-presentation-plan-v1.schema.json |   48 +
 ...itory-presentation-proposal-v1.schema.json |   53 +
 ...ository-presentation-review-v1.schema.json |   34 +
 scripts/plan_repository_presentation.py       |  535 ++++++++
 tests/test_repository_presentation_rollout.py |  196 +++
 13 files changed, 2401 insertions(+), 16 deletions(-)
 create mode 100644 docs/repository-presentation-rollout.md
 create mode 100644 examples/repository-presentation.inventory.json
 create mode 100644 schemas/repository-presentation-inventory-v1.schema.json
 create mode 100644 schemas/repository-presentation-plan-v1.schema.json
 create mode 100644 schemas/repository-presentation-proposal-v1.schema.json
 create mode 100644 schemas/repository-presentation-review-v1.schema.json
 create mode 100644 scripts/plan_repository_presentation.py
 create mode 100644 tests/test_repository_presentation_rollout.py

diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index cc029a1..4e6dd61 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -44,6 +44,22 @@ jobs:
           examples/pace.lock.json
           --as-of "2026-08-22T00:00:00Z"
 
+      - name: Validate repository-presentation fleet inventory
+        run: >-
+          python3 scripts/plan_repository_presentation.py
+          validate-inventory
+          --inventory "examples/repository-presentation.inventory.json"
+
+      - name: Prove deterministic no-write fleet planning
+        shell: bash
+        run: |
+          plan_path="${RUNNER_TEMP}/repository-presentation.plan.json"
+          python3 scripts/plan_repository_presentation.py plan \
+            --inventory "examples/repository-presentation.inventory.json" \
+            --output "${plan_path}"
+          python3 scripts/plan_repository_presentation.py verify-plan \
+            --plan "${plan_path}"
+
       - name: Run adversarial validator tests
         run: >-
           python3 -m unittest discover
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
index 89b8135..adc88b7 100644
--- a/ARCHITECTURE.md
+++ b/ARCHITECTURE.md
@@ -8,7 +8,7 @@ status: provisional
 owners:
   - egohygiene
 created: 2026-08-19
-updated: 2026-08-21
+updated: 2026-08-31
 governed_by:
   - architecture-architecture
 depends_on:
@@ -75,6 +75,23 @@ updaters. It reads one lock, validates immutable provenance, ownership,
 compatibility, rollback, and exception time bounds, and emits evidence without
 network or write capabilities.
 
+## Implemented repository-presentation planning slice
+
+```text
+examples/repository-presentation.inventory.json  # privacy-safe observed fleet snapshot
+schemas/repository-presentation-*-v1.schema.json  # inventory, plan, review, proposal contracts
+scripts/plan_repository_presentation.py           # deterministic no-write planner and review gate
+tests/test_repository_presentation_rollout.py     # privacy, integrity, and authority evidence
+docs/repository-presentation-rollout.md           # operator workflow and rollback boundary
+```
+
+The planner is a pure adapter over checked observed state. It has no GitHub
+client, credential input, consumer filesystem access, or pull-request write
+port. Its proposal output binds one repository, represented commit, README blob,
+Egolint report, reviewed plan, immutable contract set, and rollback snapshot.
+An external authorized operator may consume that artifact only after the review
+boundary; application remains outside this slice.
+
 ## Dependency rules
 
 - Sibling domain capabilities integrate through versioned public contracts, not direct access to internals.
@@ -98,10 +115,11 @@ The architecture favors independently usable local and self-hosted operation. Op
 
 ## Evidence and uncertainty
 
-- **Observed:** Pace owns a versioned dependency-lock schema, six-kind example,
-  standalone offline validator, adversarial test suite, and least-privilege CI
-  gate. Update resolution, drift detection, planning, and application remain
-  unimplemented.
+- **Observed:** Pace owns a versioned dependency-lock validator plus a bounded
+  repository-presentation inventory, deterministic drift/plan projection,
+  exact review authorization, credential-free single-repository proposal,
+  adversarial tests, and least-privilege CI gate. General update resolution and
+  every consumer write/application path remain unimplemented.
 - **Decided for this draft:** The repository owns the bounded concern described here and participates through versioned contracts.
 - **Proposed:** Target systems and later roadmap phases remain proposals until accepted and implemented.
 - **Open question:** Which parts of this draft should become active in the first independently versioned release?
diff --git a/README.md b/README.md
index 861d315..a23b1e1 100644
--- a/README.md
+++ b/README.md
@@ -29,8 +29,30 @@ See the complete [lock and update policy](LOCK_POLICY.md), the
 [JSON Schema](schemas/pace-lock-v1.schema.json), and the
 [six-kind example](examples/pace.lock.json).
 
+## Plan repository-presentation rollout
+
+Pace now owns a read-only, privacy-safe repository-presentation inventory and a
+deterministic fleet planner. The checked snapshot classifies every repository,
+defines the Mantle/Identity/Antidote canary wave, reports blockers and drift,
+and requires an exact reviewed plan plus pinned Egolint evidence before it can
+emit one credential-free repository proposal.
+
+```bash
+python3 scripts/plan_repository_presentation.py validate-inventory \
+  --inventory "examples/repository-presentation.inventory.json"
+python3 scripts/plan_repository_presentation.py plan \
+  --inventory "examples/repository-presentation.inventory.json" \
+  --output "/tmp/repository-presentation.plan.json"
+python3 scripts/plan_repository_presentation.py verify-plan \
+  --plan "/tmp/repository-presentation.plan.json"
+```
+
+See the [rollout contract and operating guide](docs/repository-presentation-rollout.md).
+
 ## Current authority boundary
 
-Pace v1 validates desired state only. It does not resolve updates, edit files,
-open pull requests, or apply changes. Future detection, planning, application,
-verification, and publication phases remain separate authority boundaries.
+Pace validates desired locks and can now turn a reviewed repository-presentation
+inventory into a deterministic no-write fleet plan. It may emit a credential-free
+single-repository proposal only after exact plan review and valid pinned Egolint
+evidence. It still does not edit consumer files, open pull requests, or apply
+changes; those remain separately authorized authority boundaries.
diff --git a/ROADMAP.md b/ROADMAP.md
index fc3ebd6..efb3fa5 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -8,7 +8,7 @@ status: provisional
 owners:
   - egohygiene
 created: 2026-08-19
-updated: 2026-08-24
+updated: 2026-08-31
 governed_by:
   - architecture-roadmap
 depends_on:
@@ -40,7 +40,7 @@ updated: 2026-08-24
 > This evidence-reconciled snapshot is the issue-generation and visual-roadmap handoff. The longer-horizon strategy below remains canonical context; generated HTML, JSON, progress, issue plans, and commit lists are projections.
 
 **Lifecycle:** seed implementation  
-**Current gate:** Add observed-state capture and a drift report before attempting the reviewable convergence plan tracked by issue #2.  
+**Current gate:** Review issue #14's no-write repository-presentation fleet plan, then unblock and independently approve its three canaries before any consumer PR.  
 **North-star outcome:** Reviewable fleet convergence from declared desired state, observed state, and explicit drift.
 
 ### Visual roadmap publication
@@ -96,7 +96,8 @@ issues: []
 
 **Current evidence:**
 
-- No observed-state implementation was found.
+- A bounded, privacy-safe repository-presentation inventory now records all 29 repositories and explicit adoption states.
+- General-purpose observed-state collection remains unimplemented.
 
 <!-- roadmap-step
 id: PAC-Q03
@@ -118,7 +119,8 @@ issues: []
 
 **Current evidence:**
 
-- No drift engine or report was observed.
+- Issue #14 implements deterministic repository-presentation drift categories and an Observatory-safe projection.
+- The general cross-capability drift engine remains planned.
 
 <!-- roadmap-step
 id: PAC-Q04
@@ -140,7 +142,8 @@ issues: [2]
 
 **Current evidence:**
 
-- Issue #2 is the identified next planning gate.
+- Issue #14 now proves an exact no-write plan, plan digest, review record, supersession boundary, and one-repository proposal contract for repository presentation.
+- Issue #2 remains the broader convergence-planning gate.
 
 <!-- roadmap-step
 id: PAC-Q05
@@ -162,7 +165,8 @@ issues: []
 
 **Current evidence:**
 
-- No observed-state, drift, or fleet pilot evidence was found.
+- A 29-repository public-safe snapshot and Mantle/Identity/Antidote canary wave now exist.
+- Every canary is honestly blocked on Identity artifacts, reviewed facts, and pinned Egolint evidence; operator approval and consumer writes remain pending.
 
 <!-- roadmap-step
 id: PAC-Q06
@@ -278,8 +282,9 @@ Optional managed services, enterprise controls, marketplaces, and the conversati
 ## Evidence and uncertainty
 
 - **Observed:** Pace owns `egohygiene.pace.lock/v1`, an offline validator,
-  adversarial exception and provenance tests, a six-kind example, and a CI gate.
-  No updater or repository mutation path exists.
+  and a bounded repository-presentation inventory/planner with explicit review,
+  proposal, rollback, privacy, and Observatory contracts. No updater or
+  repository mutation path exists.
 - **Decided for this draft:** The repository owns the bounded concern described here and participates through versioned contracts.
 - **Proposed:** Target systems and later roadmap phases remain proposals until accepted and implemented.
 - **Open question:** Which parts of this draft should become active in the first independently versioned release?
diff --git a/docs/repository-presentation-rollout.md b/docs/repository-presentation-rollout.md
new file mode 100644
index 0000000..0323b31
--- /dev/null
+++ b/docs/repository-presentation-rollout.md
@@ -0,0 +1,147 @@
+# Repository-presentation fleet rollout
+
+Pace reconciles repository presentation in two distinct authority phases:
+
+1. read-only inventory, deterministic planning, and human review;
+2. one credential-free proposal per repository, followed by separately authorized
+   pull-request creation.
+
+The planner never edits a consumer repository or calls GitHub. A generated
+proposal is an integrity-bound handoff to an authorized operator, not a fleet
+write.
+
+## Immutable contract set
+
+| Owner | Version | Revision |
+| --- | --- | --- |
+| Hygiene repository-presentation profile | 1.0.0-alpha.1 (proposed) | `cb2ed63425d29abada2d2bbb43a3b3e59d11aeb8` |
+| Identity presentation package | 1.0.0 | `3c2fd3141371b355628e81f66f63159f19d63338` |
+| Holon presentation blueprint | 1.0.0 | `4d436b631ea82c463d3a6a04b5664633f3c64b4c` |
+| Egolint presentation validator | 0.1.0-alpha.1 | `4efe92a2609b3384fcf3b5cda343a4f64d108824` |
+
+The Hygiene profile remains proposed. Inventory or rollout does not activate it
+and cannot manufacture a passing evidence state.
+
+## Reviewed fleet snapshot
+
+`examples/repository-presentation.inventory.json` records every repository
+visible to the linked organization installation on 2026-08-31. Every entry is
+explicitly `eligible`, `deferred`, `exempt`, `blocked`, or
+`not_applicable`.
+
+The public artifact contains no private README digest, represented commit, facts,
+or exception prose. The private repository is deferred to a separately
+authorized private plan.
+
+The first canary wave is:
+
+| Role | Repository | Why |
+| --- | --- | --- |
+| Small tool | `egohygiene/mantle` | Exercises the CLI profile and preserves a substantial existing README. |
+| Customized | `egohygiene/identity` | Exercises a deeply customized source repository and visual ownership boundary. |
+| Publication/product | `egohygiene/antidote` | Exercises publication semantics and an incubating product/research surface. |
+
+The observed canaries are currently blocked. They lack a complete consumer-local
+Identity package, reviewed repository fact source, and current pinned Egolint
+report. This is actionable drift, not a template placeholder and not a rollout
+failure.
+
+## Generate the exact dry-run plan
+
+Validate the checked inventory:
+
+    python3 scripts/plan_repository_presentation.py validate-inventory \
+      --inventory "examples/repository-presentation.inventory.json"
+
+Generate a deterministic plan without credentials or consumer writes:
+
+    python3 scripts/plan_repository_presentation.py plan \
+      --inventory "examples/repository-presentation.inventory.json" \
+      --output "/tmp/repository-presentation.plan.json"
+
+Verify it independently:
+
+    python3 scripts/plan_repository_presentation.py verify-plan \
+      --plan "/tmp/repository-presentation.plan.json"
+
+The plan reports each repository's declared state, blockers, drift, represented
+commit, Egolint state, rollback binding, wave, and privacy-safe Observatory
+projection. Repeated runs over identical inventory bytes produce the same
+inventory and plan digests.
+
+## Unblock one repository
+
+A repository becomes eligible only after all of the following are observed at
+one represented commit:
+
+- a consumer-local, immutable Identity package and manifest;
+- complete, reviewed repository-owned presentation facts;
+- an exact README Git blob identity;
+- a valid report from the pinned Egolint revision; and
+- no unresolved profile or merge blocker.
+
+Holon must then create the exact preview plan. Pace records its checksum and
+never asks Holon to force an overwrite. Existing authored README prose remains
+outside Holon's checksum-bound managed region.
+
+Update the inventory in a new reviewable Pace pull request. The changed
+represented commit supersedes every earlier plan and proposal.
+
+## Review authorization and proposal
+
+Plan review is an explicit document, not an implicit CLI flag:
+
+    {
+      "schema": "egohygiene.pace.repository-presentation-review/v1",
+      "planDigest": "<exact reviewed plan digest>",
+      "reviewer": "szmyty",
+      "reviewedAt": "2026-08-31T16:00:00Z",
+      "decision": "approved"
+    }
+
+Only then can Pace produce a proposal:
+
+    python3 scripts/plan_repository_presentation.py propose \
+      --plan "/tmp/repository-presentation.plan.json" \
+      --review "/tmp/repository-presentation.review.json" \
+      --repository "egohygiene/mantle" \
+      --output "/tmp/mantle.repository-presentation.proposal.json"
+
+Proposal creation fails closed when the review digest, inventory, represented
+commit, Identity package, facts, README blob, or Egolint evidence is missing or
+stale. The proposal contains no token and grants no GitHub authority.
+
+An authorized operator may turn one proposal into one small pull request. Canary
+repositories are proposed independently; no all-or-nothing fleet branch exists.
+
+## Verification after merge
+
+A consumer adoption is not complete until its merged represented commit records:
+
+- consumer CI success;
+- Holon render verification;
+- the pinned Egolint report;
+- local banner and badge file integrity;
+- alt and fallback text;
+- local and canonical links;
+- badge evidence destination and represented commit; and
+- a fresh inventory observation showing no managed-region drift.
+
+Observatory receives only adoption state, profile, freshness, drift categories,
+and bounded exception metadata. Pace deliberately emits `healthScore: null`;
+presentation polish is not a universal health score.
+
+## Retry, supersession, and rollback
+
+A proposal ID binds repository and represented commit, so retrying unchanged
+input is idempotent. A new represented commit or inventory creates new digests
+and supersedes the proposal.
+
+Each proposal records the previous README Git blob and represented commit.
+Rollback restores the reviewed README and Holon state together. Holon refuses
+rollback after unreviewed README drift; Pace must then create a new observation
+and plan rather than force replacement.
+
+Deferred, exempt, private, archived, and not-applicable repositories remain
+visible in later inventories. Archived repositories are never reopened solely
+for visual consistency.
diff --git a/examples/repository-presentation.inventory.json b/examples/repository-presentation.inventory.json
new file mode 100644
index 0000000..7eccd1b
--- /dev/null
+++ b/examples/repository-presentation.inventory.json
@@ -0,0 +1,1151 @@
+{
+  "$schema": "../schemas/repository-presentation-inventory-v1.schema.json",
+  "schema": "egohygiene.pace.repository-presentation-inventory/v1",
+  "organization": "egohygiene",
+  "observedAt": "2026-08-31T15:30:00Z",
+  "collection": {
+    "mode": "read-only",
+    "networkRequired": true,
+    "credentialsEmbedded": false,
+    "privateDetailsPublished": false
+  },
+  "contracts": {
+    "hygiene": {
+      "version": "1.0.0-alpha.1",
+      "status": "proposed",
+      "revision": "cb2ed63425d29abada2d2bbb43a3b3e59d11aeb8",
+      "digest": "44e0881519350e6747723995939c79c6fb4659e38a74b2c32e409866e7a186ba"
+    },
+    "identity": {
+      "version": "1.0.0",
+      "revision": "3c2fd3141371b355628e81f66f63159f19d63338"
+    },
+    "holon": {
+      "version": "1.0.0",
+      "revision": "4d436b631ea82c463d3a6a04b5664633f3c64b4c",
+      "blueprintGitBlobSha": "f16349494be8d917253dfffa3b942698fa0cbcf5"
+    },
+    "egolint": {
+      "version": "0.1.0-alpha.1",
+      "revision": "4efe92a2609b3384fcf3b5cda343a4f64d108824"
+    }
+  },
+  "policy": {
+    "unknownRepository": "fail-closed",
+    "writesBeforeReview": false,
+    "proposalMode": "one-repository-per-reviewed-proposal",
+    "missingFacts": "block",
+    "missingAssets": "block",
+    "egolintBeforeProposal": true
+  },
+  "canaryWave": [
+    {
+      "repository": "egohygiene/mantle",
+      "role": "small-tool"
+    },
+    {
+      "repository": "egohygiene/identity",
+      "role": "customized"
+    },
+    {
+      "repository": "egohygiene/antidote",
+      "role": "publication-product"
+    }
+  ],
+  "repositories": [
+    {
+      "repository": "egohygiene/.github",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "minimal",
+      "lifecycle": "active",
+      "customization": "small",
+      "adoptionState": "not_applicable",
+      "reasons": [
+        "Organization metadata repository uses its profile README and is outside product presentation rollout."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "1a80cd5d436409b96532ba3dd9edfd892e3b9aad",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "7d960edaacbb1e9e63fba253c96523c3a085d2d3",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/aether",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "library",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "8a2a3d08f3aa9da3847bd5277843506ab855192e",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "9bc4540dd55a63f1ef896fae1057d2203ca1bf18",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/akashic",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "publication",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "2f2e8c6ebd1456092a047809865b5d2dd909e0f9",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "99770e2d7f0f80d86091038adb0ad812020fdf91",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/aniflow",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "e704141742a7a55e486d9f24a7c97d9d2283f326",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "d7f210625bc4d8e540e1dd79cf36b7401efeca17",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/antidote",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "publication",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": "publication-product",
+      "observed": {
+        "representedCommit": "3cf642903fcc676a7bf59afb045bc83a968ca80d",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "09f166758a19068a23bc277b286a4baef338a4b9",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/athena",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "publication",
+      "lifecycle": "incubating",
+      "customization": "small",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "75b4d48007a1747615220cfd0d1b5677e867b7bc",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "258b3e257279ce993bb78bdea14db79941efab09",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/beacon",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "publication",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "e846695648f7fc2ae710d1df6939f06b6460de82",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "c833aa971bfbbe0b5f4b8b7cb14daeec163e7e80",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/civics",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "c95596afc206e38b3c5b1f80a3ccbae46326daa8",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "797f4b0898923ea7c1056877d4bffd4402263194",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/egohygiene",
+      "visibility": "private",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "private",
+      "lifecycle": "active",
+      "customization": "redacted",
+      "adoptionState": "deferred",
+      "reasons": [
+        "Private repository details are excluded from the public fleet artifact; assess through a separately authorized private plan."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": null,
+        "readme": {
+          "status": "redacted",
+          "gitBlobSha": null,
+          "managedRegion": null
+        },
+        "identityPackage": {
+          "status": "unassessed",
+          "descriptorPath": null,
+          "manifestPath": null
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/egohygiene.io",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "active",
+      "customization": "small",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "524aa4c139e926ca549f6bef067fc9ed40d15afb",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "dd4afcf74ebcf2df10a4267e6e54ef4aabe057f4",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/egolint",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "8d21e58f92c34dae577848a3e183c980388d7884",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/empathy",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "minimal",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "f8313641fa05cb1d062057a426b094c0e3770522",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "5df2087a759391a6330d3239a3c0cd99e19f9fe9",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/filament",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "incubating",
+      "lifecycle": "incubating",
+      "customization": "small",
+      "adoptionState": "deferred",
+      "reasons": [
+        "Repository purpose and ownership boundary are still provisional; defer presentation adoption until they are reviewed."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "95cb3ef04b1664bc51ccc666524dd7f5eb04127b",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "971f1d0b0bba6a1efb2a9c038b574cb746f6b2f4",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/flow",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "a7d28ee812f9d6ccd93b6786be924e24c455accd",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "76459f7ef85bc2ba25f41d3ba87c72cf02845516",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/holon",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "4d436b631ea82c463d3a6a04b5664633f3c64b4c",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "eaa6e94af59754074ef9a10c0b56ba86309f85e1",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/hygiene",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "28f9d6c7519d820644572634ba4476614f418d83",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "8ba8453f7550f9921f983c5f3abc544f750016a4",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/identity",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Consumer Identity package has not been rendered into this repository.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": "customized",
+      "observed": {
+        "representedCommit": "f9ba4ca9c8938b76e2564dc112455ad3b3e25cc2",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "1f95b9ba2dddb0feb00c4d1a82db3cfec50d2159",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/mantle",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": "small-tool",
+      "observed": {
+        "representedCommit": "b325fad88f3a809d0b928ac4a1f1e989546cfa2e",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "cdcd90e8b91db274678ab002c69c4f4b294d141b",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/mindcap",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "0749ccdf138fd0d81a6c113e02db454b770e85bb",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "ebab56b2853ca39dd187ee3870cf0d89a872bec0",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/mindgarden",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "943a22b1211c1a473153039ca906af6e1840a48a",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "3726bdc0debb568fd00ef47f1c1b77ac0f62fa6c",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/observatory",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "3cb3555f56b9b110e98e295c1201e8d9af641297",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "fcf3143ded9c0bb5f9d539491a1d65ea6620196f",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/optiflow",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "09eab73bfcf2b09c950703078401309a5e048915",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "df543040e67e20607e84d2c2cb24573912f49466",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/pace",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "cli",
+      "lifecycle": "incubating",
+      "customization": "small",
+      "adoptionState": "deferred",
+      "reasons": [
+        "Self-adoption is deferred until this no-write fleet plan is reviewed and merged."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "0a2f60badeb46509b2cb6348fc2e2ab55243bb66",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "861d315f67a6a7437222b2a4341135c7c1df9179",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/realm",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "02475f8df066b221c8b367d6261911f6fa5bae9b",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "70b1159e0812e1d83f4e51eafe4755ce13e2ab88",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/reflector",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "publication",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "5d4651e074a448e383220de60c0edee853497296",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "9fcfca43748f71a60b963810a1a3419a8c8592fc",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/relay",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "library",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "b71b090406a3a9e4cd9f107e9d14a623bbecb127",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "e8035712026c0173a6358a4e000f7ecc3e9f6304",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/renderflow",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "library",
+      "lifecycle": "active",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "824c29b0f340f1bce1ba1219bc5df98c46dd6893",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "ff65dc57076a80ec2e4a701af6e2cf605cdcfff0",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/sanctuary",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "incubating",
+      "lifecycle": "incubating",
+      "customization": "rich",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "0db2d923e110e49dec823c486ec4084d266f3627",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "499b19db8f97253a8bb94e71502308be2273442b",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    },
+    {
+      "repository": "egohygiene/store",
+      "visibility": "public",
+      "archived": false,
+      "defaultBranch": "main",
+      "profile": "application",
+      "lifecycle": "incubating",
+      "customization": "small",
+      "adoptionState": "blocked",
+      "reasons": [
+        "Identity repository-presentation package is missing.",
+        "Canonical presentation facts have not been assessed.",
+        "Pinned Egolint report has not run."
+      ],
+      "canaryRole": null,
+      "observed": {
+        "representedCommit": "599c90ca6a454c0f2e9aa95eab5f8395016474c5",
+        "readme": {
+          "status": "present",
+          "gitBlobSha": "61ad8ee7743130c00ef2b1a9392140f258f3f169",
+          "managedRegion": false
+        },
+        "identityPackage": {
+          "status": "missing",
+          "descriptorPath": "assets/identity/repository-presentation/repository-presentation.json",
+          "manifestPath": "assets/identity/repository-presentation/repository-presentation-manifest.json"
+        },
+        "facts": {
+          "status": "unassessed"
+        },
+        "egolint": {
+          "status": "not_run",
+          "validatorRevision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+          "reportDigest": null
+        }
+      },
+      "exception": null
+    }
+  ]
+}
diff --git a/schemas/README.md b/schemas/README.md
index 2fd3cc4..f62bb86 100644
--- a/schemas/README.md
+++ b/schemas/README.md
@@ -3,6 +3,10 @@
 | Contract | Schema identity | File |
 | --- | --- | --- |
 | Repository dependency lock | `egohygiene.pace.lock/v1` | [`pace-lock-v1.schema.json`](pace-lock-v1.schema.json) |
+| Presentation fleet inventory | `egohygiene.pace.repository-presentation-inventory/v1` | [`repository-presentation-inventory-v1.schema.json`](repository-presentation-inventory-v1.schema.json) |
+| Presentation dry-run plan | `egohygiene.pace.repository-presentation-plan/v1` | [`repository-presentation-plan-v1.schema.json`](repository-presentation-plan-v1.schema.json) |
+| Reviewed-plan authorization | `egohygiene.pace.repository-presentation-review/v1` | [`repository-presentation-review-v1.schema.json`](repository-presentation-review-v1.schema.json) |
+| Credential-free proposal | `egohygiene.pace.repository-presentation-proposal/v1` | [`repository-presentation-proposal-v1.schema.json`](repository-presentation-proposal-v1.schema.json) |
 
 Pace-owned contracts use the stable namespace:
 
diff --git a/schemas/repository-presentation-inventory-v1.schema.json b/schemas/repository-presentation-inventory-v1.schema.json
new file mode 100644
index 0000000..cefbbed
--- /dev/null
+++ b/schemas/repository-presentation-inventory-v1.schema.json
@@ -0,0 +1,156 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://egohygiene.github.io/pace/contracts/repository-presentation/inventory/v1/schema.json",
+  "title": "Pace repository-presentation inventory v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "$schema",
+    "schema",
+    "organization",
+    "observedAt",
+    "collection",
+    "contracts",
+    "policy",
+    "canaryWave",
+    "repositories"
+  ],
+  "properties": {
+    "$schema": {
+      "type": "string"
+    },
+    "schema": {
+      "const": "egohygiene.pace.repository-presentation-inventory/v1"
+    },
+    "organization": {
+      "const": "egohygiene"
+    },
+    "observedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "collection": {
+      "type": "object"
+    },
+    "contracts": {
+      "type": "object"
+    },
+    "policy": {
+      "type": "object"
+    },
+    "canaryWave": {
+      "type": "array",
+      "minItems": 3,
+      "items": {
+        "type": "object",
+        "required": [
+          "repository",
+          "role"
+        ]
+      }
+    },
+    "repositories": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "$ref": "#/$defs/repository"
+      }
+    }
+  },
+  "$defs": {
+    "repository": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repository",
+        "visibility",
+        "archived",
+        "defaultBranch",
+        "profile",
+        "lifecycle",
+        "customization",
+        "adoptionState",
+        "reasons",
+        "canaryRole",
+        "observed",
+        "exception"
+      ],
+      "properties": {
+        "repository": {
+          "type": "string",
+          "pattern": "^egohygiene/[A-Za-z0-9_.-]+$"
+        },
+        "visibility": {
+          "enum": [
+            "public",
+            "private",
+            "internal"
+          ]
+        },
+        "archived": {
+          "type": "boolean"
+        },
+        "defaultBranch": {
+          "type": "string"
+        },
+        "profile": {
+          "enum": [
+            "minimal",
+            "library",
+            "cli",
+            "application",
+            "publication",
+            "private",
+            "archived",
+            "incubating"
+          ]
+        },
+        "lifecycle": {
+          "enum": [
+            "active",
+            "incubating",
+            "archived"
+          ]
+        },
+        "customization": {
+          "enum": [
+            "small",
+            "rich",
+            "redacted"
+          ]
+        },
+        "adoptionState": {
+          "enum": [
+            "eligible",
+            "deferred",
+            "exempt",
+            "blocked",
+            "not_applicable"
+          ]
+        },
+        "reasons": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "canaryRole": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "observed": {
+          "type": "object"
+        },
+        "exception": {
+          "type": [
+            "object",
+            "null"
+          ]
+        }
+      }
+    }
+  }
+}
diff --git a/schemas/repository-presentation-plan-v1.schema.json b/schemas/repository-presentation-plan-v1.schema.json
new file mode 100644
index 0000000..0ade65c
--- /dev/null
+++ b/schemas/repository-presentation-plan-v1.schema.json
@@ -0,0 +1,48 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://egohygiene.github.io/pace/contracts/repository-presentation/plan/v1/schema.json",
+  "title": "Pace repository-presentation dry-run plan v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "inventoryDigest",
+    "contracts",
+    "review",
+    "summary",
+    "waves",
+    "repositories",
+    "observatory",
+    "planDigest"
+  ],
+  "properties": {
+    "schema": {
+      "const": "egohygiene.pace.repository-presentation-plan/v1"
+    },
+    "inventoryDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "contracts": {
+      "type": "object"
+    },
+    "review": {
+      "type": "object"
+    },
+    "summary": {
+      "type": "object"
+    },
+    "waves": {
+      "type": "array"
+    },
+    "repositories": {
+      "type": "array"
+    },
+    "observatory": {
+      "type": "object"
+    },
+    "planDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    }
+  }
+}
diff --git a/schemas/repository-presentation-proposal-v1.schema.json b/schemas/repository-presentation-proposal-v1.schema.json
new file mode 100644
index 0000000..6e40204
--- /dev/null
+++ b/schemas/repository-presentation-proposal-v1.schema.json
@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://egohygiene.github.io/pace/contracts/repository-presentation/proposal/v1/schema.json",
+  "title": "Pace credential-free repository proposal v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "proposalId",
+    "planDigest",
+    "repository",
+    "representedCommit",
+    "profile",
+    "contracts",
+    "preconditions",
+    "rollback",
+    "proposalDigest"
+  ],
+  "properties": {
+    "schema": {
+      "const": "egohygiene.pace.repository-presentation-proposal/v1"
+    },
+    "proposalId": {
+      "type": "string"
+    },
+    "planDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "repository": {
+      "type": "string"
+    },
+    "representedCommit": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{40}$"
+    },
+    "profile": {
+      "type": "string"
+    },
+    "contracts": {
+      "type": "object"
+    },
+    "preconditions": {
+      "type": "object"
+    },
+    "rollback": {
+      "type": "object"
+    },
+    "proposalDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    }
+  }
+}
diff --git a/schemas/repository-presentation-review-v1.schema.json b/schemas/repository-presentation-review-v1.schema.json
new file mode 100644
index 0000000..38d0609
--- /dev/null
+++ b/schemas/repository-presentation-review-v1.schema.json
@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://egohygiene.github.io/pace/contracts/repository-presentation/review/v1/schema.json",
+  "title": "Pace reviewed-plan authorization v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "planDigest",
+    "reviewer",
+    "reviewedAt",
+    "decision"
+  ],
+  "properties": {
+    "schema": {
+      "const": "egohygiene.pace.repository-presentation-review/v1"
+    },
+    "planDigest": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "reviewer": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_.-]+$"
+    },
+    "reviewedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "decision": {
+      "const": "approved"
+    }
+  }
+}
diff --git a/scripts/plan_repository_presentation.py b/scripts/plan_repository_presentation.py
new file mode 100644
index 0000000..410366f
--- /dev/null
+++ b/scripts/plan_repository_presentation.py
@@ -0,0 +1,535 @@
+#!/usr/bin/env python3
+"""Build and authorize no-write repository-presentation fleet plans."""
+
+from __future__ import annotations
+
+import argparse
+from collections import Counter
+import copy
+from datetime import datetime
+import hashlib
+import json
+from pathlib import Path
+import re
+import sys
+from typing import Any, Sequence
+
+ROOT = Path(__file__).resolve().parents[1]
+EXAMPLE_INVENTORY = ROOT / "examples/repository-presentation.inventory.json"
+INVENTORY_SCHEMA = "egohygiene.pace.repository-presentation-inventory/v1"
+PLAN_SCHEMA = "egohygiene.pace.repository-presentation-plan/v1"
+REVIEW_SCHEMA = "egohygiene.pace.repository-presentation-review/v1"
+PROPOSAL_SCHEMA = "egohygiene.pace.repository-presentation-proposal/v1"
+ADOPTION_STATES = {"eligible", "deferred", "exempt", "blocked", "not_applicable"}
+PROFILES = {"minimal", "library", "cli", "application", "publication", "private", "archived", "incubating"}
+COMMIT_RE = re.compile(r"^[0-9a-f]{40}$")
+DIGEST_RE = re.compile(r"^[0-9a-f]{64}$")
+EXPECTED_PINS = {
+    "hygiene": {
+        "version": "1.0.0-alpha.1",
+        "status": "proposed",
+        "revision": "cb2ed63425d29abada2d2bbb43a3b3e59d11aeb8",
+        "digest": "44e0881519350e6747723995939c79c6fb4659e38a74b2c32e409866e7a186ba",
+    },
+    "identity": {
+        "version": "1.0.0",
+        "revision": "3c2fd3141371b355628e81f66f63159f19d63338",
+    },
+    "holon": {
+        "version": "1.0.0",
+        "revision": "4d436b631ea82c463d3a6a04b5664633f3c64b4c",
+        "blueprintGitBlobSha": "f16349494be8d917253dfffa3b942698fa0cbcf5",
+    },
+    "egolint": {
+        "version": "0.1.0-alpha.1",
+        "revision": "4efe92a2609b3384fcf3b5cda343a4f64d108824",
+    },
+}
+EXPECTED_CANARY_ROLES = {"small-tool", "customized", "publication-product"}
+
+
+class DuplicateKeyError(ValueError):
+    """Raised when strict JSON input repeats a key."""
+
+
+def _strict_object(pairs: list[tuple[str, Any]]) -> dict[str, Any]:
+    result: dict[str, Any] = {}
+    for key, value in pairs:
+        if key in result:
+            raise DuplicateKeyError(f"duplicate JSON key: {key}")
+        result[key] = value
+    return result
+
+
+def load_json(path: Path) -> dict[str, Any]:
+    value = json.loads(path.read_text(encoding="utf-8"), object_pairs_hook=_strict_object)
+    if not isinstance(value, dict):
+        raise ValueError(f"{path} must contain a JSON object")
+    return value
+
+
+def canonical_json(value: object) -> str:
+    return json.dumps(value, ensure_ascii=False, separators=(",", ":"), sort_keys=True)
+
+
+def digest(value: object) -> str:
+    payload = value if isinstance(value, str) else canonical_json(value)
+    return hashlib.sha256(payload.encode("utf-8")).hexdigest()
+
+
+def _unknown_keys(value: object, allowed: set[str], location: str, errors: list[str]) -> bool:
+    if not isinstance(value, dict):
+        errors.append(f"{location} must be an object")
+        return True
+    unknown = set(value) - allowed
+    if unknown:
+        errors.append(f"{location} has unknown keys: {', '.join(sorted(unknown))}")
+    return False
+
+
+def _valid_timestamp(value: object) -> bool:
+    if not isinstance(value, str) or not value.endswith("Z"):
+        return False
+    try:
+        datetime.fromisoformat(value[:-1] + "+00:00")
+    except ValueError:
+        return False
+    return True
+
+
+def repository_blockers(record: dict[str, Any]) -> list[str]:
+    """Resolve proposal blockers without changing the declared adoption state."""
+
+    blockers: list[str] = []
+    observed = record.get("observed", {})
+    if not isinstance(observed, dict):
+        return ["Observed repository state is malformed."]
+    represented = observed.get("representedCommit")
+    if record.get("visibility") == "public" and (
+        not isinstance(represented, str) or COMMIT_RE.fullmatch(represented) is None
+    ):
+        blockers.append("A public repository requires a full represented commit.")
+    readme = observed.get("readme", {})
+    if not isinstance(readme, dict) or readme.get("status") != "present":
+        blockers.append("README content is unavailable.")
+    identity = observed.get("identityPackage", {})
+    if not isinstance(identity, dict) or identity.get("status") != "present":
+        blockers.append("Identity repository-presentation package is missing.")
+    facts = observed.get("facts", {})
+    if not isinstance(facts, dict) or facts.get("status") != "complete":
+        blockers.append("Canonical repository-owned presentation facts are incomplete.")
+    egolint = observed.get("egolint", {})
+    if not isinstance(egolint, dict) or egolint.get("status") != "valid":
+        blockers.append("Pinned Egolint repository-presentation validation is not valid.")
+    elif not isinstance(egolint.get("reportDigest"), str) or DIGEST_RE.fullmatch(
+        egolint["reportDigest"]
+    ) is None:
+        blockers.append("Pinned Egolint validation report digest is missing.")
+    return blockers
+
+
+def validate_inventory(document: object) -> list[str]:
+    errors: list[str] = []
+    top_keys = {
+        "$schema", "schema", "organization", "observedAt", "collection",
+        "contracts", "policy", "canaryWave", "repositories",
+    }
+    if _unknown_keys(document, top_keys, "inventory", errors):
+        return errors
+    assert isinstance(document, dict)
+    if document.get("schema") != INVENTORY_SCHEMA:
+        errors.append(f"inventory.schema must be {INVENTORY_SCHEMA}")
+    if document.get("organization") != "egohygiene":
+        errors.append("inventory.organization must be egohygiene")
+    if not _valid_timestamp(document.get("observedAt")):
+        errors.append("inventory.observedAt must be an RFC 3339 UTC timestamp")
+    if document.get("contracts") != EXPECTED_PINS:
+        errors.append("inventory contracts do not match the reviewed immutable pins")
+    collection = document.get("collection")
+    if not isinstance(collection, dict) or collection != {
+        "mode": "read-only",
+        "networkRequired": True,
+        "credentialsEmbedded": False,
+        "privateDetailsPublished": False,
+    }:
+        errors.append("inventory collection boundary must be read-only and credential-free")
+    policy = document.get("policy")
+    expected_policy = {
+        "unknownRepository": "fail-closed",
+        "writesBeforeReview": False,
+        "proposalMode": "one-repository-per-reviewed-proposal",
+        "missingFacts": "block",
+        "missingAssets": "block",
+        "egolintBeforeProposal": True,
+    }
+    if policy != expected_policy:
+        errors.append("inventory policy does not preserve the reviewed fail-closed rollout boundary")
+
+    repositories = document.get("repositories")
+    if not isinstance(repositories, list) or not repositories:
+        errors.append("inventory.repositories must be a non-empty array")
+        return errors
+    names: list[str] = []
+    records: dict[str, dict[str, Any]] = {}
+    record_keys = {
+        "repository", "visibility", "archived", "defaultBranch", "profile",
+        "lifecycle", "customization", "adoptionState", "reasons", "canaryRole",
+        "observed", "exception",
+    }
+    for index, record in enumerate(repositories):
+        location = f"repositories[{index}]"
+        if _unknown_keys(record, record_keys, location, errors):
+            continue
+        assert isinstance(record, dict)
+        name = record.get("repository")
+        if not isinstance(name, str) or re.fullmatch(r"egohygiene/[A-Za-z0-9_.-]+", name) is None:
+            errors.append(f"{location}.repository must be an egohygiene repository")
+            continue
+        names.append(name)
+        if name in records:
+            errors.append(f"duplicate repository: {name}")
+        records[name] = record
+        state = record.get("adoptionState")
+        if state not in ADOPTION_STATES:
+            errors.append(f"{location}.adoptionState is unsupported")
+        if record.get("profile") not in PROFILES:
+            errors.append(f"{location}.profile is unsupported")
+        reasons = record.get("reasons")
+        if not isinstance(reasons, list) or not all(
+            isinstance(reason, str) and reason.strip() for reason in reasons
+        ):
+            errors.append(f"{location}.reasons must contain durable explanations")
+        if state != "eligible" and not reasons:
+            errors.append(f"{location} requires a reason for {state}")
+        if record.get("visibility") == "private":
+            observed = record.get("observed", {})
+            readme = observed.get("readme", {}) if isinstance(observed, dict) else {}
+            if observed.get("representedCommit") is not None or readme.get("gitBlobSha") is not None:
+                errors.append(f"{location} leaks private represented state into the public inventory")
+        if state == "eligible":
+            blockers = repository_blockers(record)
+            if blockers:
+                errors.append(f"{location} is eligible but blocked: {'; '.join(blockers)}")
+        if state == "blocked" and not repository_blockers(record):
+            errors.append(f"{location} is blocked without a mechanical blocker")
+        if record.get("archived") and record.get("profile") != "archived":
+            errors.append(f"{location} archived repositories must use the archived profile")
+        egolint = record.get("observed", {}).get("egolint", {})
+        if isinstance(egolint, dict) and egolint.get("validatorRevision") != EXPECTED_PINS["egolint"]["revision"]:
+            errors.append(f"{location} Egolint revision is not pinned")
+
+    if names != sorted(names):
+        errors.append("repositories must be sorted by repository for deterministic review")
+
+    canaries = document.get("canaryWave")
+    if not isinstance(canaries, list) or len(canaries) != 3:
+        errors.append("canaryWave must contain exactly three representative roles")
+    else:
+        roles: set[str] = set()
+        targets: set[str] = set()
+        for index, canary in enumerate(canaries):
+            if not isinstance(canary, dict) or set(canary) != {"repository", "role"}:
+                errors.append(f"canaryWave[{index}] must contain repository and role")
+                continue
+            name = canary.get("repository")
+            role = canary.get("role")
+            if name not in records:
+                errors.append(f"canaryWave[{index}] names an unknown repository")
+                continue
+            if role not in EXPECTED_CANARY_ROLES:
+                errors.append(f"canaryWave[{index}] role is unsupported")
+            if records[name].get("canaryRole") != role:
+                errors.append(f"canaryWave[{index}] does not match repository canaryRole")
+            roles.add(str(role))
+            targets.add(str(name))
+        if roles != EXPECTED_CANARY_ROLES or len(targets) != 3:
+            errors.append("canaryWave must cover small-tool, customized, and publication-product once")
+    return sorted(set(errors))
+
+
+def _plan_without_digest(document: dict[str, Any]) -> dict[str, Any]:
+    return {key: value for key, value in document.items() if key != "planDigest"}
+
+
+def build_plan(inventory: dict[str, Any]) -> dict[str, Any]:
+    errors = validate_inventory(inventory)
+    if errors:
+        raise ValueError("invalid inventory: " + "; ".join(errors))
+    canary_names = [item["repository"] for item in inventory["canaryWave"]]
+    plan_records: list[dict[str, Any]] = []
+    for record in inventory["repositories"]:
+        blockers = repository_blockers(record)
+        state = record["adoptionState"]
+        if state == "eligible":
+            disposition = "ready_for_review"
+        elif state == "blocked":
+            disposition = "blocked"
+        else:
+            disposition = "held"
+        plan_records.append({
+            "repository": record["repository"],
+            "profile": record["profile"],
+            "lifecycle": record["lifecycle"],
+            "visibility": record["visibility"],
+            "representedCommit": record["observed"]["representedCommit"],
+            "adoptionState": state,
+            "disposition": disposition,
+            "canaryRole": record["canaryRole"],
+            "blockers": blockers,
+            "reasons": record["reasons"],
+            "egolint": copy.deepcopy(record["observed"]["egolint"]),
+            "drift": {
+                "managedRegion": record["observed"]["readme"]["managedRegion"],
+                "identityPackage": record["observed"]["identityPackage"]["status"],
+                "facts": record["observed"]["facts"]["status"],
+            },
+            "rollback": {
+                "mode": "restore-reviewed-readme-and-holon-state",
+                "readmeGitBlobSha": record["observed"]["readme"]["gitBlobSha"],
+                "representedCommit": record["observed"]["representedCommit"],
+            },
+        })
+    counts = Counter(record["adoptionState"] for record in plan_records)
+    plan = {
+        "schema": PLAN_SCHEMA,
+        "inventoryDigest": digest(inventory),
+        "contracts": copy.deepcopy(inventory["contracts"]),
+        "review": {
+            "requiredBeforeProposal": True,
+            "requiredBeforeFleetWrite": True,
+            "approved": False,
+            "reviewRecord": None,
+        },
+        "summary": {
+            "total": len(plan_records),
+            "states": {state: counts.get(state, 0) for state in sorted(ADOPTION_STATES)},
+            "proposalReady": sum(record["disposition"] == "ready_for_review" for record in plan_records),
+            "blocked": sum(record["disposition"] == "blocked" for record in plan_records),
+        },
+        "waves": [
+            {
+                "id": "canary",
+                "order": 1,
+                "repositories": canary_names,
+                "rule": "All three representative roles must be independently unblocked, reviewed, and proposed.",
+            },
+            {
+                "id": "eligible-public",
+                "order": 2,
+                "repositories": [
+                    record["repository"] for record in plan_records
+                    if record["adoptionState"] == "eligible"
+                    and record["repository"] not in canary_names
+                    and record["visibility"] == "public"
+                ],
+                "rule": "One repository per reviewed proposal after canary verification.",
+            },
+            {
+                "id": "held",
+                "order": 3,
+                "repositories": [
+                    record["repository"] for record in plan_records
+                    if record["adoptionState"] != "eligible"
+                ],
+                "rule": "No proposal until the explicit state or blockers change in a superseding inventory.",
+            },
+        ],
+        "repositories": plan_records,
+        "observatory": {
+            "schema": "egohygiene.pace.repository-presentation-observatory/v1",
+            "healthScore": None,
+            "records": [
+                {
+                    "repository": record["repository"],
+                    "adoptionState": record["adoptionState"],
+                    "profile": record["profile"],
+                    "representedCommit": record["representedCommit"],
+                    "drift": record["drift"],
+                    "exception": next(
+                        item["exception"] for item in inventory["repositories"]
+                        if item["repository"] == record["repository"]
+                    ),
+                    "freshnessObservedAt": inventory["observedAt"],
+                }
+                for record in plan_records
+            ],
+        },
+    }
+    plan["planDigest"] = digest(_plan_without_digest(plan))
+    return plan
+
+
+def validate_plan(plan: object) -> list[str]:
+    if not isinstance(plan, dict):
+        return ["plan must be an object"]
+    errors: list[str] = []
+    if plan.get("schema") != PLAN_SCHEMA:
+        errors.append(f"plan.schema must be {PLAN_SCHEMA}")
+    expected = digest(_plan_without_digest(plan))
+    if plan.get("planDigest") != expected:
+        errors.append("planDigest does not match the canonical plan")
+    if plan.get("contracts") != EXPECTED_PINS:
+        errors.append("plan contract pins are stale")
+    review = plan.get("review")
+    if not isinstance(review, dict) or review.get("requiredBeforeProposal") is not True or review.get("approved") is not False:
+        errors.append("unreviewed dry-run plan must preserve the review gate")
+    records = plan.get("repositories")
+    if not isinstance(records, list):
+        errors.append("plan.repositories must be an array")
+    elif [item.get("repository") for item in records if isinstance(item, dict)] != sorted(
+        item.get("repository") for item in records if isinstance(item, dict)
+    ):
+        errors.append("plan repositories must be deterministically sorted")
+    observatory = plan.get("observatory")
+    if not isinstance(observatory, dict) or observatory.get("healthScore") is not None:
+        errors.append("Observatory projection must not invent a universal health score")
+    return errors
+
+
+def validate_review(review: object, plan: dict[str, Any]) -> list[str]:
+    if not isinstance(review, dict):
+        return ["review must be an object"]
+    errors: list[str] = []
+    if set(review) != {"schema", "planDigest", "reviewer", "reviewedAt", "decision"}:
+        errors.append("review contains unsupported or missing fields")
+    if review.get("schema") != REVIEW_SCHEMA:
+        errors.append(f"review.schema must be {REVIEW_SCHEMA}")
+    if review.get("planDigest") != plan.get("planDigest"):
+        errors.append("review does not authorize this exact plan digest")
+    if not isinstance(review.get("reviewer"), str) or not review["reviewer"].strip():
+        errors.append("reviewer is required")
+    if not _valid_timestamp(review.get("reviewedAt")):
+        errors.append("reviewedAt must be an RFC 3339 UTC timestamp")
+    if review.get("decision") != "approved":
+        errors.append("review decision must be approved")
+    return errors
+
+
+def build_proposal(
+    plan: dict[str, Any], review: dict[str, Any], repository: str
+) -> dict[str, Any]:
+    errors = validate_plan(plan) + validate_review(review, plan)
+    records = {
+        item["repository"]: item
+        for item in plan.get("repositories", [])
+        if isinstance(item, dict) and isinstance(item.get("repository"), str)
+    }
+    record = records.get(repository)
+    if record is None:
+        errors.append(f"repository is absent from the reviewed plan: {repository}")
+    else:
+        if record.get("adoptionState") != "eligible":
+            errors.append(f"{repository} is {record.get('adoptionState')}, not eligible")
+        if record.get("blockers"):
+            errors.append(f"{repository} still has blockers")
+        egolint = record.get("egolint", {})
+        if not isinstance(egolint, dict) or egolint.get("status") != "valid":
+            errors.append(f"{repository} lacks valid pinned Egolint evidence")
+    if errors:
+        raise ValueError("proposal refused: " + "; ".join(errors))
+    assert record is not None
+    proposal = {
+        "schema": PROPOSAL_SCHEMA,
+        "proposalId": f"repository-presentation:{repository}:{record['representedCommit']}",
+        "planDigest": plan["planDigest"],
+        "inventoryDigest": plan["inventoryDigest"],
+        "repository": repository,
+        "representedCommit": record["representedCommit"],
+        "profile": record["profile"],
+        "contracts": copy.deepcopy(plan["contracts"]),
+        "preconditions": {
+            "reviewed": True,
+            "egolintStatus": record["egolint"]["status"],
+            "egolintReportDigest": record["egolint"]["reportDigest"],
+            "readmeMustMatchGitBlobSha": record["rollback"]["readmeGitBlobSha"],
+            "holonMode": "exact-preview-plan",
+            "credentialsEmbedded": False,
+        },
+        "materialization": {
+            "generator": "egohygiene/holon",
+            "sourcePath": ".config/holon/repository-presentation.json",
+            "readmePath": "README.md",
+            "statePath": ".holon/repository-presentation.state.json",
+            "oneRepositoryOnly": True,
+        },
+        "rollback": copy.deepcopy(record["rollback"]),
+        "supersession": {
+            "requiresNewInventoryOnRepresentedCommitChange": True,
+            "previousProposalId": None,
+        },
+    }
+    proposal["proposalDigest"] = digest(
+        {key: value for key, value in proposal.items() if key != "proposalDigest"}
+    )
+    return proposal
+
+
+def write_json(path: Path, document: object) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(document, indent=2, sort_keys=True) + "\n", encoding="utf-8")
+
+
+def build_parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(description=__doc__)
+    subparsers = parser.add_subparsers(dest="command")
+
+    validate = subparsers.add_parser("validate-inventory")
+    validate.add_argument("--inventory", type=Path, default=EXAMPLE_INVENTORY)
+
+    plan = subparsers.add_parser("plan")
+    plan.add_argument("--inventory", type=Path, default=EXAMPLE_INVENTORY)
+    plan.add_argument("--output", type=Path, required=True)
+
+    verify = subparsers.add_parser("verify-plan")
+    verify.add_argument("--plan", type=Path, required=True)
+
+    propose = subparsers.add_parser("propose")
+    propose.add_argument("--plan", type=Path, required=True)
+    propose.add_argument("--review", type=Path, required=True)
+    propose.add_argument("--repository", required=True)
+    propose.add_argument("--output", type=Path, required=True)
+    return parser
+
+
+def main(argv: Sequence[str] | None = None) -> int:
+    arguments = build_parser().parse_args(argv)
+    command = arguments.command or "validate-inventory"
+    try:
+        if command == "validate-inventory":
+            errors = validate_inventory(load_json(getattr(arguments, "inventory", EXAMPLE_INVENTORY)))
+            if errors:
+                for error in errors:
+                    print(f"- {error}", file=sys.stderr)
+                return 1
+            print("VALID repository-presentation fleet inventory")
+            return 0
+        if command == "plan":
+            plan = build_plan(load_json(arguments.inventory))
+            write_json(arguments.output, plan)
+            print(f"WROTE no-write plan {arguments.output} ({plan['planDigest']})")
+            return 0
+        if command == "verify-plan":
+            errors = validate_plan(load_json(arguments.plan))
+            if errors:
+                for error in errors:
+                    print(f"- {error}", file=sys.stderr)
+                return 1
+            print(f"VALID reviewed-plan candidate {arguments.plan}")
+            return 0
+        if command == "propose":
+            proposal = build_proposal(
+                load_json(arguments.plan),
+                load_json(arguments.review),
+                arguments.repository,
+            )
+            write_json(arguments.output, proposal)
+            print(f"WROTE credential-free proposal {arguments.output}")
+            return 0
+    except (OSError, UnicodeError, json.JSONDecodeError, ValueError, DuplicateKeyError) as error:
+        print(f"REFUSED: {error}", file=sys.stderr)
+        return 1
+    return 2
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/tests/test_repository_presentation_rollout.py b/tests/test_repository_presentation_rollout.py
new file mode 100644
index 0000000..97ffe82
--- /dev/null
+++ b/tests/test_repository_presentation_rollout.py
@@ -0,0 +1,196 @@
+# Copyright 2026 Ego Hygiene
+# SPDX-License-Identifier: MIT
+
+"""Adversarial evidence for the repository-presentation rollout planner."""
+
+from __future__ import annotations
+
+import copy
+import importlib.util
+import json
+from pathlib import Path
+import subprocess
+import sys
+import tempfile
+import unittest
+
+ROOT = Path(__file__).resolve().parents[1]
+SCRIPT = ROOT / "scripts/plan_repository_presentation.py"
+INVENTORY = ROOT / "examples/repository-presentation.inventory.json"
+SPEC = importlib.util.spec_from_file_location("plan_repository_presentation", SCRIPT)
+assert SPEC is not None
+assert SPEC.loader is not None
+planner = importlib.util.module_from_spec(SPEC)
+SPEC.loader.exec_module(planner)
+
+
+def inventory() -> dict[str, object]:
+    return json.loads(INVENTORY.read_text(encoding="utf-8"))
+
+
+class RepositoryPresentationRolloutTests(unittest.TestCase):
+    """Protect the no-write review gate and privacy-safe fleet state."""
+
+    def test_complete_public_inventory_is_valid_and_explicit(self) -> None:
+        document = inventory()
+        self.assertEqual(planner.validate_inventory(document), [])
+        self.assertEqual(len(document["repositories"]), 29)
+        self.assertEqual(
+            [record["repository"] for record in document["repositories"]],
+            sorted(record["repository"] for record in document["repositories"]),
+        )
+        self.assertTrue(
+            all(record["adoptionState"] in planner.ADOPTION_STATES for record in document["repositories"])
+        )
+
+    def test_private_repository_observation_is_redacted(self) -> None:
+        record = next(
+            item for item in inventory()["repositories"]
+            if item["repository"] == "egohygiene/egohygiene"
+        )
+        self.assertEqual(record["adoptionState"], "deferred")
+        self.assertIsNone(record["observed"]["representedCommit"])
+        self.assertIsNone(record["observed"]["readme"]["gitBlobSha"])
+        self.assertEqual(record["customization"], "redacted")
+
+    def test_canary_wave_covers_three_required_shapes(self) -> None:
+        document = inventory()
+        self.assertEqual(
+            {item["role"] for item in document["canaryWave"]},
+            planner.EXPECTED_CANARY_ROLES,
+        )
+        self.assertEqual(
+            {item["repository"] for item in document["canaryWave"]},
+            {"egohygiene/mantle", "egohygiene/identity", "egohygiene/antidote"},
+        )
+
+    def test_plan_is_deterministic_no_write_and_observatory_safe(self) -> None:
+        document = inventory()
+        first = planner.build_plan(document)
+        second = planner.build_plan(document)
+        self.assertEqual(first, second)
+        self.assertEqual(planner.validate_plan(first), [])
+        self.assertFalse(first["review"]["approved"])
+        self.assertTrue(first["review"]["requiredBeforeFleetWrite"])
+        self.assertEqual(first["summary"]["total"], 29)
+        self.assertGreater(first["summary"]["blocked"], 0)
+        self.assertIsNone(first["observatory"]["healthScore"])
+        self.assertEqual(
+            first["waves"][0]["repositories"],
+            ["egohygiene/mantle", "egohygiene/identity", "egohygiene/antidote"],
+        )
+
+    def test_missing_assets_facts_and_egolint_block_canary(self) -> None:
+        plan = planner.build_plan(inventory())
+        mantle = next(
+            record for record in plan["repositories"]
+            if record["repository"] == "egohygiene/mantle"
+        )
+        self.assertEqual(mantle["disposition"], "blocked")
+        self.assertTrue(any("Identity" in blocker for blocker in mantle["blockers"]))
+        self.assertTrue(any("facts" in blocker for blocker in mantle["blockers"]))
+        self.assertTrue(any("Egolint" in blocker for blocker in mantle["blockers"]))
+
+    def test_proposal_is_refused_before_review_and_while_blocked(self) -> None:
+        plan = planner.build_plan(inventory())
+        review = {
+            "schema": planner.REVIEW_SCHEMA,
+            "planDigest": plan["planDigest"],
+            "reviewer": "szmyty",
+            "reviewedAt": "2026-08-31T16:00:00Z",
+            "decision": "approved",
+        }
+        with self.assertRaisesRegex(ValueError, "not eligible"):
+            planner.build_proposal(plan, review, "egohygiene/mantle")
+
+        bad_review = copy.deepcopy(review)
+        bad_review["planDigest"] = "0" * 64
+        with self.assertRaisesRegex(ValueError, "exact plan digest"):
+            planner.build_proposal(plan, bad_review, "egohygiene/mantle")
+
+    def test_reviewed_eligible_repository_yields_one_credential_free_proposal(self) -> None:
+        document = inventory()
+        mantle = next(
+            record for record in document["repositories"]
+            if record["repository"] == "egohygiene/mantle"
+        )
+        mantle["adoptionState"] = "eligible"
+        mantle["reasons"] = []
+        mantle["observed"]["identityPackage"]["status"] = "present"
+        mantle["observed"]["facts"]["status"] = "complete"
+        mantle["observed"]["egolint"]["status"] = "valid"
+        mantle["observed"]["egolint"]["reportDigest"] = "a" * 64
+        self.assertEqual(planner.validate_inventory(document), [])
+
+        plan = planner.build_plan(document)
+        review = {
+            "schema": planner.REVIEW_SCHEMA,
+            "planDigest": plan["planDigest"],
+            "reviewer": "szmyty",
+            "reviewedAt": "2026-08-31T16:00:00Z",
+            "decision": "approved",
+        }
+        proposal = planner.build_proposal(plan, review, "egohygiene/mantle")
+        self.assertEqual(proposal["repository"], "egohygiene/mantle")
+        self.assertTrue(proposal["preconditions"]["reviewed"])
+        self.assertEqual(proposal["preconditions"]["egolintStatus"], "valid")
+        self.assertFalse(proposal["preconditions"]["credentialsEmbedded"])
+        self.assertTrue(proposal["materialization"]["oneRepositoryOnly"])
+        self.assertEqual(
+            proposal["rollback"]["readmeGitBlobSha"],
+            mantle["observed"]["readme"]["gitBlobSha"],
+        )
+        self.assertRegex(proposal["proposalDigest"], r"^[0-9a-f]{64}$")
+        self.assertNotIn("token", json.dumps(proposal).casefold())
+
+    def test_tampered_and_superseded_plans_fail_closed(self) -> None:
+        plan = planner.build_plan(inventory())
+        plan["summary"]["total"] = 30
+        self.assertIn("planDigest", " ".join(planner.validate_plan(plan)))
+
+        document = inventory()
+        original = planner.build_plan(document)
+        mantle = next(
+            record for record in document["repositories"]
+            if record["repository"] == "egohygiene/mantle"
+        )
+        mantle["observed"]["representedCommit"] = "f" * 40
+        superseding = planner.build_plan(document)
+        self.assertNotEqual(original["inventoryDigest"], superseding["inventoryDigest"])
+        self.assertNotEqual(original["planDigest"], superseding["planDigest"])
+
+    def test_cli_generates_and_verifies_exact_plan(self) -> None:
+        with tempfile.TemporaryDirectory(prefix="pace-presentation-") as temporary:
+            output = Path(temporary) / "plan.json"
+            create = subprocess.run(
+                [
+                    sys.executable,
+                    str(SCRIPT),
+                    "plan",
+                    "--inventory",
+                    str(INVENTORY),
+                    "--output",
+                    str(output),
+                ],
+                check=False,
+                capture_output=True,
+                text=True,
+            )
+            self.assertEqual(create.returncode, 0, create.stderr)
+            verify = subprocess.run(
+                [
+                    sys.executable,
+                    str(SCRIPT),
+                    "verify-plan",
+                    "--plan",
+                    str(output),
+                ],
+                check=False,
+                capture_output=True,
+                text=True,
+            )
+            self.assertEqual(verify.returncode, 0, verify.stderr)
+
+
+if __name__ == "__main__":
+    unittest.main()