Bind CK-07R1 fallback-persistence successor authority

AGENTS.md

@@ -41,15 +41,33 @@ QG1 PR #392 passed hosted CI, squash-merged, and was exact-main verified at
 `68050b93`. CK-07R1A corrected
 the exact hosted Python 3.14 lifecycle-tail blocker; the linked CK-07R1A0
 authorities, including argv correction, are merged through `479cbdb`.
-Coordinator disposition and clean exact-main reapplication from `cf44f4fd`
-derived the exact `66c015de…` / `4b1c62b2…` / `75d03f53…` candidate cohort.
+Coordinator disposition and clean exact-main reapplication from `6c08ecd9`
+derived the exact `66c015de…` / `f108dbb4…` / `4c514889…` candidate cohort.
 The versioned
 [`shared-successor-overlay-authority-v1`](docs/decisions/evidence/ck07r1a0/shared-successor-overlay-authority-v1.json)
 preserves accepted CK-08R1B, CK-08R1, and CK-QG1 bytes while admitting only
 that complete cohort as CK-07 `worker_prequalification`.
 The existing CK-07R1 worker remains stopped until that authority transition is
-merged and exact-main verified; no launch or token use is authorized. PR #394
-remains stale failed read-only.
+merged and exact-main verified; no launch or token use is authorized. The
+candidate must construct and validate its exact overlay-bound receipt and
+non-null stdout/stderr/output evidence before the first durable `completed`
+finalization; any evidence read/hash/parse/validation/finalization failure is
+terminal `failed_after_launch`. Temporary parent SIGINT/SIGTERM handlers must
+route every wait interruption/error through bounded TERM/KILL/reap before
+terminal failure persistence and remain installed through evidence, receipt,
+and terminal ledger finalization; originals restore only after the terminal
+state attempt. Every terminal fallback persistence call masks SIGINT/SIGTERM
+with the existing ignore guard and restores the prior temporary handlers
+afterward; the outer final restoration of original handlers remains last. The
+fork child ignores SIGINT/SIGTERM while
+waiting for parent release and routes every pre-release failure to
+`os._exit(71)`; parent cleanup rejects nonpositive PIDs. Ledger updates use a
+unique same-directory `mkstemp`, close and unlink every failed or interrupted
+path, and persist durable consumed/no-retry `failed_after_launch` evidence
+without temporary residue. Its interpreter must be the lexical
+repository-worktree `.venv/bin/python` with matching lexical venv `sys.prefix`;
+base interpreters, resolved/symlink equivalence, wrong-worktree venvs, and prefix
+mismatch fail closed. PR #394 remains stale failed read-only.
 Retained R3 evidence proved the EvidenceService outer query
 physically unbounded; CK-08R3A owns that isolated fix and R3 awaits its
 accepted, merged, exact-main-verified result.

docs/INDEX.md

@@ -112,8 +112,8 @@ keep CK-07R1 `blocked_hold`
 The accepted source history retains R3A preparation `6689d61f…` as a
 historical predecessor and R1B/current exact-main preparation `7d1831ff…` as
 the live predecessor. The sole CK-07 worker-prequalification successor is the
-atomic `66c015de…` preparation, `4b1c62b2…` benchmark, and `75d03f53…`
-lifecycle-test cohort derived from exact main `cf44f4fd`. Mixed or incomplete
+atomic `66c015de…` preparation, `f108dbb4…` benchmark, and `4c514889…`
+lifecycle-test cohort derived from exact main `6c08ecd9`. Mixed or incomplete
 cohorts, prior candidate `e204e0da…`, and historical candidate `d192c858…`
 fail closed. PR #394 remains a stale failed
 read-only witness; it is not updated, rerun, or merged. The old argv-guard attempt remains the historical
@@ -134,6 +134,26 @@ launch/output, or advance another successor. The one-run gate remains unspent
 and unavailable. The central authority is
 [REMAINING_EXECUTION_PLAN.md](roadmap/REMAINING_EXECUTION_PLAN.md).
 
+The V11 candidate must construct and validate the exact overlay/cohort-bound
+receipt and non-null stdout/stderr/output evidence before its first durable
+`completed` finalization. Evidence read/hash/parse/validation/finalization
+failures are terminal `failed_after_launch`. Temporary parent SIGINT/SIGTERM
+handlers route every wait interruption/error through bounded TERM/KILL/reap
+before terminal persistence and remain installed through evidence, receipt,
+and terminal ledger finalization; originals restore only after the terminal
+state attempt. Every terminal fallback persistence call masks SIGINT/SIGTERM
+with the existing ignore guard and restores the prior temporary handlers
+afterward; the outer final restoration of original handlers remains last. The
+fork child ignores SIGINT/SIGTERM while
+waiting for parent release and maps every pre-release failure to
+`os._exit(71)`; parent cleanup rejects nonpositive PIDs. Unique same-directory
+`mkstemp` ledger updates close and unlink on failed or interrupted
+write/fsync/replace/post-replace paths and retain durable consumed/no-retry
+`failed_after_launch` evidence without temporary residue. Interpreter identity
+is the lexical repository-worktree `.venv/bin/python` plus the matching lexical venv
+`sys.prefix`; base interpreters, symlink/resolved equivalence, wrong-worktree
+venvs, and prefix mismatch are rejected.
+
 The finite source/runtime state machine is currently `authority_main`: the live
 predecessor may remain on authority main, while only the exact selected
 successor may enter worker prequalification. `post_single_run` is unavailable

docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json

@@ -1,8 +1,8 @@
 {
-  "schema": "codex-usage-tracker.lifecycle-run-invocation-authority.v6",
-  "authority_version": 6,
+  "schema": "codex-usage-tracker.lifecycle-run-invocation-authority.v11",
+  "authority_version": 11,
   "owner": "CK-07R1A0",
-  "authority_base_sha": "cf44f4fdd3f54ad53263b5e744203be468fbe5ca",
+  "authority_base_sha": "6c08ecd92a2c5166c1585be426e1ed437309a910",
   "status": "blocked_no_run",
   "shared_preparation_binding": {
     "authority_main_sha256": "7d1831ff5229e8e2a9819f0bd155d116ad97c3c3579bfa0444f791fe81e81feb",
@@ -27,8 +27,8 @@
     "corrected_guard": "(sys.argv[0], *sys.argv[1:]) == LAUNCH_COMMAND[1:]",
     "corrected_candidate_status": "frozen_not_run",
     "corrected_candidate_artifacts": {
-      "benchmark_sha256": "4b1c62b2d56bf808b66f47c71b1bb1fa3595e2d590d0fa0192b5f7be3b2b4dde",
-      "lifecycle_test_sha256": "75d03f5346ffe2d02ffedc5df007ce45bef5533b324202ccf41b535de8b33cd2"
+      "benchmark_sha256": "f108dbb45d7586a15eb370c94fc124268a249f2f6f1ee97e7b8b28a3874b737c",
+      "lifecycle_test_sha256": "4c51488988397e0ccaf40266a4f68bb1d6d342e4be1db36dd1cf36ab63aa335a"
     },
     "old_candidate_artifacts": {
       "benchmark_sha256": "6a864c74a403da3edb671d9750fc2b2a59b73899102075ee0cec89fbb429b783",
@@ -134,7 +134,7 @@
         "requires": [
           "this authority is merged and exact-main verified",
           "the existing worker resumes only the preserved exact candidate worktree",
-          "the worker presents the byte-exact 66c015de/4b1c62b2/75d03f53 cohort over the 7d1831ff predecessor",
+          "the worker presents the byte-exact 66c015de/f108dbb4/4c514889 cohort over the 7d1831ff predecessor",
           "runtime_acceptance remains not_claimed",
           "authority-integrity and prelaunch gates pass",
           "maximum_new_end_to_end_runs remains 1 and unspent_unavailable",
@@ -205,9 +205,9 @@
   },
   "selected_candidate": {
     "status": "exact_ck07_successor_permitted_not_accepted",
-    "base_sha": "cf44f4fdd3f54ad53263b5e744203be468fbe5ca",
-    "retained_branch": "feature/ck-07r1-launcher-correction-v7",
-    "retained_worktree": "2026-08-11/codex-usage-tracker-ck07r1-launcher-correction-v7",
+    "base_sha": "6c08ecd92a2c5166c1585be426e1ed437309a910",
+    "retained_branch": "feature/ck-07r1-launcher-correction-v10",
+    "retained_worktree": "2026-08-11/codex-usage-tracker-ck07r1-launcher-correction-v10",
     "witness_status": "retained_uncommitted_read_only_exact_candidate",
     "source_predecessor_sha256": "7d1831ff5229e8e2a9819f0bd155d116ad97c3c3579bfa0444f791fe81e81feb",
     "source_successor_sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
@@ -223,12 +223,12 @@
       },
       {
         "path": "scripts/benchmark_ck07r1_lifecycle_scale.py",
-        "sha256": "4b1c62b2d56bf808b66f47c71b1bb1fa3595e2d590d0fa0192b5f7be3b2b4dde",
+        "sha256": "f108dbb45d7586a15eb370c94fc124268a249f2f6f1ee97e7b8b28a3874b737c",
         "role": "benchmark"
       },
       {
         "path": "tests/agent_kernel/publication/test_lifecycle_scale.py",
-        "sha256": "75d03f5346ffe2d02ffedc5df007ce45bef5533b324202ccf41b535de8b33cd2",
+        "sha256": "4c51488988397e0ccaf40266a4f68bb1d6d342e4be1db36dd1cf36ab63aa335a",
         "role": "lifecycle_test"
       },
       {
@@ -237,7 +237,7 @@
         "role": "linked_evidence"
       }
     ],
-    "binding": "only the byte-exact 66c015de/4b1c62b2/75d03f53 cohort may enter worker_prequalification after this authority merges and exact-main verifies",
+    "binding": "only the byte-exact 66c015de/f108dbb4/4c514889 cohort may enter worker_prequalification after this authority merges and exact-main verifies",
     "worker_revalidation_required": true
   },
   "preserved_authorities": {
@@ -249,9 +249,9 @@
     },
     "lifecycle_source_digest": {
       "path": "docs/decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json",
-      "sha256": "6156780a7e8663859658bb5309f13eb6bf5283704784d8270edf0512c167d70b",
+      "sha256": "7cc998fb29cad3a7b87e95026df5fb2195684c064628885cab7cc0a781d0bb74",
       "schema_path": "docs/decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.schema.json",
-      "schema_sha256": "4026a4e971c1b6b177b467440a36931bc6a15a0b376918bdc4169b732a0d489c"
+      "schema_sha256": "6bf00ce49082be581783c33ce7247a29eb9b63515d6a5af209dccd82d28d685b"
     }
   },
   "launch_contract": {
@@ -273,6 +273,27 @@
     "launcher_safety": {
       "overlay_and_cohort_verification": "must_complete_before_ledger_fork_child_release_or_token_consumption",
       "receipt_binding": "must_equal_exact_overlay_verification_result_and_three_artifact_cohort",
+      "receipt_completion_ordering": "construct_exact_overlay_bound_receipt_then_validate_then_first_durable_completed_finalization",
+      "receipt_failure_state": "construction_validation_or_finalization_failure_is_failed_after_launch_never_completed",
+      "child_pre_release_failure": "every_pre_release_child_failure_routes_to_os._exit_71",
+      "child_wait_signal_handling": "SIGINT_SIGTERM_ignored_while_waiting_for_parent_release",
+      "parent_cleanup_pid_guard": "reject_pid_less_than_or_equal_to_zero_before_kill_wait_or_reap",
+      "atomic_ledger_update": "unique_same_directory_mkstemp_close_and_unlink_on_every_failed_or_interrupted_write_fsync_replace_or_post_replace_path",
+      "atomic_failure_state": "durable_failed_after_launch_token_consumed_no_retry_no_temp_residue",
+      "parent_signal_handling": "temporary_SIGINT_SIGTERM_handlers_installed_before_child_observation_held_through_bounded_reap_evidence_receipt_and_terminal_ledger_persistence_then_restored",
+      "wait_interruption_cleanup": "every_wait_exception_or_parent_signal_requires_bounded_SIGTERM_then_SIGKILL_then_reap_before_terminal_failure",
+      "signal_cleanup_mask": "SIGINT_SIGTERM_ignored_during_bounded_child_cleanup",
+      "terminal_fallback_signal_mask": "SIGINT_SIGTERM_ignored_during_every_terminal_fallback_persistence_then_prior_temporary_handlers_restored",
+      "evidence_completion_ordering": "required_non_null_stdout_stderr_output_read_hash_parse_validate_before_first_durable_completed_finalization",
+      "evidence_failure_state": "missing_read_hash_parse_validation_or_finalization_failure_is_failed_after_launch_never_completed",
+      "interpreter_identity": {
+        "executable": "lexical_repository_worktree_.venv/bin/python_required",
+        "sys_prefix": "lexical_repository_worktree_.venv_required",
+        "base_interpreter": "rejected",
+        "symlink_or_resolved_equivalence": "rejected",
+        "wrong_worktree_venv": "rejected",
+        "prefix_mismatch": "rejected"
+      },
       "post_token_or_release_failure_state": "failed_after_launch",
       "termination_sequence": [
         "SIGTERM",
@@ -580,7 +601,7 @@
     "refund": false,
     "prior_identities_reused": false,
     "concurrent_processes_allowed": false,
-    "eligibility": "only after this authority merges and exact-main verifies, the stopped existing worker resumes only the preserved exact 66c015de/4b1c62b2/75d03f53 candidate cohort, and all gates pass",
+    "eligibility": "only after this authority merges and exact-main verifies, the stopped existing worker resumes only the preserved exact 66c015de/f108dbb4/4c514889 candidate cohort, and all gates pass",
     "first_successful_launch": "exactly one first successful child launch may consume the still-unspent token; this is not a retry, restart, or replacement of a launched process",
     "old_candidate_reuse": "forbidden"
   },