abiorh-claw · Jul 19, 2026 · Jul 19, 2026 · Jul 19, 2026 · Jul 19, 2026 · Jul 19, 2026
diff --git a/.agent-loop/LOOP_STATE.md b/.agent-loop/LOOP_STATE.md
@@ -23,32 +23,31 @@
   ART-02C1 remains inactive pending signed memory and a separate explicit start.
 - AUTH-09D-A merged through PR #148 as `99ae4c9`; signed schema-v2 memory at
   `cf8a3e8` recorded the stopped gate and exact 09D-B successor.
-- PR-ready implementation chunk: `WS-AUTH-001-09D-B` in PR #152 on
-  `codex/ws-auth-001-09d-b-identity-link-lifecycle`, started from trusted
-  `main` at `99ae4c9` after the user's explicit start signal. Contract repair
-  passed required L1 preimplementation review at exact contract `9ec6390b`.
-  Implementation, deterministic proof, and required internal review pass; the
-  branch now integrates trusted `main` at `1b5422f`.
+- AUTH-09D-B merged through PR #152 as `93dd392`; signed schema-v2 memory at
+  `912a6254` stopped and named the contributor foundation as its exact
+  successor.
 - PR #119 merged `WS-AUTH-001-05B` as `ad71c7e`.
 - PR #120 merged `WS-ART-001-OBJECT-STORAGE-AMENDMENT` as `4408256`.
 - PR #122 merged the first automated post-merge memory implementation as
   `fc89fb6`; its schema-v1 cross-initiative next pointer is superseded by the
   schema-v2 initiative-local clean cut.
-- Current gate: refreshed external checks and explicit human review for PR
-  #152. The inactive
-  `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` is the next same-initiative gate; it
-  changes no action availability. No service caller becomes executable before
-  AUTH-09E.
+- Active implementation chunk: `WS-AUTH-001-CONTRIBUTOR-FOUNDATION`, explicitly
+  started by the user on 2026-07-19 from trusted `main` at `93dd392`. Current
+  exact contract `2a21166d` passed required L1 preimplementation review;
+  initial findings are repaired, and exact code SHA `4d1fc507` passed all nine
+  required internal tracks. PR publication and external checks are the current
+  gate; Backend must still prove 78/90 percent aggregate coverage. It changes no action
+  availability, and no service caller becomes executable before AUTH-09E.
 - Scope checkpoint: AWS S3 is the only v0.1 production provider; MinIO is
   local/CI S3 protocol proof; LocalStorage is focused development/test; R2 and
   Flow Node are deferred. Product modules receive narrow artifact capabilities,
   and AWS cannot instantiate in production without release-bound live proof.
 - Authorization checkpoint: trusted main contains 74 PermissionIds and 65
-  ActionIds, with 15 active actions: the two actor-self actions, seven AUTH-08
+  ActionIds, with 17 active actions: the two actor-self actions, seven AUTH-08
   administrative actions, AUTH-09B `actor.service.provision`, AUTH-09C
   `actor.profile.read` plus `actor.identity_link.read`, and the three merged
-  AUTH-09D-A profile lifecycle actions. PR #152 activates only the two 09D-B
-  identity-link lifecycle actions, producing a candidate total of 17.
+  AUTH-09D-A profile lifecycle actions, and the two AUTH-09D-B identity-link
+  lifecycle actions.
   Merged AUTH-09A defines seven fixed artifact
   service identities and eleven exact planned static matrix memberships. ART
   feature chunks supply hidden canonical behavior/resource composition. Merged
@@ -59,9 +58,10 @@
   merged through PRs #127, #129, #141, and #151. ART-02B1 adds real MinIO
   protocol proof plus a fail-closed, runtime-ineligible native AWS profile;
   ART-02C1 remains inactive.
-- Authorization checkpoint: AUTH-07B through AUTH-09D-A merged through PRs
-  #130, #131, #132, #143, #146, and #148. AUTH-09D-B is the reviewed PR #152
-  candidate; its contributor foundation and AUTH-09E remain inactive.
+- Authorization checkpoint: AUTH-07B through AUTH-09D-B merged through PRs
+  #130, #131, #132, #143, #146, #148, and #152. The contributor foundation is
+  internally approved at code SHA `4d1fc507`; AUTH-09E remains
+  inactive.
 - Parallel coverage work: `WS-QUAL-001-01B2` remains paused. Its last official
   whole-app result is `6466/8159` statements (`79.249908%`); no replacement
   evidence exists.

diff --git a/.agent-loop/REVIEW_LOG.md b/.agent-loop/REVIEW_LOG.md
@@ -1,5 +1,89 @@
 # Review Log
 
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Internal Review Passed
+
+- Exact code SHA `4d1fc507c343d483677a332c2a91885e32571693` passed senior,
+  QA/test, security/auth, product/ops, architecture, CI integrity, docs,
+  reuse/dedup, and test-delta review after all valid findings were repaired.
+- Internal review evidence and the PR trust bundle record deterministic proof,
+  repair history, human focus, and the mandatory external 78/90 coverage gate.
+- PR publication and external GitHub checks are current. AUTH-09E remains
+  inactive and requires a later merge/memory/explicit-start sequence.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Review Repair Evidenced
+
+- Malformed preflight values are now replaced with a fixed redacted marker;
+  realistic email/token-like inputs never appear, and each 22-row unsafe class
+  reports its total with only 20 sorted rows.
+- The repaired migration matrix passed two tests in 102.35 seconds, including
+  zero/extra/absent trigger arguments, nullable delegation, and missing/service
+  INSERT/UPDATE parity on both contributor tables.
+- All 12 repaired PostgreSQL races passed in 636.24 seconds. Lifecycle-first
+  submission cases prove zero checker/enqueue calls; task-write-first cases
+  prove exactly one of each after the valid contributor write commits.
+- Current docs name the reusable function, triggers, foreign keys, and indexes
+  without stale human-worker wording. Fresh exact-SHA internal review is the
+  current gate; Backend remains mandatory for aggregate 78/90 coverage.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Implementation Review Failed
+
+- Exact candidate `e41c33c0db501152694e862d9f3a02877e42cfce` failed required
+  internal review. A malformed legacy attribution value could leak through the
+  migration refusal diagnostic, direct-SQL trigger branches and invocation
+  counts were not fully proved, two current docs used stale human terminology,
+  and aggregate coverage had not yet been produced by GitHub Backend.
+- Repair redacts malformed values, bounds each class, closes the PostgreSQL and
+  race-test matrix, names every database object for operators/REV, and treats
+  the unchanged 78/90 percent reports as mandatory external pre-merge gates.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Targeted Evidence Collected
+
+- The clean `contributor_id` migration, canonical-human database guard,
+  transaction-local actor revalidation, task/assignment locks, API mappings,
+  current docs, persistent task coverage gate, and merge intent are implemented.
+- The repaired migration matrix passed two comprehensive tests in 102.35
+  seconds. The repaired 12 named real PostgreSQL lifecycle/task interleavings
+  passed in 636.24 seconds, and the
+  repaired canonical API-error test passed in 63.79 seconds.
+- Actor/task focused unit and database behavior tests passed, the real HTTP API
+  contract drill passed, and Ruff, docstring coverage, Markdown links, diff
+  integrity, and one Alembic head passed before reviewer repair.
+- GitHub Backend must still prove the unchanged 78 percent global and persistent
+  90 percent actor/task subsystem reports before merge. AUTH-09E remains
+  inactive.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Plan Review Passed
+
+- Exact repaired contract `2a21166daa747d3233845064826bce6573a85dbb`
+  passed senior/security/product, QA/migration/CI, and
+  architecture/reuse/docs/REV tracks after the initial preimplementation fail.
+- The approved boundary is actor-owned profile/link revalidation, exact
+  profile-link-task-assignment lock order, independent database lineage checks,
+  12 observed PostgreSQL races, persistent 90 percent actor/task coverage, and
+  no authorization action, permission, grant, decision, or availability change.
+- All 88 agent gates and diff integrity pass. Bounded implementation may begin
+  for this chunk only.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Contract Review Failed
+
+- Exact candidate `33f645b0` was rejected before runtime edits. Review found a
+  stale-link race, underspecified 403/503 mapping, unlocked task resources,
+  ambiguous migration diagnostics and downgrade dependencies, an overbroad
+  clean-cut claim, missing persistent task coverage, and stale agent-gate state.
+- Repair keeps actor/link validation actor-owned, preserves the exact
+  profile-link-task-assignment order, removes REV-02C attribution inference,
+  names every schema object and SQLSTATE, defines 12 observed PostgreSQL races,
+  and changes no action, permission, grant, or availability.
+
+## 2026-07-19 - WS-AUTH-001-CONTRIBUTOR-FOUNDATION Explicitly Started
+
+- PR #152 merged AUTH-09D-B as `93dd392`; signed schema-v2 memory `912a6254`
+  stopped and named this chunk as the same-initiative successor.
+- The user explicitly started the contributor foundation. Trusted `main` has
+  one Alembic head, `0026_actor_profile_lifecycle`; exact migration, lineage,
+  lock-order, rollback, and clean-cut behavior are undergoing required L1
+  preimplementation review before runtime edits.
+
 ## 2026-07-18 - WS-AUTH-001-09D-B Internal Review Passed
 
 - Identity-link revoke/reactivate implementation, real PostgreSQL concurrency,

diff --git a/.agent-loop/WORK_QUEUE.md b/.agent-loop/WORK_QUEUE.md
@@ -4,7 +4,7 @@
 
 | Chunk | Title | Risk | Status |
 |---|---|---:|---|
-| `WS-AUTH-001-09D-B` | Identity-Link Lifecycle And Race Closure | L1 | PR #152 open; trusted main `1b5422f` integrated; refreshed checks and explicit human review pending |
+| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | Contributor Fields And Canonical-Human Lineage | L1 | Internal review passed at `4d1fc507`; PR/external checks pending; aggregate coverage mandatory in Backend |
 
 Live post-merge state remains read from signed `automation/loop-memory`
 output. This authored queue records the separately approved parallel chunks.
@@ -14,7 +14,6 @@ output. This authored queue records the separately approved parallel chunks.
 | Chunk | Title | Risk | Status |
 |---|---|---:|---|
 | `WS-QUAL-001-01B2` | Baseline Evidence And CI Ratchet | L1 | Paused for AUTH priority; no valid replacement baseline yet |
-| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | Contributor Fields And Canonical-Human Lineage | L1 | Inactive until 09D-B merge/memory and explicit user start |
 | `WS-AUTH-001-09E` | Fixed Service Runtime Admission | L1 | Inactive until contributor-foundation merge/memory and explicit user start |
 | `WS-QUAL-001-02` | Project Service Coverage | L1 | Inactive until 01B2 merge/memory plus explicit user start |
 | `WS-POL-002-04` | Locked Runtime Execution And Routing Hardening | L1 | Inactive pending relevant authorization proof and a separate explicit user start |
@@ -95,12 +94,12 @@ stopped. AUTH-09B merged through PR #143 as `053242b`; the user then explicitly
 started AUTH-09C. PR #146 merged it as `0ffdabf`; signed memory at `eeb3dc2`
 stopped. The user explicitly started AUTH-09D, and required review split it
 before runtime edits. PR #148 merged 09D-A as `99ae4c9`; signed memory
-`cf8a3e8` stopped and named 09D-B. The user explicitly started 09D-B; exact
-contract `9ec6390b` passed required L1 review. Implementation, deterministic
-proof, and required internal review pass. PR #152 is open and integrates trusted
-main at `1b5422f`; refreshed external checks and explicit human review are the
-current gate. The contributor foundation is the next AUTH gate; 09E and
-POL-002-04 remain inactive pending their own gates and explicit starts.
+`cf8a3e8` stopped and named 09D-B. PR #152 merged 09D-B as `93dd392`; signed
+memory `912a6254` passed and stopped. The user explicitly started the
+contributor foundation from that trusted head. Its first L1 review rejected the
+underspecified contract before runtime edits; exact contract repair and
+rereview are current. AUTH-09E and POL-002-04 remain inactive pending their own
+gates and explicit starts.
 
 Coverage R10 merged through PR #108. Do not start 01B2, chunk 02, or another
 coverage implementation chunk from this worktree.

diff --git a/.agent-loop/initiatives/WS-AUTH-001-workstream-authorization-service/CHUNK_MAP.md b/.agent-loop/initiatives/WS-AUTH-001-workstream-authorization-service/CHUNK_MAP.md
@@ -34,8 +34,8 @@ stopped.
 | `WS-AUTH-001-09C` | Actor And Identity-Link Administration Reads | L1 | Merged through PR #146 as `0ffdabf` |
 | `WS-AUTH-001-09D` | Actor And Identity-Link Lifecycle Mutations | L1 | Split before runtime implementation into 09D-A and 09D-B |
 | `WS-AUTH-001-09D-A` | Profile Lifecycle And Evidence Repair | L1 | Merged through PR #148 as `99ae4c9`; signed memory `cf8a3e8` passed |
-| `WS-AUTH-001-09D-B` | Identity-Link Lifecycle And Race Closure | L1 | Implemented; deterministic proof and required internal review pass; ready PR publication |
-| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | Contributor Fields And Canonical-Human Lineage | L1 | Inactive until 09D-B merge/memory and explicit start |
+| `WS-AUTH-001-09D-B` | Identity-Link Lifecycle And Race Closure | L1 | Merged through PR #152 as `93dd392`; signed memory `912a6254` passed |
+| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | Contributor Fields And Canonical-Human Lineage | L1 | Internal review passed at `4d1fc507`; PR/external checks pending; Backend coverage mandatory |
 | `WS-AUTH-001-09E` | Fixed Service Runtime Admission | L1 | Inactive until contributor-foundation merge/memory and explicit start |
 | `WS-AUTH-001-ART-CUSTODY` | ART Activation Custody Transfer | L1 | Inactive until 09E merge/memory and explicit start |
 | `WS-AUTH-001-REV-CUSTODY` | REV Activation Custody Transfer | L1 | Inactive until 09E merge/memory and explicit start |
@@ -203,7 +203,8 @@ AUTH-09D. Required preimplementation review rejected the combined lifecycle
 contract before runtime edits, so it was split into 09D-A and 09D-B. PR #148
 merged 09D-A as `99ae4c9`; signed memory `cf8a3e8` stopped and named 09D-B. The
 user explicitly started 09D-B; exact contract `9ec6390b` passed required L1
-review. Implementation, deterministic proof, and required internal review pass;
-ready PR publication is the current gate. The contributor foundation is the next
-same-initiative gate; 09E and POL-002-04 remain inactive pending their own gates
-and explicit starts.
+review. PR #152 merged it as `93dd392`; signed memory `912a6254` passed and
+stopped. The user explicitly started the contributor foundation. Its first L1
+review rejected the underspecified contract before runtime edits; exact repair
+and rereview are current. AUTH-09E and POL-002-04 remain inactive pending their
+own gates and explicit starts.
diff --git a/.agent-loop/initiatives/WS-AUTH-001-workstream-authorization-service/STATUS.md b/.agent-loop/initiatives/WS-AUTH-001-workstream-authorization-service/STATUS.md
@@ -99,24 +99,31 @@ split into 09D-A and 09D-B. After bounded external repair and exact-head review,
 PR #148 merged AUTH-09D-A as `99ae4c9`; signed schema-v2 memory `cf8a3e8`
 recorded the stopped gate and named 09D-B. The user explicitly started 09D-B
 from that trusted head. Exact contract `9ec6390b` passed required L1
-preimplementation review. Implementation, deterministic proof, and required
-internal review pass; ready PR publication is current. No service caller or
-consumer feature action is active.
+preimplementation review. Implementation, deterministic proof, required
+internal review, and external checks passed before PR #152 merged as
+`93dd392`; signed memory `912a6254` stopped and named the contributor
+foundation. The user explicitly started that chunk; exact contract `2a21166d`
+passed required L1 review. Initial exact-SHA implementation review found
+diagnostic-privacy and proof gaps; bounded repair and deterministic evidence are
+complete, and exact code SHA `4d1fc507` passed all nine internal tracks. PR and
+external checks are current; aggregate coverage remains a mandatory GitHub
+Backend gate. No service caller or consumer feature action is active.
 
 ## Active planning chunk
 
 None. `WS-AUTH-001-XINT` merged through PR #140.
 
-## PR-ready implementation chunk
+## Active implementation chunk
 
-`WS-AUTH-001-09D-B` - Identity-Link Lifecycle And Race Closure. Exact contract
-`9ec6390b` passed required L1 preimplementation review. Implementation,
-deterministic proof, and required internal review pass. Ready PR publication is
-the current gate.
+`WS-AUTH-001-CONTRIBUTOR-FOUNDATION` - Contributor Fields And Canonical-Human
+Lineage. Explicitly started from trusted `main` at `93dd392`; exact contract
+`2a21166d` passed required L1 review. Internal review passed at code SHA
+`4d1fc507`; PR/external checks are current and aggregate coverage is mandatory
+in Backend.
 
 ## Current review branch
 
-`codex/ws-auth-001-09d-b-identity-link-lifecycle`
+`codex/ws-auth-001-contributor-foundation`
 
 ## Chunk status
 
@@ -145,8 +152,8 @@ the current gate.
 | `WS-AUTH-001-09C` | Merged | `codex/ws-auth-001-09c-actor-identity-admin-reads` | #146 | Merged as `0ffdabf`; signed memory `eeb3dc2` passed and stopped. |
 | `WS-AUTH-001-09D` | Split | `codex/ws-auth-001-09d-actor-identity-lifecycle` | - | Required L1 review rejected the combined contract before runtime edits. |
 | `WS-AUTH-001-09D-A` | Merged | `codex/ws-auth-001-09d-actor-identity-lifecycle` | #148 | Merged as `99ae4c9`; signed memory `cf8a3e8` passed and stopped. |
-| `WS-AUTH-001-09D-B` | Ready for PR | `codex/ws-auth-001-09d-b-identity-link-lifecycle` | - | Implementation, deterministic proof, and required internal review pass. |
-| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | Proposed | - | - | Contributor-field clean cut and canonical-human lineage after 09D-B. |
+| `WS-AUTH-001-09D-B` | Merged | `codex/ws-auth-001-09d-b-identity-link-lifecycle` | #152 | Merged as `93dd392`; signed memory `912a6254` passed and stopped. |
+| `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` | PR ready | `codex/ws-auth-001-contributor-foundation` | - | Internal review passed at `4d1fc507`; PR/external checks pending; Backend coverage mandatory. |
 | `WS-AUTH-001-09E` | Proposed | - | - | Fixed service runtime admission after the contributor foundation. |
 | `WS-AUTH-001-ART-CUSTODY` | Proposed | - | - | Availability-neutral 25-row ART owner transfer after 09E. |
 | `WS-AUTH-001-REV-CUSTODY` | Proposed | - | - | Availability-neutral 19-row REV owner transfer after 09E. |
@@ -165,16 +172,17 @@ merged feature manifests and separate human starts exist.
 
 ## Blockers
 
-AUTH-09C has no remaining blocker. PR #146 merged as `0ffdabf` and signed
-memory passed at `eeb3dc2`. PR #148 merged AUTH-09D-A as `99ae4c9`; signed
-memory `cf8a3e8` passed and stopped. The user explicitly started AUTH-09D-B;
-exact contract `9ec6390b` passed required L1 review. Implementation,
-deterministic proof, and required internal review pass; ready PR publication is
-the current gate. It must not add service grants,
-dynamic assignments, token-role authority, service admission, or consumer
-feature-action activation. The contributor foundation is the next
-same-initiative gate but remains inactive until merge/memory and an explicit
-start. AUTH-09E remains inactive behind that foundation.
+AUTH-09C has no remaining blocker. PR #146 merged as `0ffdabf`; PR #148 merged
+AUTH-09D-A as `99ae4c9`; and PR #152 merged AUTH-09D-B as `93dd392`. Signed
+memory `912a6254` passed and stopped. The user explicitly started the
+contributor foundation. Its first L1 review rejected an underspecified
+identity-link race, migration diagnostic, resource-lock, clean-cut, and CI
+contract before runtime edits. Exact repaired contract `2a21166d` passed every
+required L1 track. Initial implementation candidate `e41c33c0` failed privacy,
+proof, docs, and evidence review. Bounded repair and deterministic evidence are
+complete; exact code SHA `4d1fc507` passed all nine internal tracks. PR/external
+checks are current and aggregate coverage remains mandatory in Backend.
+AUTH-09E remains inactive behind that foundation.
 
 The four proposed REV lifecycle actions and review-evidence binding action are
 blocked on complete feature-owned typed manifests. REV fixed services are also