Authorize exact post-submit execution and receipt custody

.ci/auth-boundaries/TEST_STRUCTURE_DEBT.json

@@ -26,11 +26,11 @@
     },
     {
       "capability": "oversized_authorization_structure",
-      "content_sha256": "e040cdd6cc39c178be02760f9083cc0a3f8c89c69ea425e39744a4ae36e8a56b",
-      "end_line": 1246,
+      "content_sha256": "533fe94de5901976c7bbce4684ee403eef8afb1c36a4dfaf7b384fdb2eabe172",
+      "end_line": 1245,
       "hard_limit": 1200,
       "kind": "production_file",
-      "observed_lines": 1246,
+      "observed_lines": 1245,
       "path": "backend/app/modules/authorization/runtime.py",
       "qualified_symbol": null,
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -63,14 +63,14 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "81b4eb9fbfc6b45699d95329d20429d2d47910fa0255a4d50cd21cc80521845e",
-      "end_line": 904,
+      "end_line": 911,
       "hard_limit": 100,
       "kind": "production_function",
       "observed_lines": 166,
       "path": "backend/app/modules/authorization/prepared.py",
       "qualified_symbol": "PreparedAuthorizationService._binding",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 739
+      "start_line": 746
     },
     {
       "capability": "oversized_authorization_structure",
@@ -134,11 +134,11 @@
     },
     {
       "capability": "oversized_authorization_structure",
-      "content_sha256": "3143207c7619fcbffcc057c527af252be77be5fd36453224b9e1dea2a1fafcbf",
-      "end_line": 11066,
+      "content_sha256": "c86a99e75b16d1235acbe6d86e24cf7bff524e472e660cd7c88d37b8c5a35161",
+      "end_line": 11059,
       "hard_limit": 1200,
       "kind": "test_file",
-      "observed_lines": 11066,
+      "observed_lines": 11059,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": null,
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -291,14 +291,14 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "10003810b90ad8ea86434aaae1a38e650c5df4bebd09bb0577ac3ebb7a522351",
-      "end_line": 2954,
+      "end_line": 2957,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 121,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_identity_link_lifecycle_route_preserves_outcome_transaction_contract",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 2834
+      "start_line": 2837
     },
     {
       "capability": "oversized_authorization_structure",
@@ -314,39 +314,39 @@
     },
     {
       "capability": "oversized_authorization_structure",
-      "content_sha256": "c074ee206b423f15c088d2c7fe7577bf9e4aa094fcc81a126a4abea671af8d2a",
-      "end_line": 6069,
+      "content_sha256": "0858a7b107e68244cd719c9521856944411f88442818ae491ebb58a45ef4f417",
+      "end_line": 6070,
       "hard_limit": 120,
       "kind": "test_function",
-      "observed_lines": 128,
+      "observed_lines": 126,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_prepared_actor_authority_crossed_mutations_complete_in_both_orders",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 5942
+      "start_line": 5945
     },
     {
       "capability": "oversized_authorization_structure",
-      "content_sha256": "eee28eb08aca0b6e4ba7c0cbf08280b58dc2ff86a822ccba3e33a665b6a285f8",
+      "content_sha256": "56e6f85cc1b712b6410bee986d54e59e4dbad4c3f73c0599f12fe284587577a7",
       "end_line": 6387,
       "hard_limit": 120,
       "kind": "test_function",
-      "observed_lines": 313,
+      "observed_lines": 312,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_prepared_crosses_real_lifecycle_service_transactions",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 6075
+      "start_line": 6076
     },
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "5cbc72df2c822f2f57db164c0ea4aa2f2d76d591313f69d6496fc26b127b581e",
-      "end_line": 4052,
+      "end_line": 4055,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 149,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_project_11c2_reads_require_exact_admin_context_and_role_allowlist",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 3904
+      "start_line": 3907
     },
     {
       "capability": "oversized_authorization_structure",
@@ -363,26 +363,26 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "3d2a9843510cdb61b34500aa79a8ed3572df72723ab401f0245300e10c70044e",
-      "end_line": 9343,
+      "end_line": 9336,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 174,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_project_read_permissions_have_postgresql_role_scope_matrix",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 9170
+      "start_line": 9163
     },
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "0da4e29b29ebd44bd9049145ee4148531320bce53859ad5341e5f57261e5a884",
-      "end_line": 10779,
+      "end_line": 10772,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 227,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_project_role_and_all_operation_mappings_commit_one_linked_pair",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 10553
+      "start_line": 10546
     },
     {
       "capability": "oversized_authorization_structure",
@@ -411,14 +411,14 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "217ea21f4a2cbd31a4428ba1f01a9fcd90e73ee95fedb2587100a847e8921926",
-      "end_line": 10308,
+      "end_line": 10301,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 154,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "test_service_actor_replay_fails_closed_on_committed_state_drift",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 10155
+      "start_line": 10148
     },
     {
       "capability": "oversized_authorization_structure",
@@ -471,14 +471,14 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "32083a125798736fa17533aaa767c0236ae3042de4f7d8debdce5f15e0a801fe",
-      "end_line": 9625,
+      "end_line": 9618,
       "hard_limit": 100,
       "kind": "test_helper",
       "observed_lines": 130,
       "path": "backend/tests/test_authorization.py",
       "qualified_symbol": "_operation_success",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 9496
+      "start_line": 9489
     }
   ],
   "exceptions": [],

.ci/behavior-ownership/partition.v1.json

@@ -536,6 +536,10 @@
       "group": "auth",
       "target": "backend/app/modules/authorization/domain/post_policy.py"
     },
+    {
+      "group": "auth",
+      "target": "backend/app/modules/authorization/domain/post_submit.py"
+    },
     {
       "group": "auth",
       "target": "backend/app/modules/authorization/domain/prepared_adapter_bindings.py"
@@ -640,6 +644,10 @@
       "group": "auth",
       "target": "backend/app/modules/authorization/post_policy_authorization.py"
     },
+    {
+      "group": "auth",
+      "target": "backend/app/modules/authorization/post_submit_authorization.py"
+    },
     {
       "group": "auth",
       "target": "backend/app/modules/authorization/pre_submit_materialization.py"
@@ -648,6 +656,10 @@
       "group": "auth",
       "target": "backend/app/modules/authorization/prepared.py"
     },
+    {
+      "group": "auth",
+      "target": "backend/app/modules/authorization/prepared_post_submit_replay.py"
+    },
     {
       "group": "auth",
       "target": "backend/app/modules/authorization/prepared_projection_replay.py"
@@ -780,10 +792,6 @@
       "group": "artifacts",
       "target": "backend/app/modules/checkers/execution.py"
     },
-    {
-      "group": "artifacts",
-      "target": "backend/app/modules/checkers/execution_authority.py"
-    },
     {
       "group": "artifacts",
       "target": "backend/app/modules/checkers/execution_coordination.py"
@@ -1513,7 +1521,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "62d3e0889b562d645958338bd0b5cafefadbefaf288d77163076114d768b96d2",
+  "authority_digest": "941150a6b283032aefd8f41e1be6d5aaf1113d90349e943a0d2c8d9efe177fb2",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }

.commitrail/INDEX.md

@@ -8,12 +8,12 @@ for current product capability.
 |---|---|---|
 | [WS-DB-002](initiatives/WS-DB-002/OVERVIEW.md) | Complete | Shared UUIDv7 record generation, native-UUID relationships and fresh v0.1 baseline; natural-owner retry custody and aligned CI/local setup |
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Three self-service tools delivered through WS-MCP-002-02; 24 tools remain and WS-MCP-002-03 administrative reads are next |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Public guide activation and task reads, hidden approved-guide intake, exact post-submit input materialization and hidden ARCH-04B2 checker-output custody delivered; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 live authority is next |
-| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Hidden exact post-submit input materialization and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 live authority next |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Manager guide activation, public task authority, dispatcher mechanics and hidden intake are delivered; ARCH-04B input and ARCH-04B2 output custody exist with deny-only/unavailable production authority; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 live authority is next |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | ContributionPolicy administration and guide binding plus hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution delivered; ARCH-04D2 authority precedes shared FinalAcceptance, submitter ContributionRecord and applicable awards |
-| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | TASK/checker canonical history authority delivered and alternate gate removed; AUTH-18 public manager activation and ARCH-03D hidden intake delivered; ARCH-04B hidden input and ARCH-04B2 output custody delivered; continue boundary recovery with ARCH-04C hidden durable execution delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 live authority next |
-| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, public manager policy operations, phase composition, public guide activation, hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 live authority is next |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Public guide activation and task reads, hidden approved-guide intake, exact post-submit input materialization and hidden ARCH-04B2 checker-output custody delivered; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 exact input/execution/finalization authority is delivered; ARCH-04E1A routing-source facts are next |
+| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Hidden exact post-submit input materialization and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 exact input/execution/finalization authority delivered; ARCH-04E1A routing-source facts next |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Manager guide activation, public task authority, dispatcher mechanics and hidden intake are delivered; ARCH-04B input and ARCH-04B2 output custody exist; only output-file authority remains unavailable; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 exact input/execution/finalization authority is delivered; ARCH-04E1A routing-source facts are next |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | ContributionPolicy administration and guide binding plus hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution delivered; ARCH-04D2 input/execution/finalization authority delivered; ARCH-04E1A precedes shared FinalAcceptance, submitter ContributionRecord and applicable awards |
+| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | TASK/checker canonical history authority delivered and alternate gate removed; AUTH-18 public manager activation and ARCH-03D hidden intake delivered; ARCH-04B hidden input and ARCH-04B2 output custody delivered; continue boundary recovery with ARCH-04C hidden durable execution delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 exact input/execution/finalization authority delivered; ARCH-04E1A routing-source facts next |
+| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, public manager policy operations, phase composition, public guide activation, hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C hidden durable execution is delivered; ARCH-04D1 canonical material custody delivered; ARCH-04D2 exact input/execution/finalization authority is delivered; ARCH-04E1A routing-source facts are next |
 | [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Shared acceptance/source and existing fence foundations; human hidden review work remains independently dependency-gated |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |

.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md

@@ -12,10 +12,12 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   [ARCH-04A consolidation](WS-ARCH-001-04A.md) canonical post-submit contracts/conformance.
 - Intent: keep product modules behind explicit ports and composition roots.
 - Current boundary: one CHECKERS catalogue, compiler/parser and implementation
-  per checker ID serve active policy consumers; production post-submit phase
-  execution remains unavailable.
-- Delivered storage boundary: hidden [ARCH-04B2 checker-output custody](WS-ARCH-001-04B2.md), following hidden input materialization (ARCH-04B). Typed store, byte-free recovery and flush-only verified binding exist; the CHECKERS zero-slot reservation reader is implemented; production authority remains deny-only.
-- Next usable boundary: ARCH-04D2 exact service authority after delivered ARCH-04D1 canonical material custody and [ARCH-04C durable execution](WS-ARCH-001-04C.md), including the structural catalogue's empty output set. [ARCH-04D1](WS-ARCH-001-04D1.md) supplies the canonical ART database prerequisite; service activation remains separate.
+  per checker ID serve active policy consumers; hidden post-submit execution now
+  has exact fixed-service authority. Automatic dispatch/routing remains unavailable.
+- Delivered storage boundary: hidden [ARCH-04B2 checker-output custody](WS-ARCH-001-04B2.md), following hidden input materialization (ARCH-04B). Typed store, byte-free recovery and flush-only verified binding exist; the CHECKERS zero-slot reservation reader is implemented; output write/bind authority remains unavailable.
+- Next usable boundary: ARCH-04E1A routing-source facts after delivered
+  [ARCH-04D2](WS-ARCH-001-04D2.md) exact input, execute and finalize authority.
+  Output-file authority remains unavailable for the zero-output catalogue.
   [AUTH-18](../WS-AUTH-001/WS-AUTH-001-18.md) delivers public manager activation
   context and exact guide activation using the existing CP07 operation.
   [CP05A](WS-ARCH-001-CP05A.md) supplies public Finance policy administration and recoverable draft selectors.
@@ -34,8 +36,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   completed [ARCH-03B8](WS-ARCH-001-03B8.md) hidden task audit evidence and [ARCH-03B7](WS-ARCH-001-03B7.md) requirements projections and [ARCH-03B6](WS-ARCH-001-03B6.md) locked-context projections and [ARCH-03B5](WS-ARCH-001-03B5.md) current contributor/manager work context and ARCH-03B4 hidden contributor/management task detail, ARCH-03B3 hidden management/operational queues and ARCH-03B2 contributor-ready queue facts, ARCH-03B1 detached metadata and CP08 lineage
   and minimal writers and ARCH-03A internal guide context, following delivered CP07 activation and AUTH-12H live manager authority. POL-04B unified setup, POL-05/06
   manager operations and POL-07B internal phase composition are delivered.
-  The production post-submit phase remains unavailable until its separately
-  sequenced ART/CHECKER/AUTH execution boundaries land.
+  Exact hidden post-submit execution authority is delivered; automatic dispatch,
+  routing and public intake remain subsequent boundaries.
 - Governing sources: `docs/architecture_lockdown.md`, accepted ADRs, code, and
   architecture tests.
 - Preserve: no concrete-adapter imports in product services and no duplicate