Flow-Research · abiorh-claw · Oct 2, 2026 · Oct 2, 2026 · Oct 2, 2026 · Oct 2, 2026
diff --git a/.ci/behavior-ownership/partition.v1.json b/.ci/behavior-ownership/partition.v1.json
@@ -1284,6 +1284,18 @@
       "group": "lifecycle",
       "target": "backend/app/modules/reviews/models.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/reviews/packet/models.py"
+    },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/reviews/packet/repository.py"
+    },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/reviews/packet/schemas.py"
+    },
     {
       "group": "lifecycle",
       "target": "backend/app/modules/reviews/repository.py"
@@ -1537,7 +1549,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "7ac9e6bbb24c63ce9cbef90541f4c0025ee8a0ebad01caf02f288ea047bff52f",
+  "authority_digest": "7a773f1851a863fc3fa1da772411df7e58d9e09cc0a3ee2399715b3cc4ab73b1",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }
diff --git a/.commitrail/INDEX.md b/.commitrail/INDEX.md
@@ -8,13 +8,13 @@ for current product capability.
 |---|---|---|
 | [WS-DB-002](initiatives/WS-DB-002/OVERVIEW.md) | Complete | Shared UUIDv7 record generation, native-UUID relationships and fresh v0.1 baseline; natural-owner retry custody and aligned CI/local setup |
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Three self-service tools delivered through WS-MCP-002-02; 24 tools remain and WS-MCP-002-03 administrative reads are next |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | ARCH-04E1A immutable route-neutral TASK source storage, detached facts and type-only accepted-effects contract are delivered; next build REV-03B packet and REV-04A Review storage, then shared REV-04B/CON-03C/07 and REV-12A/CON fence foundations before 04E1B/04E2/04E3 routing and 04F remediation |
-| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | ART-07A1 metadata-only packet contract and ARCH-04E1A source facts are delivered; REV-03B packet storage, REV-04A Review storage and shared acceptance precede routing, 04F remediation and public intake |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | ARCH-04E1A source facts are delivered without routing authority; REV-03B packet and REV-04A Review storage, shared acceptance foundations and hidden 04E1B proof precede exact 04E2 activation and 04E3 live composition |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | ARCH-04E1A source facts are delivered; REV-03B packet and REV-04A Review storage, then REV-04B FinalAcceptance persistence, CON-03C/07 and the shared REV-12A/CON fence foundation are next before either acceptance trigger composes shared effects |
-| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | ARCH-04E1A source facts and source-neutral types are delivered without runtime composition; continue with REV-03B packet and REV-04A Review storage, then shared acceptance foundations and later 04E1B/04E2/04E3 route |
-| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | ARCH-04E1A source facts and ART-07A1 packet types are delivered; REV-03B packet and REV-04A Review storage come next, while false activation remains unavailable until shared acceptance, exact routing authority, live composition and 04F remediation are proven |
-| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | ARCH-04E1A TASK source foundation delivered; ART-07A1 packet types delivered; REV-03B packet and REV-04A Review storage, then REV-04B FinalAcceptance, CON-03C/07 and existing REV-12A/CON fence foundations are next; human hidden review work remains independently dependency-gated |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | ARCH-04E1A immutable route-neutral TASK source storage, detached facts and type-only accepted-effects contract are delivered; next build complete REV-04A Review storage, then shared REV-04B/CON-03C/07 and REV-12A/CON fence foundations before 04E1B/04E2/04E3 routing and 04F remediation |
+| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | ART-07A1 packet types, REV-03B packet storage and ARCH-04E1A source facts are delivered; complete REV-04A Review storage and shared acceptance precede routing, 04F remediation and public intake |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | ARCH-04E1A source facts are delivered without routing authority; complete REV-04A Review storage, shared acceptance foundations and hidden 04E1B proof precede exact 04E2 activation and 04E3 live composition |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | ARCH-04E1A source facts are delivered; complete REV-04A Review storage, then REV-04B FinalAcceptance persistence, CON-03C/07 and the shared REV-12A/CON fence foundation are next before either acceptance trigger composes shared effects |
+| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | ARCH-04E1A source facts and source-neutral types are delivered without runtime composition; continue with complete REV-04A Review storage, then shared acceptance foundations and later 04E1B/04E2/04E3 route |
+| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | ARCH-04E1A source facts, ART-07A1 packet types and REV-03B packet storage are delivered; complete REV-04A Review storage comes next, while false activation remains unavailable until shared acceptance, exact routing authority, live composition and 04F remediation are proven |
+| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | ARCH-04E1A TASK source foundation delivered; ART-07A1 packet types and REV-03B packet storage delivered; complete REV-04A Review storage, then REV-04B FinalAcceptance, CON-03C/07 and existing REV-12A/CON fence foundations are next; human hidden review work remains independently dependency-gated |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |
 | [WS-XINT-002](initiatives/WS-XINT-002/OVERVIEW.md) | Planned | Remaining ART/AUTH activation edges only |

diff --git a/.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md b/.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md
@@ -9,8 +9,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 
 - Disposition: Planned
 - Delivered prerequisite: [ART-07A1](../WS-ART-001/WS-ART-001-07A1.md) supplies
-  metadata-only packet types; REV-03B packet storage and REV-04A Review storage
-  precede shared FinalAcceptance. No packet resolver or human runtime is live.
+  metadata-only packet types. REV-03B packet storage is delivered; complete
+  REV-04A Review storage is next before shared FinalAcceptance. No packet resolver or human runtime is live.
 
 - Completed boundary: through 02H, [CP05](WS-ARCH-001-CP05.md), [CP06](WS-ARCH-001-CP06.md), [CP07](WS-ARCH-001-CP07.md), [ARCH-03A](WS-ARCH-001-03A.md), and
   [ARCH-04A consolidation](WS-ARCH-001-04A.md) canonical post-submit contracts/conformance.
@@ -26,7 +26,9 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   authority. The source table has no writer, reader, handler, current pointer,
   routing authority or acceptance effect implementation. False is proven only as
   a scalar DTO value because activation still rejects it.
-- Next usable boundary: REV-03B normalized packet persistence, then complete
+- Delivered storage: [REV-03B](../WS-REV-001/WS-REV-001-03B.md) freezes exact
+  lease packets with normalized live guide ingests; no resolver or byte authority.
+- Next usable boundary: complete
   REV-04A Review storage and shared REV-04B FinalAcceptance persistence,
   CON-03C/07 and the existing REV-12A/CON fence foundation before shared
   acceptance composition, then ARCH-04E1B/04E2/04E3 and ARCH-04F. Output-file

diff --git a/.commitrail/initiatives/WS-ARCH-001/planning/CHUNK_MAP.md b/.commitrail/initiatives/WS-ARCH-001/planning/CHUNK_MAP.md
@@ -41,7 +41,7 @@ public intake remains deferred to ARCH-02I.
 | [WS-ARCH-001-04D1](../WS-ARCH-001-04D1.md) | Canonical terminal ART material custody | L1 | Complete; valid retained history preserved; invalid upgrades refused |
 | [WS-ARCH-001-04D2](../WS-ARCH-001-04D2.md) | AUTH exact fixed-service post-submit activation (replaces XINT-06B) | L1 | Complete: exact input, execute and finalize authority; output write/bind remains unavailable |
 | [WS-ARCH-001-04E1A](../WS-ARCH-001-04E1A.md) | Route-neutral immutable source schema and shared accepted-effects types | L1 | Complete; no runtime writer/reader, routing authority, current pointer or effects implementation; false proof is scalar transport only |
-| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Delivered source 04E1A -> REV-03B packet and REV-04A Review storage, then shared REV-04B/CON-03C/07 plus REV-12A/CON fence foundation -> hidden 04E1B -> AUTH 04E2 -> live 04E3, plus 04D2/OUTBOX-02; false activation also requires 04F remediation |
+| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Delivered source 04E1A -> complete REV-04A Review storage, then shared REV-04B/CON-03C/07 plus REV-12A/CON fence foundation -> hidden 04E1B -> AUTH 04E2 -> live 04E3, plus 04D2/OUTBOX-02; false activation also requires 04F remediation |
 | [WS-ARCH-001-03D](../WS-ARCH-001-03D.md) | Exact activated historical guide through hidden durable intake; obsolete lookup removed | L1 | Complete; hidden exact post-submit materialization, ARCH-04B2 output custody, ARCH-04C execution, ARCH-04D1/04D2 custody/authority and ARCH-04E1A source-only facts/types delivered; public cutover remains deferred |
 | [WS-ARCH-001-04F](chunks/WS-ARCH-001-04F-checker-remediation.md) | Contributor-correctable checker failures and same-lineage admission-backed replacement Submission | L1 | Planned after 04E; replaces XINT-05C, required before public 02I, not before REV begins from `allow_review` |
 

diff --git a/.commitrail/initiatives/WS-ARCH-001/planning/PLAN.md b/.commitrail/initiatives/WS-ARCH-001/planning/PLAN.md
@@ -57,7 +57,7 @@ checker-remediation boundary before public Submission cutover.
 | CON-02B | AUTH-OUTBOX-01 | Complete: shared hidden dispatcher/claim fencing, typed handlers and recovery |
 | AUTH-OUTBOX-02 | CON-02B exact hidden manifest | Exact dispatcher mechanics only; no feature authority |
 | [ARCH-04E1A](../WS-ARCH-001-04E1A.md) | ARCH-04C/04D2 | Complete: route-neutral immutable TASK source schema/detached facts and source-neutral accepted-effects types; no runtime writer/reader, handlers, current pointer, routing authority, acceptance implementation or REV dependency |
-| ARCH-04E1B | ARCH-04E1A, CON-02B hidden contract; ART-07A1 types -> REV-03B/04A storage -> shared REV-04B + CON-03C/07 + REV-12A shared fence foundation for false | TASK hidden handlers; consume one shared acceptance operation on false/pass |
+| ARCH-04E1B | ARCH-04E1A, CON-02B hidden contract; ART-07A1 types -> delivered REV-03B packet -> complete REV-04A storage -> shared REV-04B + CON-03C/07 + REV-12A shared fence foundation for false | TASK hidden handlers; consume one shared acceptance operation on false/pass |
 | Scoped XINT-003-08B controller activation | Early existing REV-12A foundation and hidden shared acceptance/writer/observation proof | Existing Operator lifecycle-control action for the bounded shared manifest, not human runtime |
 | ARCH-04E2 | ARCH-04E1B; scoped XINT-003-08B controller activation for false | AUTH exact TASK routing authority |
 | ARCH-04E3 | ARCH-04E2, ARCH-04D2, AUTH-OUTBOX-02; shared acceptance proof for false | TASK live dispatch/routing composition: true to allow_review, false/pass to shared acceptance when proven |
@@ -98,7 +98,7 @@ new permission requirement.
 Delivered supporting foundations are [ARCH-04B2](../WS-ARCH-001-04B2.md),
 [AUTH-OUTBOX-01/02](../../WS-AUTH-001/planning/PLAN.md#ws-auth-001-outbox-01--unavailable-dispatcher-contract),
 and [CON-02B](../../WS-CON-001/OVERVIEW.md#con-02b-current-dispatcher-contract).
-The remaining routing sequence starts with REV-03B packet and REV-04A Review storage, then shared REV-04B/CON-03C/07 and the
+The remaining routing sequence starts with complete REV-04A Review storage, then shared REV-04B/CON-03C/07 and the
 existing REV-12A/CON fence foundation before shared acceptance composition,
 then [ARCH-04E1B/04E2/04E3](chunks/WS-ARCH-001-04E-canonical-allow-review.md#current-bounded-sequence)
 and ARCH-04F. ARCH-04E1A is delivered as the source-only predecessor.

diff --git a/...itiatives/WS-ARCH-001/planning/chunks/WS-ARCH-001-04E-canonical-allow-review.md b/...itiatives/WS-ARCH-001/planning/chunks/WS-ARCH-001-04E-canonical-allow-review.md
@@ -28,7 +28,7 @@ current TASK children do not implement REV/CON internals: consume the
 are delivered after 04C, without REV dependency, runtime participant or handlers.
 REV-04B can reference that schema only after its other source prerequisites:
 [ART-07A1 packet types](../../../WS-ART-001/WS-ART-001-07A1.md) are delivered;
-REV-03B normalized packet storage and complete REV-04A Review storage follow.
+REV-03B normalized packet storage is delivered; complete REV-04A Review storage is next.
 Shared REV-04B/CON-03C/07 and the early
 existing REV-12A/CON fence
 foundation are hard dependencies of false handler composition, not of this

diff --git a/.commitrail/initiatives/WS-ART-001/OVERVIEW.md b/.commitrail/initiatives/WS-ART-001/OVERVIEW.md
@@ -18,8 +18,12 @@ and the [capability ledger](../../../docs/roadmap_status.md).
   writer or published route. Output-file authority remains unavailable for the
   zero-output catalogue.
 - Delivered contract: [ART-07A1](WS-ART-001-07A1.md) defines exact, metadata-only
-  reviewer packet membership. It supplies no resolver or byte authority.
-- Next usable boundary: REV-03B normalized packet persistence, then REV-04A
+  reviewer packet membership. REV-03B corrects its original `guide_binding_id`
+  to live upload `ingest_id`; the completed ART record preserves the original
+  delivery history. No alias, revived extraction writer or byte authority.
+- Delivered storage: [REV-03B](../WS-REV-001/WS-REV-001-03B.md) freezes exact
+  lease packets with normalized live guide ingests; no resolver or byte authority.
+- Next usable boundary: complete REV-04A
   Review storage before shared acceptance. ARCH-04F remediation and public
   intake follow acceptance and routing composition.
 - Governing sources: artifact specifications, `ArtifactStore`,
@@ -48,7 +52,7 @@ must prove exact approved lineage at preparation, consumption and binding.
    custody, ARCH-04C hidden durable execution, ARCH-04D2 fixed-service authority
    and ARCH-04E1A source-only material lineage are delivered.
 2. ART-07A1 metadata-only membership types are delivered. REV-03B packet
-   storage and complete REV-04A Review storage precede shared FinalAcceptance,
+   storage is delivered. Complete REV-04A Review storage precedes shared FinalAcceptance,
    CON participation and the shared fence, then acceptance/routing composition.
 3. ARCH-04F owns checker-remediation resubmission using existing ART ports;
    later reviewer-requested revision remains a separate REV boundary. Add those dependencies before public Submission

diff --git a/.commitrail/initiatives/WS-AUTH-001/OVERVIEW.md b/.commitrail/initiatives/WS-AUTH-001/OVERVIEW.md
@@ -11,8 +11,8 @@ Historical pre-cutover work records: [`STATUS.md`](pre-cutover/STATUS.md),
 
 - Disposition: Planned
 - Delivered prerequisite: [ART-07A1](../WS-ART-001/WS-ART-001-07A1.md) supplies
-  metadata-only packet types; REV-03B packet storage and REV-04A Review storage
-  precede shared FinalAcceptance. No packet resolver or human runtime is live.
+  metadata-only packet types. REV-03B packet storage is delivered; complete
+  REV-04A Review storage is next before shared FinalAcceptance. No packet resolver or human runtime is live.
 
 - Intent: provide deny-default, project-scoped authority with canonical human
   and service identities and attributable audit evidence.
@@ -49,7 +49,9 @@ Historical pre-cutover work records: [`STATUS.md`](pre-cutover/STATUS.md),
   and minimal writers and ARCH-03A internal guide context. POL-07B internal phase composition is delivered.
   The dispatcher registers only exact assignment invalidation. Future checker
   routing still requires its separate exact authority and handler.
-- Next usable boundary: REV-03B packet and REV-04A Review storage, then shared REV-04B/CON-03C/07 and REV-12A/CON fence
+- Delivered storage: [REV-03B](../WS-REV-001/WS-REV-001-03B.md) freezes exact
+  lease packets with normalized live guide ingests; no resolver or byte authority.
+- Next usable boundary: complete REV-04A Review storage, then shared REV-04B/CON-03C/07 and REV-12A/CON fence
   foundations precede shared acceptance composition and hidden ARCH-04E1B;
   ARCH-04E2 then owns exact routing activation before 04E3 live composition.
 - Governing source: `docs/spec_authorization_service.md`, authorization code,

diff --git a/.commitrail/initiatives/WS-AUTH-001/planning/CHUNK_MAP.md b/.commitrail/initiatives/WS-AUTH-001/planning/CHUNK_MAP.md
@@ -1,7 +1,7 @@
 # WS-AUTH-001 — Current pre-review activation map
 
 The delivered [ART-07A1 metadata contract](../../WS-ART-001/WS-ART-001-07A1.md)
-now precedes REV-03B packet persistence and complete REV-04A Review storage,
+and REV-03B normalized packet persistence are delivered. Complete REV-04A Review storage is next,
 then shared REV-04B/CON acceptance foundations. These are storage prerequisites;
 no live human-review queue or endpoint is required for automated acceptance.
 

diff --git a/.commitrail/initiatives/WS-AUTH-001/planning/PLAN.md b/.commitrail/initiatives/WS-AUTH-001/planning/PLAN.md
@@ -1,7 +1,7 @@
 # WS-AUTH-001 — Current pre-review activation plan
 
 The delivered [ART-07A1 metadata contract](../../WS-ART-001/WS-ART-001-07A1.md)
-now precedes REV-03B packet persistence and complete REV-04A Review storage,
+and REV-03B normalized packet persistence are delivered. Complete REV-04A Review storage is next,
 then shared REV-04B/CON acceptance foundations. These are storage prerequisites;
 no live human-review queue or endpoint is required for automated acceptance.
 

diff --git a/.commitrail/initiatives/WS-AUTH-003/OVERVIEW.md b/.commitrail/initiatives/WS-AUTH-003/OVERVIEW.md
@@ -6,8 +6,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 
 - Disposition: Planned
 - Delivered prerequisite: [ART-07A1](../WS-ART-001/WS-ART-001-07A1.md) supplies
-  metadata-only packet types; REV-03B packet storage and REV-04A Review storage
-  precede shared FinalAcceptance. No packet resolver or human runtime is live.
+  metadata-only packet types. REV-03B packet storage is delivered; complete
+  REV-04A Review storage is next before shared FinalAcceptance. No packet resolver or human runtime is live.
 
 - Completed boundary: recovery foundation and [TASK/checker authorization cleanup](WS-AUTH-003-TASKCHECKER.md).
 - Intent: route public authorization capability through `authorization.api`
@@ -18,8 +18,10 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   [ARCH-04B2 output custody](../WS-ARCH-001/WS-ARCH-001-04B2.md), ARCH-03D hidden
   intake and [AUTH-18 public manager activation](../WS-AUTH-001/WS-AUTH-001-18.md).
   They install no routing action, handler or runtime composition.
-- Next usable boundary: continue canonical boundary recovery through REV-03B
-  packet and complete REV-04A Review storage, then shared REV/CON/fence
+- Delivered storage: [REV-03B](../WS-REV-001/WS-REV-001-03B.md) freezes exact
+  lease packets with normalized live guide ingests; no resolver or byte authority.
+- Next usable boundary: continue canonical boundary recovery through complete
+  REV-04A Review storage, then shared REV/CON/fence
   foundations and later ARCH-04E1B/04E2/04E3 routing.
   Submission/checker history uses canonical authority; the alternate gate lifecycle
   is removed. Continue shrinking the canonical import ledger as implementation