REV-04C: compose hidden shared acceptance and TASK effects

.ci/behavior-ownership/partition.v1.json

@@ -1354,7 +1354,15 @@
     },
     {
       "group": "lifecycle",
-      "target": "backend/app/modules/reviews/acceptance/schemas.py"
+      "target": "backend/app/modules/reviews/acceptance/participant.py"
+    },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/reviews/acceptance/repository.py"
+    },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/reviews/api/acceptance.py"
     },
     {
       "group": "lifecycle",
@@ -1400,6 +1408,10 @@
       "group": "lifecycle",
       "target": "backend/app/modules/reviews/schemas.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/tasks/accepted_effects.py"
+    },
     {
       "group": "lifecycle",
       "target": "backend/app/modules/tasks/api/accepted_effects.py"
@@ -1649,7 +1661,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "fdbbf9eb7ded754eb10e532c3a3b811f4af227136fcd2870f7f638405656345b",
+  "authority_digest": "aaa433056bbc7cdd2c85c6ff62c4fff12cfa7c5f4e90afc40487d702328495c3",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }

.commitrail/INDEX.md

@@ -9,13 +9,13 @@ for current product capability.
 | [WS-DB-002](initiatives/WS-DB-002/OVERVIEW.md) | Complete | Shared UUIDv7 record generation, native-UUID relationships and fresh v0.1 baseline; natural-owner retry custody and aligned CI/local setup |
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Nine tools through WS-MCP-002-03: self-service and administrative reads; 18 tools remain and WS-MCP-002-04 administrative grant mutations are next |
 | [WS-CLI-001](initiatives/WS-CLI-001/OVERVIEW.md) | Planned | Public Go CLI reads and human profile editing delivered through WS-CLI-001-02; role-specific public journeys and binary distribution remain |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Source storage, inert AUTH contracts, TASK request reservation, hidden exact AUTH preparation and CON-07 hidden participation are delivered; shared acceptance/TASK effects are next for the selected automated path, followed by hidden handlers and atomic routing activation. True admission does not depend on CON/shared acceptance. |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Source storage, inert AUTH contracts, TASK request reservation, hidden exact AUTH preparation and the REV-04C hidden FinalAcceptance/TASK/CON participant are delivered; hidden routing handlers are next. True admission remains independent of shared acceptance; false activation still requires exact AUTH receipt custody, database complete-set enforcement, currentness race proof and atomic routing activation. |
 | [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Exact checker input/output custody and packet foundations are delivered; routing integration, remediation and public intake remain. |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | AUTH-19A commitments, TASK request reservation, ARCH-04E2-A hidden strict PREP matching and CON-07 hidden participation are delivered; the action remains unavailable, with shared acceptance/TASK effects, atomic receipt custody and scoped activation still required for the automated path. |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | Contribution/award storage and CON-07 hidden source-neutral submitter participation with complete frozen award sets are delivered; production consumption requires shared acceptance/TASK effects, genuine authority, retained source receipts, fulfillment-root ordinals and lifecycle activation. |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | AUTH-19A commitments, TASK request reservation, ARCH-04E2-A hidden strict PREP matching and the REV-04C hidden FinalAcceptance/TASK/CON participant are delivered; the action remains unavailable, with mandatory exact AUTH receipt input, database closure, audit/outbox and scoped activation still required for the automated path. |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | Contribution/award storage, CON-07 participation and REV-04C hidden FinalAcceptance/TASK/CON composition are delivered; production consumption still requires genuine authority, database complete-set enforcement, currentness race proof, shared audit/outbox, fulfillment-root ordinals and lifecycle activation. |
 | [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | Canonical source facts and disabled lifecycle fencing are delivered; exact lifecycle activation remains tied to the governed consequence. |
-| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Locked policy configuration and inert source commitments are delivered; false-policy activation remains gated by shared acceptance, exact authority, routing and remediation. |
-| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Packet, Review and FinalAcceptance storage plus CON-07 hidden submitter participation are delivered; source receipt custody and shared acceptance/TASK effects remain, with human review/revision separately dependency-gated. |
+| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Locked policy configuration, inert source commitments and the REV-04C hidden false/pass acceptance participant are delivered; false-policy activation remains gated by exact AUTH receipt custody, database closure, currentness proof, remediation and scoped lifecycle authority. |
+| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Packet and Review storage plus REV-04C hidden source-neutral FinalAcceptance/TASK/CON composition are delivered; hidden routing handlers are next, while authority/evidence closure and human review/revision remain separately gated. |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |
 | [WS-XINT-002](initiatives/WS-XINT-002/OVERVIEW.md) | Planned | Remaining ART/AUTH activation edges only |

.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md

@@ -7,8 +7,10 @@ resource/preparation matching and a nominal fixed-router adapter through canonic
 PREP. The action remains planned and unavailable, so it issues no handle, allow or
 receipt and writes no source or effect. The selected automated path now has
 CON-07 hidden submitter participation and complete frozen award-set staging/replay.
-Shared acceptance and TASK terminal effects are next. Mandatory source-receipt
-custody, fulfillment-root ordinal custody and scoped lifecycle activation remain
+[REV-04C](../WS-REV-001/WS-REV-001-04C.md) now composes FinalAcceptance, TASK terminal effects and CON participation
+inside one hidden caller-owned transaction. Mandatory exact AUTH receipt input,
+database complete-set enforcement, currentness race proof, shared audit/outbox,
+fulfillment-root ordinal custody and scoped lifecycle activation remain
 required before production consumption. Neither phase may
 commit a standalone allow. The first durable receipt must commit with its full
 governed consequence. Hidden handlers and activation follow as 04E1B-B/04E2-B,
@@ -25,7 +27,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 - Delivered prerequisite: [ART-07A1](../WS-ART-001/WS-ART-001-07A1.md) supplies
   metadata-only packet types. REV-03B packets, REV-04A Review storage, REV-04B
   FinalAcceptance storage, CON-03C contribution/award storage, REV-12A1 disabled
-  fencing, hidden AUTH preparation and CON-07 hidden submitter participation are
+  fencing, hidden AUTH preparation, CON-07 hidden submitter participation and
+  REV-04C hidden FinalAcceptance/TASK/CON composition are
   delivered. Mandatory persisted custody accompanies the first authorized atomic
   consequence at 04E2-B. No packet resolver or human runtime is live.
 
@@ -40,8 +43,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 - Delivered storage boundary: hidden [ARCH-04B2 checker-output custody](WS-ARCH-001-04B2.md), following hidden input materialization (ARCH-04B). Typed store, byte-free recovery and flush-only verified binding exist; the CHECKERS zero-slot reservation reader is implemented; output write/bind authority remains unavailable.
 - Delivered source boundary: [ARCH-04E1A routing-source facts](WS-ARCH-001-04E1A.md)
   follow [ARCH-04D2](WS-ARCH-001-04D2.md) exact input, execute and finalize
-  authority. The source table has no writer, reader, handler, current pointer,
-  routing authority or acceptance effect implementation. False is proven only as
+  authority. The source table has no routing handler, current pointer or routing
+  authority. REV-04C supplies the hidden acceptance-effects participant. False is proven only as
   a scalar DTO value because activation still rejects it.
 - Delivered preparation boundary: [ARCH-04E2-A](WS-ARCH-001-04E2A.md) binds
   the reserved request, exact source and branch consequence through canonical
@@ -53,9 +56,10 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   [REV-04A](../WS-REV-001/WS-REV-001-04A.md) adds complete immutable Review, findings, resolutions and completed request storage; no decision runtime.
   [REV-04B](../WS-REV-001/WS-REV-001-04B.md) adds shared FinalAcceptance source
   storage, without AUTH receipt custody or a production writer.
-- Next usable boundary: shared acceptance/TASK effects using the delivered
-  REV-12A1 fence and CON-07 participant, plus mandatory same-table acceptance authority hardening before shared
-  acceptance composition, then ARCH-04E1B/04E2/04E3 and ARCH-04F. Output-file
+- Next usable boundary: ARCH-04E1B-B hidden handlers using the delivered
+  REV-04C participant, then mandatory exact AUTH receipt input, database closure,
+  audit/outbox, TASK-before-CHECKERS currentness race proof and activation at
+  ARCH-04E2-B before 04E3 and ARCH-04F. Output-file
   authority remains unavailable for the zero-output catalogue.
   [AUTH-18](../WS-AUTH-001/WS-AUTH-001-18.md) delivers public manager activation
   context and exact guide activation using the existing CP07 operation.
@@ -84,7 +88,7 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 
 Delivered [REV-12A1](../WS-REV-001/WS-REV-001-12A1.md) supplies only disabled
 generation-zero controller storage and transaction locking. Acceptance-source
-AUTH custody, shared acceptance/TASK effects and authorized activation remain
+AUTH custody, database closure, currentness proof and authorized activation remain
 separate work.
 
 This is delivery priority, not a prerequisite of true human admission. Both

.commitrail/initiatives/WS-ARCH-001/planning/CHUNK_MAP.md

@@ -5,9 +5,11 @@ planned router identity. ARCH-04E1B-A delivers caller-owned routing-request and
 future source-identity reservation. ARCH-04E2-A delivers strict hidden
 resource/preparation matching and a nominal fixed-router adapter through canonical
 PREP while the action remains planned/unavailable. CON-07 hidden submitter
-participation and complete frozen award-set staging/replay are delivered. Shared
-acceptance and TASK terminal effects are next. Mandatory source-receipt custody,
-fulfillment-root ordinal custody and scoped lifecycle activation remain required
+participation and complete frozen award-set staging/replay are delivered. REV-04C
+adds the hidden FinalAcceptance/TASK/CON participant. Hidden handlers 04E1B-B are
+next. Mandatory exact same-input AUTH receipt, database complete-set enforcement,
+TASK-before-CHECKERS race proof, shared audit/outbox, fulfillment-root ordinal
+custody and scoped lifecycle activation remain required
 before production consumption. Neither phase may
 commit a standalone allow. The first durable receipt must commit with its full
 governed consequence. Hidden handlers and activation follow as 04E1B-B/04E2-B,
@@ -53,8 +55,8 @@ public intake remains deferred to ARCH-02I.
 | [WS-ARCH-001-04C](chunks/WS-ARCH-001-04C-checker-current-result.md) | CHECKER hidden durable current output and supersession behavior | L1 | Complete hidden request/lease/result custody with exact empty-output support and atomic completion; exact service authority delivered by 04D2 |
 | [WS-ARCH-001-04D1](../WS-ARCH-001-04D1.md) | Canonical terminal ART material custody | L1 | Complete; valid retained history preserved; invalid upgrades refused |
 | [WS-ARCH-001-04D2](../WS-ARCH-001-04D2.md) | AUTH exact fixed-service post-submit activation (replaces XINT-06B) | L1 | Complete: exact input, execute and finalize authority; output write/bind remains unavailable |
-| [WS-ARCH-001-04E1A](../WS-ARCH-001-04E1A.md) | Route-neutral immutable source schema and shared accepted-effects types | L1 | Complete; no runtime writer/reader, routing authority, current pointer or effects implementation; false proof is scalar transport only |
-| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Both branches: 04E1A/04D2/OUTBOX-02 -> delivered request reservation 04E1B-A -> delivered AUTH preparation 04E2-A -> hidden handlers 04E1B-B -> activation 04E2-B -> live 04E3. False additionally needs shared acceptance/TASK effects using delivered CON-07 participation, mandatory source-receipt custody, fulfillment-root ordinal custody and scoped lifecycle activation; true does not depend on CON. False guide activation also requires 04F remediation |
+| [WS-ARCH-001-04E1A](../WS-ARCH-001-04E1A.md) | Route-neutral immutable source schema and shared accepted-effects types | L1 | Complete; REV-04C uses a bounded exact-source verifier, with no general routing publication writer/reader, routing authority or current pointer; its hidden effects participant does not make false routing available |
+| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Both branches: delivered 04E1A/04D2/OUTBOX-02, request reservation 04E1B-A and AUTH preparation 04E2-A -> hidden handlers/currentness proof 04E1B-B -> authority/evidence closure and activation 04E2-B -> live 04E3. False uses delivered REV-04C participation and additionally needs mandatory exact receipt/database/audit closure, fulfillment-root ordinal custody and scoped lifecycle activation; true does not depend on CON. False guide activation also requires 04F remediation |
 | [WS-ARCH-001-03D](../WS-ARCH-001-03D.md) | Exact activated historical guide through hidden durable intake; obsolete lookup removed | L1 | Complete; hidden exact post-submit materialization, ARCH-04B2 output custody, ARCH-04C execution, ARCH-04D1/04D2 custody/authority and ARCH-04E1A source-only facts/types delivered; public cutover remains deferred |
 | [WS-ARCH-001-04F](chunks/WS-ARCH-001-04F-checker-remediation.md) | Contributor-correctable checker failures and same-lineage admission-backed replacement Submission | L1 | Planned after 04E; replaces XINT-05C, required before public 02I, not before REV begins from `allow_review` |