[rmcdaniel]

The initial installed-consumer runner did not cover the full #328–#332 failure, authority, capacity, default-OFF and bounded-load matrix. This change completes the caller-owned Source selections against accepted schema63. SDK production, dependency, workflow and release bytes remain unchanged.

The 22 closed selections cover all three carried-answer losses, original-ID prefetch recovery/backoff, whole completion transit, buffered age, expiry, distinct activity/workflow registration replacement, opposite-slot omission, managed missing-key capacity, omitted/false option behavior and direct local/remote load. Load cells use six Workers, 200 workflows and five 20ms steps with no relay or request trace. The comparator retains all three OFF/ON repetitions and regressions and refuses mixed/reused/incomplete cells; timings remain descriptive.

Workflow refence follows Server1067's accepted vector: registration atomically releases the old grant, old operations return task_not_leased before recovery, the original poll ID freshly claims n+1 with unchanged history, and old heartbeat/completion then return workflow_task_attempt_mismatch. Completion succeeds only under recovered authority. No producer clock, admin reset or incarnation field is invented.

Maintained main is b9525ef5f685f79acdc7da172f7cab39f8251e4b, exact reviewed tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b. Independent Source/main PASS and main/cleanup receipt bind all 40 actual-main checks (39 success / one intended skip). PHP8.3 passes 8,504 tests / 86,176 assertions; 102 focused Source tests / 206 assertions plus lint/level-6 analysis pass. The owned topic, source-check container and temporary vendor copy are removed; the checkout is clean/detached and unrelated WIP is preserved.

No installed/Native row or actual load cell ran. Fixed metadata, sockets and local process fixtures validate Source only. The packet-default row explicitly reports Native was not observed. Load timing includes submission/result control traffic; fresh database, host/resource conditions, artifact/file seals and final runtime teardown remain caller evidence. General retains the immutable published tuple and actual caller/release selection. #340 stays held; #328–#332 remain open for actual published-artifact acceptance.

[rmcdaniel]

Remaining P0 harness source is now connected at b24555ccf5ca2485284744df420902965b002351 / tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b. The branch is clean and pushed. Compared with maintained #348/main530da5f, changes are confined to conformance source, its tests/runbook and PHPStan inclusion. Production/dependency/workflow/release bytes are unchanged.

102 focused source tests / 206 assertions, PHP lint and level-6 analysis pass under a bounded cached PHP8.4 toolchain. The cell was network-none/read-only/unprivileged, one CPU / 1GiB / 128 PIDs, with an explicit entrypoint, finite outer timeout and exact-container cleanup. No container remains. Credential/private-path and public-boundary scans plus diff checks pass. Fixed metadata, sockets and local process children validate Source only; no normal package install, Native runtime, image acquisition or actual load cell ran. Temporary diagnostics have bounded retention through 2026-11-08 07:30 UTC.

The producer question is resolved at Server1067/6703522814, independently checked against frozen4fb registration release and guards. The new workflow row deliberately distinguishes pre-recovery ready/not-leased from post-recovery n+1/attempt-mismatch. Its old grant must still have been live when registration changed. Activity original-ID refusal remains distinct.

The load runner uses direct requests, fixed six-worker / 200-workflow / five-20ms-step cells and one global shutdown grace. The separate comparator retains all six times and regressions; it rejects missing repetitions, mixed bindings and reused identities. It does not prove database freshness, attest host resources or grant performance acceptance. Those actual caller receipts remain required.

Both earlier increments completed 42 ordinary hosted checks (41 success / one intended skip). Current b245 hosted checks and independent Security Source review are the next actions; SDK-PHP owns their follow-through. General retains the immutable published tuple and actual caller/release choice. #328–#332 remain open for their real installed/fallback/load acceptance. #340 remains held. No merge or installed result is asserted by this receipt.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rmcdaniel]

Exact-head ordinary Source qualification is now complete for b24555ccf5ca2485284744df420902965b002351 / tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b: all 42 checks terminal, 41 success / one intended Connected cooperative cancellation skip. Primary CI42350881092, Sonar42350881087, Boundary42350881615 and CodeQL42350876347 are all successful.

The branch remains clean, pushed, draft and auto-merge off. Independent finite Security Source review is requested and is the remaining Source action. The full changed path set still excludes production code, dependencies, workflows and release metadata. No actual installed/Native/fallback/load cell or publisher action ran. #328–#332 remain open for their separate actual acceptance after General's immutable tuple/caller handoff.

[rmcdaniel]

PASS — finite Source/custody review is complete for SDK PHP PR #349 at exact head b24555ccf5ca2485284744df420902965b002351, tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b, on base 530da5f3c27d94fffe631700c5da16bbf87299ac.

No material Source finding remains in the reviewed scope:

• The delta is confined to conformance support, its tests/runbook, and PHPStan enumeration. Product, dependency, workflow, package, and release bytes are unchanged.
• Lost carried answers and prefetch recovery are bound to the actual original poll ID, task/lease identity, immutable request bytes, real callback ordering, and the expected retry/backoff. Unrelated failures cannot substitute for the selected refusal.
• Expiry and activity/workflow re-fencing keep distinct authority contracts. The workflow row requires the accepted producer behavior: token rotation, task_not_leased before original-ID recovery, attempt n+1 with unchanged task/history, old-authority workflow_task_attempt_mismatch afterward, and completion only under the recovered authority. Only token digests enter evidence.
• The direct load cells have fixed functional work, all-child process-group shutdown under one global grace, bounded per-cell cleanup, exact result-file hashing, unique database/subject identities, and complete OFF/ON repetitions. The comparator rejects mixed tuple/workload/backend/conditions, incomplete cleanup, missing or duplicate repetitions, and retained regressions; it makes no performance acceptance claim.
• Subject/package/image/runner provenance remains correctly separated: the harness verifies the bounded subject/lock and installed SDK identity, while image publication, runner-file seal, fresh database, host/resource conditions, runtime admission, and final teardown remain caller evidence.

git diff --check is clean. All 42 exact-head hosted contexts are terminal: 41 SUCCESS and the intended connected-environment SKIP, including regression corpus, PHP/framework matrices, level-6 analysis, boundary scans, CodeQL, and SonarCloud.

This is Source/custody acceptance only. It does not execute or accept any installed/Native row, select a runtime/profile/publication, validate a performance improvement, or close the #328–#332 published-artifact matrix.

[rmcdaniel]

Independent finite Security Source/custody PASS and all 42 exact-head terminal checks were read before the normal merge.

Actual merge at 2026-11-07 07:29:10 UTC is b9525ef5f685f79acdc7da172f7cab39f8251e4b, with exact reviewed tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b and ordered parents 530da5f3c27d94fffe631700c5da16bbf87299ac + b24555ccf5ca2485284744df420902965b002351. Primary GitHub state and fetched objects agree. The owned checkout is clean and detached at that merge.

The unchanged developer-portal workflow's path filters exclude this complete changed path set. No docs dispatch or publisher action was selected. Actual-main qualification and exact owned-topic cleanup remain next; SDK-PHP owns both. All #328–#332 installed/Native/fallback/load and published-tuple criteria remain open, with General retaining release/caller selection.

[rmcdaniel]

PASS — finite exact-main Source/custody carry.

The normal merge is b9525ef5f685f79acdc7da172f7cab39f8251e4b, exact reviewed tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b, with ordered parents 530da5f3c27d94fffe631700c5da16bbf87299ac and reviewed topic b24555ccf5ca2485284744df420902965b002351. GitHub and the fetched Git object agree.

All 40 exact-main check runs are terminal: 39 SUCCESS and the intended connected-environment SKIP. The set includes the regression corpus, PHP 8.1–8.4/framework matrices, package smoke, docs compatibility, level-6 analysis, boundary scan, CodeQL language analyzers, direct SonarCloud/SonarQube, central policy, and target-branch qualification. There are no failed or active exact-main checks.

The Source/custody findings and scope from 6703908508 carry unchanged to this exact tree. This does not execute or accept an installed/Native row, select a runtime/profile/release, claim a performance result, or complete the #328–#332 published-artifact matrix. Topic/container/worktree cleanup remains the owner’s separate custody step.

[rmcdaniel]

Maintained Source/main/cleanup receipt for #349:

• Actual main b9525ef5f685f79acdc7da172f7cab39f8251e4b, tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b, exactly equals the independently accepted Source tree. Ordered merge parents remain 530da5f3 + b24555cc.
• All 40 actual-main checks are terminal: 39 success / one intended skip, with no pending/failure. CI42351473661, Sonar42351473570, Boundary42351473619 and CodeQL42351472964 succeed. Actual-main PHP8.3 passes 8,504 tests / 86,176 assertions / 56 optional skips.
• The merged remote topic was deleted with an exact b24555cc head lease. GitHub REST404 and empty remote-ref readback confirm absence; the local topic is absent. The retained checkout is clean/detached at b952. The owned public vendor copy and empty build directory are removed; the borrowed original and all unrelated/operator WIP are preserved. The exact source-check container is absent.
• This changed path set did not select the developer-portal publisher. No runtime, package install, image acquisition, profile rerun, dispatch, tag, release or actual load cell ran. Temporary Source diagnostics retain the declared 2026-11-08 07:30 UTC expiry.

The remaining #328–#332 matrix now has maintained caller-owned Source support. General still owns the immutable published tuple and actual caller/release selection; SDK-PHP owns its installed identity, real same-worker/fence/slot/loss/expiry/refence/fallback/default/load outcomes afterward. The issues remain open. Source success is not a published-artifact or performance PASS. Independent exact-main Source/custody PASS6703978486 was read and binds this same tree and all terminal checks.

[rmcdaniel]

PASS — finite protected-main tree/custody carry

The exact reviewed PR349 tree is now the protected main tip:

• merge/main commit b9525ef5f685f79acdc7da172f7cab39f8251e4b
• tree 101bebcee2a51d1c6e685c2d82df4026900c5c8b
• ordered parents 530da5f3c27d94fffe631700c5da16bbf87299ac and reviewed candidate b24555ccf5ca2485284744df420902965b002351

GitHub's branch and Git-object APIs independently agree on that identity. The exact main commit has 40 terminal check runs: 39 SUCCESS and the connected-environment control intentionally SKIPPED. The successful set includes CI/framework matrices, regression corpus, static analysis, boundary scan, CodeQL, Sonar, and target-branch qualification.

Custody cleanup also reconciles: the leased topic ref test/332-completion-poll-failure-matrix now returns REST 404, and no matching local branch/worktree remains.

This carries the already accepted Source/custody result to protected main only. It does not confer installed Native/profile, runtime/load, release, or publication acceptance; all such rows remain separate and unexecuted.