docs: record CK-08R3A acceptance (#424)

Author: douglasmonsky

docs/INDEX.md

@@ -18,13 +18,15 @@ keeps CK-09 blocked.
 CK-08R2 is complete on merge: two supported direct plans now use bounded
 physical keyset SQL; 19 plans retain explicit gaps without projection.
 Retained CK-08R3 `a28e9cdbff8e48d334712a449fdcee111c725673` then stopped
-before scale on first/deep EvidenceService EXPLAIN. CK-08R3A owns that separate
-fix; CK-08R3 awaits its accepted merge/exact-main verification. Independent
+before scale on first/deep EvidenceService EXPLAIN. CK-08R3A corrected that
+physical path in PR #417 and was hosted-green, squash-merged, and exact-main
+identity verified at `38537f6cee42ad4ba2fb6e45354e410053c7a7cd`;
+CK-08R3 is now Ready for separate scale qualification. Independent
 truth now consumes [`answer-semantics.v1`](../config/agent-kernel/answer-semantics-v1.json);
 The linked [CK-08R3A schema/publication requalification authority](decisions/evidence/ck08r3a/schema-publication-requalification-authority.json)
-binds only the resulting 57-index schema digest, synthetic publication fixture
-manifests, and compatible tiny-accounting EXPLAIN expectation; R3A remains
-Conditional Ready and implementation remains unaccepted. The exact
+binds the resulting 57-index schema digest, synthetic publication fixture
+manifests, and compatible tiny-accounting EXPLAIN expectation accepted through
+the exact PR #417 cohort. The exact
 [final-shared authority](decisions/evidence/ck08r3a/final-shared-authority.json)
 keeps predecessor handling rejection-only and binds exact
 zero-based nonnegative turn-rank equality, including valid rank 0 and
@@ -43,8 +45,12 @@ The linked [CK-08R3A portable-plan branch-ownership authority](decisions/evidenc
 supersedes only the support proof: full EXPLAIN row ids, parents, direct
 siblings, and leftmost ancestry must bind the sole marker to the unique
 session-event branch. A marker under calls, tools, lifecycle, or an ambiguous
-lookup chain is rejected; the corrected support test remains preflight-only
-and the implementation remains unaccepted.
+lookup chain is rejected; the corrected support test and production cohort are
+accepted through PR #417. Premerge focused, dual-SQLite, full, package,
+safety, and review gates plus hosted CI passed. The duplicate postmerge full
+runtime rerun was environment-limited by ENOSPC before completion; fresh
+exact-main identities and authority/scope/documentation checks passed, and no
+product assertion failed.
 R1C is accepted at exact main `fb0c57886097a6b985d2f321b2de858cbdfc0a97`;
 R1B remains held on shared query/evidence/grading integration before final R1
 requalification.

docs/roadmap/REMAINING_EXECUTION_PLAN.md

@@ -13,10 +13,17 @@ paging, measurements, and scale. CK-08R0 freezes the exact contracts and
 requalification frontier in `docs/decisions/evidence/ck08r0/corrective-gates-v1.json`.
 Preserve CK-03–CK-08 history and supersede only its four named claims.
 Retained CK-08R3 pre-scale evidence at commit
-`a28e9cdbff8e48d334712a449fdcee111c725673` proves the EvidenceService outer
-query physically unbounded independent of scale profile. CK-08R3A owns that
-production fix. CK-08R3 must not become Ready or be redelegated until CK-08R3A
-is accepted, merged, and exact-main verified. Retained CK-08R1 work reached
+`a28e9cdbff8e48d334712a449fdcee111c725673` proved the EvidenceService outer
+query physically unbounded independent of scale profile. CK-08R3A corrected
+that production path in PR #417, passed hosted Python 3.10/3.14 and Console,
+and was squash-merged and exact-main identity verified at
+`38537f6cee42ad4ba2fb6e45354e410053c7a7cd`. The same premerge tree passed
+focused, dual-SQLite, full, package, safety, and review gates. A duplicate
+postmerge full runtime rerun did not complete because the host exhausted disk
+space and SQLite could not create temporary files; no product assertion
+failed, and this environment-only limitation does not override the exact-tree
+and hosted acceptance evidence. CK-08R3 is now Ready for its separate
+synthetic scale qualification. Retained CK-08R1 work reached
 80/80 parity by copying unsupported Q-REV-03/Q-WF-02 semantics; R1A now freezes
 their meaning and closure. R1C is accepted at exact main
 `fb0c57886097a6b985d2f321b2de858cbdfc0a97`; R1B remains held on shared
@@ -162,12 +169,9 @@ conditions in the table and child files; they are not unconditional DAG edges.
   "recovery_exit_policy": "return_to_convergence_after_integrity_restored",
   "blocked_policy": "spawn_none_and_report_to_orchestrator"
  },
-  "completed": ["CK-08R0", "CK-08R1A", "CK-08R1C", "CK-08R2", "CK-QG1A0", "CK-QG1A", "CK-07R1A", "CK-07R1A0"],
-  "ready": ["CK-QG1"],
+  "completed": ["CK-08R0", "CK-08R1A", "CK-08R1C", "CK-08R2", "CK-08R3A", "CK-QG1A0", "CK-QG1A", "CK-07R1A", "CK-07R1A0"],
+  "ready": ["CK-QG1", "CK-08R3"],
   "conditional_ready": [{
-    "condition": "CK-08R3A's serialized corrective authority correction accepted, merged, and exact-main verified",
-    "tasks": ["CK-08R3A"]
-  }, {
     "condition": "ARGV authority accepted at 479cbdb; coordinator records the preserved prelaunch incident disposition and a clean exact-main reapplication path; resume only existing worker 019fbfe2-8fe4-7de2-9264-d58572366727; no replacement, launch, or downstream task",
     "tasks": ["CK-07R1"]
   }],

docs/roadmap/TASK_PACKETS.md

@@ -12,11 +12,11 @@ parents are accounting umbrellas.
 - Not started: **8**
 - Critical-path completion: **14 / 21**
 - Optional packets: **CK-15**
-- Completed corrective child tasks: **8 — CK-08R0, CK-08R1A, CK-08R1C, CK-08R2, CK-QG1A0, CK-QG1A, CK-07R1A, CK-07R1A0**
-- Remaining delegable child tasks: **42**
-- Ready child tasks: **1 — CK-QG1**
-- Conditional-ready child tasks: **2 — CK-07R1 after coordinator disposition of the preserved prelaunch incident and a clean exact-main reapplication path; CK-08R3A**
-- Blocked child tasks: **39**
+- Completed corrective child tasks: **9 — CK-08R0, CK-08R1A, CK-08R1C, CK-08R2, CK-08R3A, CK-QG1A0, CK-QG1A, CK-07R1A, CK-07R1A0**
+- Remaining delegable child tasks: **41**
+- Ready child tasks: **2 — CK-QG1, CK-08R3**
+- Conditional-ready child tasks: **1 — CK-07R1 after coordinator disposition of the preserved prelaunch incident and a clean exact-main reapplication path**
+- Blocked child tasks: **38**
 - Orchestration mode: **convergence — one coordinator, one existing task per active packet, at most one shared-authority task**
 - Continuation policy: **reuse the active packet task for ordinary corrections; create a task only for a newly Ready distinct packet or a genuinely new authority decision**
 - Handoff policy: **tasks proactively message the parent; no polling or wait-only tasks**
@@ -64,8 +64,8 @@ other corrective locks are unchanged.
 - [ ] **CK-08R1 — Requalify independent answer truth** · Blocked on CK-08R1B; CK-08R1C is accepted · [packet](tasks/ck-08r1-build-independent-answer-truth.md)
 - [x] **CK-08R2 — Implement bounded physical keyset execution** · Completed on merge; exact-main verification recorded in handoff · [packet](tasks/ck-08r2-implement-physical-keyset-execution.md)
 - [x] **CK-QG1A0 — Authorize PageExecutor source supersession** · Completed on merge; exact-main required before CK-QG1A · [packet](tasks/ck-qg1a0-authorize-page-executor-source-supersession.md)
-- [ ] **CK-08R3A — Implement bounded EvidenceService physical queries** · Conditional Ready after corrective authority exact-main verification; CK-08R0 remains accepted · [packet](tasks/ck-08r3a-implement-evidence-physical-query.md)
-- [ ] **CK-08R3 — Qualify evidence service scale** · Blocked on CK-08R3A accepted merge and exact-main verification · [packet](tasks/ck-08r3-qualify-evidence-scale.md)
+- [x] **CK-08R3A — Implement bounded EvidenceService physical queries** · PR #417 hosted-green and squash-merged at `38537f6c`; exact-main identities verified · [packet](tasks/ck-08r3a-implement-evidence-physical-query.md)
+- [ ] **CK-08R3 — Qualify evidence service scale** · Ready after CK-08R3A accepted merge and exact-main verification · [packet](tasks/ck-08r3-qualify-evidence-scale.md)
 - [x] **CK-07R1A — Correct hosted lifecycle tail** · Accepted/merged at `4d807495`; exact-main verified · [packet](tasks/ck-07r1a-correct-hosted-lifecycle-tail.md)
 - [x] **CK-07R1A0 — Freeze lifecycle planner/recovery path authority** · Path, finite source/runtime, run-invocation authority, and argv-correction authority merged through `479cbdb`; retained witnesses remain read-only · [packet](tasks/ck-07r1a0-freeze-lifecycle-path-authority.md)
 - [ ] **CK-07R1 — Correct lifecycle preparation scale** · Conditional Ready after argv authority merge `479cbdb`, coordinator disposition of the preserved `prelaunch_failed` witness incident, and a clean exact-main reapplication path; only the existing worker may resume and no launch is yet authorized; PR #394 is stale read-only · [packet](tasks/ck-07r1-correct-lifecycle-preparation-scale.md)

docs/roadmap/tasks/ck-08r3-qualify-evidence-scale.md

@@ -1,6 +1,6 @@
 # CK-08R3 — Qualify evidence service scale
 
-**Status:** Blocked on CK-08R3A acceptance, merge, and exact-main verification
+**Status:** Ready after CK-08R3A PR #417 acceptance, merge, and exact-main verification
 
 **Parent:** Corrective prerequisite for CK-09
 

docs/roadmap/tasks/ck-08r3a-implement-evidence-physical-query.md

@@ -1,20 +1,41 @@
 # CK-08R3A — Implement bounded EvidenceService physical queries
-**Status:** Conditional Ready after final-shared authority merge/exact-main; implementation remains permitted_not_accepted
+
+**Status:** Completed on merge; PR #417 hosted-green and exact-main verified at `38537f6cee42ad4ba2fb6e45354e410053c7a7cd`
+
 **Recommended owner:** `worker evidence-physical-query`; Sol-class
+
 **Accounting:** [TASK_PACKETS.md](../TASK_PACKETS.md); [REMAINING_EXECUTION_PLAN.md](../REMAINING_EXECUTION_PLAN.md); [AGENT_FIRST_CLEAN_CUTOVER.md](../AGENT_FIRST_CLEAN_CUTOVER.md)
-**Goal:** Independently reinspect/reapply bounded EvidenceService SQL.
-**Blocker:** R3 commit `a28e9cdbff8e48d334712a449fdcee111c725673`/artifact `ae9107eda155a21b9bd9ef5a77971007d00864b772c3a23bc521652b5b17d471` exposed unbounded plans. The lifecycle-session authority is based on exact main `7d5a4b1717db78891fd2c38d8803d7fe2f922986`; it revokes successor `718ff7032d050b13cb7fac1f857d0c99879d0ef3b13c57c39b55514fc610a88b` and the entity-leading `659c1957…` candidate for inner temp sorts, scale growth, and rate-card page-scope regression. It permits only the exact atomic seven-production/nine-support cohort, including persisted `lifecycle_transitions.session_id` and `evidence_lifecycle_by_session_order`, plus the linked fixture/DDL/schema identities; no implementation is accepted yet.
-**Dependencies:** Accepted R0 plus this authority merge/exact-main. [Supersession authority](../../decisions/evidence/ck08r3a/evidence-service-supersession-authority.json) keeps the exact-main predecessor and selected successor permitted_not_accepted until evidence. The linked [schema/publication requalification authority](../../decisions/evidence/ck08r3a/schema-publication-requalification-authority.json) and [final-shared authority](../../decisions/evidence/ck08r3a/final-shared-authority.json) additionally bind the exact 42-table/57-index digest, independent DDL, frozen synthetic publication fixtures, and tiny-accounting EXPLAIN identity; they do not accept implementation.
-**Owned files/interfaces:** EvidenceService and the exact atomic lifecycle-support cohort. The authority permits only the seven production paths and nine support paths named in the final-shared artifact, including the exact `analytical.sql` evidence-order indexes and matching `storage/schema.py` contract digest; all other query/contracts/cursor/selectors/publication/projection/public/package/schema changes remain forbidden.
-**Produces:** Bounded SQL/tests and bound digest evidence; no R3 scale.
-**Independent truth source:** Test evaluator imports no production query/helper; applies selector/view/cursor, seven-part order, `limit + 1`.
-**Consumer seam:** `EvidenceService.read()` stays one query-only snapshot; keyset/order/limit precede decode.
-**Parallelism:** Disjoint from R1A,07R1A,QG1A; fresh task; blocked run is reproduction.
-**Non-goals:** unbound DDL/schema/projection/API/budget/timing/R1/QG1/07R1/R3/R4/RG/09.
-**Invariants:** Preserve selector/version/view/direction/cursor/publication, ties/missing/late/base/tail, gap-free/query-only/one-snapshot, exact zero-based nonnegative source-rank equality (including rank 0 and rank >0), <=100 rows/16384 bytes; synthetic; wheel <=1,000,000, sdist <=2,000,000.
-**Required tests/checks:** First/deep forward/backward EXPLAIN rejects `SCAN stream`, `MATERIALIZE model_calls_visible`, `AUTOMATIC COVERING INDEX`, and every `USE TEMP B-TREE FOR ORDER BY` except the exact portable one-row session-branch exception. The exception requires full plan ids/parents, the unique leftmost session-event ancestry, and the contiguous session/occurrence/manifestation sibling chain; independent rows/order/decode bound; valid active `rate_card` summary plus empty timeline/calls pages; regressions/authority/GitNexus; `just v/vc`; reviewer/PR/CI/merge/exact-main.
-**Acceptance:** The exact source/support cohort, evidence-order DDL, schema-contract identities, fixture manifests, and rank/provenance evidence in the authority match byte-for-byte; session-scoped first pages and all other deep forward/backward pages remain marker-free and bounded with 0/1,000/5,000 unrelated foreign lifecycle rows, while SQLite 3.45.1 may show at most one `USE TEMP B-TREE FOR ORDER BY` only for the structurally proven deep timeline/allowance session branch; all bounds and selector compatibility pass; generic drift forbidden. Predecessor/foreign artifacts are rejected before application query, mutation, repair, or promotion without migration or compatibility views.
-**Failure/rollback:** Divergence/gate/broader-authority need stops; no retry-only/blind copy.
-**Handoff:** SHA/PR/digests/plans/measurements/review/CI/exact-main/risks; then instruct coordinator to resume implementation worker `019fbe2b-20e8-78b2-a687-0231b159d0c7` in a fresh exact-main worktree before any fresh `test_engineer evidence-scale` R3 task.
-**Cleanup/docs:** Retain blocker; preserve R3A→R3 and R4 join.
-**Suggested commit:** `fix: bound evidence physical queries`
+
+**Goal:** Replace the retained unbounded EvidenceService physical plan with bounded, query-only, session-scoped keyset execution.
+
+**Historical blocker:** R3 commit `a28e9cdbff8e48d334712a449fdcee111c725673` and artifact `ae9107eda155a21b9bd9ef5a77971007d00864b772c3a23bc521652b5b17d471` exposed unbounded plans. PR #417 supersedes the rejected `718ff703…` and entity-leading `659c1957…` candidates while preserving them as read-only evidence.
+
+**Dependencies:** Accepted CK-08R0 plus all linked CK-08R3A authorities merged and exact-main verified before implementation acceptance.
+
+**Owned files/interfaces:** The exact atomic seven-production/nine-support cohort bound by repository authority, including EvidenceService, publication rank/order persistence, lifecycle storage, evidence-order DDL/schema, synthetic fixtures, and focused physical tests. No unrelated query, projection, public API, package, roadmap, CK-07, R1, R3, R4, RG, or CK-09 implementation.
+
+**Produces:** Accepted bounded EvidenceService SQL, exact physical-plan tests, and linked synthetic evidence; no CK-08R3 scale artifact.
+
+**Independent truth source:** A synthetic evaluator that imports no production query helper and independently applies selector, view, cursor, seven-part order, and `limit + 1`.
+
+**Consumer seam:** `EvidenceService.read()` remains a query-only single snapshot; scope, keyset order, and `limit + 1` precede decoding.
+
+**Parallelism:** The historical implementation lane is closed. CK-08R3 may start only after this accounting merge makes it Ready; CK-07R1, R1B, and QG1 remain independently held.
+
+**Non-goals:** New production behavior, migration or compatibility paths, selector/API expansion, projection admission, budget or timing changes, CK-07/R1/QG1 changes, CK-08R3 scale execution, R4/RG accounting, or CK-09 dispatch.
+
+**Invariants:** Preserve selector/version/view/direction/cursor/publication semantics; ties, missing, late, base, and tail behavior; gap-free query-only pagination; exact zero-based nonnegative source-rank equality, including valid rank 0 and preserved rank >0; at most 100 rows and 16,384 bytes; synthetic data only; wheel at most 1,000,000 bytes and sdist at most 2,000,000 bytes.
+
+**Required tests/checks:** First/deep forward/backward EXPLAIN rejects `SCAN stream`, `MATERIALIZE model_calls_visible`, `AUTOMATIC COVERING INDEX`, and every `USE TEMP B-TREE FOR ORDER BY` except the exact portable one-row session-branch exception. The exception requires full plan ids/parents, unique leftmost session-event ancestry, and the contiguous session/occurrence/manifestation equality chain. Validate independent rows/order/decode bounds, valid active `rate_card` summary plus empty timeline/calls pages, authority identities, GitNexus, `just v`, `just vc`, one reviewer, hosted CI, merge, and exact-main.
+
+**Acceptance:** Exact source/support, DDL/schema, fixture, rank/provenance, and authority identities match byte-for-byte. Session-scoped first pages and all other deep pages remain marker-free and bounded across 0/1,000/5,000 unrelated lifecycle rows. SQLite 3.45.1 may show at most one structurally proven deep timeline/allowance session-branch temp sort; all result truth, cursor, callback, and selector bounds remain invariant. Predecessor/foreign artifacts are rejected before application query, mutation, repair, or promotion without migration or compatibility views.
+
+**Completion evidence:** PR #417 reused the existing worker and PR lineage, passed hosted run `30972312554` for Console and Python 3.10/3.14, and squash-merged at `38537f6cee42ad4ba2fb6e45354e410053c7a7cd`. The selected 16-path cohort had zero authority identity mismatches. Premerge focused validation passed 136 tests with one skip; dual SQLite 3.45.1/3.53.3 passed 12/12; `just vp`, `just v`, `just vc`, build, distribution, release-safety, and the single final reviewer passed. Fresh exact-main was clean with exact identities and 46 authority/scope/documentation tests passing. A duplicate postmerge full runtime rerun did not complete because host ENOSPC caused SQLite disk-I/O/temp-file failures; no product assertion failed, so this remains an environment-only limitation rather than a claimed passed rerun.
+
+**Failure/rollback:** Preserve the first divergence or gate failure and stop; never blind-copy a candidate, weaken physical bounds, or treat an unchanged retry as evidence.
+
+**Handoff:** Record SHA, PR/CI, identities, plans, measurements, review, exact-main, risks, and environment limitations. The coordinator may create an uncreated CK-08R3 task only after the merged machine DAG records it Ready.
+
+**Cleanup/docs:** Preserve historical blockers and the R3A→R3→R4 dependency chain.
+
+**Suggested commit:** `docs: record CK-08R3A acceptance`