unaltraweb 0.5.1 → 0.6.0

data/docs/agents/owner-closeout-76.md

@@ -0,0 +1,205 @@
+# unaltraweb 0.5.1 delivery closeout
+
+Publication: **2026-09-30**, [v0.5.1](https://github.com/dosquartsdedocs/unaltraweb/releases/tag/v0.5.1).
+Owner coordination: [issue 76](https://github.com/dosquartsdedocs/unaltraweb/issues/76).
+This supersedes the pending-publication status of the retained preparation and
+follow-up reports without changing their historical bytes.
+
+## Revisions, review and integration
+
+| Role | Revision / evidence |
+| --- | --- |
+| Initial accepted local source | `217340cadc9db85aa717e020682068b9ce0ef379` |
+| Bundler/core implementation, retained consumer pin | `c23e12b0e1567d18a7f9dd225dc062ddc77dad8b` |
+| Closeout installed-launcher default correction | `1640572ccd9156037b9a4c0018b4c849a027296f` |
+| Integrated source producing the release artifacts | `aab5a7b030cd711b40770a3f44ad3a356eab90da`, [PR 77](https://github.com/dosquartsdedocs/unaltraweb/pull/77) |
+| Receipt-only branch commit | `8a0b6ce0d0c875ac6a8b86d9e354b8a388b5d038`, direct child of the source above |
+| Receipt integration and release tag target | `e842c733c8a274279dd5efdc3618e20669f29037`, [PR 78](https://github.com/dosquartsdedocs/unaltraweb/pull/78) |
+| Annotated `v0.5.1` tag object | `c4901b583c777a050cd53e1e96643ad53b7c0f64` |
+
+Both integrations used merge commits, preserving the approved core's ancestry.
+The receipt integration's first parent is exactly the artifact source; its diff
+from that parent contains only `release-candidates.json`. The source pin still
+names the real approved core implementation. The later closeout correction
+changes host-launcher selection, not that Jekyll/Bundler core implementation.
+
+All preparation commits and the complete base diff were reviewed. The remaining
+delivery finding was that the installed 0.5.1 launcher still selected the older
+0.5.0 MCP. Commit `1640572` fixes that: the console adapter uses explicit
+`--image`, then `UNALTRAWEB_MCP_IMAGE`, then its own BOM release image. The installed
+Make profile also defaults to its own release. The checkout's stricter digest
+pin remains a separate post-release operation. Default and override precedence
+are exercised by the factory-free wheel gate.
+
+Agent review records are attached to both PRs; they do not claim human review.
+Copilot could not review because of quota exhaustion and was not counted as a
+completed review. Explicit owner authorization covered integration and, in two
+later approvals, credentialed candidate preparation and final publication.
+All protected checks and conversation requirements passed without bypass.
+
+## Published receipt and artifacts
+
+[Tagged native receipt](https://github.com/dosquartsdedocs/unaltraweb/blob/v0.5.1/release-candidates.json):
+
+```text
+schema_version: 1
+release: v0.5.1
+source_commit: aab5a7b030cd711b40770a3f44ad3a356eab90da
+receipt SHA-256: 0e9d8f0589fa1ebf3aa067f0558523868fec29210927d1715f22e16e72cb30ec
+```
+
+Exactly four ready components are recorded:
+
+| Component | Published name / repository | SHA-256 / OCI repository digest |
+| --- | --- | --- |
+| Gem | `unaltraweb-0.5.1.gem` | `818bfbb53af4de16383a211e4224ab7ab77a2647afe8703f9c3f7c1ebd123c64` |
+| Wheel | `unaltraweb_mcp-0.5.1-py3-none-any.whl` | `354bff5894073d66e064b5bcd0887c5963f58035ee2b1751b541722f345cf08f` |
+| Base runtime | `ghcr.io/dosquartsdedocs/unaltraweb` | `sha256:3712453bf30289f02181cff0c095ecda563306e1d8a8f2a0e087c65ea9c8d730` |
+| Full MCP | `ghcr.io/dosquartsdedocs/unaltraweb-mcp` | `sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692` |
+
+The GitHub Release retains both packages and `SHA256SUMS`; that checksum file's
+SHA-256 is `5cd3be237015841b65583b9b54b9df37c8a4b642e9231e6ee522d8d37d90821a`.
+These are the newly downloaded workflow/publication bytes, not the earlier local
+0.5.1 candidates whose hashes appear in the follow-up report.
+
+Native component selections retained unchanged:
+
+- PDF 0.5.0:
+  `ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:9e0b3a45753c170b795e9a9d6df61580085c113436beac5bf6c8de69b6562097`.
+- Python 0.4.0:
+  `ghcr.io/dosquartsdedocs/unaltraweb-compute-python@sha256:18cb269811bd4005800382da25a480ec2bca7eac8d0501ad1ef36bad1c0f8cd9`.
+- R 0.4.0:
+  `ghcr.io/dosquartsdedocs/unaltraweb-compute-r@sha256:928ffb93f221e09e8b929157dee473b838e061915a2eb67224e4124b85f81837`.
+- Web capture 0.4.0:
+  `ghcr.io/dosquartsdedocs/unaltraweb-web-capture@sha256:0bf1bc67fe63e1440bffe708a168beefa11c54441650a871ab99380d362f7c1e`.
+- Diavisuals/Vegavisuals 0.4.0: the same BOM-selected hashed wheels and provider
+  receipt contract. Their exact references remain in `component-contract.json`.
+
+The image workflow additionally built/tested a PDF verification candidate
+`sha256:55c88a6e805f0612b8dced992868aab8443f077d72ecc9aaf7ff1bf862a154a6`.
+It is not selected by the BOM, not included in this receipt, and was not promoted
+as a 0.5.1 PDF component. The original 0.5.0 receipt remains at its existing tag,
+with SHA-256 `e57a9dbb041c1e7fcd781cd1524f4de0317382e0f7303bb36bfa59c0b6d1cb9b`.
+
+## CI, signing and publication gates
+
+| Gate | Successful run |
+| --- | --- |
+| Integration PR CI | [36780877307](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36780877307) |
+| Integration PR CodeQL | [36780877311](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36780877311) |
+| Integrated-source CI | [36785554970](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36785554970) |
+| Signed image build, verification, tests | [36785858325](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36785858325) |
+| Package preparation | [36785861424](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36785861424) |
+| Receipt PR CI | [36788752930](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36788752930) |
+| Receipt/tag target CI | [36789293544](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36789293544) |
+| Tag CI | [36791298216](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36791298216) |
+| Semver image promotion | [36791298413](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36791298413) |
+| PyPI and RubyGems Trusted Publishing | [36791301396](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/36791301396) |
+
+GitHub-signed OCI provenance was verified against the owner workflow and exact
+source digest in the candidate and promotion jobs. Local inspection additionally
+confirmed the OCI digests and source revision labels. The package workflow's
+immutable artifact ID is `11129633290`, archive digest
+`sha256:60a68862dcedec3747ed49112b66d10e697765a0ab5d6f249b33690aa5c5a3c5`.
+The publication verifier bound that run, source, artifact inventory and checksums
+to the receipt and annotated tag object before granting OIDC publishing authority.
+
+Before promotion, both the actual receipt-only branch and merged tag target
+passed `make distribution-release-check`. The merged `main` and then the annotated
+tag passed `--require-release-ready --validate-publish-ref --components
+gem,wheel,runtime,mcp,manual_pdf`. `verify_package_publish.py release` and exact
+package staging also passed. The old receipt was never substituted as evidence
+for the new version. Strict release validation refers to this receipt/tag
+revision, not to later ordinary post-release source commits.
+
+## Populated-cache evidence
+
+The previous final evidence was first rehashed at intake: gem, wheel and
+`final-roundtrip/evidence.json` matched the follow-up report. All six preserved
+files still matched in every profile, and the manual PDF matched its manifest.
+
+The actual signed candidate and downloaded CI wheel then passed a new full
+roundtrip in **all four profiles**: `unaltreselfie`, `unaltreprojecte`,
+`unaltredocs`, `unaltremanual`.
+
+1. A real 0.4.0 build populated the generated lock with `google-protobuf 4.36.1`.
+2. Unpatched 0.5.0 failed as expected on a separate populated copy.
+3. The signed corrected full MCP passed two builds, preview and HTTP.
+4. Returning to the unchanged published 0.4.0 passed two builds, preview and HTTP.
+5. Gemfile, Gemfile.lock, Makefile, scaffold baseline and both historical generated
+   Gemfile/lock files retained their original SHA-256 values throughout.
+
+New evidence:
+`/tmp/opencode/unaltraweb-closeout-051/candidate-roundtrip/evidence.json`, SHA-256
+`b5a2935359103983ff497760d8e9c367318ed9f77741ae1c5404a56449547179`.
+An external recording wrapper ran the unchanged owner driver and retained the
+manual tool responses plus PDF/cover bytes for both stages; it did not change
+arguments, caches or runtime behavior.
+
+| Manual artifact | SHA-256 |
+| --- | --- |
+| Corrected stage PDF | `203b39def968b644d1d0d3999827516e0e00aa8dd6b85202b33167d68dcb150e` |
+| Return-0.4 PDF | `aba2802d4e0d978c8acc0cfbfc26a84607739b0953756a6bdb16fabbc43defa0` |
+| Both stage covers | `afc3ba16ca919a7879f4629023e6316b77e31e56403e82edb7168f3181a3dc9d` |
+
+The responses report `ok: true`, `publishes: false`; preview cleanup remained
+receipt-bound. No cache was emptied to obtain a pass. The historical image
+selections and reproduction command remain in `owner-followup-76.md`; this run
+used the receipt's full MCP digest as `--fixed-image` and the downloaded CI wheel.
+
+## Public-download and installed acceptance
+
+Artifacts are retained under `/tmp/opencode/unaltraweb-closeout-051/`:
+`packages/`, `verified-packages/`, `published/`, `github-release/`,
+`installed-candidate/`, `installed-published/`, and `candidate-roundtrip/`.
+
+- Anonymous PyPI and RubyGems downloads match the receipt exactly; metadata and
+  downloaded bytes were independently compared.
+- Both `0.5.1` and `v0.5.1` GHCR aliases were checked with an empty Docker client
+  configuration and match the expected OCI index digests.
+- GitHub Release assets were downloaded again and pass their `SHA256SUMS`.
+- The public wheel was installed non-editably in a new venv. Its default
+  `prepare`/`check` selects and runs MCP 0.5.1 without a local core.
+- The public gem installs into an isolated gem home and activates as 0.5.1 using
+  the image's preinstalled Ruby dependencies. An initial probe artificially
+  omitted standard gem paths and failed to find `rexml`; retaining `Gem.path`
+  corrected the probe. This is not a claim of a network-fresh dependency install.
+- The host's older Buildx did not render the requested digest-only template;
+  anonymous verification instead checked the exact top-level `Digest:` field.
+- Closeout source tests reported **562 cases, 532 passed, 30 optional skips**;
+  distribution, workflow, wheel and prose checks passed. CI additionally ran its
+  Python matrix, Ruby, PDF, MCP, reproducibility and docs gates.
+- The post-pin local recheck reported **562 cases, 533 passed, 29 optional skips**
+  after the public image became available. Distribution, workflow, wheel,
+  `mcp-check`, `mcp-smoke`, docs build and diff gates passed with isolated
+  `unaltraweb-closeout-051-*:post-pin` tags and a fresh smoke fixture. The smoke
+  used the selected published PDF digest. These local development builds do not
+  replace the published release artifacts.
+
+Observed local configuration IDs (distinct from OCI repository digests):
+runtime `sha256:5c406a7981118203070517b6689f2f4f03ac7fd2b5626b52ed96fe14009d67b9`;
+full MCP `sha256:e7b2bd34751c2d3a30f9974f46c64e30a1a2fbd9ba412279234a5f24ff197eda`.
+
+## Post-release pin and remaining adoption scope
+
+The post-release source change on `chore/76-pin-published-mcp-0.5.1` accompanies
+this report. `Makefile` and `scripts/unaltraweb-mcp-bootstrap.sh` select
+`ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692`;
+the pin regression and current documentation are updated. Its PR/merge and final
+clean-main confirmation are recorded in issue 76 after protected CI completes.
+Published packages, receipt and tag are not rebuilt by this source update.
+
+An actual `MCP_CONSUMER_WORKSPACE`-bound `make mcp-stdio` session was launched from
+the post-pin checkout against a new empty synthetic consumer. Initialize and
+`detect_site` succeeded, and Docker inspection proved the session used the public
+MCP configuration ID `sha256:e7b2bd34751c2d3a30f9974f46c64e30a1a2fbd9ba412279234a5f24ff197eda`.
+The temporary session exited cleanly. The post-pin `mcp-build` and bootstrap
+`--check` also selected the published image without rebuilding it.
+
+The installed package already selects its own release; existing MCP processes
+keep their image until reconnected. No real manual, client registration or shared
+authoring worker was migrated. Historical Makefile adaptation remains restricted
+to matching baselines; customized Makefiles require explicit owner integration.
+The accepted evidence covers these exact Linux/amd64 tuples, not an untested
+version interval or architecture. No new H1 fields were introduced. Consumer
+adoption and central catalogue integration remain their own later sessions.

data/docs/agents/retained-letter-import.md

@@ -0,0 +1,231 @@
+# Native retained-letter import — issue 80
+
+## Scope and release state
+
+This is a separate 0.6.0 development increment after the administrative closeout
+of issue 76. Gem, wheel, runtime, MCP and PDF worker are pending. The 0.5.1 release,
+receipt and active checkout launcher pin remain unchanged. Consumer core/PDF
+integration and publication need their own reviewed immutable selections. The
+tested computation, capture and visual companion selections remain 0.4.0.
+
+The native receiver accepts Carta 0.3.0rc1 leaf `letter-pdf-v1` units. It retains
+the entire bundle, maps the original PDF byte for byte, creates a native draft
+page/chapter and checks its source and rendered references. The manual PDF
+builder includes all pages with `pdfpages`; every retained dependency and checker
+contributes to freshness. Nothing executes the retained producer recipe.
+Composite profiles, edited PDF variants and Diapora are outside this acceptance.
+
+## Protocol and provenance
+
+The wire v1 verifier and schema are byte-identical copies pinned to hub revision
+`9167e3efb5968a64bb9100792163a179c1491860` (integration
+`fc8745db950b04013c73eb49acf6781a26eb83f8`). Their respective SHA-256 values are
+`48368035f242f4d4446cbbe1363f8a01a7c17fa164ffef21abadd878b288d82d` and
+`b52a32b3bcfeed28cf34a9ec1557665a94466b51c451ccad47d2e87f6e23f9aa`.
+No envelope fields were added. `binding.json` is a separate native record.
+The integration actor identifies the importer by a hash of its code inventory,
+not an invented or uncommitted Git revision.
+
+Acceptance uses the final published
+[Carta v0.3.0rc1 packet](https://github.com/dosquartsdedocs/unaltracarta/releases/tag/v0.3.0rc1),
+revision `84258b6869689ea5f1a49a55abc2b865573fb512`:
+
+| Artifact | SHA-256 |
+| --- | --- |
+| `distribution.json` | `9d94b918db086b445e4d8a3ece2435622e0f9f9893bcd50708b4d13f5ca0ad44` |
+| `acceptance-0.3.0rc1.json` | `1bc7c467f3e35abf9fa5c27583dd8cc3ad4d4372f930c4be60ed142122158504` |
+| `acceptance-0.3.0rc1.tar.gz` | `8764a717bda33e15b48b3a06fe6fbe5dc075abedf4fd52bd37fdf4ed70896179` |
+| Published wheel | `0afab176ea0815d242f6e19021232bafdc63f9bb68cbacbd63b73f99b666b7c3` |
+| Wheel bundle manifest | `aeaa757ee1be19bfe56dc9af8dd1178032929b4a2bec2dad2ebb621b158ad999` |
+| Retained original PDF | `4a661740a18fe1cf75b84aa0d8532511fd105eb5484a5af700e11e8e30828ea4` |
+
+The original producer job was
+`.unaltracarta-handoff/jobs/a0794f7909a943eb844c87bb14002691/bundle/`.
+Its renderer identity is
+`sha256:ba2453fb42542433f68efd8888d628b95f256cefb9c545b3b35034d33296e340`.
+The installed test authenticates the packet before bounded extraction and checks
+every declared evidence file. Earlier release-candidate bytes are not inputs.
+
+## Installed acceptance
+
+`test/artifact_import_smoke.py` uses a wheel-installed CLI and Docker launcher,
+without a host factory dependency. It creates a synthetic manual, imports the
+published wheel bundle, edits surrounding prose, verifies an identical reimport
+preserves that prose and removes both the extracted producer copy and incoming
+copy. It then builds the web and PDF, checks the served page/PDF, moves the
+receiver, runs both native and generic v1 checks, and explicitly rebuilds the
+PDF in the moved receiver. Every original page must occur in order in the
+composed PDF; comparison uses the original font encoding, including ligatures.
+
+The passing local run is retained at
+`/tmp/opencode/unaltraweb-import-80/installed-proof-final/evidence.json`.
+Its receiver is `relocated-receiver/` in that directory. This is local owner
+evidence from development images, not a signed release receipt.
+
+| Tested identity | Value |
+| --- | --- |
+| Installed unaltraweb wheel SHA-256 | `407b1275d1de558da891f391454287d1b3e76fbef0e45460695e9731932b9e39` |
+| Controller image ID | `sha256:81f1da616455c7378ba3400b9d638eb8e67fce9605f18353d49a796020d9b6fa` |
+| PDF worker image ID | `sha256:b7b8f5b774a528cadb2ab7aa313b9ddbffa6d54c9d3b42bd6ff59a664be8ccf6` |
+| Integration record SHA-256 | `79ede9c8701eedf6ca4f182dc4fd1c9df3b56581138c677e0315310d8b998d1c` |
+| Composed PDF before and after relocation | `14b0ef586874704b6d1b045d6dde1f32ee08c8a9107006e06cfe2e8147f54621` |
+
+The receiver retains all 12 seal files under
+`.unaltraweb/artifacts/carta/bundle/`. Its mapping is
+`payload/output/letter.pdf` → `assets/documents/carta.pdf`, with native content at
+`_chapters/en/carta.md` and permalink `/en/retained/carta/` under `/letter-proof`.
+The original one-page letter appears on page 10 of the 11-page composed manual.
+Both web/HTTP checks passed; the non-web archive was absent from `_site`.
+Generic verification after relocation passed with one bundle, one mapping and
+14 verified files. Preview copies were cleaned through their exact receipts.
+
+Intermediate failures are retained separately: missing explicit gem plugin
+registration, an overly broad rendered-HTML scan, mismatched controller/worker
+checker bytes, and an assertion that ignored the original PDF's ligature
+encoding. Corrections preserve strict integrity/freshness gates. In particular,
+the installed-image fixture force-reinstalls its supplied wheel even when its
+development version equals the base image's version.
+
+## Reproduction and boundaries
+
+Prepare an installed wheel, the matching source-containing MCP image, and a PDF
+worker built from the repository root with `scripts/manual/Dockerfile`. The test
+controller in `test/artifact_import.Dockerfile` binds `MANUAL_PDF_IMAGE` to the
+worker image ID. Then run:
+
+```bash
+python test/artifact_import_smoke.py \
+  --packet "$PUBLISHED_CARTA_PACKET" --output "$NEW_EVIDENCE_DIRECTORY" \
+  --cli "$INSTALLED/bin/unaltraweb-mcp" \
+  --launcher "$INSTALLED/bin/unaltraweb-mcp-docker" \
+  --image "$TEST_CONTROLLER" --pdf-image "$TEST_PDF_WORKER"
+```
+
+The output directory must not exist. Only copies created by the test are retired.
+Unit-test bundles in `test/test_artifact_imports.py` are synthetic security and
+transaction fixtures, not published-producer acceptance. They cover tampering,
+incomplete resources, hidden references, symlinks/hardlinks, no-overwrite,
+interruption/retry, generated-source ownership, PDF action aliases/chains,
+rendered URL binding, native PDF inclusion and dependency closure.
+
+The imported unit is portable because its seal, record, mapped PDF and content
+all use receiver-relative paths. The integration does not depend on the incoming
+directory, producer process, absolute source location or ignored recovery tree.
+Failed publication retains prepared and partial files; there is no destructive
+rollback. Reimport adopts only identical existing bytes and preserves authored
+prose when the binding remains valid.
+
+Final release gates must additionally bind the reviewed core/PDF consumer tuple
+and same-source package/image candidates. A local acceptance run does not update
+those pins, authenticate a public 0.6.0 release, authorize real-manual adoption,
+or grant author approval to the draft content.
+
+The gem and PDF worker include a regular Python package initializer and its
+stdlib-only version/contract module. This prevents an unrelated installed wheel
+from shadowing the gem's helpers. The extracted-gem gate asserts the actual
+module paths. Checker code and schemas enter PDF freshness; the validated BOM's
+worker/self pins do not, avoiding a worker that would need to contain its own
+future digest. The integration actor separately hashes the full BOM metadata.
+
+## Owner regression gates
+
+- Python suite: 584 tests, 30 environment-dependent skips, no failures. The
+  focused importer suite covers 22 cases; the PDF builder suite covers 88.
+- Ruby plugin suites: 64 tests and 334 assertions, no failures.
+- Actual PDF toolchain integrations: 16 tests, no failures.
+- `distribution-check`, `workflow-check`, `wheel-check`, `gem-check`,
+  `mcp-check`, `mcp-smoke`, `docs-build`, and fixed-epoch
+  `reproducible-site-check` passed on local owner resources. Distribution remains
+  structurally valid and explicitly not release-ready.
+- The extracted-gem package gate exercises synthetic native retention using only
+  the gem's Python helper closure, with isolated Python and no wheel/core path.
+  Native deployment installs its parser dependencies before PDF/Jekyll checks.
+- Populated Bundler roundtrip passed for `unaltreselfie`, `unaltreprojecte`,
+  `unaltredocs` and `unaltremanual`, with two builds and a preview per runtime.
+  It first reproduces the published unpatched 0.5.0 `google-protobuf (4.36.1)`
+  failure on a separate copy, then tests 0.4.0 → development 0.6.0 → 0.4.0.
+  The historical driver labels its patched step `fixed-050`; the recorded
+  image is the 0.6.0 test controller. All six retained author/cache paths keep
+  their initial hashes; no cache cleaning is used to obtain a pass.
+
+Roundtrip evidence is retained at
+`/tmp/opencode/unaltraweb-import-80/bundler-roundtrip-final/evidence.json`, using
+the same final controller and worker IDs as the installed letter acceptance.
+The source discovery descriptor additionally declares `.unaltraweb/artifacts`
+as optional versioned source state with `cleanup: never`; `tmp` keeps its existing
+ignored, explicit-cleanup policy. This final metadata-only addition is checked by
+the path-policy and fresh-wheel gates and does not alter the tested import code.
+
+## Closeout review — 2026-10-02
+
+The owner explicitly authorized the full 0.6.0 commit/PR/integration, signed
+candidate, gated publication and post-release pin flow. The session preflight
+reported only the known unit-80 working tree and no competing session. Review
+covered every tracked/untracked unit path; no unrelated changes were identified.
+
+The two vendored protocol files match the exact established Git pin. The pinned
+reference tests and fixture payloads were also checked (the later fixture README
+only renames the integrated contract), and all 26 conformance tests pass. These
+generic synthetic tests do not add a composite domain to the native importer.
+The retained installed wheel/PDF hashes above and the moved receiver's native
+web/PDF mapping were independently rechecked before editing.
+
+Resolved review findings:
+
+- Metadata could contain a local link or image while retained Pandoc evidence
+  remained stale. Renderable metadata now receives the independent text-reference
+  check; effective metadata rejects render-option fields outside the supported
+  author/stamp projection. Malformed Pandoc link evidence returns a structured
+  domain failure instead of an uncaught indexing error.
+- A PDF OpenAction internal destination array was treated as an action array.
+  Internal destinations are supported while chained action arrays retain their
+  stricter checks. Regression tests cover both cases.
+- The acceptance driver required a derived test-controller image. It now also
+  verifies the immutable PDF selection declared by the actual installed MCP image
+  and records the exact image references and source label, allowing signed bytes
+  to be exercised directly.
+
+The corrected source passes 587 Python tests (30 optional skips), including 25
+native import cases, plus distribution/workflow/fresh-wheel gates. The historical
+local evidence above remains retained; signed-candidate and public-download
+acceptance must record their own revisions and hashes. The consumer core/PDF
+tuple is closed only after the reviewed integrated core and signed PDF digest
+exist; no guessed source or self-digest is inserted into the BOM.
+
+## Reviewed immutable consumer tuple
+
+PR [81](https://github.com/dosquartsdedocs/unaltraweb/pull/81) integrated reviewed
+implementation `7af652fb83629e959af05c407a34a2f5a15f7936` as
+`5cf9817489c8dc47cee726bfe42fe3071cd32b85`. Protected PR CI
+[37027921742](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37027921742)
+and CodeQL [37027922332](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37027922332)
+passed, followed by integrated-source CI
+[37028677932](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37028677932)
+and CodeQL [37028678347](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37028678347).
+The PR contains an explicit agent review, not an attributed human approval.
+
+Signed image workflow
+[37029374441](https://github.com/dosquartsdedocs/unaltraweb/actions/runs/37029374441)
+then published, attested and tested the PDF from that exact source. Its read-only
+test job verified the signer workflow/source digest before executing the exact
+image, including 16 PDF integrations and real MCP preparation. The selected
+PDF 0.6.0 identity is
+`ghcr.io/dosquartsdedocs/unaltraweb-manual-pdf@sha256:0ba267cb87f53ebaca4e31805fe00610cd61fdf97a8d2c3692f4655700dceaed`.
+The BOM and Make contract now select that same digest and integrated core SHA.
+
+That public signed PDF is recorded as `released` and reused by digest. The four
+core/package components are `ready` for final same-commit candidates; their strict
+gate still requires a new receipt-only child of the final artifact source.
+Subsequent verification-only PDF builds are not substituted for this selected
+worker or promoted under an assumed identity. The earlier 0.5.1 receipt and
+active launcher pin remain intact until the authorized 0.6.0 closeout completes.
+
+The tuple was exercised before its pin PR using an installed wheel and a local
+MCP containing the new BOM with the actual signed PDF above. Evidence is retained
+at `/tmp/opencode/unaltraweb-closeout-060/tuple-letter-proof/evidence.json`:
+integration `ebe07ee10ad740a2bbbd36d532f336374cf4bb19ccb373b6590b2279f664a222`,
+composed PDF `416e96f66bb6608b1e20bf5e36b6b16133bd4018c17e6c079e8987b736fe9cae`
+both before and after the forced relocated rebuild. The PDF's inspected local
+image ID is `sha256:d7e7d3243616270fc9e6eed7f8238c412dbe3d9ffc18d2832d17d66ca630d139`,
+with the exact integrated source revision label. This preparation proof does not
+substitute for the final signed MCP and downloaded package acceptance.

data/lib/unaltraweb.rb

@@ -21,6 +21,7 @@ require_relative "unaltraweb/version"
   content_search_index
   manual_release_metadata
   reproducible_build_time
+  retained_documents
   profile-pages
   remove-accents
   search-data

data/requirements.txt

@@ -3,3 +3,5 @@ scholarly
 requests
 bibtexparser
 rdata
+pypdf>=6,<7
+markdown-it-py>=3,<5

data/scripts/manual/Dockerfile

@@ -23,9 +23,12 @@ RUN printf '%s\n' \
     && rm -rf /var/lib/apt/lists/* \
     && pip install --no-cache-dir PyYAML==6.0.2
 
-COPY build_pdf.py /opt/unaltraweb/manual/build_pdf.py
-COPY Dockerfile /opt/unaltraweb/manual/Dockerfile
-COPY filters /opt/unaltraweb/manual/filters
-COPY templates /opt/unaltraweb/manual/templates
+RUN pip install --no-cache-dir 'pypdf>=6,<7' 'markdown-it-py>=3,<5'
+COPY scripts/manual/build_pdf.py /opt/unaltraweb/manual/build_pdf.py
+COPY scripts/manual/Dockerfile /opt/unaltraweb/manual/Dockerfile
+COPY scripts/manual/filters /opt/unaltraweb/manual/filters
+COPY scripts/manual/templates /opt/unaltraweb/manual/templates
+COPY src/unaltraweb_mcp/__init__.py src/unaltraweb_mcp/distribution.py src/unaltraweb_mcp/component-contract.json src/unaltraweb_mcp/component-contract.schema.json src/unaltraweb_mcp/artifact_handoff_v1.py src/unaltraweb_mcp/artifact-handoff-v1.schema.json src/unaltraweb_mcp/artifact_imports.py src/unaltraweb_mcp/letter_bundle.py src/unaltraweb_mcp/pdf_probe.py src/unaltraweb_mcp/processes.py /opt/unaltraweb/src/unaltraweb_mcp/
+ENV PYTHONPATH=/opt/unaltraweb/src
 
 ENTRYPOINT ["python3", "/opt/unaltraweb/manual/build_pdf.py"]

data/scripts/manual/build_pdf.py

@@ -26,6 +26,10 @@ except ImportError as exc:  # pragma: no cover - supplied by the builder image
 
 
 SCRIPT_ROOT = Path(__file__).resolve().parent
+for _source_root in (SCRIPT_ROOT.parent.parent / "src", SCRIPT_ROOT.parent / "src"):
+    if (_source_root / "unaltraweb_mcp" / "artifact_imports.py").is_file():
+        sys.path.insert(0, str(_source_root))
+        break
 DEFAULT_DOCKERFILE = SCRIPT_ROOT / "Dockerfile"
 DEFAULT_TEMPLATE = SCRIPT_ROOT / "templates" / "manual.tex"
 DEFAULT_BIBLIOGRAPHY_FILTER = SCRIPT_ROOT / "filters" / "bibliography.lua"
@@ -36,6 +40,7 @@ BIB_CUSTOM_URL_RE = re.compile(r'(?im)^\s*(?:manual_url|website)\s*=\s*(?:\{([^}
 FRONT_MATTER_RE = re.compile(r"\A---[ \t]*\r?\n(.*?)^---[ \t]*(?:\r?\n|\Z)", re.MULTILINE | re.DOTALL)
 CITE_RE = re.compile(r"{%\s*cite\s+([^%]+?)\s*%}")
 INCLUDE_RE = re.compile(r"{%\s*include\s+([^%]+?)\s*%}")
+RETAINED_DOCUMENT_RE = re.compile(r"{%\s*retained_document\s+([a-z][a-z0-9-]{0,63})\s*%}")
 LIQUID_RE = re.compile(r"({[{%].*?[}%]})", re.DOTALL)
 INLINE_CODE_RE = re.compile(r"<code>(.*?)</code>", re.IGNORECASE | re.DOTALL)
 FENCED_CODE_BLOCK_RE = re.compile(r"^[ \t]*(`{3,}|~{3,})[^\n]*\n.*?^[ \t]*\1[ \t]*$", re.MULTILINE | re.DOTALL)
@@ -947,6 +952,17 @@ def transform_markdown(
             citation_keys.extend(key for key in keys if key not in citation_keys)
         return "[" + "; ".join(f"@{key}" for key in keys) + "]"
 
+    def retained_document(match: re.Match[str]) -> str:
+        from unaltraweb_mcp.artifact_imports import check_imports
+
+        result = check_imports(project, match.group(1))
+        if result.get("ok") is not True:
+            raise ManualPdfError(f"Retained document verification failed: {result.get('error')}")
+        path = result["imports"][0]["pdf"]
+        # The native import layout uses an ASCII slug and fixed project-relative
+        # path; no bundle text is interpolated into TeX or executed.
+        return protect("```{=latex}\n\\includepdf[pages=-,pagecommand={}]" + "{" + path + "}\n```")
+
     def table(match: re.Match[str]) -> str:
         body = match.group("body").strip()
         credit, _ = caption_source_attribute(match.group("attrs") or "")
@@ -1137,6 +1153,7 @@ def transform_markdown(
     transformed = transformed.replace(r"\begin{equation\*}", r"\begin{equation*}")
     transformed = transformed.replace(r"\end{equation\*}", r"\end{equation*}")
     transformed = BASEURL_RE.sub("", transformed)
+    transformed = RETAINED_DOCUMENT_RE.sub(retained_document, transformed)
     transformed = transformed.replace("{% include manual-bibliography.liquid %}", "::: {#refs}\n:::")
     transformed = CITE_RE.sub(citations, transformed)
     transformed = CALLOUT_BLOCK_RE.sub(callout, transformed)
@@ -1481,6 +1498,17 @@ def build_dependencies(project: Path, metadata: dict[str, Any], source_paths: li
     ]
     for path in source_paths:
         dependencies.append((f"source:{path.relative_to(project)}", path))
+    if any(RETAINED_DOCUMENT_RE.search(path.read_text(encoding="utf-8")) for path in source_paths if path.suffix.lower() == ".md"):
+        from unaltraweb_mcp import artifact_imports
+
+        imports = artifact_imports.check_imports(project)
+        if imports.get("ok") is not True:
+            raise ManualPdfError(f"Retained document verification failed: {imports.get('error')}")
+        for item in imports["imports"]:
+            dependencies.extend((f"retained:{relative}", project / relative) for relative in item["inputs"])
+        checker_root = Path(artifact_imports.__file__).parent
+        for name in artifact_imports.CHECKER_FILES:
+            dependencies.append((f"import-check:{name}", checker_root / name))
     if csl:
         dependencies.append((f"csl:{csl.relative_to(project)}", csl))
     for key in ["cover-image", "cover-logo", "series-logo"]:

data/scripts/manual/templates/manual.tex

@@ -10,6 +10,7 @@
 \usepackage{float}
 \usepackage{framed}
 \usepackage{graphicx}
+\usepackage{pdfpages}
 \usepackage{grffile}
 \usepackage{longtable}
 \usepackage{array}

data/scripts/test_gem_build.py

@@ -64,6 +64,9 @@ def inspect_gem(path: Path) -> None:
     editorial_files = ["scripts/editorial_check.py", "src/unaltraweb_mcp/editorial.py", "src/unaltraweb_mcp/editorial_sources.py"]
     inspection_files = editorial_files + ["src/unaltraweb_mcp/bundler_runtime.py", "scripts/image_background_check.py", "src/unaltraweb_mcp/image_backgrounds.py",
                                           "src/unaltraweb_mcp/image_probe.py", "src/unaltraweb_mcp/processes.py"]
+    inspection_files += [f"src/unaltraweb_mcp/{name}" for name in (
+        "__init__.py", "distribution.py", "component-contract.json", "component-contract.schema.json",
+        "artifact_imports.py", "artifact_handoff_v1.py", "artifact-handoff-v1.schema.json", "letter_bundle.py", "pdf_probe.py")]
     with tarfile.open(path, mode="r") as package:
         data_member = package.extractfile("data.tar.gz")
         if data_member is None:
@@ -83,6 +86,7 @@ def inspect_gem(path: Path) -> None:
         "_plugins/figure_captions.rb",
         "_plugins/manual_release_metadata.rb",
         "_plugins/reproducible_build_time.rb",
+        "_plugins/retained_documents.rb",
         "assets/js/content-search-match.js",
         "assets/js/content-search.js",
         "_config.yml",
@@ -134,6 +138,29 @@ def inspect_gem(path: Path) -> None:
         inspection = json.loads(run(image_command, cwd=site).stdout)
         if not inspection["ok"] or inspection["images"][0]["state"] != "transparent" or not inspection["warnings"]:
             raise RuntimeError(f"Gem-native SVG background inspection failed: {inspection}")
+        # This is the synthetic domain fixture, not published-Carta acceptance.
+        # Only its data crosses into the isolated extracted-gem subprocess.
+        sys.path.insert(0, str(ROOT / "test"))
+        from test_artifact_imports import fixture
+
+        bundle_sha, template_sha = fixture(site / "incoming/letter")
+        (site / ".gitignore").write_text("tmp/\n", encoding="utf-8")
+        run(["git", "init", "--quiet"], cwd=site)
+        isolated = """
+import json, sys
+from pathlib import Path
+sys.path.insert(0, sys.argv[1])
+from unaltraweb_mcp import artifact_imports, letter_bundle, artifact_handoff_v1, distribution, processes
+for module in (artifact_imports, letter_bundle, artifact_handoff_v1, distribution, processes):
+    assert Path(module.__file__).is_relative_to(Path(sys.argv[1])), module.__file__
+letter_bundle.TEMPLATES['default-letter.latex'] = sys.argv[4]
+project = Path(sys.argv[2])
+result = artifact_imports.import_bundle(project, 'incoming/letter/bundle.json', sys.argv[3],
+    'letter', '_pages/en/letter.md', dry_run=False, confirm_import=True)
+print(json.dumps(result))
+raise SystemExit(0 if result['ok'] else 1)
+"""
+        run([sys.executable, "-I", "-c", isolated, str(core / "src"), str(site), bundle_sha, template_sha], cwd=site)
 
 
 def main() -> int:

data/scripts/test_wheel_install.py

@@ -90,6 +90,11 @@ def main() -> int:
         required = [
             "unaltraweb_mcp/calibre_import.py",
             "unaltraweb_mcp/bundler_runtime.py",
+            "unaltraweb_mcp/artifact_imports.py",
+            "unaltraweb_mcp/artifact_handoff_v1.py",
+            "unaltraweb_mcp/artifact-handoff-v1.schema.json",
+            "unaltraweb_mcp/letter_bundle.py",
+            "unaltraweb_mcp/pdf_probe.py",
             "unaltraweb_mcp/component-contract.json",
             "unaltraweb_mcp/component-contract.schema.json",
             "unaltraweb_mcp/manual_pdf_preview.py",

data/scripts/unaltraweb-mcp-bootstrap.sh

@@ -12,7 +12,7 @@ If --project is omitted, MCP_CONSUMER_WORKSPACE is used, then the current direct
 USAGE
 }
 
-image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:36d17edbade77edb40a687f6a744203c6329acb33fbc2eb255e88d9ff1a42c98}"
+image="${UNALTRAWEB_MCP_IMAGE:-ghcr.io/dosquartsdedocs/unaltraweb-mcp@sha256:908b4ce54c7bdf355e14ed55b31ed4b9baae319e211af90004a680d1d1cb8692}"
 project="${MCP_CONSUMER_WORKSPACE:-${UNALTRAWEB_PROJECT:-}}"
 operation=serve
 

data/src/unaltraweb_mcp/__init__.py

@@ -0,0 +1,4 @@
+from .distribution import distribution_version
+
+
+__version__ = distribution_version()