node-autotask 0.32.0 → 0.34.0

package/dist/{chunk-R6HLJCI2.js → chunk-EZKM4HQ6.js}

@@ -1,6 +1,6 @@
 import {
   CAPABILITIES
-} from "./chunk-M2EGFPGF.js";
+} from "./chunk-4MUBUSTL.js";
 
 // src/auth.ts
 var AUTH_HEADERS = {
@@ -2337,8 +2337,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"appointments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ae6ff4b1-553b-48e0-b4fe-00c72964b268","message":"Value does not exist for the required f'
@@ -2413,13 +2413,15 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
-          "remedy": "attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+          "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime and approvalResourceID are not).",
+          "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
           'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "describes a multi-level approval record for an Autotask time entry ... This option is only available through the REST API."',
           'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "When the BillingItemApprovalLevels entity is created, the TimeEntry.BillingApprovalLevelMostRecent field is updated, but approvalDateTime and approvalResourceID are not. Instead, the approvalDateTime and approvalResourceID fields are editable on the TimeEntry entity. Workaround: ... create the BillingItemApprovalLevel and then follow that call up with an update to the TimeEntry to set the BillingApprovalDateTime and BillingApprovalResourceID fields."',
-          "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path."
+          "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path.",
+          "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
+          "maintainer provenance (blocker.remedy): attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         ],
         "deleteBoundary": {
           "available": false,
@@ -2480,8 +2482,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"change_request_links.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"2d747061-00ea-4b40-b3fc-740882492457","message":"Value does not exist for the re'
@@ -2541,8 +2543,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -2588,8 +2590,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -2775,9 +2777,9 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 companies); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"companies.delete","message":"invoke: unknown operation \\"companies.delete\\" \u2014 it is not in the capability reg'
@@ -2827,8 +2829,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "company_alerts.create".'
@@ -2872,8 +2874,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [],
         "deleteBoundary": {
@@ -2919,15 +2921,17 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": 'create succeeded live (DG-1 verification, 2026-10-11, ww29, parent company 29683380, record id 30230658, marker name "node-autotask DG-1 create probe") once the four vendor-required body fields were present \u2014 actionType, assignedResourceID, startDateTime, endDateTime \u2014 plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 SERVER_ERROR naming the field; it is a deterministic rejection, not a transient fault (the SDK now answers retryable: false \u2014 add the field, do not retry). The vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue; cleanup is UI-only.',
-          "remedy": "provision via the API as proven: send actionType (picklist, e.g. 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields. Clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "A create needs actionType, assignedResourceID, startDateTime and endDateTime in the body plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 naming the field; this is a deterministic rejection, not a transient fault (retryable: false).",
+          "remedy": "Send actionType (a picklist value, for example 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields."
         },
         "vendorEvidence": [
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'assignedResourceID': Value does not exist for the required field assignedResourceID. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'actionType': Missing Required Field: actionType. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'endDateTime': Missing Required Field: endDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
-          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'startDateTime': Missing Required Field: startDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`
+          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'startDateTime': Missing Required Field: startDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
+          'maintainer provenance (blocker.message): create succeeded live (DG-1 verification, 2026-10-11, ww29, parent company 29683380, record id 30230658, marker name "node-autotask DG-1 create probe") once the four vendor-required body fields were present \u2014 actionType, assignedResourceID, startDateTime, endDateTime \u2014 plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 SERVER_ERROR naming the field; it is a deterministic rejection, not a transient fault (the SDK now answers retryable: false \u2014 add the field, do not retry). The vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue; cleanup is UI-only.',
+          "maintainer provenance (blocker.remedy): provision via the API as proven: send actionType (picklist, e.g. 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields. Clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
         ],
         "deleteBoundary": {
           "available": false,
@@ -3002,8 +3006,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "company_webhooks.create".'
@@ -3050,9 +3054,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "vendor 500: the billingProductID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-          "remedy": "provision the referenced record in the Autotask UI first (the billingProductID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "billingProductID"
+          "message": "The billingProductID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "billingProductID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_billing_product_associations.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c2bf3080-c882-4ff2-b440-159686687978","message":"Refe'
@@ -3112,9 +3116,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Value does not reference an existing entity for displayColorRgb .",
-          "remedy": "provision the referenced record in the Autotask UI first (the displayColorRgb reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "displayColorRgb"
+          "message": "The displayColorRgb reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "displayColorRgb",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Value does not reference an existing entity for displayColorRgb .",
@@ -3164,8 +3168,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_category_udf_associations.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"89cf29e9-db4a-4834-b5fa-6344d2213569","message":"Field '`
@@ -3238,9 +3242,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Value does not reference an existing entity for noteType .",
-          "remedy": "provision the referenced record in the Autotask UI first (the noteType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "noteType"
+          "message": "The noteType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "noteType",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Value does not reference an existing entity for noteType .",
@@ -3250,7 +3254,12 @@ var RELATIONSHIP_MAP = {
           "available": false,
           "note": "the vendor defines no DELETE for configuration_item_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "configurationItemID",
+          "resource": "configuration_items",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -3291,9 +3300,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Reference value on field: configurationItemID of type: ConfigurationItem does not exist or is invalid.",
-          "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "configurationItemID"
+          "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "configurationItemID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Reference value on field: configurationItemID of type: ConfigurationItem does not exist or is invalid.",
@@ -3303,7 +3312,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "configurationItemID",
+          "resource": "configuration_items",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -3361,8 +3375,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "configuration_item_types.create".'
@@ -3410,8 +3424,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_webhooks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f348c45e-80e0-4632-9dc9-d04796ea03ab","message":"A ConfigurationItemWebho'
@@ -3563,8 +3577,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9b17f254-654d-4bdc-94bd-d7fc0ff8f4ff","message":"Value does not exist for the req'
@@ -3607,8 +3621,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"NOT_FOUND","category":"not_found","retryable":false,"httpStatus":404,"operation":"contact_group_contacts.create","suggestedAction":"Verify the id, or resolve the record by name first.","correlationId":"f84411bb-c115-41af-8690-74a6283b9768","message":"Resource not found: <!DOCTY'
@@ -3650,8 +3664,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -3701,8 +3715,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "contact_webhooks.create".'
@@ -3780,8 +3794,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -3833,17 +3847,24 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: 'productID [1] is invalid. Products with a BillingType of 'Standard'[1] cannot be associated to ContractBillingRules.' \u2014 a product with an ELIGIBLE (non-Standard) BillingType is required; the products table is blind for this API user \u2014 UNSATISFIABLE for this user. (10-04 ladder had stopped at isDailyProrationEnabled + 'productID [1] is invalid. Products with a'.)",
-          "remedy": "a product with a non-Standard BillingType is required (products table blind for this user) \u2014 provision/read an eligible product in the Autotask UI or use a user where the products table is visible"
+          "message": "productID must reference a product whose BillingType is not 'Standard' (Standard products cannot be associated to ContractBillingRules); the products table is blind for this API user, so no eligible product can be read back.",
+          "referenceField": "productID",
+          "remedy": "Provision or select a product with a non-Standard BillingType in the Autotask UI, or use a user who can read the products table."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_billing_rules.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ba9fcf-91ae-42a3-bc50-9911442eb738","message":"Reference value on field: con'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_billing_rules.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ba9fcf-91ae-42a3-bc50-9911442eb738","message":"Reference value on field: con',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: 'productID [1] is invalid. Products with a BillingType of 'Standard'[1] cannot be associated to ContractBillingRules.' \u2014 a product with an ELIGIBLE (non-Standard) BillingType is required; the products table is blind for this API user \u2014 UNSATISFIABLE for this user. (10-04 ladder had stopped at isDailyProrationEnabled + 'productID [1] is invalid. Products with a'.)"
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -3880,17 +3901,23 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): write path proven via the vendor's unique-key wall \u2014 'A ContractBlockHourFactor for this roleID and contractID combination already exists' (pair (30131842, 29685291) pre-existing from the rates attach). Fields roleID (+ the unique key).",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The vendor enforces a unique (roleID, contractID) pair: a second create for the same pair is refused as already existing.",
+          "remedy": "None: create with the live-proven field set (roleID and contractID identify the record)."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_block_hour_factors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8095334f-1e14-4185-b5dc-99e5526e526d","message":"Value does not exist for'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_block_hour_factors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8095334f-1e14-4185-b5dc-99e5526e526d","message":"Value does not exist for',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): write path proven via the vendor's unique-key wall \u2014 'A ContractBlockHourFactor for this roleID and contractID combination already exists' (pair (30131842, 29685291) pre-existing from the rates attach). Fields roleID (+ the unique key)."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_block_hour_factors (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -3935,17 +3962,23 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114389. TYPE GATE: parent MUST be type 4 (Block hours) \u2014 'This ContractBlock must reference a Contract of type 4 (Block hours) with contractID'. Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The parent contract must be type 4 (Block hours).",
+          "remedy": "Create with the live-proven field set under a type 4 (Block hours) contract."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_blocks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ea12c341-d1d3-4622-b73c-45e871ed1f91","message":"Reference value on field: contractID'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_blocks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ea12c341-d1d3-4622-b73c-45e871ed1f91","message":"Reference value on field: contractID',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114389. TYPE GATE: parent MUST be type 4 (Block hours) \u2014 'This ContractBlock must reference a Contract of type 4 (Block hours) with contractID'. Residue."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_blocks (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -3987,17 +4020,23 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the contracts table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the contracts table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ed78a2ec-b5e2-4e5f-989b-4c39bee66567","message":"Reference value on field: contractI'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ed78a2ec-b5e2-4e5f-989b-4c39bee66567","message":"Reference value on field: contractI',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the contracts table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -4032,17 +4071,24 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field billingCodeID.' \u2014 the billing-allocation table is blind for this API user (no resolvable allocation code for this user's contracts) \u2014 UNSATISFIABLE for this user.",
-          "remedy": "an allocation code (billingCodeID) readable by this user is required (table blind) \u2014 provision in the Autotask UI or use a user where allocation codes are visible"
+          "message": "billingCodeID must reference an allocation code readable by the user; the billing-allocation table is blind for this API user, so no resolvable code exists for its contracts.",
+          "referenceField": "billingCodeID",
+          "remedy": "Provision the allocation code in the Autotask UI, or use a user who can read allocation codes."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_billing_codes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8ef9f8ea-5846-4128-bbcc-b523061c585f","message":"Reference value on '
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_billing_codes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8ef9f8ea-5846-4128-bbcc-b523061c585f","message":"Reference value on ',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field billingCodeID.' \u2014 the billing-allocation table is blind for this API user (no resolvable allocation code for this user's contracts) \u2014 UNSATISFIABLE for this user."
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -4079,11 +4125,12 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 187; field roleID. Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The vendor accepted a create with the live-proven field set (roleID).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_roles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"76f0c480-232b-4bfd-aa1e-c9cd3858d717","message":"Value does not exist for th'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_roles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"76f0c480-232b-4bfd-aa1e-c9cd3858d717","message":"Value does not exist for th',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 187; field roleID. Residue."
         ],
         "deleteBoundary": {
           "available": true,
@@ -4126,11 +4173,12 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified \u2014 batch1-final recovery, id 3; the surviving per-resource receipts predate the recovery)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
-          'csxroles: {"id": 3, "final": "RECOVERED"} (batch1-final.json) \u2014 verify-gone=True (batch1-final.log)'
+          'csxroles: {"id": 3, "final": "RECOVERED"} (batch1-final.json) \u2014 verify-gone=True (batch1-final.log)',
+          "maintainer provenance (blocker.message): create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified \u2014 batch1-final recovery, id 3; the surviving per-resource receipts predate the recovery)"
         ],
         "deleteBoundary": {
           "available": true,
@@ -4173,9 +4221,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "vendor 500: the excludedWorkTypeID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-          "remedy": "provision the referenced record in the Autotask UI first (the excludedWorkTypeID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "excludedWorkTypeID"
+          "message": "The excludedWorkTypeID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "excludedWorkTypeID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_set_excluded_work_types.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b900823d-cf16-4eea-a26b-ea1df9b13d70","message":"Reference'
@@ -4250,8 +4298,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -4301,17 +4349,23 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 1338. TYPE GATE (vendor): the parent contract MUST be type 3 (Fixed Price) \u2014 'ContractMilestones may only have a contractID linking to Contracts of type 3 (Fixed Price)'. Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The parent contract must be type 3 (Fixed Price): the vendor only allows ContractMilestones under Contracts of that type.",
+          "remedy": "Create with the live-proven field set under a type 3 (Fixed Price) contract."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_milestones.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"cfa41884-3855-4729-983f-733f52ef7320","message":"Reference value on field: contra'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_milestones.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"cfa41884-3855-4729-983f-733f52ef7320","message":"Reference value on field: contra',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 1338. TYPE GATE (vendor): the parent contract MUST be type 3 (Fixed Price) \u2014 'ContractMilestones may only have a contractID linking to Contracts of type 3 (Fixed Price)'. Residue."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_milestones (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4352,17 +4406,23 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 35573321 under contract 30131842; fields title + description. Residue (no vendor DELETE).",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The vendor accepted a create with title and description under a contract.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"bc5bfb0b-79c1-4bde-882b-7cd16c77f6cd","message":"Reference value on field: contractID '
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"bc5bfb0b-79c1-4bde-882b-7cd16c77f6cd","message":"Reference value on field: contractID ',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 35573321 under contract 30131842; fields title + description. Residue (no vendor DELETE)."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4403,17 +4463,23 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30083427; fields contractHourlyRate + roleID (an owned/visible role). Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The vendor accepted a create with contractHourlyRate and roleID (an owned, visible role).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_rates.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a829126b-68db-4fac-89ba-56c6ad725eef","message":"Value does not exist for the required'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_rates.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a829126b-68db-4fac-89ba-56c6ad725eef","message":"Value does not exist for the required',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30083427; fields contractHourlyRate + roleID (an owned/visible role). Residue."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_rates (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4458,11 +4524,12 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114390. TYPE GATE: parent MUST be type 6 (Retainer). Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The parent contract must be type 6 (Retainer).",
+          "remedy": "Create with the live-proven field set under a type 6 (Retainer) contract."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_retainers.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d4fb4798-c02b-4c19-b3fa-b1629ae9113a","message":"Reference value on field: contrac'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_retainers.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d4fb4798-c02b-4c19-b3fa-b1629ae9113a","message":"Reference value on field: contrac',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114390. TYPE GATE: parent MUST be type 6 (Retainer). Residue."
         ],
         "deleteBoundary": {
           "available": false,
@@ -4508,11 +4575,13 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "resource-role-pair",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'The specified resourceID and roleID combination is not currently defined.' \u2014 a currently-DEFINED (resource, role) assignment is required; the resource_roles table is blind for this user (0 rows) \u2014 same pair-validation family as W-A3; UNSATISFIABLE for this user.",
-          "remedy": "a currently-DEFINED (resource, role) assignment is required (resource_roles blind for this user) \u2014 same family as W-A3; use a user with readable assignments or manage role costs in the Autotask UI"
+          "message": "The create is refused unless the (resourceID, roleID) pair is currently defined ('The specified resourceID and roleID combination is not currently defined.'); the resource_roles table is blind for this API user, so no defined pair can be read back.",
+          "remedy": "Use a currently defined (resource, role) assignment from a user who can read resource_roles, or manage role costs in the Autotask UI."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_role_costs.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c64d8ace-bdf3-46e9-ba24-1e8989aa73ef","message":"Value does not exist for the req'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_role_costs.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c64d8ace-bdf3-46e9-ba24-1e8989aa73ef","message":"Value does not exist for the req',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'The specified resourceID and roleID combination is not currently defined.' \u2014 a currently-DEFINED (resource, role) assignment is required; the resource_roles table is blind for this user (0 rows) \u2014 same pair-validation family as W-A3; UNSATISFIABLE for this user.",
+          "maintainer provenance (blocker.remedy): a currently-DEFINED (resource, role) assignment is required (resource_roles blind for this user) \u2014 same family as W-A3; use a user with readable assignments or manage role costs in the Autotask UI"
         ],
         "deleteBoundary": {
           "available": false,
@@ -4558,17 +4627,24 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: the parent contract must be type 7 (Recurring Services) or 'umbrella' ('Unable to create a ContractServiceAdjustment with a contractID that is not of type recurring Service or umbrella'); under a type-7 parent the vendor then requires an ACTIVE serviceID \u2014 'Unable to create a ContractServiceAdjustment with a serviceID of 1 because that Service is not active'. The services table is blind for this API user (no readable active service id) \u2014 UNSATISFIABLE for this user.",
-          "remedy": "an ACTIVE serviceID visible to this API user is required (services table blind for this user) \u2014 provision the active service in the Autotask UI or use a user where services are readable; parent must be type 7 (Recurring) or 'umbrella'"
+          "message": "The parent contract must be type 7 (Recurring Services) or an umbrella contract, and serviceID must reference an ACTIVE service; the services table is blind for this API user, so no active service id can be read back.",
+          "referenceField": "serviceID",
+          "remedy": "Provision the active service in the Autotask UI, or use a user who can read services; the parent must be a type 7 (Recurring Services) or umbrella contract."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"fc363aaa-2d29-4f86-8e8f-2871c6b09401","message":"Reference value on fiel'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"fc363aaa-2d29-4f86-8e8f-2871c6b09401","message":"Reference value on fiel',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: the parent contract must be type 7 (Recurring Services) or 'umbrella' ('Unable to create a ContractServiceAdjustment with a contractID that is not of type recurring Service or umbrella'); under a type-7 parent the vendor then requires an ACTIVE serviceID \u2014 'Unable to create a ContractServiceAdjustment with a serviceID of 1 because that Service is not active'. The services table is blind for this API user (no readable active service id) \u2014 UNSATISFIABLE for this user."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_service_adjustments (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4608,18 +4684,25 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "W-A7-class drift, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor answers HTTP 200 with a body that is NOT OperationResultModel \u2014 the node (spec-conformant) types INVALID_RESPONSE; the record may be created with an unparseable id (blind table). TYPE GATE: the parent contract must be type 7 (Recurring Services) \u2014 '\u2026with a contractID that is not of type recurring Service'. VENDOR-FIX (response shape) required.",
-          "remedy": "vendor response-shape fix required (W-A7-class 200 drift) \u2014 treat the INVALID_RESPONSE as the typed wall; parent must be type 7 (Recurring Services); manage the adjustment in the Autotask UI meanwhile"
+          "message": "The vendor answers HTTP 200 with a body that is not an OperationResultModel (response-shape drift), typed INVALID_RESPONSE; the record may be created with an unparseable id. The parent contract must be type 7 (Recurring Services).",
+          "remedy": "Treat INVALID_RESPONSE as the typed outcome; the parent must be a type 7 (Recurring Services) contract. Manage the adjustment in the Autotask UI until the vendor fixes the response shape."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundle_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a1899b6f-015a-4c32-aaa8-eabeabb30165","message":"Reference value ',
-          '{"live": "2026-10-06 confirm-100", "message": "Expected OperationResultModel { itemId } (or { id }); got a different shape"}'
+          '{"live": "2026-10-06 confirm-100", "message": "Expected OperationResultModel { itemId } (or { id }); got a different shape"}',
+          "maintainer provenance (blocker.message): W-A7-class drift, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor answers HTTP 200 with a body that is NOT OperationResultModel \u2014 the node (spec-conformant) types INVALID_RESPONSE; the record may be created with an unparseable id (blind table). TYPE GATE: the parent contract must be type 7 (Recurring Services) \u2014 '\u2026with a contractID that is not of type recurring Service'. VENDOR-FIX (response shape) required.",
+          "maintainer provenance (blocker.remedy): vendor response-shape fix required (W-A7-class 200 drift) \u2014 treat the INVALID_RESPONSE as the typed wall; parent must be type 7 (Recurring Services); manage the adjustment in the Autotask UI meanwhile"
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_service_bundle_adjustments (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4682,17 +4765,24 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceBundleID.' \u2014 the service-bundles table is blind for this API user \u2014 UNSATISFIABLE for this user.",
-          "remedy": "a service-bundles-table record visible to this user is required (table blind, 0 rows) \u2014 provision in the Autotask UI or use a user where the table is visible"
+          "message": "serviceBundleID must reference a service bundle; the service-bundles table is blind for this API user, so no id can be read back.",
+          "referenceField": "serviceBundleID",
+          "remedy": "Provision the service bundle in the Autotask UI, or use a user who can read the table."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"032e3caa-4527-467f-b459-0cb80cfd1ad2","message":"Value does not exist for th'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"032e3caa-4527-467f-b459-0cb80cfd1ad2","message":"Value does not exist for th',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceBundleID.' \u2014 the service-bundles table is blind for this API user \u2014 UNSATISFIABLE for this user."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_service_bundles (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4755,17 +4845,24 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceID.' \u2014 the services table is blind for this API user (0 rows; no readable service id) \u2014 UNSATISFIABLE for this user.",
-          "remedy": "a services-table record visible to this user is required (table blind, 0 rows) \u2014 provision in the Autotask UI or use a user where the table is visible"
+          "message": "serviceID must reference a service; the services table is blind for this API user, so no readable service id exists.",
+          "referenceField": "serviceID",
+          "remedy": "Provision the service in the Autotask UI, or use a user who can read the services table."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5003db3-bd6a-4970-aeb7-c13b32849acd","message":"Value does not exist for the requi'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5003db3-bd6a-4970-aeb7-c13b32849acd","message":"Value does not exist for the requi',
+          "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceID.' \u2014 the services table is blind for this API user (0 rows; no readable service id) \u2014 UNSATISFIABLE for this user."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for contract_services (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "contractID",
+          "resource": "contracts",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -4809,11 +4906,12 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114391. TYPE GATE: parent MUST be type 8 (PerTicket incident) \u2014 'The Contract associated by contractID must be of type PerTicket (incident)'. Residue.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The parent contract must be type 8 (PerTicket incident).",
+          "remedy": "Create with the live-proven field set under a type 8 (PerTicket incident) contract."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_ticket_purchases.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"268901a8-7fdd-4e9a-9731-92f840ac73bd","message":"Reference value on field: '
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_ticket_purchases.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"268901a8-7fdd-4e9a-9731-92f840ac73bd","message":"Reference value on field: ',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114391. TYPE GATE: parent MUST be type 8 (PerTicket incident) \u2014 'The Contract associated by contractID must be of type PerTicket (incident)'. Residue."
         ],
         "deleteBoundary": {
           "available": false,
@@ -5157,12 +5255,14 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "The create is conditioned on contractType: types 1, 3, 4, 6, 7 and 8 are accepted and type 5 is rejected. The per-type field gates are declared in requiresByValue and rejectedValues. An owned company satisfies companyID.",
+          "remedy": "Send the body with the contractType you need and satisfy that value's requiresByValue entry (plus the contractPeriodType value it names)."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contracts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"25d4a730-6d6c-49ff-a038-96d3fd09165d","message":"Value does not exist for the required fiel',
-          `{"live": "2026-10-06 confirm-100 (CONF100-1791187382)", "result": "OperationResultModel id=30131842 (type 1)", "ladder": "status -> endDate/timeReporting/contractType/contractName/startDate -> 'Contracts of type 1 require an estimatedRevenue' -> estimatedHours -> estimatedCost"}`
+          `{"live": "2026-10-06 confirm-100 (CONF100-1791187382)", "result": "OperationResultModel id=30131842 (type 1)", "ladder": "status -> endDate/timeReporting/contractType/contractName/startDate -> 'Contracts of type 1 require an estimatedRevenue' -> estimatedHours -> estimatedCost"}`,
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
+          "maintainer provenance (blocker.remedy): live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
         ],
         "deleteBoundary": {
           "available": false,
@@ -5314,9 +5414,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Value does not reference an existing entity for primaryLocationID.",
-          "remedy": "provision the referenced record in the Autotask UI first (the primaryLocationID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "primaryLocationID"
+          "message": "The primaryLocationID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "primaryLocationID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Value does not reference an existing entity for primaryLocationID.",
@@ -5359,9 +5459,9 @@ var RELATIONSHIP_MAP = {
         "liveProvenPrefix": [],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 domain_registrars); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"domain_registrars.delete","message":"invoke: unknown operation \\"domain_registrars.delete\\" \u2014 it is not in th'
@@ -5412,9 +5512,10 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "picklist-unexposed",
-          "message": "Field 'Type': Missing Required Field: Type.",
-          "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI.",
-          "referenceField": "Type"
+          "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+          "referenceField": "Type",
+          "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
           "Field 'Type': Missing Required Field: Type.",
@@ -5424,7 +5525,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "expenseItemID",
+          "resource": "expense_items",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -5480,11 +5586,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the expense_reports LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15; W-A6), so no parent id can be read back through the list surface (get-by-id is the authority); then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the expense_reports list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+          "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"178f9509-d97a-4e69-9e4b-f7af67d98e64","message":"Picklist value [1] does not exist for '
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"178f9509-d97a-4e69-9e4b-f7af67d98e64","message":"Picklist value [1] does not exist for ',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the expense_reports LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15; W-A6), so no parent id can be read back through the list surface (get-by-id is the authority); then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": false,
@@ -5545,8 +5652,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table's list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+          "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_reports.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9363affe-7779-4bac-bd81-49423574fbc8","message":"Value does not exist for the require'
@@ -5610,8 +5717,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -5658,8 +5765,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -5794,12 +5901,14 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "undocumented-ladder",
-          "message": "Field 'useQuoteTotals': Missing Required Field: useQuoteTotals.  | Value does not exist for the required field  useQuoteTotals. ",
-          "remedy": "the vendor required-field ladder is undocumented and UNPROVEN (12 fields consumed before the campaign stopped \u2014 W-A5); no known field set makes this create succeed on ww29 \u2014 treat it as unavailable for this tenant and file the gap with the vendor."
+          "message": "The vendor's required-field ladder is undocumented and unproven: the create still fails after the proven fields (liveProvenPrefix), and no known field set makes it succeed.",
+          "remedy": "Treat the create as unavailable through the API for this tenant.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
           "Field 'useQuoteTotals': Missing Required Field: useQuoteTotals.  | Value does not exist for the required field  useQuoteTotals. ",
-          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunities.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b18b6fa2-5fba-4cbe-8657-b2805798c736","message":"Field 'startDate': Missing Required Fi`
+          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunities.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b18b6fa2-5fba-4cbe-8657-b2805798c736","message":"Field 'startDate': Missing Required Fi`,
+          "maintainer provenance (blocker.remedy): the vendor required-field ladder is undocumented and UNPROVEN (12 fields consumed before the campaign stopped \u2014 W-A5); no known field set makes this create succeed on ww29 \u2014 treat it as unavailable for this tenant and file the gap with the vendor."
         ],
         "deleteBoundary": {
           "available": false,
@@ -5847,18 +5956,25 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "picklist-unexposed",
-          "message": "vendor 500: the Type picklist values are not exposed to this API user (File/Document/Image/Other all rejected \u2014 W-A4)",
-          "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI.",
-          "referenceField": "Type"
+          "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+          "referenceField": "Type",
+          "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
-          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunity_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"83dcbf4f-7e56-4602-b52b-04db2f3455d2","message":"Field 'Type': Missing Requir`
+          `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunity_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"83dcbf4f-7e56-4602-b52b-04db2f3455d2","message":"Field 'Type': Missing Requir`,
+          "maintainer provenance (blocker.message): vendor 500: the Type picklist values are not exposed to this API user (File/Document/Image/Other all rejected \u2014 W-A4)"
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "opportunityID",
+          "resource": "opportunities",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -5910,11 +6026,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+          "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+          "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
-          "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+          "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+          "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
         ],
         "deleteBoundary": {
           "available": false,
@@ -5954,11 +6071,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+          "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+          "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
-          "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+          "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+          "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
         ],
         "deleteBoundary": {
           "available": false,
@@ -5998,11 +6116,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+          "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+          "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
-          "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+          "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+          "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
         ],
         "deleteBoundary": {
           "available": false,
@@ -6049,11 +6168,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the products table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the products table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"product_vendors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9aecd016-c8fa-4940-b54a-6e875d43aba7","message":"Value does not exist for the require'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"product_vendors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9aecd016-c8fa-4940-b54a-6e875d43aba7","message":"Value does not exist for the require',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the products table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": false,
@@ -6116,8 +6236,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"products.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"3f1bd9a6-28bb-4fb4-b851-07b5f90a8a3d","message":"Value does not exist for the required field'
@@ -6168,8 +6288,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+          "message": "The create failed on the parent reference: the projects table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id.",
           "requires": {
             "anyOf": [
               "productID",
@@ -6178,13 +6298,19 @@ var RELATIONSHIP_MAP = {
           }
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must '
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must ',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "projectID",
+          "resource": "projects",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -6221,8 +6347,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d11a453b-729e-4908-8c6d-8549b72e8d0c","message":"Picklist value [1] does not exist for '
@@ -6231,7 +6357,12 @@ var RELATIONSHIP_MAP = {
           "available": false,
           "note": "the vendor defines no DELETE for project_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "projectID",
+          "resource": "projects",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -6270,18 +6401,24 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (known id 527128, marker name FULL100W-1791110339 phases); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
-          "residue.json: phases id 527128 (known id, undeletable by vendor wall W-A1; phases.get is scoped \u2014 the id is retained in the ledger)"
+          "residue.json: phases id 527128 (known id, undeletable by vendor wall W-A1; phases.get is scoped \u2014 the id is retained in the ledger)",
+          "maintainer provenance (blocker.message): create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (known id 527128, marker name FULL100W-1791110339 phases); cleanup is UI-only."
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for phases (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "projectID",
+          "resource": "projects",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -6351,9 +6488,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Value does not reference an existing entity for taskType .",
-          "remedy": "provision the referenced record in the Autotask UI first (the taskType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "taskType"
+          "message": "The taskType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "taskType",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Value does not reference an existing entity for taskType .",
@@ -6363,7 +6500,12 @@ var RELATIONSHIP_MAP = {
           "available": false,
           "note": "the vendor defines no DELETE for tasks (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "projectID",
+          "resource": "projects",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -6471,9 +6613,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "Value does not reference an existing entity for projectType .",
-          "remedy": "provision the referenced record in the Autotask UI first (the projectType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "projectType"
+          "message": "The projectType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "projectType",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           "Value does not reference an existing entity for projectType .",
@@ -6543,9 +6685,9 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 purchase_order_item_receiving); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "not found on a visible surface (record may predate the marker value or was created with a different value)"
@@ -6612,11 +6754,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "vendor 500: reference rejection on order (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The vendor rejected a reference field on the create (HTTP 500); the cause is not classified.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_order_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"1a4f90a8-2add-47f3-bc93-74e972f7fb5e","message":"Reference value on field: order'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_order_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"1a4f90a8-2add-47f3-bc93-74e972f7fb5e","message":"Reference value on field: order',
+          "maintainer provenance (blocker.message): vendor 500: reference rejection on order (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)"
         ],
         "deleteBoundary": {
           "available": false,
@@ -6677,8 +6820,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_orders.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8cefa9ef-8cfd-46b3-baef-fe64b3d2b999","message":"Value does not exist for the require'
@@ -6732,17 +6875,23 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the quotes table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the quotes table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quote_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0645cad1-5749-42f1-9666-eeffac24118b","message":"Reference value on field: quoteID of quo'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quote_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0645cad1-5749-42f1-9666-eeffac24118b","message":"Reference value on field: quoteID of quo',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the quotes table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "quoteID",
+          "resource": "quotes",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -6777,8 +6926,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "quote_locations.create".'
@@ -6878,8 +7027,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quotes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"7db33388-b040-4940-9def-9f4a4b46acb8","message":"Value does not exist for the required field b'
@@ -6927,9 +7076,9 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 resource_role_queues); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "BLIND SURFACE \u2014 own created records invisible to query (node sentinel, ww29-verified)"
@@ -7228,9 +7377,9 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 roles); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"roles.delete","message":"invoke: unknown operation \\"roles.delete\\" \u2014 it is not in the capability registry (l'
@@ -7298,11 +7447,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the service_call_tasks table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the service_call_tasks table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_task_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"33baa2f9-f98c-49cd-ac9e-ef1ac532e277","message":"Value does not exist for'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_task_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"33baa2f9-f98c-49cd-ac9e-ef1ac532e277","message":"Value does not exist for',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the service_call_tasks table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": true,
@@ -7360,8 +7510,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the service_calls table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the service_calls table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_tasks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"49bf54fb-1e7f-40a9-82e0-25c58a4a67fd","message":"Value does not exist for the requ'
@@ -7370,7 +7520,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "serviceCallID",
+          "resource": "service_calls",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -7405,11 +7560,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the service_call_tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the service_call_tickets table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_ticket_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9e96c2d1-9fcb-4d73-95dd-f88c1ce7de6c","message":"Value does not exist f'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_ticket_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9e96c2d1-9fcb-4d73-95dd-f88c1ce7de6c","message":"Value does not exist f',
+          "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the service_call_tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
         ],
         "deleteBoundary": {
           "available": true,
@@ -7467,8 +7623,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the service_calls table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the service_calls table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_tickets.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ab38e3-b14b-4462-829a-9abc91ce3eb3","message":"Value does not exist for the re'
@@ -7477,7 +7633,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "serviceCallID",
+          "resource": "service_calls",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -7544,8 +7705,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_calls.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"27ef068e-2ff8-4bf9-9043-a17008996639","message":"Value does not exist for the required '
@@ -7608,8 +7769,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the parent table's list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+          "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"eb4c0dfd-6d14-4af2-8770-7bd7fc06d0eb","message":"Picklist value [1] does not exist for perio'
@@ -7699,9 +7860,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "vendor 500: the configurationItemID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-          "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "configurationItemID"
+          "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "configurationItemID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"subscriptions.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"36080c8a-2fd5-4fc3-9c0f-a53d95fa97b2","message":"Value does not reference an existing e'
@@ -7787,8 +7948,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [],
         "deleteBoundary": {
@@ -7828,8 +7989,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -7888,8 +8049,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -7933,11 +8094,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The vendor rejected a reference field on the create (HTTP 500); the cause is not classified.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r',
+          "maintainer provenance (blocker.message): vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)"
         ],
         "deleteBoundary": {
           "available": true,
@@ -7974,11 +8136,12 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-          "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+          "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+          "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
         },
         "vendorEvidence": [
-          "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+          "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+          "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
         ],
         "deleteBoundary": {
           "available": false,
@@ -8024,9 +8187,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "vendor 500: the configurationItemID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-          "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "configurationItemID"
+          "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "configurationItemID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_configuration_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"20c78cfe-eb8c-437b-9f41-8a3cd852b05b","message":"Reference valu'
@@ -8035,7 +8198,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8072,18 +8240,24 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 4001 (deleted post-proof \u2014 zero residue). The 10-04 W-A2 'blind reference' was a company-scoping issue, NOT a blind table: 'The contactID is invalid. The contactID must be associated with either the Ticket's Company or its Parent Company.' A contact created under the ticket's own company (30132787 for ticket 527119) passes.",
-          "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+          "message": "contactID must be associated with the ticket's company or its parent company; a contact created under the ticket's own company is accepted.",
+          "remedy": "Create the contact under the ticket's own company first, then add it to the ticket."
         },
         "vendorEvidence": [
           "Reference value on field: contactID of type: Contact does not exist or is invalid.",
-          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_contacts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f507450d-002a-4f1a-afc8-d0168a45f93d","message":"Reference value on field:'
+          '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_contacts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f507450d-002a-4f1a-afc8-d0168a45f93d","message":"Reference value on field:',
+          "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 4001 (deleted post-proof \u2014 zero residue). The 10-04 W-A2 'blind reference' was a company-scoping issue, NOT a blind table: 'The contactID is invalid. The contactID must be associated with either the Ticket's Company or its Parent Company.' A contact created under the ticket's own company (30132787 for ticket 527119) passes."
         ],
         "deleteBoundary": {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8122,8 +8296,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "picklist-unexposed",
-          "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-          "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+          "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+          "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
           "Picklist value [File] does not exist for Type.",
@@ -8134,7 +8309,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8232,8 +8412,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+          "message": "The create failed on the parent reference: the tickets table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_change_request_approvals.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"dcc063e9-eaf1-4e66-9bc9-cb5c4a4f3f71","message":"The Ticket id you ha'
@@ -8242,7 +8422,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8281,8 +8466,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-parent",
-          "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-          "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+          "message": "The create failed on the parent reference: the tickets table is blind for this API user, so no valid parent id can be read back.",
+          "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id.",
           "requires": {
             "anyOf": [
               "productID",
@@ -8297,7 +8482,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8334,8 +8524,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           "verified-gone=True"
@@ -8344,7 +8534,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8381,19 +8576,26 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "W-A7 drift + parent wall, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor now answers HTML 404 ('Resource not found' \u2014 typed NOT_FOUND by the node) for checklistLibraryID=1: the checklist-library PARENT is blind/absent for this API user before the 10-04 200-shape drift can surface. The responseDrift pin remains for the post-parent shape.",
-          "remedy": "the checklist-library PARENT is blind for this user (HTML 404 before the 200 drift) \u2014 provision the library in the Autotask UI or use a user where the table is visible; the post-parent 200-shape drift (W-A7) still needs the vendor-side fix"
+          "message": "The checklist-library parent is blind or absent for this API user: the vendor answers HTML 404 (typed NOT_FOUND) before a 200 response-shape drift can surface.",
+          "remedy": "Provision the library in the Autotask UI or use a user who can read the table; the post-parent response-shape drift still needs a vendor-side fix."
         },
         "vendorEvidence": [
           "Expected OperationResultModel { itemId } (or { id }); got a different shape (ladder_decode.log, INVALID_RESPONSE)",
           "api-docs.json declares OperationResultModel for POST /V1.0/Tickets/{id}/TicketChecklistLibraries \u2014 the vendor deviates (W-A7 adjudication: vendor spec drift, not a node defect)",
-          '{"live": "2026-10-06 confirm-100", "message": "Resource not found: <!DOCTYPE html PUBLIC .../xhtml/1.0/Strict ...>"}'
+          '{"live": "2026-10-06 confirm-100", "message": "Resource not found: <!DOCTYPE html PUBLIC .../xhtml/1.0/Strict ...>"}',
+          "maintainer provenance (blocker.message): W-A7 drift + parent wall, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor now answers HTML 404 ('Resource not found' \u2014 typed NOT_FOUND by the node) for checklistLibraryID=1: the checklist-library PARENT is blind/absent for this API user before the 10-04 200-shape drift can surface. The responseDrift pin remains for the post-parent shape.",
+          "maintainer provenance (blocker.remedy): the checklist-library PARENT is blind for this user (HTML 404 before the 200 drift) \u2014 provision the library in the Autotask UI or use a user where the table is visible; the post-parent 200-shape drift (W-A7) still needs the vendor-side fix"
         ],
         "deleteBoundary": {
           "available": false,
           "note": "the vendor defines no DELETE for ticket_checklist_libraries (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -8456,8 +8658,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "picklist-unexposed",
-          "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-          "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+          "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+          "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_note_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"52976761-8459-49af-8509-49e562e59dbb","message":"Field 'Type': Missing Requir`
@@ -8507,8 +8710,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "ticket_note_webhooks.create".'
@@ -8601,8 +8804,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "ticket_notes.create".'
@@ -8611,7 +8814,12 @@ var RELATIONSHIP_MAP = {
           "available": false,
           "note": "the vendor defines no DELETE for ticket_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": {
@@ -8649,8 +8857,8 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "unknown",
-          "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-          "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+          "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+          "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
         },
         "vendorEvidence": [
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0965b007-8bd2-4d51-9967-257ab506a87a","message":"Value does not exist for '
@@ -8659,7 +8867,12 @@ var RELATIONSHIP_MAP = {
           "available": true,
           "note": null
         },
-        "zone": "ww29"
+        "zone": "ww29",
+        "parentCompany": {
+          "via": "ticketID",
+          "resource": "tickets",
+          "field": "companyID"
+        }
       }
     },
     "deleteBoundary": null,
@@ -8700,8 +8913,8 @@ var RELATIONSHIP_MAP = {
         "unproven": false,
         "blocker": {
           "kind": "ok",
-          "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-          "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           'Executed "ticket_webhooks.create".'
@@ -8939,9 +9152,9 @@ var RELATIONSHIP_MAP = {
         ],
         "unproven": false,
         "blocker": {
-          "kind": "delete-absent",
-          "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 tickets); cleanup is UI-only.",
-          "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+          "kind": "ok",
+          "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+          "remedy": "None: create with the live-proven field set."
         },
         "vendorEvidence": [
           '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"tickets.delete","message":"invoke: unknown operation \\"tickets.delete\\" \u2014 it is not in the capability registr'
@@ -9011,13 +9224,15 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "resource-role-pair",
-          "message": "pair-scoped wall (confirm-100 CONF100-1791187382, 2026-10-06; scope re-stamped 2026-10-21): 3 live attempts with the API-only user's own resource 31131505 + roles 29685291/29682834/29683323 were refused with 'API-only user cannot be selected for this field' (10-04: 'The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This applies to creates selecting that resource+role pair; it is NOT a refusal of all time-entry writes \u2014 live creates succeeded on 2026-10-21 (pair not recorded). The authorised pair set has not been re-adjudicated by a live probe. createForResource (stage-11 proven, 10-04) was walled under the same pair on 10-06 and is unconfirmed for other pairs. Valid in-tenant pairs observed via postedWithin: (31131373, 29682834), (29869529, 29682834).",
-          "remedy": "vendor pair-eligibility, not missing tenant data: the API-only user's own resource is not selectable. Use a (resource, role) pair the tenant authorises for this user (creates succeeded 2026-10-21, pair not recorded), or record time in the Autotask UI; the working reads remain postedWithin / the window helpers (W-D3 pointer note)"
+          "message": "The create is refused when it selects the API-only user's own resource ('API-only user cannot be selected for this field') or a (resourceID, roleID) pair the tenant has not defined ('The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This is a pair-scoped refusal, not a refusal of all time-entry creates: creates with a defined pair succeed.",
+          "remedy": "Use a (resource, role) pair the tenant defines for the user, or record the time in the Autotask UI. Valid in-tenant pairs can be read through postedWithin."
         },
         "vendorEvidence": [
           "The specified AssignedResourceID and AssignedRoleID combination is not currently defined.",
           '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"time_entries.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5ff4e59-bc8f-4f88-ad05-6445d8fddfa6","message":"API-only user cannot be selected for th',
-          '{"live": "2026-10-06 confirm-100", "message": "API-only user cannot be selected for this field."}'
+          '{"live": "2026-10-06 confirm-100", "message": "API-only user cannot be selected for this field."}',
+          "maintainer provenance (blocker.message): pair-scoped wall (confirm-100 CONF100-1791187382, 2026-10-06; scope re-stamped 2026-10-21): 3 live attempts with the API-only user's own resource 31131505 + roles 29685291/29682834/29683323 were refused with 'API-only user cannot be selected for this field' (10-04: 'The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This applies to creates selecting that resource+role pair; it is NOT a refusal of all time-entry writes \u2014 live creates succeeded on 2026-10-21 (pair not recorded). The authorised pair set has not been re-adjudicated by a live probe. createForResource (stage-11 proven, 10-04) was walled under the same pair on 10-06 and is unconfirmed for other pairs. Valid in-tenant pairs observed via postedWithin: (31131373, 29682834), (29869529, 29682834).",
+          "maintainer provenance (blocker.remedy): vendor pair-eligibility, not missing tenant data: the API-only user's own resource is not selectable. Use a (resource, role) pair the tenant authorises for this user (creates succeeded 2026-10-21, pair not recorded), or record time in the Autotask UI; the working reads remain postedWithin / the window helpers (W-D3 pointer note)"
         ],
         "deleteBoundary": {
           "available": true,
@@ -9070,8 +9285,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "picklist-unexposed",
-          "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-          "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+          "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+          "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+          "unsatisfiableViaApi": true
         },
         "vendorEvidence": [
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"time_entry_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"04f16a9b-daa6-4dc1-96a2-32508985ac71","message":"Field 'Type': Missing Require`,
@@ -9138,9 +9354,9 @@ var RELATIONSHIP_MAP = {
         "unproven": true,
         "blocker": {
           "kind": "blind-reference",
-          "message": "vendor 500: the productID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-          "remedy": "provision the referenced record in the Autotask UI first (the productID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-          "referenceField": "productID"
+          "message": "The productID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+          "referenceField": "productID",
+          "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
         },
         "vendorEvidence": [
           `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"inventory_products.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d27710fa-5cb6-455a-bc60-99c6efe2b810","message":"Field 'quantityMinimum': Missing `
@@ -12528,8 +12744,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"appointments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ae6ff4b1-553b-48e0-b4fe-00c72964b268","message":"Value does not exist for the required f'
@@ -12548,13 +12764,15 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
-        "remedy": "attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime and approvalResourceID are not).",
+        "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       },
       "vendorEvidence": [
         'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "describes a multi-level approval record for an Autotask time entry ... This option is only available through the REST API."',
         'Vendor help, BillingItemApprovalLevels entity page (fetched 2026-10-26): "When the BillingItemApprovalLevels entity is created, the TimeEntry.BillingApprovalLevelMostRecent field is updated, but approvalDateTime and approvalResourceID are not. Instead, the approvalDateTime and approvalResourceID fields are editable on the TimeEntry entity. Workaround: ... create the BillingItemApprovalLevel and then follow that call up with an update to the TimeEntry to set the BillingApprovalDateTime and BillingApprovalResourceID fields."',
-        "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path."
+        "api-docs.json: POST /V1.0/BillingItemApprovalLevels consumes definitions.BillingItemApprovalLevelModel and answers OperationResultModel \u2014 the entity defines no PUT, PATCH or DELETE path.",
+        "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/time-entry-approve) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the conditions (timeEntryID and approvalResourceID must reference existing objects) and the side effect (TimeEntry.BillingApprovalLevelMostRecent is updated; approvalDateTime / approvalResourceID are not), but the acceptance of the model body is unverified.",
+        "maintainer provenance (blocker.remedy): attempt one create against a time entry in a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       ],
       "deleteBoundary": {
         "available": false,
@@ -12570,8 +12788,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"change_request_links.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"2d747061-00ea-4b40-b3fc-740882492457","message":"Value does not exist for the re'
@@ -12593,8 +12811,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -12615,8 +12833,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -12639,9 +12857,9 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 companies); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"companies.delete","message":"invoke: unknown operation \\"companies.delete\\" \u2014 it is not in the capability reg'
@@ -12663,8 +12881,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "company_alerts.create".'
@@ -12683,8 +12901,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [],
       "deleteBoundary": {
@@ -12705,15 +12923,17 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": 'create succeeded live (DG-1 verification, 2026-10-11, ww29, parent company 29683380, record id 30230658, marker name "node-autotask DG-1 create probe") once the four vendor-required body fields were present \u2014 actionType, assignedResourceID, startDateTime, endDateTime \u2014 plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 SERVER_ERROR naming the field; it is a deterministic rejection, not a transient fault (the SDK now answers retryable: false \u2014 add the field, do not retry). The vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue; cleanup is UI-only.',
-        "remedy": "provision via the API as proven: send actionType (picklist, e.g. 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields. Clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "A create needs actionType, assignedResourceID, startDateTime and endDateTime in the body plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 naming the field; this is a deterministic rejection, not a transient fault (retryable: false).",
+        "remedy": "Send actionType (a picklist value, for example 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields."
       },
       "vendorEvidence": [
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'assignedResourceID': Value does not exist for the required field assignedResourceID. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'actionType': Missing Required Field: actionType. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'endDateTime': Missing Required Field: endDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
-        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'startDateTime': Missing Required Field: startDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`
+        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":false,"httpStatus":500,"operation":"company_notes.create","message":"Field 'startDateTime': Missing Required Field: startDateTime. ; on record number [1].","suggestedAction":"Deterministic field rejection \u2014 fix the value, do not retry. Consult operations.fieldCatalog for the field catalog (types, required, maxLength)."}`,
+        'maintainer provenance (blocker.message): create succeeded live (DG-1 verification, 2026-10-11, ww29, parent company 29683380, record id 30230658, marker name "node-autotask DG-1 create probe") once the four vendor-required body fields were present \u2014 actionType, assignedResourceID, startDateTime, endDateTime \u2014 plus the parent companyID in the path. The vendor reports a missing required field as HTTP 500 SERVER_ERROR naming the field; it is a deterministic rejection, not a transient fault (the SDK now answers retryable: false \u2014 add the field, do not retry). The vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue; cleanup is UI-only.',
+        "maintainer provenance (blocker.remedy): provision via the API as proven: send actionType (picklist, e.g. 3 = Note: General), assignedResourceID (a resource id), startDateTime and endDateTime (UTC ISO) in the body and the company id as the parent; name and note are optional content fields. Clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
       ],
       "deleteBoundary": {
         "available": false,
@@ -12735,8 +12955,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "company_webhooks.create".'
@@ -12758,9 +12978,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "vendor 500: the billingProductID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-        "remedy": "provision the referenced record in the Autotask UI first (the billingProductID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "billingProductID"
+        "message": "The billingProductID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "billingProductID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_billing_product_associations.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c2bf3080-c882-4ff2-b440-159686687978","message":"Refe'
@@ -12782,9 +13002,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Value does not reference an existing entity for displayColorRgb .",
-        "remedy": "provision the referenced record in the Autotask UI first (the displayColorRgb reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "displayColorRgb"
+        "message": "The displayColorRgb reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "displayColorRgb",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Value does not reference an existing entity for displayColorRgb .",
@@ -12806,8 +13026,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_category_udf_associations.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"89cf29e9-db4a-4834-b5fa-6344d2213569","message":"Field '`
@@ -12830,9 +13050,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Value does not reference an existing entity for noteType .",
-        "remedy": "provision the referenced record in the Autotask UI first (the noteType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "noteType"
+        "message": "The noteType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "noteType",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Value does not reference an existing entity for noteType .",
@@ -12842,7 +13062,12 @@ var CREATE_GUIDANCE = {
         "available": false,
         "note": "the vendor defines no DELETE for configuration_item_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "configurationItemID",
+        "resource": "configuration_items",
+        "field": "companyID"
+      }
     },
     {
       "resource": "configuration_item_related_items",
@@ -12855,9 +13080,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Reference value on field: configurationItemID of type: ConfigurationItem does not exist or is invalid.",
-        "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "configurationItemID"
+        "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "configurationItemID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Reference value on field: configurationItemID of type: ConfigurationItem does not exist or is invalid.",
@@ -12867,7 +13092,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "configurationItemID",
+        "resource": "configuration_items",
+        "field": "companyID"
+      }
     },
     {
       "resource": "configuration_item_types",
@@ -12879,8 +13109,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "configuration_item_types.create".'
@@ -12903,8 +13133,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_item_webhooks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f348c45e-80e0-4632-9dc9-d04796ea03ab","message":"A ConfigurationItemWebho'
@@ -12927,8 +13157,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"configuration_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9b17f254-654d-4bdc-94bd-d7fc0ff8f4ff","message":"Value does not exist for the req'
@@ -12947,8 +13177,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"NOT_FOUND","category":"not_found","retryable":false,"httpStatus":404,"operation":"contact_group_contacts.create","suggestedAction":"Verify the id, or resolve the record by name first.","correlationId":"f84411bb-c115-41af-8690-74a6283b9768","message":"Resource not found: <!DOCTY'
@@ -12969,8 +13199,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -12995,8 +13225,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "contact_webhooks.create".'
@@ -13020,8 +13250,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -13048,17 +13278,24 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: 'productID [1] is invalid. Products with a BillingType of 'Standard'[1] cannot be associated to ContractBillingRules.' \u2014 a product with an ELIGIBLE (non-Standard) BillingType is required; the products table is blind for this API user \u2014 UNSATISFIABLE for this user. (10-04 ladder had stopped at isDailyProrationEnabled + 'productID [1] is invalid. Products with a'.)",
-        "remedy": "a product with a non-Standard BillingType is required (products table blind for this user) \u2014 provision/read an eligible product in the Autotask UI or use a user where the products table is visible"
+        "message": "productID must reference a product whose BillingType is not 'Standard' (Standard products cannot be associated to ContractBillingRules); the products table is blind for this API user, so no eligible product can be read back.",
+        "referenceField": "productID",
+        "remedy": "Provision or select a product with a non-Standard BillingType in the Autotask UI, or use a user who can read the products table."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_billing_rules.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ba9fcf-91ae-42a3-bc50-9911442eb738","message":"Reference value on field: con'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_billing_rules.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ba9fcf-91ae-42a3-bc50-9911442eb738","message":"Reference value on field: con',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: 'productID [1] is invalid. Products with a BillingType of 'Standard'[1] cannot be associated to ContractBillingRules.' \u2014 a product with an ELIGIBLE (non-Standard) BillingType is required; the products table is blind for this API user \u2014 UNSATISFIABLE for this user. (10-04 ladder had stopped at isDailyProrationEnabled + 'productID [1] is invalid. Products with a'.)"
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_block_hour_factors",
@@ -13070,17 +13307,23 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): write path proven via the vendor's unique-key wall \u2014 'A ContractBlockHourFactor for this roleID and contractID combination already exists' (pair (30131842, 29685291) pre-existing from the rates attach). Fields roleID (+ the unique key).",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The vendor enforces a unique (roleID, contractID) pair: a second create for the same pair is refused as already existing.",
+        "remedy": "None: create with the live-proven field set (roleID and contractID identify the record)."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_block_hour_factors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8095334f-1e14-4185-b5dc-99e5526e526d","message":"Value does not exist for'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_block_hour_factors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8095334f-1e14-4185-b5dc-99e5526e526d","message":"Value does not exist for',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): write path proven via the vendor's unique-key wall \u2014 'A ContractBlockHourFactor for this roleID and contractID combination already exists' (pair (30131842, 29685291) pre-existing from the rates attach). Fields roleID (+ the unique key)."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_block_hour_factors (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_blocks",
@@ -13097,17 +13340,23 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114389. TYPE GATE: parent MUST be type 4 (Block hours) \u2014 'This ContractBlock must reference a Contract of type 4 (Block hours) with contractID'. Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The parent contract must be type 4 (Block hours).",
+        "remedy": "Create with the live-proven field set under a type 4 (Block hours) contract."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_blocks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ea12c341-d1d3-4622-b73c-45e871ed1f91","message":"Reference value on field: contractID'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_blocks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ea12c341-d1d3-4622-b73c-45e871ed1f91","message":"Reference value on field: contractID',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114389. TYPE GATE: parent MUST be type 4 (Block hours) \u2014 'This ContractBlock must reference a Contract of type 4 (Block hours) with contractID'. Residue."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_blocks (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_charges",
@@ -13121,17 +13370,23 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the contracts table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the contracts table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ed78a2ec-b5e2-4e5f-989b-4c39bee66567","message":"Reference value on field: contractI'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"ed78a2ec-b5e2-4e5f-989b-4c39bee66567","message":"Reference value on field: contractI',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the contracts table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_exclusion_billing_codes",
@@ -13141,17 +13396,24 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field billingCodeID.' \u2014 the billing-allocation table is blind for this API user (no resolvable allocation code for this user's contracts) \u2014 UNSATISFIABLE for this user.",
-        "remedy": "an allocation code (billingCodeID) readable by this user is required (table blind) \u2014 provision in the Autotask UI or use a user where allocation codes are visible"
+        "message": "billingCodeID must reference an allocation code readable by the user; the billing-allocation table is blind for this API user, so no resolvable code exists for its contracts.",
+        "referenceField": "billingCodeID",
+        "remedy": "Provision the allocation code in the Autotask UI, or use a user who can read allocation codes."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_billing_codes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8ef9f8ea-5846-4128-bbcc-b523061c585f","message":"Reference value on '
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_billing_codes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8ef9f8ea-5846-4128-bbcc-b523061c585f","message":"Reference value on ',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field billingCodeID.' \u2014 the billing-allocation table is blind for this API user (no resolvable allocation code for this user's contracts) \u2014 UNSATISFIABLE for this user."
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_exclusion_roles",
@@ -13163,11 +13425,12 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 187; field roleID. Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The vendor accepted a create with the live-proven field set (roleID).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_roles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"76f0c480-232b-4bfd-aa1e-c9cd3858d717","message":"Value does not exist for th'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_roles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"76f0c480-232b-4bfd-aa1e-c9cd3858d717","message":"Value does not exist for th',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 187; field roleID. Residue."
       ],
       "deleteBoundary": {
         "available": true,
@@ -13185,11 +13448,12 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified \u2014 batch1-final recovery, id 3; the surviving per-resource receipts predate the recovery)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
-        'csxroles: {"id": 3, "final": "RECOVERED"} (batch1-final.json) \u2014 verify-gone=True (batch1-final.log)'
+        'csxroles: {"id": 3, "final": "RECOVERED"} (batch1-final.json) \u2014 verify-gone=True (batch1-final.log)',
+        "maintainer provenance (blocker.message): create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified \u2014 batch1-final recovery, id 3; the surviving per-resource receipts predate the recovery)"
       ],
       "deleteBoundary": {
         "available": true,
@@ -13207,9 +13471,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "vendor 500: the excludedWorkTypeID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-        "remedy": "provision the referenced record in the Autotask UI first (the excludedWorkTypeID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "excludedWorkTypeID"
+        "message": "The excludedWorkTypeID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "excludedWorkTypeID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_exclusion_set_excluded_work_types.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b900823d-cf16-4eea-a26b-ea1df9b13d70","message":"Reference'
@@ -13230,8 +13494,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -13256,17 +13520,23 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 1338. TYPE GATE (vendor): the parent contract MUST be type 3 (Fixed Price) \u2014 'ContractMilestones may only have a contractID linking to Contracts of type 3 (Fixed Price)'. Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The parent contract must be type 3 (Fixed Price): the vendor only allows ContractMilestones under Contracts of that type.",
+        "remedy": "Create with the live-proven field set under a type 3 (Fixed Price) contract."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_milestones.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"cfa41884-3855-4729-983f-733f52ef7320","message":"Reference value on field: contra'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_milestones.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"cfa41884-3855-4729-983f-733f52ef7320","message":"Reference value on field: contra',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 1338. TYPE GATE (vendor): the parent contract MUST be type 3 (Fixed Price) \u2014 'ContractMilestones may only have a contractID linking to Contracts of type 3 (Fixed Price)'. Residue."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_milestones (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_notes",
@@ -13279,17 +13549,23 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 35573321 under contract 30131842; fields title + description. Residue (no vendor DELETE).",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The vendor accepted a create with title and description under a contract.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"bc5bfb0b-79c1-4bde-882b-7cd16c77f6cd","message":"Reference value on field: contractID '
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"bc5bfb0b-79c1-4bde-882b-7cd16c77f6cd","message":"Reference value on field: contractID ',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 35573321 under contract 30131842; fields title + description. Residue (no vendor DELETE)."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_rates",
@@ -13302,17 +13578,23 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30083427; fields contractHourlyRate + roleID (an owned/visible role). Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The vendor accepted a create with contractHourlyRate and roleID (an owned, visible role).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_rates.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a829126b-68db-4fac-89ba-56c6ad725eef","message":"Value does not exist for the required'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_rates.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a829126b-68db-4fac-89ba-56c6ad725eef","message":"Value does not exist for the required',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30083427; fields contractHourlyRate + roleID (an owned/visible role). Residue."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_rates (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_retainers",
@@ -13329,11 +13611,12 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114390. TYPE GATE: parent MUST be type 6 (Retainer). Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The parent contract must be type 6 (Retainer).",
+        "remedy": "Create with the live-proven field set under a type 6 (Retainer) contract."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_retainers.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d4fb4798-c02b-4c19-b3fa-b1629ae9113a","message":"Reference value on field: contrac'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_retainers.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d4fb4798-c02b-4c19-b3fa-b1629ae9113a","message":"Reference value on field: contrac',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114390. TYPE GATE: parent MUST be type 6 (Retainer). Residue."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13351,11 +13634,13 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "resource-role-pair",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'The specified resourceID and roleID combination is not currently defined.' \u2014 a currently-DEFINED (resource, role) assignment is required; the resource_roles table is blind for this user (0 rows) \u2014 same pair-validation family as W-A3; UNSATISFIABLE for this user.",
-        "remedy": "a currently-DEFINED (resource, role) assignment is required (resource_roles blind for this user) \u2014 same family as W-A3; use a user with readable assignments or manage role costs in the Autotask UI"
+        "message": "The create is refused unless the (resourceID, roleID) pair is currently defined ('The specified resourceID and roleID combination is not currently defined.'); the resource_roles table is blind for this API user, so no defined pair can be read back.",
+        "remedy": "Use a currently defined (resource, role) assignment from a user who can read resource_roles, or manage role costs in the Autotask UI."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_role_costs.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c64d8ace-bdf3-46e9-ba24-1e8989aa73ef","message":"Value does not exist for the req'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_role_costs.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c64d8ace-bdf3-46e9-ba24-1e8989aa73ef","message":"Value does not exist for the req',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'The specified resourceID and roleID combination is not currently defined.' \u2014 a currently-DEFINED (resource, role) assignment is required; the resource_roles table is blind for this user (0 rows) \u2014 same pair-validation family as W-A3; UNSATISFIABLE for this user.",
+        "maintainer provenance (blocker.remedy): a currently-DEFINED (resource, role) assignment is required (resource_roles blind for this user) \u2014 same family as W-A3; use a user with readable assignments or manage role costs in the Autotask UI"
       ],
       "deleteBoundary": {
         "available": false,
@@ -13373,17 +13658,24 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: the parent contract must be type 7 (Recurring Services) or 'umbrella' ('Unable to create a ContractServiceAdjustment with a contractID that is not of type recurring Service or umbrella'); under a type-7 parent the vendor then requires an ACTIVE serviceID \u2014 'Unable to create a ContractServiceAdjustment with a serviceID of 1 because that Service is not active'. The services table is blind for this API user (no readable active service id) \u2014 UNSATISFIABLE for this user.",
-        "remedy": "an ACTIVE serviceID visible to this API user is required (services table blind for this user) \u2014 provision the active service in the Autotask UI or use a user where services are readable; parent must be type 7 (Recurring) or 'umbrella'"
+        "message": "The parent contract must be type 7 (Recurring Services) or an umbrella contract, and serviceID must reference an ACTIVE service; the services table is blind for this API user, so no active service id can be read back.",
+        "referenceField": "serviceID",
+        "remedy": "Provision the active service in the Autotask UI, or use a user who can read services; the parent must be a type 7 (Recurring Services) or umbrella contract."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"fc363aaa-2d29-4f86-8e8f-2871c6b09401","message":"Reference value on fiel'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"fc363aaa-2d29-4f86-8e8f-2871c6b09401","message":"Reference value on fiel',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382), current full text: the parent contract must be type 7 (Recurring Services) or 'umbrella' ('Unable to create a ContractServiceAdjustment with a contractID that is not of type recurring Service or umbrella'); under a type-7 parent the vendor then requires an ACTIVE serviceID \u2014 'Unable to create a ContractServiceAdjustment with a serviceID of 1 because that Service is not active'. The services table is blind for this API user (no readable active service id) \u2014 UNSATISFIABLE for this user."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_service_adjustments (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_service_bundle_adjustments",
@@ -13395,18 +13687,25 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "W-A7-class drift, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor answers HTTP 200 with a body that is NOT OperationResultModel \u2014 the node (spec-conformant) types INVALID_RESPONSE; the record may be created with an unparseable id (blind table). TYPE GATE: the parent contract must be type 7 (Recurring Services) \u2014 '\u2026with a contractID that is not of type recurring Service'. VENDOR-FIX (response shape) required.",
-        "remedy": "vendor response-shape fix required (W-A7-class 200 drift) \u2014 treat the INVALID_RESPONSE as the typed wall; parent must be type 7 (Recurring Services); manage the adjustment in the Autotask UI meanwhile"
+        "message": "The vendor answers HTTP 200 with a body that is not an OperationResultModel (response-shape drift), typed INVALID_RESPONSE; the record may be created with an unparseable id. The parent contract must be type 7 (Recurring Services).",
+        "remedy": "Treat INVALID_RESPONSE as the typed outcome; the parent must be a type 7 (Recurring Services) contract. Manage the adjustment in the Autotask UI until the vendor fixes the response shape."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundle_adjustments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"a1899b6f-015a-4c32-aaa8-eabeabb30165","message":"Reference value ',
-        '{"live": "2026-10-06 confirm-100", "message": "Expected OperationResultModel { itemId } (or { id }); got a different shape"}'
+        '{"live": "2026-10-06 confirm-100", "message": "Expected OperationResultModel { itemId } (or { id }); got a different shape"}',
+        "maintainer provenance (blocker.message): W-A7-class drift, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor answers HTTP 200 with a body that is NOT OperationResultModel \u2014 the node (spec-conformant) types INVALID_RESPONSE; the record may be created with an unparseable id (blind table). TYPE GATE: the parent contract must be type 7 (Recurring Services) \u2014 '\u2026with a contractID that is not of type recurring Service'. VENDOR-FIX (response shape) required.",
+        "maintainer provenance (blocker.remedy): vendor response-shape fix required (W-A7-class 200 drift) \u2014 treat the INVALID_RESPONSE as the typed wall; parent must be type 7 (Recurring Services); manage the adjustment in the Autotask UI meanwhile"
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_service_bundle_adjustments (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_service_bundles",
@@ -13416,17 +13715,24 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceBundleID.' \u2014 the service-bundles table is blind for this API user \u2014 UNSATISFIABLE for this user.",
-        "remedy": "a service-bundles-table record visible to this user is required (table blind, 0 rows) \u2014 provision in the Autotask UI or use a user where the table is visible"
+        "message": "serviceBundleID must reference a service bundle; the service-bundles table is blind for this API user, so no id can be read back.",
+        "referenceField": "serviceBundleID",
+        "remedy": "Provision the service bundle in the Autotask UI, or use a user who can read the table."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"032e3caa-4527-467f-b459-0cb80cfd1ad2","message":"Value does not exist for th'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_service_bundles.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"032e3caa-4527-467f-b459-0cb80cfd1ad2","message":"Value does not exist for th',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceBundleID.' \u2014 the service-bundles table is blind for this API user \u2014 UNSATISFIABLE for this user."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_service_bundles (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_services",
@@ -13436,17 +13742,24 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceID.' \u2014 the services table is blind for this API user (0 rows; no readable service id) \u2014 UNSATISFIABLE for this user.",
-        "remedy": "a services-table record visible to this user is required (table blind, 0 rows) \u2014 provision in the Autotask UI or use a user where the table is visible"
+        "message": "serviceID must reference a service; the services table is blind for this API user, so no readable service id exists.",
+        "referenceField": "serviceID",
+        "remedy": "Provision the service in the Autotask UI, or use a user who can read the services table."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5003db3-bd6a-4970-aeb7-c13b32849acd","message":"Value does not exist for the requi'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5003db3-bd6a-4970-aeb7-c13b32849acd","message":"Value does not exist for the requi',
+        "maintainer provenance (blocker.message): re-walled 2026-10-06 (confirm-100 CONF100-1791187382): 'Value does not exist for the required field serviceID.' \u2014 the services table is blind for this API user (0 rows; no readable service id) \u2014 UNSATISFIABLE for this user."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for contract_services (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "contractID",
+        "resource": "contracts",
+        "field": "companyID"
+      }
     },
     {
       "resource": "contract_ticket_purchases",
@@ -13462,11 +13775,12 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114391. TYPE GATE: parent MUST be type 8 (PerTicket incident) \u2014 'The Contract associated by contractID must be of type PerTicket (incident)'. Residue.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The parent contract must be type 8 (PerTicket incident).",
+        "remedy": "Create with the live-proven field set under a type 8 (PerTicket incident) contract."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_ticket_purchases.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"268901a8-7fdd-4e9a-9731-92f840ac73bd","message":"Reference value on field: '
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contract_ticket_purchases.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"268901a8-7fdd-4e9a-9731-92f840ac73bd","message":"Reference value on field: ',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 30114391. TYPE GATE: parent MUST be type 8 (PerTicket incident) \u2014 'The Contract associated by contractID must be of type PerTicket (incident)'. Residue."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13493,12 +13807,14 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "The create is conditioned on contractType: types 1, 3, 4, 6, 7 and 8 are accepted and type 5 is rejected. The per-type field gates are declared in requiresByValue and rejectedValues. An owned company satisfies companyID.",
+        "remedy": "Send the body with the contractType you need and satisfy that value's requiresByValue entry (plus the contractPeriodType value it names)."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"contracts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"25d4a730-6d6c-49ff-a038-96d3fd09165d","message":"Value does not exist for the required fiel',
-        `{"live": "2026-10-06 confirm-100 (CONF100-1791187382)", "result": "OperationResultModel id=30131842 (type 1)", "ladder": "status -> endDate/timeReporting/contractType/contractName/startDate -> 'Contracts of type 1 require an estimatedRevenue' -> estimatedHours -> estimatedCost"}`
+        `{"live": "2026-10-06 confirm-100 (CONF100-1791187382)", "result": "OperationResultModel id=30131842 (type 1)", "ladder": "status -> endDate/timeReporting/contractType/contractName/startDate -> 'Contracts of type 1 require an estimatedRevenue' -> estimatedHours -> estimatedCost"}`,
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100, marker CONF100-1791187382): the W-A6 'blind parent' was companyID \u2014 an OWNED company satisfies it (seed 30132785). Proven contractType values: 1, 3 (Fixed Price), 4 (Block hours), 6 (Retainer), 7 (Recurring Services), 8 (PerTicket incident). The type-conditioned field gates are declared in requiresByValue / rejectedValues on this row (issue #219 N3) \u2014 they are no longer restated in prose here. Proven ids 30131842-30131847 (residue \u2014 no vendor DELETE for contracts).",
+        "maintainer provenance (blocker.remedy): live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 send the body with the contractType you need and satisfy that value's requiresByValue gate (plus the contractPeriodType value it names); residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
       ],
       "deleteBoundary": {
         "available": false,
@@ -13584,9 +13900,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Value does not reference an existing entity for primaryLocationID.",
-        "remedy": "provision the referenced record in the Autotask UI first (the primaryLocationID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "primaryLocationID"
+        "message": "The primaryLocationID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "primaryLocationID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Value does not reference an existing entity for primaryLocationID.",
@@ -13605,9 +13921,9 @@ var CREATE_GUIDANCE = {
       "liveProvenPrefix": [],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 domain_registrars); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"domain_registrars.delete","message":"invoke: unknown operation \\"domain_registrars.delete\\" \u2014 it is not in th'
@@ -13630,9 +13946,10 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "picklist-unexposed",
-        "message": "Field 'Type': Missing Required Field: Type.",
-        "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI.",
-        "referenceField": "Type"
+        "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+        "referenceField": "Type",
+        "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
         "Field 'Type': Missing Required Field: Type.",
@@ -13642,7 +13959,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "expenseItemID",
+        "resource": "expense_items",
+        "field": "companyID"
+      }
     },
     {
       "resource": "expense_items",
@@ -13654,11 +13976,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the expense_reports LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15; W-A6), so no parent id can be read back through the list surface (get-by-id is the authority); then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the expense_reports list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+        "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"178f9509-d97a-4e69-9e4b-f7af67d98e64","message":"Picklist value [1] does not exist for '
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"178f9509-d97a-4e69-9e4b-f7af67d98e64","message":"Picklist value [1] does not exist for ',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the expense_reports LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15; W-A6), so no parent id can be read back through the list surface (get-by-id is the authority); then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13676,8 +13999,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table's list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+        "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"expense_reports.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9363affe-7779-4bac-bd81-49423574fbc8","message":"Value does not exist for the require'
@@ -13698,8 +14021,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -13721,8 +14044,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -13746,9 +14069,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "vendor 500: the productID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-        "remedy": "provision the referenced record in the Autotask UI first (the productID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "productID"
+        "message": "The productID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "productID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"inventory_products.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d27710fa-5cb6-455a-bc60-99c6efe2b810","message":"Field 'quantityMinimum': Missing `
@@ -13780,12 +14103,14 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "undocumented-ladder",
-        "message": "Field 'useQuoteTotals': Missing Required Field: useQuoteTotals.  | Value does not exist for the required field  useQuoteTotals. ",
-        "remedy": "the vendor required-field ladder is undocumented and UNPROVEN (12 fields consumed before the campaign stopped \u2014 W-A5); no known field set makes this create succeed on ww29 \u2014 treat it as unavailable for this tenant and file the gap with the vendor."
+        "message": "The vendor's required-field ladder is undocumented and unproven: the create still fails after the proven fields (liveProvenPrefix), and no known field set makes it succeed.",
+        "remedy": "Treat the create as unavailable through the API for this tenant.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
         "Field 'useQuoteTotals': Missing Required Field: useQuoteTotals.  | Value does not exist for the required field  useQuoteTotals. ",
-        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunities.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b18b6fa2-5fba-4cbe-8657-b2805798c736","message":"Field 'startDate': Missing Required Fi`
+        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunities.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"b18b6fa2-5fba-4cbe-8657-b2805798c736","message":"Field 'startDate': Missing Required Fi`,
+        "maintainer provenance (blocker.remedy): the vendor required-field ladder is undocumented and UNPROVEN (12 fields consumed before the campaign stopped \u2014 W-A5); no known field set makes this create succeed on ww29 \u2014 treat it as unavailable for this tenant and file the gap with the vendor."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13805,18 +14130,25 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "picklist-unexposed",
-        "message": "vendor 500: the Type picklist values are not exposed to this API user (File/Document/Image/Other all rejected \u2014 W-A4)",
-        "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI.",
-        "referenceField": "Type"
+        "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+        "referenceField": "Type",
+        "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
-        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunity_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"83dcbf4f-7e56-4602-b52b-04db2f3455d2","message":"Field 'Type': Missing Requir`
+        `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"opportunity_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"83dcbf4f-7e56-4602-b52b-04db2f3455d2","message":"Field 'Type': Missing Requir`,
+        "maintainer provenance (blocker.message): vendor 500: the Type picklist values are not exposed to this API user (File/Document/Image/Other all rejected \u2014 W-A4)"
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "opportunityID",
+        "resource": "opportunities",
+        "field": "companyID"
+      }
     },
     {
       "resource": "organizational_level1s",
@@ -13826,11 +14158,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+        "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       },
       "vendorEvidence": [
-        "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        "api-docs.json: POST /V1.0/OrganizationalLevel1s consumes definitions.OrganizationalLevel1Model and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+        "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel1Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13846,11 +14179,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+        "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       },
       "vendorEvidence": [
-        "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        "api-docs.json: POST /V1.0/OrganizationalLevel2s consumes definitions.OrganizationalLevel2Model and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+        "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevel2Model) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13866,11 +14200,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+        "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       },
       "vendorEvidence": [
-        "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        "api-docs.json: POST /V1.0/OrganizationalLevelAssociations consumes definitions.OrganizationalLevelAssociationModel and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+        "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.OrganizationalLevelAssociationModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13887,18 +14222,24 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (known id 527128, marker name FULL100W-1791110339 phases); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
-        "residue.json: phases id 527128 (known id, undeletable by vendor wall W-A1; phases.get is scoped \u2014 the id is retained in the ledger)"
+        "residue.json: phases id 527128 (known id, undeletable by vendor wall W-A1; phases.get is scoped \u2014 the id is retained in the ledger)",
+        "maintainer provenance (blocker.message): create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (known id 527128, marker name FULL100W-1791110339 phases); cleanup is UI-only."
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for phases (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "projectID",
+        "resource": "projects",
+        "field": "companyID"
+      }
     },
     {
       "resource": "product_vendors",
@@ -13911,11 +14252,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the products table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the products table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"product_vendors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9aecd016-c8fa-4940-b54a-6e875d43aba7","message":"Value does not exist for the require'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"product_vendors.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9aecd016-c8fa-4940-b54a-6e875d43aba7","message":"Value does not exist for the require',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the products table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": false,
@@ -13934,8 +14276,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"products.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"3f1bd9a6-28bb-4fb4-b851-07b5f90a8a3d","message":"Value does not exist for the required field'
@@ -13958,8 +14300,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+        "message": "The create failed on the parent reference: the projects table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id.",
         "requires": {
           "anyOf": [
             "productID",
@@ -13968,13 +14310,19 @@ var CREATE_GUIDANCE = {
         }
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must '
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_charges.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"664ab2ea-408f-4834-a331-eb5dd55ac557","message":"A productID or a billingCodeID must ',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the projects table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "projectID",
+        "resource": "projects",
+        "field": "companyID"
+      }
     },
     {
       "resource": "project_notes",
@@ -13986,8 +14334,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"project_notes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d11a453b-729e-4908-8c6d-8549b72e8d0c","message":"Picklist value [1] does not exist for '
@@ -13996,7 +14344,12 @@ var CREATE_GUIDANCE = {
         "available": false,
         "note": "the vendor defines no DELETE for project_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "projectID",
+        "resource": "projects",
+        "field": "companyID"
+      }
     },
     {
       "resource": "projects",
@@ -14010,9 +14363,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Value does not reference an existing entity for projectType .",
-        "remedy": "provision the referenced record in the Autotask UI first (the projectType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "projectType"
+        "message": "The projectType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "projectType",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Value does not reference an existing entity for projectType .",
@@ -14033,9 +14386,9 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 purchase_order_item_receiving); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "not found on a visible surface (record may predate the marker value or was created with a different value)"
@@ -14057,11 +14410,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "vendor 500: reference rejection on order (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The vendor rejected a reference field on the create (HTTP 500); the cause is not classified.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_order_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"1a4f90a8-2add-47f3-bc93-74e972f7fb5e","message":"Reference value on field: order'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_order_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"1a4f90a8-2add-47f3-bc93-74e972f7fb5e","message":"Reference value on field: order',
+        "maintainer provenance (blocker.message): vendor 500: reference rejection on order (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)"
       ],
       "deleteBoundary": {
         "available": false,
@@ -14081,8 +14435,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"purchase_orders.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"8cefa9ef-8cfd-46b3-baef-fe64b3d2b999","message":"Value does not exist for the require'
@@ -14108,17 +14462,23 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the quotes table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the quotes table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quote_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0645cad1-5749-42f1-9666-eeffac24118b","message":"Reference value on field: quoteID of quo'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quote_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0645cad1-5749-42f1-9666-eeffac24118b","message":"Reference value on field: quoteID of quo',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the quotes table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "quoteID",
+        "resource": "quotes",
+        "field": "companyID"
+      }
     },
     {
       "resource": "quote_locations",
@@ -14128,8 +14488,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "quote_locations.create".'
@@ -14151,8 +14511,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"quotes.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"7db33388-b040-4940-9def-9f4a4b46acb8","message":"Value does not exist for the required field b'
@@ -14172,9 +14532,9 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 resource_role_queues); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "BLIND SURFACE \u2014 own created records invisible to query (node sentinel, ww29-verified)"
@@ -14196,9 +14556,9 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 roles); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"roles.delete","message":"invoke: unknown operation \\"roles.delete\\" \u2014 it is not in the capability registry (l'
@@ -14217,11 +14577,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the service_call_tasks table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the service_call_tasks table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_task_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"33baa2f9-f98c-49cd-ac9e-ef1ac532e277","message":"Value does not exist for'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_task_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"33baa2f9-f98c-49cd-ac9e-ef1ac532e277","message":"Value does not exist for',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the service_call_tasks table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": true,
@@ -14237,8 +14598,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the service_calls table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the service_calls table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_tasks.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"49bf54fb-1e7f-40a9-82e0-25c58a4a67fd","message":"Value does not exist for the requ'
@@ -14247,7 +14608,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "serviceCallID",
+        "resource": "service_calls",
+        "field": "companyID"
+      }
     },
     {
       "resource": "service_call_ticket_resources",
@@ -14257,11 +14623,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the service_call_tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the service_call_tickets table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_ticket_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9e96c2d1-9fcb-4d73-95dd-f88c1ce7de6c","message":"Value does not exist f'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_ticket_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"9e96c2d1-9fcb-4d73-95dd-f88c1ce7de6c","message":"Value does not exist f',
+        "maintainer provenance (blocker.remedy): provision a parent record in the Autotask UI first \u2014 the service_call_tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
       ],
       "deleteBoundary": {
         "available": true,
@@ -14277,8 +14644,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the service_calls table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the service_calls table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_call_tickets.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"62ab38e3-b14b-4462-829a-9abc91ce3eb3","message":"Value does not exist for the re'
@@ -14287,7 +14654,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "serviceCallID",
+        "resource": "service_calls",
+        "field": "companyID"
+      }
     },
     {
       "resource": "service_calls",
@@ -14300,8 +14672,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"service_calls.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"27ef068e-2ff8-4bf9-9043-a17008996639","message":"Value does not exist for the required '
@@ -14322,8 +14694,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table's LIST surface is visibility-scoped for this API user (0 rows; re-probed 2026-10-15), so no parent id can be enumerated through the API list surface; get-by-id is the authority (it sees through the blind list \u2014 PROVEN 2026-10-15 on resources) (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the parent table's list surface is visibility-scoped for this API user (empty), so no parent id can be enumerated; get-by-id is the authority and resolves records the list does not show.",
+        "remedy": "Provision a parent record in the Autotask UI first (or use a known parent id; get-by-id still resolves it), then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"services.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"eb4c0dfd-6d14-4af2-8770-7bd7fc06d0eb","message":"Picklist value [1] does not exist for perio'
@@ -14347,9 +14719,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "vendor 500: the configurationItemID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-        "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "configurationItemID"
+        "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "configurationItemID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"subscriptions.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"36080c8a-2fd5-4fc3-9c0f-a53d95fa97b2","message":"Value does not reference an existing e'
@@ -14368,8 +14740,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [],
       "deleteBoundary": {
@@ -14388,8 +14760,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -14410,8 +14782,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -14430,11 +14802,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The vendor rejected a reference field on the create (HTTP 500); the cause is not classified.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"task_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"d2783d1d-b23a-4c7d-9459-0089be7f9b0b","message":"Reference value on field: r',
+        "maintainer provenance (blocker.message): vendor 500: reference rejection on r (exact vendor text preserved verbatim in vendorEvidence \u2014 campaign receipt artifact, as recorded on disk)"
       ],
       "deleteBoundary": {
         "available": true,
@@ -14455,9 +14828,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "Value does not reference an existing entity for taskType .",
-        "remedy": "provision the referenced record in the Autotask UI first (the taskType reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "taskType"
+        "message": "The taskType reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "taskType",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         "Value does not reference an existing entity for taskType .",
@@ -14467,7 +14840,12 @@ var CREATE_GUIDANCE = {
         "available": false,
         "note": "the vendor defines no DELETE for tasks (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "projectID",
+        "resource": "projects",
+        "field": "companyID"
+      }
     },
     {
       "resource": "tax_regions",
@@ -14477,11 +14855,12 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths.",
-        "remedy": "attempt one create against a non-production tenant (dry-run first), then promote createGuidance to kind ok with its liveProvenPrefix; a refusal arrives as a vendor 500 whose errors[] text names the failing field."
+        "message": "No create has been attempted against a tenant, so acceptance of the model body is unverified. The vendor documents the model body and answers OperationResultModel.",
+        "remedy": "Attempt one create in a non-production tenant (dry run first); a refusal arrives as a vendor 500 whose errors[] text names the failing field."
       },
       "vendorEvidence": [
-        "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path."
+        "api-docs.json: POST /V1.0/TaxRegions consumes definitions.TaxRegionModel and answers OperationResultModel \u2014 the entity defines no DELETE path.",
+        "maintainer provenance (blocker.message): never live-probed: this entity reached the plan on 2026-10-26 (feat/guidance-contract-027) after the stage-11 apply matrix closed, so no create has been attempted against a tenant. The vendor documents the model body (definitions.TaxRegionModel) and answers OperationResultModel, but acceptance of the body is unverified; the spec defines no DELETE on the entity's paths."
       ],
       "deleteBoundary": {
         "available": false,
@@ -14499,9 +14878,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-reference",
-        "message": "vendor 500: the configurationItemID reference is unsatisfiable for this API user (the referenced table is blind/empty)",
-        "remedy": "provision the referenced record in the Autotask UI first (the configurationItemID reference table is blind for this API user \u2014 no valid id can be read back), then retry with the real id.",
-        "referenceField": "configurationItemID"
+        "message": "The configurationItemID reference cannot be satisfied: the referenced table is blind for this API user, so no valid id can be read back.",
+        "referenceField": "configurationItemID",
+        "remedy": "Provision the referenced record in the Autotask UI first, then retry with its real id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_configuration_items.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"20c78cfe-eb8c-437b-9f41-8a3cd852b05b","message":"Reference valu'
@@ -14510,7 +14889,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_additional_contacts",
@@ -14522,18 +14906,24 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 4001 (deleted post-proof \u2014 zero residue). The 10-04 W-A2 'blind reference' was a company-scoping issue, NOT a blind table: 'The contactID is invalid. The contactID must be associated with either the Ticket's Company or its Parent Company.' A contact created under the ticket's own company (30132787 for ticket 527119) passes.",
-        "remedy": "live-proven on ww29 2026-10-06 (confirm-100, marker CONF100-1791187382) \u2014 use the proven body / type gates from the message; residue records are ledgered (.run/confirm-100-20261006/CONFIRMATION-LEDGER.md section E; UI cleanup)"
+        "message": "contactID must be associated with the ticket's company or its parent company; a contact created under the ticket's own company is accepted.",
+        "remedy": "Create the contact under the ticket's own company first, then add it to the ticket."
       },
       "vendorEvidence": [
         "Reference value on field: contactID of type: Contact does not exist or is invalid.",
-        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_contacts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f507450d-002a-4f1a-afc8-d0168a45f93d","message":"Reference value on field:'
+        '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_additional_contacts.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"f507450d-002a-4f1a-afc8-d0168a45f93d","message":"Reference value on field:',
+        "maintainer provenance (blocker.message): live-PROVEN 2026-10-06 (confirm-100 CONF100-1791187382): id 4001 (deleted post-proof \u2014 zero residue). The 10-04 W-A2 'blind reference' was a company-scoping issue, NOT a blind table: 'The contactID is invalid. The contactID must be associated with either the Ticket's Company or its Parent Company.' A contact created under the ticket's own company (30132787 for ticket 527119) passes."
       ],
       "deleteBoundary": {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_attachments",
@@ -14547,8 +14937,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "picklist-unexposed",
-        "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-        "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+        "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+        "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
         "Picklist value [File] does not exist for Type.",
@@ -14559,7 +14950,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_change_request_approvals",
@@ -14569,8 +14965,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id."
+        "message": "The create failed on the parent reference: the tickets table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_change_request_approvals.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"dcc063e9-eaf1-4e66-9bc9-cb5c4a4f3f71","message":"The Ticket id you ha'
@@ -14579,7 +14975,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_charges",
@@ -14593,8 +14994,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "blind-parent",
-        "message": "vendor 500 (stage-11 apply-matrix, marker FULL100W-1791110339): the create consumed the vendor field ladder and then failed on the parent reference \u2014 the parent table is blind (0 rows) for this API user, so no valid parent id exists to satisfy it (W-A6). The exact final vendor response is preserved verbatim in vendorEvidence (campaign receipt artifact, as recorded on disk).",
-        "remedy": "provision a parent record in the Autotask UI first \u2014 the tickets table is blind (0 rows) for this API user (W-A6), so no valid parent id can be read back; then retry the create with the real parent id.",
+        "message": "The create failed on the parent reference: the tickets table is blind for this API user, so no valid parent id can be read back.",
+        "remedy": "Provision a parent record in the Autotask UI first, then retry the create with the real parent id.",
         "requires": {
           "anyOf": [
             "productID",
@@ -14609,7 +15010,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_checklist_items",
@@ -14621,8 +15027,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the record was cleaned (NOT_FOUND-verified)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         "verified-gone=True"
@@ -14631,7 +15037,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_checklist_libraries",
@@ -14643,19 +15054,26 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "W-A7 drift + parent wall, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor now answers HTML 404 ('Resource not found' \u2014 typed NOT_FOUND by the node) for checklistLibraryID=1: the checklist-library PARENT is blind/absent for this API user before the 10-04 200-shape drift can surface. The responseDrift pin remains for the post-parent shape.",
-        "remedy": "the checklist-library PARENT is blind for this user (HTML 404 before the 200 drift) \u2014 provision the library in the Autotask UI or use a user where the table is visible; the post-parent 200-shape drift (W-A7) still needs the vendor-side fix"
+        "message": "The checklist-library parent is blind or absent for this API user: the vendor answers HTML 404 (typed NOT_FOUND) before a 200 response-shape drift can surface.",
+        "remedy": "Provision the library in the Autotask UI or use a user who can read the table; the post-parent response-shape drift still needs a vendor-side fix."
       },
       "vendorEvidence": [
         "Expected OperationResultModel { itemId } (or { id }); got a different shape (ladder_decode.log, INVALID_RESPONSE)",
         "api-docs.json declares OperationResultModel for POST /V1.0/Tickets/{id}/TicketChecklistLibraries \u2014 the vendor deviates (W-A7 adjudication: vendor spec drift, not a node defect)",
-        '{"live": "2026-10-06 confirm-100", "message": "Resource not found: <!DOCTYPE html PUBLIC .../xhtml/1.0/Strict ...>"}'
+        '{"live": "2026-10-06 confirm-100", "message": "Resource not found: <!DOCTYPE html PUBLIC .../xhtml/1.0/Strict ...>"}',
+        "maintainer provenance (blocker.message): W-A7 drift + parent wall, re-verified 2026-10-06 (confirm-100 CONF100-1791187382): the vendor now answers HTML 404 ('Resource not found' \u2014 typed NOT_FOUND by the node) for checklistLibraryID=1: the checklist-library PARENT is blind/absent for this API user before the 10-04 200-shape drift can surface. The responseDrift pin remains for the post-parent shape.",
+        "maintainer provenance (blocker.remedy): the checklist-library PARENT is blind for this user (HTML 404 before the 200 drift) \u2014 provision the library in the Autotask UI or use a user where the table is visible; the post-parent 200-shape drift (W-A7) still needs the vendor-side fix"
       ],
       "deleteBoundary": {
         "available": false,
         "note": "the vendor defines no DELETE for ticket_checklist_libraries (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_note_attachments",
@@ -14669,8 +15087,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "picklist-unexposed",
-        "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-        "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+        "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+        "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_note_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"52976761-8459-49af-8509-49e562e59dbb","message":"Field 'Type': Missing Requir`
@@ -14695,8 +15114,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "ticket_note_webhooks.create".'
@@ -14719,8 +15138,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "ticket_notes.create".'
@@ -14729,7 +15148,12 @@ var CREATE_GUIDANCE = {
         "available": false,
         "note": "the vendor defines no DELETE for ticket_notes (spec-derived: the vendored api-docs.json defines no DELETE on the entity's paths) \u2014 a create cannot be undone through the API; cleanup is UI-only."
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_secondary_resources",
@@ -14739,8 +15163,8 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "unknown",
-        "message": "create refused (stage-11 apply-matrix, marker FULL100W-1791110339): the final vendor response is preserved verbatim in vendorEvidence (the campaign artifact; its 300-char detail truncation is as recorded on disk)",
-        "remedy": "the wall is opaque in the campaign record \u2014 inspect vendorEvidence for the exact vendor text, re-run the create with a live probe (dry-run first), and adjudicate against the vendored spec before retrying."
+        "message": "The create was refused and the cause is not classified; the exact vendor text is preserved as evidence.",
+        "remedy": "Dry-run the create first and check the field set against the vendored spec before retrying."
       },
       "vendorEvidence": [
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"ticket_secondary_resources.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"0965b007-8bd2-4d51-9967-257ab506a87a","message":"Value does not exist for '
@@ -14749,7 +15173,12 @@ var CREATE_GUIDANCE = {
         "available": true,
         "note": null
       },
-      "zone": "ww29"
+      "zone": "ww29",
+      "parentCompany": {
+        "via": "ticketID",
+        "resource": "tickets",
+        "field": "companyID"
+      }
     },
     {
       "resource": "ticket_webhooks",
@@ -14765,8 +15194,8 @@ var CREATE_GUIDANCE = {
       "unproven": false,
       "blocker": {
         "kind": "ok",
-        "message": "create succeeded live in the stage-11 apply-matrix (marker FULL100W-1791110339, ww29): the vendor accepted the create with the proven field set below; the create response exposed no id (blind surface \u2014 the record is marker-tagged residue, unknown id)",
-        "remedy": "none \u2014 create with the proven field set below; it is the live-verified contract for this tenant."
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix). The create response exposes no record id, so the new record cannot be read back by id.",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         'Executed "ticket_webhooks.create".'
@@ -14790,9 +15219,9 @@ var CREATE_GUIDANCE = {
       ],
       "unproven": false,
       "blocker": {
-        "kind": "delete-absent",
-        "message": "create succeeded live (stage-11 apply-matrix, marker FULL100W-1791110339, ww29) but the vendor defines no DELETE endpoint for this resource (W-A1) \u2014 the record is residue (marker name FULL100W-1791110339 tickets); cleanup is UI-only.",
-        "remedy": "provision via the API as proven; clean up the residue record in the Autotask UI (the marker name is the lookup handle) \u2014 there is no API delete path."
+        "kind": "ok",
+        "message": "The vendor accepted a create with the live-proven field set (liveProvenPrefix).",
+        "remedy": "None: create with the live-proven field set."
       },
       "vendorEvidence": [
         '{"error":true,"code":"CONFIG_ERROR","category":"validation","retryable":false,"operation":"tickets.delete","message":"invoke: unknown operation \\"tickets.delete\\" \u2014 it is not in the capability registr'
@@ -14811,13 +15240,15 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "resource-role-pair",
-        "message": "pair-scoped wall (confirm-100 CONF100-1791187382, 2026-10-06; scope re-stamped 2026-10-21): 3 live attempts with the API-only user's own resource 31131505 + roles 29685291/29682834/29683323 were refused with 'API-only user cannot be selected for this field' (10-04: 'The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This applies to creates selecting that resource+role pair; it is NOT a refusal of all time-entry writes \u2014 live creates succeeded on 2026-10-21 (pair not recorded). The authorised pair set has not been re-adjudicated by a live probe. createForResource (stage-11 proven, 10-04) was walled under the same pair on 10-06 and is unconfirmed for other pairs. Valid in-tenant pairs observed via postedWithin: (31131373, 29682834), (29869529, 29682834).",
-        "remedy": "vendor pair-eligibility, not missing tenant data: the API-only user's own resource is not selectable. Use a (resource, role) pair the tenant authorises for this user (creates succeeded 2026-10-21, pair not recorded), or record time in the Autotask UI; the working reads remain postedWithin / the window helpers (W-D3 pointer note)"
+        "message": "The create is refused when it selects the API-only user's own resource ('API-only user cannot be selected for this field') or a (resourceID, roleID) pair the tenant has not defined ('The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This is a pair-scoped refusal, not a refusal of all time-entry creates: creates with a defined pair succeed.",
+        "remedy": "Use a (resource, role) pair the tenant defines for the user, or record the time in the Autotask UI. Valid in-tenant pairs can be read through postedWithin."
       },
       "vendorEvidence": [
         "The specified AssignedResourceID and AssignedRoleID combination is not currently defined.",
         '{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"time_entries.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"c5ff4e59-bc8f-4f88-ad05-6445d8fddfa6","message":"API-only user cannot be selected for th',
-        '{"live": "2026-10-06 confirm-100", "message": "API-only user cannot be selected for this field."}'
+        '{"live": "2026-10-06 confirm-100", "message": "API-only user cannot be selected for this field."}',
+        "maintainer provenance (blocker.message): pair-scoped wall (confirm-100 CONF100-1791187382, 2026-10-06; scope re-stamped 2026-10-21): 3 live attempts with the API-only user's own resource 31131505 + roles 29685291/29682834/29683323 were refused with 'API-only user cannot be selected for this field' (10-04: 'The specified AssignedResourceID and AssignedRoleID combination is not currently defined'). This applies to creates selecting that resource+role pair; it is NOT a refusal of all time-entry writes \u2014 live creates succeeded on 2026-10-21 (pair not recorded). The authorised pair set has not been re-adjudicated by a live probe. createForResource (stage-11 proven, 10-04) was walled under the same pair on 10-06 and is unconfirmed for other pairs. Valid in-tenant pairs observed via postedWithin: (31131373, 29682834), (29869529, 29682834).",
+        "maintainer provenance (blocker.remedy): vendor pair-eligibility, not missing tenant data: the API-only user's own resource is not selectable. Use a (resource, role) pair the tenant authorises for this user (creates succeeded 2026-10-21, pair not recorded), or record time in the Autotask UI; the working reads remain postedWithin / the window helpers (W-D3 pointer note)"
       ],
       "deleteBoundary": {
         "available": true,
@@ -14860,8 +15291,9 @@ var CREATE_GUIDANCE = {
       "unproven": true,
       "blocker": {
         "kind": "picklist-unexposed",
-        "message": "re-verified 2026-10-06 (confirm-100 CONF100-1791187382; drift): the vendor validates Publish FIRST ('Picklist value [0] does not exist for Publish'); with a picklist-valid Publish the string Type values File/Document/Image/Other are SILENTLY rejected \u2014 'Field Type: Missing Required Field: Type' (10-04 text: 'Picklist value [File] does not exist for Type'). The Type picklist values remain unexposed to this API user (W-A4) \u2014 VENDOR-FIX required.",
-        "remedy": "no valid Type value is exposed to this API user (W-A4: File/Document/Image/Other all rejected) \u2014 the attachment create is unsatisfiable via the API; attach the file through the UI."
+        "message": "The Type picklist values are not exposed to this API user: File, Document, Image and Other are all rejected ('Missing Required Field: Type'), so no valid value can be supplied.",
+        "remedy": "Unsatisfiable through the API: attach the file in the Autotask UI.",
+        "unsatisfiableViaApi": true
       },
       "vendorEvidence": [
         `{"error":true,"code":"SERVER_ERROR","category":"server","retryable":true,"httpStatus":500,"operation":"time_entry_attachments.create","suggestedAction":"Retry with backoff; the server error is transient.","correlationId":"04f16a9b-daa6-4dc1-96a2-32508985ac71","message":"Field 'Type': Missing Require`,
@@ -14877,13 +15309,13 @@ var CREATE_GUIDANCE = {
   "counts": {
     "total": 97,
     "byKind": {
-      "ok": 31,
+      "ok": 39,
       "blind-reference": 16,
       "blind-parent": 17,
       "picklist-unexposed": 5,
       "undocumented-ladder": 1,
       "resource-role-pair": 2,
-      "delete-absent": 8,
+      "delete-absent": 0,
       "non-mutable": 0,
       "unknown": 17
     }
@@ -16791,6 +17223,28 @@ var HttpClient = class {
   }
 };
 
+// src/operations/requiredFields.ts
+function effectiveRequiredFields(record, zoneFacts) {
+  const guidance = zoneFacts?.createGuidance;
+  const prefix = guidance?.liveProvenPrefix;
+  if (Array.isArray(prefix) && prefix.length > 0) {
+    const gates = guidance?.requiresByValue;
+    const gated = new Set((gates ?? []).flatMap((g) => [...g.requires.allOf ?? [], ...g.requires.anyOf ?? []]));
+    return {
+      fields: prefix.filter((f) => !gated.has(f)),
+      from: "live-proven",
+      unproven: guidance?.unproven === true,
+      ...Array.isArray(gates) && gates.length > 0 ? { conditional: gates } : {}
+    };
+  }
+  const zoneSet = zoneFacts?.createRequiredSet;
+  if (Array.isArray(zoneSet) && zoneSet.length > 0) {
+    return { fields: [...zoneSet], from: "zone", unproven: guidance?.unproven === true };
+  }
+  const spec = record?.requiredFields;
+  return { fields: Array.isArray(spec) ? [...spec] : [], from: "spec", unproven: true };
+}
+
 // src/pagination.ts
 var MAX_PAGES = 1e3;
 function clampPageSize(pageSize) {
@@ -20005,6 +20459,16 @@ var MutationBase = class extends MetaBase {
         warnings.push(`parent ${parentId} not found; the vendor would reject the create`);
       }
     }
+    if (isRecord2(data)) {
+      const eff = effectiveRequiredFields(void 0, RELATIONSHIP_MAP[this.config.key]?.zoneFacts ?? null);
+      const missing = eff.fields.filter((f) => f !== this.config.parentField && data[f] === void 0);
+      if (missing.length > 0) {
+        warnings.push(`required field(s) not in the data: ${missing.join(", ")} (${eff.from}); the vendor would likely reject the create`);
+      }
+    }
+    if (this.config.key === "companies") {
+      warnings.push('the vendor auto-creates a "Primary Address" location for a new company (rename it with company_locations.update; it cannot be deleted via the API)');
+    }
     return buildDryRunResult({
       operation: `${this.config.key}.create`,
       method: "POST",
@@ -20400,6 +20864,7 @@ export {
   mergePartialBody,
   blindStampFor,
   decodeFileData,
+  effectiveRequiredFields,
   MAX_PAGES,
   clampPageSize,
   totalPagesFor,