onto-mcp 0.4.12 → 0.4.13

package/.onto/processes/reconstruct/obligation-coverage-recorded.yaml

@@ -0,0 +1,225 @@
+# Obligation-coverage RECORDED set (G(a) / INV-OBLIGATION-COVERAGE-1).
+# Generated; kept fresh by obligation-coverage-harvest.test.ts. Do NOT hand-edit.
+# Each pair is a (validator_id, obligation_id) dynamically proven WIRED (assertObligation
+# emits asserted_obligation_ids from real validator execution; the harvest test re-derives this).
+recorded:
+  - validator_id: actionability-matrix-validator
+    obligation_id: validate_matrix_row_ids_are_stable_and_baseline_row_refs_close
+  - validator_id: actionability-matrix-validator
+    obligation_id: validate_matrix_rows_derive_from_validated_baseline_and_any_applicable_validated_deltas
+  - validator_id: actionability-matrix-validator
+    obligation_id: validate_blocking_question_refs_against_validated_question_frontier
+  - validator_id: baseline-actionability-matrix-validator
+    obligation_id: validate_matrix_row_ids_are_stable_and_baseline_row_refs_close
+  - validator_id: baseline-actionability-matrix-validator
+    obligation_id: reject_matrix_rows_without_baseline_row_ref
+  - validator_id: baseline-actionability-matrix-validator
+    obligation_id: validate_matrix_rows_derive_from_validated_baseline_without_maturation_deltas
+  - validator_id: baseline-actionability-matrix-validator
+    obligation_id: reject_blocking_question_refs_before_question_frontier_authoring
+  - validator_id: maturation-baseline-validator
+    obligation_id: validate_baseline_rows_cover_selected_purpose_frame_required_elements
+  - validator_id: maturation-baseline-validator
+    obligation_id: require_source_reconstruct_record_ref_and_sha256_before_maturation_baseline_consumption
+  - validator_id: maturation-baseline-validator
+    obligation_id: validate_mixed_baseline_rows_preserve_member_material_and_cross_material_lineage
+  - validator_id: maturation-answer-claims-validator
+    obligation_id: require_convergent_source_evidence_claims_to_have_two_independent_judge_confirmed_supports
+  - validator_id: maturation-answer-claims-validator
+    obligation_id: validate_answer_claim_question_refs
+  - validator_id: source-observation-delta-validator
+    obligation_id: validate_delta_observation_refs_exist_in_source_observations
+  - validator_id: source-observation-delta-validator
+    obligation_id: validate_delta_rows_match_accepted_frontier_refs
+  - validator_id: source-observation-delta-validator
+    obligation_id: validate_delta_rows_preserve_observation_batch_id_and_triggering_frontier_validation_ref
+  - validator_id: source-observation-delta-validator
+    obligation_id: validate_delta_source_ref_material_kind_and_observation_hash_match_observed_content
+  - validator_id: source-observation-reentry-validator
+    obligation_id: validate_delta_validation_passed_before_prompt_reentry
+  - validator_id: source-observation-reentry-validator
+    obligation_id: validate_each_delta_observation_exists_in_source_observations
+  - validator_id: source-observation-reentry-validator
+    obligation_id: validate_each_delta_observation_has_exact_prompt_context_source_safety_row
+  - validator_id: source-observation-reentry-validator
+    obligation_id: validate_source_safety_validation_passed_before_prompt_reentry
+  - validator_id: maturation-question-frontier-validator
+    obligation_id: require_blocker_and_high_questions_to_have_closure_frontier_limitation_or_authority_need
+  - validator_id: maturation-question-frontier-validator
+    obligation_id: require_unique_question_id
+  - validator_id: claim-realization-map-validator
+    obligation_id: require_exactly_one_realization_for_each_seed_claim
+  - validator_id: claim-realization-map-validator
+    obligation_id: validate_realization_claim_ids_against_ontology_seed_claim_ids
+  - validator_id: claim-realization-map-validator
+    obligation_id: validate_realization_evidence_refs_against_source_observations
+  - validator_id: answer-support-judgment-validator
+    obligation_id: require_convergent_clusters_to_judge_every_cited_evidence_ref
+  - validator_id: answer-support-judgment-validator
+    obligation_id: require_rationale_ref_for_each_judgment
+  - validator_id: answer-support-judgment-validator
+    obligation_id: require_supports_enum_for_each_judgment
+  - validator_id: answer-support-judgment-validator
+    obligation_id: validate_judgment_refs_resolve_to_answer_support_ledger_clusters_and_evidence
+  - validator_id: ontology-expansion-validator
+    obligation_id: validate_expansion_answer_claim_refs
+  - validator_id: ontology-expansion-validator
+    obligation_id: require_concept_economy_rationale_when_surface_increases
+  - validator_id: reconstruct-run-control-validator
+    obligation_id: validate_committed_write_transactions_have_artifact_refs_and_hashes
+  - validator_id: purpose-confirmation-validator
+    obligation_id: validate_confirmation_status_against_selected_purpose_candidate
+  - validator_id: purpose-confirmation-validator
+    obligation_id: require_confirmation_for_inferred_or_limitation_backed_purpose
+  - validator_id: purpose-confirmation-validator
+    obligation_id: block_seed_readiness_when_confirmation_is_pending_rejected_unavailable_or_evidence_check_pending
+  - validator_id: competency-question-assessment-validator
+    obligation_id: require_exactly_one_assessment_per_authoritative_question
+  - validator_id: competency-question-assessment-validator
+    obligation_id: validate_downstream_effect_consistent_with_answer_status
+  - validator_id: competency-question-assessment-validator
+    obligation_id: validate_required_seed_refs_close_against_question_seed_refs
+  - validator_id: material-admission-ledger-validator
+    obligation_id: validate_admission_row_uniqueness
+  - validator_id: material-admission-ledger-validator
+    obligation_id: require_admitted_required_or_supporting_rows_to_have_candidate_seed_maturation_limitation_blocked_or_out_of_scope_consumer
+  - validator_id: material-admission-ledger-validator
+    obligation_id: prevent_diagnostic_or_trace_only_rows_from_silently_affecting_actionability
+  - validator_id: material-admission-ledger-validator
+    obligation_id: require_rejected_ambiguous_rows_to_preserve_replayable_evidence_or_limitation
+  - validator_id: material-admission-ledger-validator
+    obligation_id: validate_purpose_element_refs_against_selected_purpose_frame
+  - validator_id: material-admission-ledger-validator
+    obligation_id: validate_source_refs_against_observed_source_refs
+  - validator_id: maturation-convergence-ledger-validator
+    obligation_id: validate_closure_source_observation_delta_refs_match_source_observation_delta_validation
+  - validator_id: actionable-ontology-validator
+    obligation_id: reject_actionable_ready_until_final_requestion_convergence_is_proven
+  - validator_id: actionable-ontology-validator
+    obligation_id: validate_actionability_claim_against_maturation_continuation_decision
+  - validator_id: actionable-ontology-validator
+    obligation_id: validate_actionable_limited_claim_scope_rows
+  - validator_id: actionable-ontology-validator
+    obligation_id: require_every_projected_row_to_trace_to_seed_expansion_or_limitation
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_registry_snapshot_hash_is_recorded
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_active_artifact_gate_validator_predicate_and_source_profile_ids_are_unique
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_active_registry_subject_lists_match_current_registry_catalogs
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_every_active_gate_has_a_validator_record
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_every_validator_gate_ref_resolves_to_an_active_gate
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: validate_every_active_gate_required_when_predicate_resolves
+  - validator_id: registry-verification-evidence-validator
+    obligation_id: require_evidence_row_for_each_current_registry_subject_id
+  - validator_id: handoff-decision-validator
+    obligation_id: consume_all_active_validation_gate_statuses_emitted_by_runtime
+  - validator_id: handoff-decision-validator
+    obligation_id: project_missing_active_validation_artifact_as_blocked
+  - validator_id: candidate-disposition-validator
+    obligation_id: validate_candidate_inventory_candidate_kind_against_candidate_kind_registry
+  - validator_id: candidate-disposition-validator
+    obligation_id: validate_candidate_disposition_against_candidate_disposition_registry
+  - validator_id: candidate-disposition-validator
+    obligation_id: require_rationale_and_evidence_refs_for_each_disposition
+  - validator_id: candidate-disposition-validator
+    obligation_id: validate_promoted_candidate_target_seed_refs_are_declared_for_promoted_dispositions
+  - validator_id: answer-support-ledger-validator
+    obligation_id: validate_evidence_cluster_question_refs
+  - validator_id: answer-support-ledger-validator
+    obligation_id: require_two_independent_evidence_refs_for_convergent_source_evidence_unless_direct_authority
+  - validator_id: answer-support-ledger-validator
+    obligation_id: require_frontier_triggered_evidence_to_resolve_to_valid_reentry_validation
+  - validator_id: answer-support-ledger-validator
+    obligation_id: require_observation_specific_evidence_support_source_safety_row_with_claim_sufficiency_and_replay
+  - validator_id: maturation-continuation-decision-validator
+    obligation_id: reject_actionable_ready_until_final_requestion_convergence_is_proven
+  - validator_id: maturation-continuation-decision-validator
+    obligation_id: reject_actionable_ready_when_unresolved_revision_blockers_remain
+  - validator_id: maturation-continuation-decision-validator
+    obligation_id: require_revision_blocker_refs_in_continuation_limitation_refs
+  - validator_id: maturation-continuation-decision-validator
+    obligation_id: validate_revision_blocker_limitation_refs_against_validated_revision_proposal
+  - validator_id: claim-projection-validator
+    obligation_id: reject_unwired_material_kind_support_levels_above_profile_supported
+  - validator_id: claim-projection-validator
+    obligation_id: validate_material_kind_support_row_uses_capability_claim_not_actionability_claim
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: preserve_contradictions_in_candidate_status_or_limitations
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: reject_p5_only_primary_purpose_candidate
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: require_mixed_purpose_frame_elements_to_carry_member_scope_refs_member_target_material_kind_member_source_refs_and_cross_material_ref_refs_or_validated_exclusion
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: require_non_p1_primary_to_have_two_evidence_kinds_and_one_p2_p3_or_p4
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: require_purpose_adequacy_frame_elements_to_have_surface_dimension_facet_and_evidence_or_limitation_state
+  - validator_id: source-purpose-candidates-validator
+    obligation_id: validate_purpose_candidate_evidence_refs_against_source_observations
+  - validator_id: maturation-closure-frontier-validator
+    obligation_id: reject_semantic_only_locations
+  - validator_id: maturation-closure-frontier-validator
+    obligation_id: require_unique_authority_request_id
+  - validator_id: maturation-closure-frontier-validator
+    obligation_id: validate_authority_request_kind_expected_response_kind_and_scope
+  - validator_id: ontology-seed-validator
+    obligation_id: require_static_kinetic_dynamic_actionability_coverage_axes
+  - validator_id: ontology-seed-validator
+    obligation_id: validate_purpose_required_element_seed_ref_refs_against_known_seed_refs
+  - validator_id: ontology-seed-validator
+    obligation_id: validate_promoted_candidate_target_seed_refs_are_realized
+  - validator_id: ontology-seed-validator
+    obligation_id: validate_instance_assertion_mapping_status
+  - validator_id: ontology-seed-validator
+    obligation_id: require_limitation_ref_when_instance_availability_status_is_absent_or_unknown
+  - validator_id: ontology-seed-validator
+    obligation_id: require_ready_ontology_handoff_mappings_to_have_substantive_content_or_limitation_refs
+  - validator_id: competency-questions-validator
+    obligation_id: require_unique_question_id
+  - validator_id: competency-questions-validator
+    obligation_id: validate_coverage_axes_against_coverage_axis_registry
+  - validator_id: competency-questions-validator
+    obligation_id: validate_ontology_handoff_axes_against_ontology_handoff_axis_registry
+  - validator_id: competency-questions-validator
+    obligation_id: validate_seed_ref_refs_close_against_known_seed_refs
+  - validator_id: competency-questions-validator
+    obligation_id: validate_limitation_refs_close_against_handoff_limitations
+  - validator_id: competency-questions-validator
+    obligation_id: validate_reference_standard_refs_against_reference_standard_registry
+  - validator_id: competency-questions-validator
+    obligation_id: validate_pattern_catalog_refs_against_reference_pattern_catalog_registry
+  - validator_id: competency-questions-validator
+    obligation_id: validate_domain_competency_trace_refs_against_run_manifest_context_snapshot
+  - validator_id: competency-questions-validator
+    obligation_id: enforce_admitted_domain_competency_disposition_rule
+  - validator_id: pre-handoff-run-manifest-validator
+    obligation_id: selected_reference_standard_ids_resolve_to_reference_standard_registry
+  - validator_id: pre-handoff-run-manifest-validator
+    obligation_id: selected_reference_standard_versions_or_snapshots_are_recorded
+  - validator_id: pre-handoff-run-manifest-validator
+    obligation_id: selected_pattern_catalog_ids_resolve_to_reference_pattern_catalog_registry
+  - validator_id: pre-handoff-run-manifest-validator
+    obligation_id: selected_pattern_catalog_versions_or_snapshots_are_recorded
+  - validator_id: source-safety-ledger-validator
+    obligation_id: validate_exactly_four_canonical_source_safety_axes
+  - validator_id: source-safety-ledger-validator
+    obligation_id: validate_source_safety_subject_refs_against_observed_source_refs
+  - validator_id: source-safety-ledger-validator
+    obligation_id: validate_visibility_tier_is_derived_not_independent_authority
+  - validator_id: target-material-profile-validator
+    obligation_id: every_selected_source_profile_snapshot_contains_version_policy_required_fields
+  - validator_id: target-material-profile-validator
+    obligation_id: every_selected_source_profile_snapshot_matches_source_profile_records_by_profile_id_and_target_material_kind
+  - validator_id: source-observation-lineage-index-validator
+    obligation_id: validate_unique_session_level_lineage_row_ids
+  - validator_id: seed-authoring-readiness-validator
+    obligation_id: validate_blocked_validation_gap_is_projection_not_semantic_decision
+  - validator_id: source-scout-pack-validator
+    obligation_id: validate_signal_rows_resolve_to_source_observations
+  - validator_id: source-scout-pack-pre-seed-validator
+    obligation_id: validate_signal_rows_resolve_to_source_observations
+  - validator_id: source-scout-pack-post-maturation-validator
+    obligation_id: validate_signal_rows_resolve_to_source_observations

package/.onto/processes/reconstruct/ontology-seeding-and-maturation-design.md

@@ -119,7 +119,7 @@ element required by the source-derived `PurposeAdequacyFrame`.
 | `MaterialAdmissionAuthority` | runtime-assembled admission authority for purpose-critical adequacy elements, with a separate phase for literal source-backed material values | runtime |
 | `MaterialValueDisposition` | admission and closure decision for source-backed values that may affect actionability | host LLM authored, runtime validated |
 | `DomainCompetencyAdmission` | run-manifest admission of domain competency questions into required, supporting, or diagnostic maturity coverage | runtime |
-| `SourceSafetyAuthority` | validator-consumed lifecycle, authorization, privacy, redaction, proof-sufficiency, and replay state for observed source records, keyed by exact observation safety row id with derived visibility policy and conservative public/material defaults | runtime |
+| `SourceSafetyAuthority` | validator-consumed lifecycle, authorization, proof-sufficiency, and replay state for observed source records, keyed by exact observation safety row id with derived visibility policy and conservative public/material defaults | runtime |
 | `MutableVocabularyAuthority` | replayable identity, snapshot, mapping, alias, supersession, and migration state for external terms, standards, provider/framework terms, and profile-owned facets | planned until registry promotion |
 | `SourceDeltaFact` | runtime-observed source freshness fact before semantic actionability interpretation | runtime |
 | `SourceDeltaImpactJudgment` | source-delta impact interpretation against purpose, surfaces, and dimensions | host LLM authored, runtime validated |
@@ -1260,6 +1260,13 @@ source_reconstruct_record_ref: reconstruct-record.yaml
 source_run_manifest_ref: reconstruct-run-manifest.yaml
 source_handoff_decision_validation_ref:
 purpose_frame_ref:
+# Purpose-candidate-level limitations bound the overall purpose/source, not any single
+# surface x dimension row. They constrain the actionable claim (continuation stays
+# actionable_limited, not actionable_ready, and they appear in the claim limitation_refs)
+# and signal next-round source frontier, WITHOUT marking any row limitation_backed.
+# The validator anchors this list to the selected purpose candidate's limitation_refs;
+# the actionability matrix carries the same list forward.
+candidate_limitation_refs: []
 baseline_rows:
   - baseline_row_id:
     purpose_element_ref:
@@ -1278,6 +1285,9 @@ baseline_rows:
     supporting_seed_refs: []
     supporting_evidence_refs: []
     supporting_validation_refs: []
+    # Row-level limitations are the row's OWN seed-element limitations only (they drive
+    # frontier gating and member_readiness); candidate-level limitations live in the
+    # top-level candidate_limitation_refs above, never copied onto rows.
     limitation_refs: []
     blocking_reason:
 ```
@@ -1675,7 +1685,7 @@ projected_rows:
     purpose_element_ref:
     materiality: blocker | high | medium | low | info
     maturity_level: L0_missing | L1_identified | L2_modeled | L3_evidenced | L4_validated_for_purpose
-    member_readiness: closed | limitation_backed | frontier_required | out_of_scope
+    member_readiness: closed | limitation_backed | frontier_required | value_resolved | out_of_scope
     seed_ref_refs: []
     expansion_refs: []
     evidence_refs: []
@@ -1698,6 +1708,10 @@ claimed.
 maturation is converging:
 
 ```yaml
+# Carried forward from the maturation baseline (must match it; the matrix validator
+# rejects drift). Continuation keeps a fully-closed run at actionable_limited and lists
+# these in the claim limitation_refs when present; never marks a row limitation_backed.
+candidate_limitation_refs: []
 rows:
   - matrix_row_id:
     baseline_row_refs: []
@@ -1708,7 +1722,7 @@ rows:
     materiality_ref:
     member_scope_refs: []
     member_target_material_kind:
-    member_readiness: closed | limitation_backed | frontier_required | out_of_scope
+    member_readiness: closed | limitation_backed | frontier_required | value_resolved | out_of_scope
     member_source_refs: []
     cross_material_ref_refs: []
     competency_question_refs: []
@@ -1724,6 +1738,28 @@ rows:
 explicitly limitation-backed without making an actionability claim for that
 limited area.
 
+`value_resolved` is the terminal readiness for a material row whose
+value-dependent limitation was discharged by the maturation value-read stage
+(reading authorized runtime-target source values to satisfy the limitation). It
+is distinct from `closed` (not L4-validated) and from `frontier_required` (needs
+a new source): the row's residual limitation set reached zero **by discharge**,
+so it anchors a bounded actionable claim on an explicit value-read basis. Only a
+validated, satisfied value-discharge that the matrix builder/validator both
+re-derive (derive-and-assert) may move a row to `value_resolved`; a continuation
+carrying `value_resolved` rows projects at most `actionable_limited` (never
+`actionable_ready`, which requires L4). value_resolved rows are claimable
+(included in `claim_scope`) like closed rows. See the maturation value-read cut
+design (`development-records/design/20260630-maturation-value-read-cut-design.md`
+§13).
+
+`blocking_question_refs` is the reverse link from a row to the maturation
+frontier question(s) that block it from closing. It is the mirror of the
+question's forward `baseline_row_refs`, so the baseline matrix (authored before
+any question exists) leaves it empty and the current matrix populates it for each
+still-open `frontier_required` row from the validated question frontier; closed
+or limitation-backed rows carry none. The matrix validator enforces this against
+the validated frontier (`validate_blocking_question_refs_against_validated_question_frontier`).
+
 The active first-pass runtime keeps two matrix artifacts so artifact refs stay
 truthful. `baseline-actionability-matrix.yaml` is the immutable
 baseline-derived M1 matrix consumed by `maturation-question-frontier.yaml`.
@@ -2516,8 +2552,8 @@ activation conditions.
 | `claim-projection-validation.yaml` | runtime | proves claim level, decision state, actionability claim, material-kind/member support, bounded UX fields, target-material profile validation, and pre-publication run-control/registry/validation evidence closure |
 | `material-admission-ledger.yaml` | runtime | canonical admission/disposition rows for purpose-critical adequacy elements, and later source-backed material values when that phase is promoted |
 | `material-admission-ledger-validation.yaml` | runtime | proves admitted, deferred, rejected, and out-of-scope admission rows are replayable and closed downstream |
-| `source-safety-ledger.yaml` | runtime | lifecycle, authorization, privacy, redaction, proof sufficiency, and replay state for observed source records, keyed by exact observation safety row id with derived visibility policy and conservative public/material claim defaults |
-| `source-safety-ledger-validation.yaml` | runtime | proves unsafe, retired, redacted, disposed, invalidated, unauthorized, privacy-sensitive, or proof-insufficient source refs fail closed or become limitations |
+| `source-safety-ledger.yaml` | runtime | lifecycle, authorization, proof sufficiency, and replay state for observed source records, keyed by exact observation safety row id with derived visibility policy and conservative public/material claim defaults |
+| `source-safety-ledger-validation.yaml` | runtime | proves unsafe, retired, disposed, invalidated, unauthorized, or proof-insufficient source refs fail closed or become limitations |
 | `source-observation-lineage-index.yaml` | runtime | session-level index of every round-scoped source-observation delta, delta validation, re-entry validation, frontier kind, and added observation id consumed by answer-support validation |
 | `source-observation-lineage-index-validation.yaml` | runtime | proves the session lineage index matches valid per-round delta validations, re-entry validations, frontier kinds, and source observation ids before semantic downstream consumption |
 | `vocabulary-authority-ledger.yaml` | planned | identity, snapshot, mapping, applicability, alias, supersession, and migration rows for mutable vocabulary |
@@ -2648,7 +2684,7 @@ through prose shortcuts.
 |---|---|---|---|---|
 | 0 | `reconstruct-run-control-validation.yaml` | any seeding, maturation, retry, resume, status, result, or public projection writes/reads session artifacts | every writer, validator, status/result reader, final-output writer, record assembler | block or return existing trusted run before semantic artifacts are consumed |
 | 1 | `registry-verification-evidence-validation.yaml` | prose or public surface claims `active`, `promoted`, `current`, `implemented`, `executable`, `ready`, or material-kind support | claim projection, final-output provenance, MCP/API/status/result, prompt packet materialization | mark `pending_verification` and prevent runtime/public consumption |
-| 2 | `source-safety-ledger-validation.yaml` | an observed source record enters context assembly, a prompt packet, source observation re-entry, evidence support, or source-backed claim | prompt-packet materialization/context assembly, source observation re-entry, source-backed evidence support | exclude, redact, limit, or block according to lifecycle, authorization, privacy, redaction, proof sufficiency, replay, and observation-specific derived prompt visibility policy |
+| 2 | `source-safety-ledger-validation.yaml` | an observed source record enters context assembly, a prompt packet, source observation re-entry, evidence support, or source-backed claim | prompt-packet materialization/context assembly, source observation re-entry, source-backed evidence support | exclude, limit, or block according to lifecycle, authorization, proof sufficiency, replay, and observation-specific derived prompt visibility policy |
 | 3 | `material-admission-ledger-validation.yaml` | source-backed values can affect actionability, evidence trust, dynamic boundaries, permissions, obligations, calculations, or public claims | candidate disposition, seed validation, maturation baseline, question frontier, matrix, convergence ledger | every admitted/required source-backed row must be consumed downstream or surfaced as limitation/blocked/out-of-scope |
 | planned | `vocabulary-authority-ledger-validation.yaml` | mutable profile facets, domain terms, provider/framework terms, external standards, or reference patterns need active runtime vocabulary proof | source profile selection, seed rows, maturation rows, external boundary rows, claim projection | planned authority; current runtime must not claim this validation has active coverage |
 | 5 | `claim-projection-validation.yaml` | any status/result/MCP/API/handoff surface reports success, readiness, actionability, `blocked`, `ask_user`, or material-kind support; final-output claim sections may only cite canonical refs until this closes | all public and downstream result surfaces | surfaces may not infer claim level or next action from distributed artifacts |
@@ -2704,17 +2740,15 @@ source record's exact safety row identity into validator-consumed state. Safety
 row identity is scoped by both observation and intended consumption:
 `source_safety:<observation_id>:<intended_consumption>`.
 
-Canonical source safety has exactly six independent validation axes:
+Canonical source safety has exactly four independent validation axes:
 
 1. `lifecycle_state`
 2. `authorization_state`
-3. `privacy_state`
-4. `redaction_state`
-5. `proof_sufficiency_state`
-6. `replay_state`
+3. `proof_sufficiency_state`
+4. `replay_state`
 
-`visibility_tier` is not a seventh axis. It is a deterministic sink/output policy
-derived from the six canonical axes and the intended consumption
+`visibility_tier` is not a fifth axis. It is a deterministic sink/output policy
+derived from the four canonical axes and the intended consumption
 (`prompt_context`, `evidence_support`, `public_output`, `replay`, or
 `material_claim`). Validators must preserve both the failing canonical axis and
 the derived visibility tier when they limit or block consumption. One valid
@@ -2726,8 +2760,34 @@ consumption. Runtime read scope can authorize internal `prompt_context`,
 `evidence_support`, and replay checks, but `public_output` and `material_claim`
 rows must remain authority-gap rows (`authorization_state: unknown`,
 `proof_sufficiency_state: insufficient_for_claim`, derived `no_prompt_use`, and
-a limitation ref) unless the observed source explicitly authorizes that exact
-intended consumption.
+a limitation ref) **unless at least one canonical authorization basis is
+satisfied for that exact intended consumption**. The canonical authorization
+bases for `public_output` and `material_claim` are:
+
+- **(A) runtime-target provenance** — the observation is the user-provided
+  reconstruct runtime-target source (`is_runtime_target_source: true`, set by the
+  observation producer only for refs the caller resolved as the request target,
+  never for frontier-discovered or maturation-closure re-entry observations). The
+  user providing a source as the reconstruct target is authorization to derive
+  material claims from it and surface them to that user. Audited with
+  `authorization_scope_ref: runtime_target_ref_read_scope`.
+- **(B) source self-declaration** — the observation carries an explicit
+  `structural_data.source_safety_consumption_authorizations` entry for that
+  consumption. Audited with
+  `authorization_scope_ref: source_safety_explicit_consumption_authorization`.
+- **(C) user/owner confirmation** — an explicit user/owner consumption grant
+  (purpose-confirmation channel). *Not wired in the initial cut.*
+- **(D) authority response** — an authority request answered `provided` through
+  the maturation authority-response flow, the canonical channel for
+  frontier-discovered secondary sources. *Not wired in the initial cut.*
+
+Authorization is the union: a `public_output`/`material_claim` row is authorized
+iff any basis A–D holds. Each basis is scoped to its own source, so a
+frontier-discovered or non-target observation that satisfies none stays an
+authority-gap row (no leak). Basis attribution is enforced, not merely declared:
+an `authorization_state: authorized` upper-tier row must be justified by basis A
+(`is_runtime_target_source`) or basis B (the explicit field); the source-safety
+validator rejects an authorized upper-tier row backed by neither.
 
 ```yaml
 schema_version: "1"
@@ -2739,26 +2799,18 @@ safety_rows:
     subject_kind: source_ref
     lifecycle_state: active | retired | disposed | invalidated | stale | missing
     authorization_state: authorized | unauthorized | unknown | not_required
-    privacy_state: non_sensitive | privacy_sensitive | unknown
-    redaction_state: none | redacted | required | insufficient
-    proof_sufficiency_state: sufficient_for_claim | insufficient_for_claim | trace_only | unavailable
-    replay_state: replay_allowed | replay_with_redaction | no_replay_use | unknown
-    visibility_tier: consumption_allowed | internal_only | redacted_output_only | no_prompt_use | no_replay_use
+    proof_sufficiency_state: sufficient_for_claim | insufficient_for_claim | unavailable
+    replay_state: replay_allowed | no_replay_use | unknown
+    visibility_tier: consumption_allowed | internal_only | no_prompt_use | no_replay_use
     visibility_derivation:
       intended_consumption: prompt_context | evidence_support | public_output | replay | material_claim
       derived_from_axes:
         - lifecycle_state
         - authorization_state
-        - privacy_state
-        - redaction_state
         - proof_sufficiency_state
         - replay_state
       derivation_rule_ref:
     authorization_scope_ref:
-    redaction_evidence:
-      raw_value_available: true | false
-      allowed_proof_forms: [raw_value | hash | bounded_summary | source_ref_only | unavailable]
-      redaction_rule_ref:
     tombstone:
       tombstone_ref:
       reason:
@@ -2770,18 +2822,17 @@ safety_rows:
 The first consumer is prompt-packet materialization/context assembly. Raw source
 excerpts, document sections, spreadsheet cells, database comments, or other
 observed source values must not enter LLM-facing context until a source-safety
-row exists and validates for prompt use. If a row derives `no_prompt_use`, the
-observation is excluded from prompt payloads; redacted rows may include only
-allowed hash, bounded summary, or source-ref-only proof forms and must carry the
-limitation forward.
+row exists and validates for prompt use. A row is admitted into the prompt only
+when it derives `consumption_allowed`; any other tier excludes the observation
+from prompt payloads.
 
 `source-safety-ledger-validation.yaml` must be consumed by prompt-packet
 materialization/context assembly and source-observation re-entry before observed
 source rows re-enter semantic authoring. A validator must fail closed when a
 source-backed claim requires an observed source ref whose lifecycle,
-authorization, privacy, redaction, proof-sufficiency, or replay axis does not
-support the intended consumption, whose scoped safety row is missing, or whose
-derived `visibility_tier` prohibits that sink.
+authorization, proof-sufficiency, or replay axis does not support the intended
+consumption, whose scoped safety row is missing, or whose derived
+`visibility_tier` prohibits that sink.
 
 Answer-support validation consumes `source-observation-lineage-index.yaml`,
 `source-observation-lineage-index-validation.yaml`, and
@@ -2794,7 +2845,7 @@ observation-specific `evidence_support` source-safety row that is sufficient for
 claim support and replay; prompt visibility alone is not material evidence
 authority.
 
-Source safety validation has six independent axes. A row can pass one axis and
+Source safety validation has four independent axes. A row can pass one axis and
 fail another; validators must preserve the specific failing axis in limitations,
 blocked rows, and public recovery text.
 
@@ -2802,25 +2853,17 @@ blocked rows, and public recovery text.
 |---|---|---|
 | lifecycle | active snapshot or tombstone lineage | subject is retired, disposed, invalidated, stale, or missing for a material claim |
 | authorization | authorization scope or user/runtime authority | the run is not allowed to inspect, prompt, replay, or display the subject |
-| privacy | sensitivity classification and allowed disclosure basis | sensitive data would be exposed without an allowed disclosure basis |
-| redaction | redaction status and proof form | raw value is unavailable and bounded summary/hash is insufficient for the claim |
-| proof sufficiency | proof form matches claim level | trace-only proof is used to raise semantic or actionability level |
-| replay | replay eligibility and allowed proof form | future replay would require a raw value or authority snapshot that is not replayable |
+| proof sufficiency | proof form matches claim level | proof is unavailable or insufficient for the intended consumption |
+| replay | replay eligibility | future replay would require an authority snapshot that is not replayable |
 
 Derived visibility projection:
 
 | Derived `visibility_tier` | Projection rule |
 |---|---|
-| `no_prompt_use` | any canonical axis blocks `prompt_context` consumption, or the only allowed form is unavailable for prompt materialization |
+| `no_prompt_use` | any canonical axis blocks `prompt_context` consumption, or proof is unavailable for prompt materialization |
 | `no_replay_use` | `replay_state` is `no_replay_use` or `unknown` for a replay-required material claim |
-| `redacted_output_only` | the subject may be surfaced only through an allowed redacted, hashed, bounded-summary, or source-ref-only form |
 | `internal_only` | the subject may support internal validation or evidence closure but must not appear in public output |
-| `consumption_allowed` | all six canonical axes support the row's `intended_consumption`; public disclosure is allowed only when `intended_consumption` is `public_output` |
-
-Top-level axis state fields are canonical. Nested detail fields such as
-`redaction_evidence` are supporting proof only; they must not introduce a second
-authority path for redaction or proof sufficiency. Validation must fail when a
-supporting detail contradicts its top-level canonical state.
+| `consumption_allowed` | all four canonical axes support the row's `intended_consumption`; public disclosure is allowed only when `intended_consumption` is `public_output` |
 
 #### Mutable Vocabulary Authority
 
@@ -2960,7 +3003,7 @@ Validation responsibilities:
 - material-admission validation for purpose-critical adequacy elements, with
   source-backed material values only after their phase is promoted
 - source-safety validation before prompt-packet materialization/context assembly
-  and for lifecycle, authorization, privacy, redaction, proof sufficiency, replay
+  and for lifecycle, authorization, proof sufficiency, replay
   eligibility, and derived visibility projection
 - planned mutable-vocabulary validation for external/profile/provider/framework
   terms after registry promotion
@@ -2990,19 +3033,15 @@ Safety and lifecycle rules:
   validators, tool policies, or user-confirmed run scope;
 - prompt packets include only the minimum source excerpts needed for the current
   stage and preserve refs so omitted context can be audited;
-- secrets, credentials, personal data, and sensitive business values are redacted
-  from user-facing prose unless the user explicitly authorizes disclosure for the
-  run; artifact truth may preserve hashes, refs, labels, or bounded summaries
-  instead of raw sensitive text;
 - authority responses record identity, scope, timestamp/version, and replay
   eligibility, and unavailable or rejected authority responses remain visible as
   limitations or blocked rows;
 - stale source snapshots, stale profile snapshots, and unresolved migration refs
   cannot be treated as current authority;
-- retirement, disposal, or redaction of an artifact must leave an audit-visible
+- retirement or disposal of an artifact must leave an audit-visible
   tombstone with artifact ref, hash when available, lifecycle state, reason, and
   downstream refs that can no longer be trusted; and
-- replay must fail closed when a required source ref, redacted value, retired
+- replay must fail closed when a required source ref, retired
   artifact, or authority snapshot is needed to prove a material claim.
 
 These prose rules are implementation guidance only until
@@ -3157,7 +3196,7 @@ Per-kind release evidence requirements:
 | Material kind | Release-supported only when |
 |---|---|
 | `code` | real or golden repository run proves file/module/service observation, purpose inference or confirmation, actor/object/action/data-binding extraction, dependency and external-boundary mapping, validation failure visibility, and artifact refs |
-| `document` | real or golden document run proves section/heading/decision/action-item observation, purpose extraction or inference, citation-preserving evidence refs, source-safety/redaction handling, and limitation output for ambiguous prose |
+| `document` | real or golden document run proves section/heading/decision/action-item observation, purpose extraction or inference, citation-preserving evidence refs, source-safety handling, and limitation output for ambiguous prose |
 | `spreadsheet` | real or golden workbook run proves sheet/range/named-range/formula/decision-cell observation, source values and derived outputs are distinguished, formula or calculation evidence is replayable, and stale workbook or hidden-sheet gaps fail loud |
 | `database` | real or golden database/schema snapshot proves table/view/key/grant/default/derived-view observation, sampled evidence boundaries are explicit, permission and retention constraints are represented, and unavailable credentials or schema drift block/limit claims |
 | `meeting_record` | real or golden meeting artifact proves participants, decisions, action owners, due dates, open questions, and unresolved policy decisions are extracted as purpose-relevant evidence without inventing workflow paths |