persona-harness 0.8.0-beta.21 → 0.8.0-beta.22

package/docs/current/README.md

@@ -41,7 +41,7 @@ not become current merely because they remain under `docs/current/`.
   [`docs/releases/package-index.md`](../releases/package-index.md).
 - Release operations and workflow-compatible release notes:
   [`release/README.md`](release/README.md) and
-  [`release/v0.8.0-beta.19-release-notes.md`](release/v0.8.0-beta.19-release-notes.md).
+  [`release/v0.8.0-beta.22-release-notes.md`](release/v0.8.0-beta.22-release-notes.md).
 - P3 integrity roadmap and release hold:
   [`p3-integrity-roadmap.md`](p3-integrity-roadmap.md).
 - P3-2 closure authority candidate:
@@ -118,23 +118,26 @@ not become current merely because they remain under `docs/current/`.
   policy artifact verifier remains read-only/non-authoritative, while local or
   caller-provided staged-package evidence remains
   `artifact-provenance-unavailable`.
-- `0.8.0-beta.1` through `0.8.0-beta.17` are historical staging-only Consumer
+- `0.8.0-beta.1` through `0.8.0-beta.20` are historical staging-only Consumer
   Authority Beta evidence. Beta.16's external observer accepted an exit-zero
   artifact download without an exact nonempty ZIP postcondition, so it
-  provides no reusable beta.19 transport, verification, Finish, consumption, or
-  replay fact. Beta.17's Node20/npm10 registry PUT was authorization-shaped,
-  not a package-absence claim. Beta.18 is immutable staging evidence: its
-  registry version, selected tag, SHA-1/SRI, raw SHA-256, and portable content
-  identity matched frozen canonical facts, but its readback incorrectly required
-  an unsupported registry `gitHead` metadata field. `0.8.0-beta.19` is the current source-preparation
-  candidate. It makes no package, tag, staging mapping,
-  GitHub release, original signed consumer artifact, promotion, Stable/GA, or
-  Finish authority claim. Its pre-fixture gate requires a package-visible
-  observer credential-preflight, separate caller/reusable signer binding,
-  portable canonical package-content identity, and
-  the complete public Java/Spring lifecycle to reach only
-  `trusted-authority-required` in
-  [`release/v0.8.0-beta.19-release-notes.md`](release/v0.8.0-beta.19-release-notes.md).
+  provides no reusable transport, verification, Finish, consumption, or replay
+  fact. Beta.17's Node20/npm10 registry PUT was authorization-shaped, not a
+  package-absence claim. Beta.18 is immutable staging evidence: its registry
+  version, selected tag, SHA-1/SRI, raw SHA-256, and portable content identity
+  matched frozen canonical facts, but its readback incorrectly required an
+  unsupported registry `gitHead` metadata field. `0.8.0-beta.21` is
+  non-reusable temporal final-observer evidence because online crypto and
+  identity bindings completed only after the leaf certificate window expired.
+  `0.8.0-beta.22` is the current procedure-only source candidate. It makes no
+  package, tag, staging mapping, GitHub release, original signed consumer
+  artifact, promotion, Stable/GA, or Finish authority claim. Its pre-fixture
+  gate requires source-bound bootstrap before one final fixture commit, retention
+  of that same unpushed commit as the installed consumer CWD/HEAD, a
+  package-visible observer credential preflight, separate caller/reusable signer
+  binding, portable canonical package-content identity, and the complete public
+  Java/Spring lifecycle to reach only `trusted-authority-required` in
+  [`release/v0.8.0-beta.22-release-notes.md`](release/v0.8.0-beta.22-release-notes.md).
 - P3-9 permits separately dispatched P2 source, measurement, or report-only
   investigation. The sole product-scope exception is
   [`korean-cli-help-scope-authorization.md`](korean-cli-help-scope-authorization.md)

package/docs/current/canonical-docs-index.md

@@ -57,8 +57,10 @@ current decision inputs.
 | 0.8.0-beta.17 acceptance record | `docs/current/release/consumer-authority-beta17-acceptance.json` | Historical machine-readable source/packed lifecycle, package-root, canonical tar/content identity, bounded command/transport parser preflights, safe ZIP handoff, modeled exact-once Finish/replay, privacy, and one superseded current-version artifact residual. |
 | 0.8.0-beta.18 Consumer Authority Beta | `docs/current/release/v0.8.0-beta.18-release-notes.md` | Historical staging evidence: registry bytes matched canonical facts, but an unsupported registry gitHead predicate blocked workflow readback. |
 | 0.8.0-beta.18 acceptance record | `docs/current/release/consumer-authority-beta18-acceptance.json` | Historical machine-readable source/packed lifecycle and Node20 packer to Node24 publisher contract. |
-| 0.8.0-beta.19 Consumer Authority Beta | `docs/current/release/v0.8.0-beta.19-release-notes.md` | Current source-preparation record for workflow-bound canonical source to registry-byte reconciliation and sanitized failed-readback evidence. |
-| 0.8.0-beta.19 acceptance record | `docs/current/release/consumer-authority-beta19-acceptance.json` | Machine-readable source/packed lifecycle, package-root, canonical publisher, bounded observer plans, and one hosted registry reconciliation residual. |
+| 0.8.0-beta.19 Consumer Authority Beta | `docs/current/release/v0.8.0-beta.19-release-notes.md` | Historical staging evidence; its registry/original artifact checks do not supply current-version authority completion. |
+| 0.8.0-beta.19 acceptance record | `docs/current/release/consumer-authority-beta19-acceptance.json` | Historical machine-readable source/packed lifecycle, package-root, canonical publisher, bounded observer plans, and one superseded hosted residual. |
+| 0.8.0-beta.22 Consumer Authority Beta | `docs/current/release/v0.8.0-beta.22-release-notes.md` | Current procedure-only source candidate: source-bound bootstrap precedes one final fixture commit, and the same unpushed commit remains the installed consumer CWD/HEAD. |
+| 0.8.0-beta.22 acceptance record | `docs/current/release/consumer-authority-beta22-acceptance.json` | Machine-readable beta22 procedure, package, observer, and one hosted residual contract; it changes no product authority behavior. |
 | Consumer Authority Beta lifecycle | `docs/current/release/consumer-authority-beta.md` | Fixed tag-bound staging, exact package readback, original-artifact consumer boundary, and separately approved `next` promotion sequence. |
 | 0.7.0-rc.3 published capsule | `docs/releases/v0.7.0-rc.3/README.md` | Current npm `next` candidate with matching registry gitHead, tag, GitHub prerelease, and workflow provenance. |
 | 0.7.0-rc.2 published capsule | `docs/releases/v0.7.0-rc.2/README.md` | Previous npm `next` candidate with registry gitHead/tag/workflow provenance. |

package/docs/current/docs-inventory.md

@@ -220,7 +220,8 @@ Total indexed files: 336
 | `docs/current/release/v0.8.0-beta.16-release-notes.md` | version-specific release note | v0.8.0-beta.16 | Historical Consumer Authority Beta staging evidence. Its observer accepted an exit-zero API download without proving a nonempty exact ZIP, so it supplies no beta.17 transport or authority evidence. |
 | `docs/current/release/v0.8.0-beta.17-release-notes.md` | version-specific release note | v0.8.0-beta.17 | Historical Consumer Authority Beta source-preparation record. Its canonical tar/provenance observation ended at an authorization-shaped registry response and makes no package-absence, promotion, or Finish authority claim. |
 | `docs/current/release/v0.8.0-beta.18-release-notes.md` | version-specific release note | v0.8.0-beta.18 | Historical immutable staging evidence. Registry bytes matched canonical facts, but an unsupported registry gitHead predicate blocked workflow readback. |
-| `docs/current/release/v0.8.0-beta.19-release-notes.md` | version-specific release note | v0.8.0-beta.19 | Current Consumer Authority Beta source-preparation record for workflow-bound canonical source to registry-byte reconciliation; it makes no live publish, tag, release, promotion, or Finish authority claim. |
+| `docs/current/release/v0.8.0-beta.19-release-notes.md` | version-specific release note | v0.8.0-beta.19 | Historical Consumer Authority Beta staging evidence; it makes no current-version authority, consumption, replay, promotion, or Finish authority claim. |
+| `docs/current/release/v0.8.0-beta.22-release-notes.md` | version-specific release note | v0.8.0-beta.22 | Current procedure-only Consumer Authority Beta source candidate: source-bound bootstrap precedes one final fixture commit, whose identical unpushed SHA remains the installed consumer CWD/HEAD. |
 | `docs/current/release/consumer-authority-beta7-acceptance.json` | machine-readable release contract | v0.8.0-beta.7 | Historical source/packed lifecycle record retained with beta.7 staging evidence; it cannot satisfy beta.10 current-version authority. |
 | `docs/current/release/consumer-authority-beta8-acceptance.json` | machine-readable release contract | v0.8.0-beta.8 | Historical source/packed lifecycle and beta.7 expiry record. The later beta.8 original-artifact discovery failure is recorded by the beta.9 acceptance contract. |
 | `docs/current/release/consumer-authority-beta9-acceptance.json` | machine-readable release contract | v0.8.0-beta.9 | Historical source/packed lifecycle record for beta.8 discovery-to-binding; beta.9's independently verified original artifact and endpoint failure are recorded by the beta.10 acceptance contract. |
@@ -233,7 +234,8 @@ Total indexed files: 336
 | `docs/current/release/consumer-authority-beta16-acceptance.json` | machine-readable release contract | v0.8.0-beta.16 | Historical source/packed public initialization, root-bound exact-tar package proof, canonical no-token gh parser preflight, and modeled authority-backed Finish readiness contract. |
 | `docs/current/release/consumer-authority-beta17-acceptance.json` | machine-readable release contract | v0.8.0-beta.17 | Source/packed public initialization, root-bound exact-tar package proof, canonical no-token command and transport parser preflights, safe external ZIP handoff, and authority-backed Finish readiness contract with modeled exact-once consumption/replay and one future current-version artifact residual. |
 | `docs/current/release/consumer-authority-beta18-acceptance.json` | machine-readable release contract | v0.8.0-beta.18 | Source/packed lifecycle and package-root contract extended with the strict Node20 canonical packer, isolated Node24 publisher, exact canonical-tar dry-run, and one hosted registry PUT/readback residual. |
-| `docs/current/release/consumer-authority-beta19-acceptance.json` | machine-readable release contract | v0.8.0-beta.19 | Source/packed lifecycle and package-root contract extended with workflow-bound canonical source-to-registry-byte reconciliation and sanitized failed-readback evidence. |
+| `docs/current/release/consumer-authority-beta19-acceptance.json` | machine-readable release contract | v0.8.0-beta.19 | Historical source/packed lifecycle and package-root contract extended with workflow-bound canonical source-to-registry-byte reconciliation and sanitized failed-readback evidence. |
+| `docs/current/release/consumer-authority-beta22-acceptance.json` | machine-readable release contract | v0.8.0-beta.22 | Current procedure-only source/packed observer contract binding the immutable final-observer procedure record, source-bound pre-push commit, and one hosted residual. |
 | `docs/current/release/consumer-authority-beta.md` | operational stable | - | Staging-first Consumer Authority Beta lifecycle boundary with fixed tag/readback, original-artifact consumer verification, and separately approved next promotion. |
 | `docs/current/release/production-integrity-audit.md` | operational stable | - | Fixed protected-main read-only Actions audit contract with sanitized digest-bound durable output; it cannot mutate release state or grant authority. |
 | `docs/current/rule-curation.md` | current compatibility doc | - | Compatibility/current-era doc retained in place; migrate by summary and pointer before moving. |

package/docs/current/release/README.md

@@ -81,33 +81,46 @@ incorrectly required an unsupported registry `gitHead` metadata field.
 `0.8.0-beta.20` is immutable staging-only evidence: live authority fetch reached
 `trusted/unconsumed`, then Finish correctly blocked before consumption because
 the observer had not initialized the same consumer workflow state.
-`0.8.0-beta.21` is the next strict-prerelease source-preparation candidate; it
-has no source-level claim of a tag, publish, channel movement, GitHub release,
-or original signed consumer artifact. Its release contract requires
-package-visible observer credential preflight, separate caller/reusable signer
-binding, and a complete public Java/Spring readiness route whose default Finish
-is blocked only by `trusted-authority-required` before a fixture may be
-authorized. Beta21 binds that readiness to one exact Git-backed consumer
-CWD/HEAD and isolated HOME/store, requires trusted/unconsumed recheck in that
-same consumer before one Finish/replay, and forbids lifecycle reset or consumer
-switch after fetch. The preflights use a host-derived credential only inside its fixed
-read-only GitHub Actions worker; they do not pass that credential to `ph`, npm,
-archive tooling, or the consumer HOME. Its package evidence also starts from the
-exact complete-history bundle, not an ambient working directory: detached
-checkout, Git/manifest/lock/npm-prefix binding, normal prepack, and fresh
-installed CLI identity must all agree before the tarball is eligible for
-independent package review. The beta21 release contract additionally owns
-no-token/no-artifact attestation and artifact transport parser preflights. The
-transport plan binds the caller repository/run/artifact endpoint, exact ZIP
-bytes, and safe members before it hands an original ZIP to the separate reusable
-signer command plan. The package proof invokes plain `npm` from that bound
-detached checkout, never `npm --prefix ... pack`, and uses the exact resulting
-tarball for both source-built and fresh installed consumer contracts. Its release
-handoff keeps the Node20/npm10 canonical packer separate from the isolated
-Node24/npm11 publisher, which dry-runs and then publishes the same canonical
-tarball only. Postpublish reconciliation binds protected workflow source
-preflight to registry version, selected tag, SHA-1/SRI, raw SHA-256, and portable
-content identity; it does not require registry `gitHead`.
+`0.8.0-beta.21` is non-reusable temporal final-observer evidence: its online
+crypto and identity bindings passed only after the leaf certificate window
+expired, so authenticated fetch, Finish consumption, and replay were not run.
+`0.8.0-beta.22` is the next strict-prerelease procedure-only source candidate;
+it has no source-level claim of a tag, publish, channel movement, GitHub
+release, or original signed consumer artifact. Beta22 records the governed
+future final-observer procedure without changing product fetch, authority,
+Finish, transport, workflow, or CI behavior.
+
+The beta22 release contract requires package-visible observer credential
+preflight, separate caller/reusable signer binding, and a complete public
+Java/Spring readiness route whose default Finish is blocked only by
+`trusted-authority-required` before a fixture may be authorized. Source-bound
+bootstrap must finish before the final fixture commit. That one commit may
+contain only declared source-bound bootstrap outputs and the immutable reusable
+pin; the same unpushed final fixture commit is retained as the installed
+consumer CWD/HEAD. Later slow preparation may modify only excluded runtime or
+build state. Immediately before its one normal push, the remote parent, CWD,
+Git top-level, HEAD, and source identity must still bind to that final commit.
+No lifecycle reinitialization, consumer switch, or source reset is permitted
+after fetch.
+
+The preflights use a host-derived credential only inside their fixed read-only
+GitHub Actions worker; they do not pass that credential to `ph`, npm, archive
+tooling, or the consumer HOME. Beta22 retains the no-token/no-artifact
+attestation and artifact transport parser preflights. The transport plan binds
+the caller repository/run/artifact endpoint, exact ZIP bytes, and safe members
+before it hands an original ZIP to the separate reusable signer command plan.
+Its package evidence starts from the exact complete-history bundle, not an
+ambient working directory: detached checkout, Git/manifest/lock/npm-prefix
+binding, normal prepack, and fresh installed CLI identity must all agree before
+the tarball is eligible for independent package review. The package proof uses
+plain `npm` from that bound detached checkout, never `npm --prefix ... pack`,
+and uses the exact resulting tarball for both source-built and fresh installed
+consumer contracts. Its release handoff keeps the Node20/npm10 canonical packer
+separate from the isolated Node24/npm11 publisher, which dry-runs and then
+publishes the same canonical tarball only. Postpublish reconciliation binds
+protected workflow source preflight to registry version, selected tag, SHA-1/SRI,
+raw SHA-256, and portable content identity; it does not require registry
+`gitHead`.
 `0.7.0-rc.2` remains an earlier published `next` record.
 
 The staged-package artifact producer is a controlled future-run source:

package/docs/current/release/consumer-authority-beta.md

@@ -6,17 +6,20 @@ user-scoped consumer authority route; neither one automatically promotes a
 package or makes Finish pass.
 
 `0.8.0-beta.1` through `0.8.0-beta.20` are immutable staging-only evidence.
-Their registry and provenance observations cannot be reused as beta.21
-current-version consumer authority evidence. Beta.16's final observer accepted
+Their registry and provenance observations cannot be reused as current-version
+consumer authority evidence. Beta.16's final observer accepted
 an exit-zero API download without proving a nonempty exact ZIP, so it stopped
 before ZIP validation. Beta.17 created a canonical tarball and provenance but
 its Node20/npm10 registry PUT received an authorization-shaped E404; that is not
 a package-absence claim, and beta.16 remains present in the public registry.
 Beta.18 is immutable staging evidence: its registry bytes matched canonical
 facts, but its postpublish checker incorrectly required an unsupported registry
-`gitHead` metadata field. The active `0.8.0-beta.21` source candidate has no
-package, tag, channel movement, GitHub release, or signed consumer-project
-artifact at source preparation time.
+`gitHead` metadata field. Beta.21 is non-reusable temporal final-observer
+evidence: online crypto and identity bindings completed only after the leaf
+certificate window expired, so fetch, Finish, and replay did not run. The active
+`0.8.0-beta.22` procedure-only source candidate has no package, tag, channel
+movement, GitHub release, or signed consumer-project artifact at source
+preparation time.
 
 The prior beta candidates are retained as staging-only NO-GO or
 source-preparation evidence: none qualifies for promotion or issue closure
@@ -24,9 +27,10 @@ because it did not complete the full current-version public consumer route.
 Beta.20 reached a live `trusted/unconsumed` fetch but then correctly stopped at
 `workflow-state-uninitialized` because the observer had not prepared the same
 consumer's public lifecycle. That result consumed nothing and is not reusable.
-Beta21 binds the missing immutable same-consumer observer order. It cannot
-inherit beta.16's observer failure, beta.17's registry PUT result, beta.18's
-failed metadata predicate, an earlier lifecycle, or an earlier authority result.
+Beta22 binds the immutable same-consumer observer order and the pre-push source
+identity procedure. It cannot inherit beta.16's observer failure, beta.17's
+registry PUT result, beta.18's failed metadata predicate, beta.21's expired
+temporal result, an earlier lifecycle, or an earlier authority result.
 
 The consumer must create its own workflow state through public bootstrap and
 report/evidence commands in the exact project that later fetches authority.
@@ -37,6 +41,15 @@ After public initialization the same command must reach only
 artifact then proves one real Finish consumption and immediate replay block
 without standing in for hosted crypto evidence.
 
+For the final public fixture, source-bound bootstrap must complete before the
+final fixture commit. That one commit contains only declared source-bound
+bootstrap outputs and the immutable reusable workflow pin. The same unpushed
+final fixture commit is retained as the installed consumer CWD/HEAD; subsequent
+slow preparation may change only excluded runtime and build state. Immediately
+before the one normal push, the fixture remote parent, CWD, Git top-level, HEAD,
+and source identity must still match the final commit. No lifecycle or source
+reinitialization, consumer switch, or state reset is permitted after fetch.
+
 ## Fixed Sequence
 
 1. An approved protected-main source candidate has strict prerelease SemVer
@@ -139,12 +152,12 @@ authority artifact or Finish PASS.
 
 The external-attested fixture must pin the exact current package revision. The
 verifier binds the signed receipt `phVersion` to its installed CLI version, so
-an original artifact from `0.8.0-beta.1` through `0.8.0-beta.20` is a bounded
-binding mismatch or historical-evidence block for `0.8.0-beta.21`; only a future
+an original artifact from `0.8.0-beta.1` through `0.8.0-beta.21` is a bounded
+binding mismatch or historical-evidence block for `0.8.0-beta.22`; only a future
 original signed artifact for the current immutable version can exercise
 enrollment, fetch, explicit consumption, and replay rejection. The complete
 source/packed acceptance contract is the structured
-[`consumer-authority-beta21-acceptance.json`](consumer-authority-beta21-acceptance.json)
+[`consumer-authority-beta22-acceptance.json`](consumer-authority-beta22-acceptance.json)
 record; it names the exact public Java/Spring readiness route, the separate
 caller and reusable certificate identities, the independent observer credential
 and no-token command/transport plan preflights, the immutable same-consumer
@@ -157,7 +170,7 @@ than caller project source. The profile, Gradle descriptors, Git identity,
 reports, and evidence remain bound. This does not relax caller enrollment,
 reusable SHA/SAN, repository, source, run, original-archive, or digest checks.
 
-Before beta.21 package evidence is accepted, the verifier materializes the
+Before beta.22 package evidence is accepted, the verifier materializes the
 exact complete-history bundle in a detached no-local checkout. It binds one
 explicit canonical `refs/heads/...` candidate ref and
 `refs/remotes/origin/main`; the candidate ref must equal the expected candidate
@@ -205,7 +218,7 @@ is not retained.
 
 ## Live Verification Deadline
 
-Before the one natural beta.21 fixture push, an independent observer must prepare
+Before the one natural beta.22 fixture push, an independent observer must prepare
 one exact Git-backed registry consumer CWD/HEAD and one private consumer `HOME`.
 It must first complete the public bootstrap/Gradle/report/evidence/plan route and
 confirm default Finish is blocked only by `trusted-authority-required`; it may

package/docs/current/release/consumer-authority-beta22-acceptance.json

@@ -0,0 +1,587 @@
+{
+  "schemaVersion": "consumer-authority-beta22-acceptance.1",
+  "package": {
+    "channel": "staging",
+    "scope": "staging-only",
+    "version": "0.8.0-beta.22"
+  },
+  "packageBoundary": {
+    "bundle": {
+      "requiredRefs": [
+        "explicit-single-refs-heads-candidate-must-match-expected-head",
+        "refs/remotes/origin/main"
+      ],
+      "verification": "git-bundle-verify-and-exact-ref-binding",
+      "baseComparison": "independent-no-local-base-checkout-under-the-same-npm-policy"
+    },
+    "cleanCheckout": {
+      "requiredBindings": [
+        "checkout-cwd",
+        "git-toplevel",
+        "npm-prefix",
+        "resolved-package-json-path",
+        "resolved-package-lock-path",
+        "HEAD-package-json-bytes",
+        "HEAD-package-lock-bytes"
+      ],
+      "sourceFallback": "forbidden"
+    },
+    "npm": {
+      "invocation": "plain-npm-from-bound-detached-checkout-cwd",
+      "packPrefixFlag": "forbidden",
+      "global": false,
+      "ignoreScriptsBeforePack": false,
+      "install": "npm-ci-ignore-scripts",
+      "workspaces": false
+    },
+    "pack": {
+      "metadata": "name-version-filename-must-match-frozen-package-and-lock",
+      "prepack": "package-root-build-script-derived-from-its-own-package-root",
+      "postcondition": "fresh-installed-cli-version-must-match-tarball-version"
+    },
+    "authoritativeBundleContract": {
+      "command": "node scripts/verify-clean-package-boundary.mjs --exercise-contract",
+      "baseAndTarget": "fresh-detached-no-local-checkouts-from-the-same-complete-bundle",
+      "candidateRef": "explicit-single-refs-heads-candidate-must-match-expected-head",
+      "headAlias": "optional-head-mapping-must-match-the-same-expected-head",
+      "sourceCandidateRef": "refs/heads/clean-package-source",
+      "rejectBeforePack": "launcher-cwd-or-manifest-outside-bound-checkout",
+      "sourceContract": "built-cli-package-exercise-contract-under-the-same-executable",
+      "installedContract": "fresh-installed-package-exercise-uses-the-exact-canonical-target-tarball-sha256-and-package-content-identity-before-the-separate-node24-publisher-handoff",
+      "fullJavaGradleContract": "source-and-fresh-installed-full-contract-on-a-provisioned-java-gradle-host",
+      "partialCloneSourceHydration": "only-a-blob-none-promisor-clone-with-the-exact-canonical-origin-may-no-filter-hydrate-the-retained-origin-main-sha-before-local-bundle-materialization-without-moving-refs"
+    },
+    "contentIdentity": {
+      "aggregate": "sorted-package-relative-path-type-normalized-allowed-mode-size-sha256",
+      "allowedMemberTypes": [
+        "regular"
+      ],
+      "allowedModes": [
+        "0600",
+        "0644",
+        "0700",
+        "0755"
+      ],
+      "canonicalPacker": {
+        "environment": [
+          "isolated-HOME",
+          "isolated-npm-cache",
+          "isolated-npm-config",
+          "isolated-git-config",
+          "umask-0022",
+          "LANG-C",
+          "LC_ALL-C",
+          "TZ-UTC",
+          "SOURCE_DATE_EPOCH-0"
+        ],
+        "node": "20.19.0",
+        "npm": "10.8.2",
+        "publish": "handoff-one-exact-canonical-tarball-to-isolated-node24-npm11-publisher"
+      },
+      "crossEnvironment": "compare-package-content-identity-not-generic-independent-npm-pack-raw-tar-sha256",
+      "rawTarballSha256": "valid-only-for-the-exact-canonical-supplied-tarball-or-postpublish-registry-blob",
+      "registryReadback": "require-protected-main-tag-source-preflight-and-registry-version-sha1-sri-raw-sha256-and-package-content-identity-to-match-frozen-canonical-package-facts-without-registry-githead",
+      "retainedExternalDiagnostics": {
+        "beta16": {
+          "contentOnlySha256": "9bb1c7eaeceb79d198d7baafdaea9c8bc73cd8750209ea5aa76cfc46070e0832",
+          "entryCount": 1191,
+          "identitySha256": "9eac0bdc041e8e616bd6e4de3ba49e8490b8a269f3f0d3e520027833b927c332",
+          "modeCounts": {
+            "0600": 296,
+            "0644": 887,
+            "0700": 7,
+            "0755": 1
+          }
+        },
+        "beta17": {
+          "contentOnlySha256": "d411a23a2343cd21e33ac30250ed903934968e214b7f198ccd0ea91a7d6bf580",
+          "entryCount": 1200,
+          "identitySha256": "5771dc973dd95e5d3f8b01a9e17becf3c17223b3d94aed692e5248e0c3054c5e",
+          "modeCounts": {
+            "0600": 305,
+            "0644": 887,
+            "0700": 7,
+            "0755": 1
+          }
+        },
+        "headerClassification": "normalized-gzip-tar-headers-do-not-explain-the-retained-content-or-mode-identity-delta",
+        "reuse": "diagnostic-only-not-acceptance-evidence"
+      },
+      "schemaVersion": "package-content-identity.1",
+      "publisherRuntime": "node24.18.0-npm11.16.0-dry-run-and-real-publish-use-identical-canonical-tarball-argv"
+    },
+    "registryReadback": {
+      "failureEvidence": "sanitized-readback-is-uploaded-even-when-postpublish-reconciliation-blocks",
+      "sourceBinding": "workflow-verified-canonical-tar",
+      "unsupportedMetadata": "registry-githead-is-neither-required-nor-reflected"
+    }
+  },
+  "preAuthorityReadiness": {
+    "consumer": "exact-registry-installed-java-spring-gradle",
+    "commands": [
+      "ph bootstrap backend --strict --no-developer-mcp",
+      "ph bearshell ./gradlew test",
+      "ph bearshell ./gradlew compileJava",
+      "ph bearshell ./gradlew clean",
+      "ph evidence read README.md",
+      "ph evidence read .persona/project-profile.jsonc",
+      "ph evidence read src/main/java/example/cooperative/GreetingService.java",
+      "ph plan --report-filled implementation --stdin",
+      "ph plan --report-filled review --stdin"
+    ],
+    "expectedDefaultFinish": {
+      "absentBlockers": [
+        "implementation-report-missing",
+        "review-report-missing",
+        "evidence-missing",
+        "report-coverage-missing",
+        "profile-read-coverage-missing",
+        "java-role-read-coverage-missing",
+        "workflow-loop-state-absent",
+        "ralph-loop-state-absent"
+      ],
+      "primaryBlocker": "trusted-authority-required",
+      "status": "blocked"
+    },
+    "publicOutput": {
+      "absoluteWorkspacePaths": "omitted",
+      "stableReferences": [
+        ".persona/workflow/plan.md",
+        ".persona/workflow/implementation-report.md",
+        ".persona/workflow/review-report.md"
+      ]
+    },
+    "initialization": {
+      "acceptedPlan": "ph bootstrap backend --strict --no-developer-mcp",
+      "binding": {
+        "consumerRoot": "same-canonical-project-root",
+        "profile": ".persona/project-profile.jsonc",
+        "reportsAndEvidence": "public-command-created-only",
+        "sourceIdentity": "current-git-source-identity"
+      },
+      "inactiveFinish": {
+        "blocker": "workflow-state-uninitialized",
+        "status": "blocked"
+      },
+      "loopState": [
+        ".persona/workflow/workflow-loop-state.json",
+        ".persona/workflow/ralph-loop-state.json"
+      ],
+      "sameConsumer": true
+    },
+    "negativeCases": [
+      "absolute-workspace-or-temp-path-public-output",
+      "missing-or-malformed-report",
+      "repeated-control-or-oversized-report",
+      "missing-unsafe-replaced-or-identity-drifted-evidence",
+      "workflow-or-ralph-loop-missing-malformed-or-unsafe",
+      "default-finish-has-no-authority-side-effect"
+    ],
+    "proof": "source-built-and-fresh-packed-installed-public-cli"
+  },
+  "authority": {
+    "binding": {
+      "callerEnrollment": {
+        "repositoryId": 1304576182,
+        "repositorySlug": "jyt6640/persona-harness-attestation-claim-fixture",
+        "workflowPath": ".github/workflows/research-attestation.yml",
+        "workflowRef": "refs/heads/main"
+      },
+      "reusableSigner": {
+        "certificateSanIdentity": "reusable-producer-workflow",
+        "workflowPath": ".github/workflows/persona-harness-project-finish.yml"
+      },
+      "runtimeSourceProjection": {
+        "excludedRuntimeMetadata": [
+          ".persona/.ph-init-manifest.json",
+          ".persona/workflow"
+        ],
+        "reason": "bootstrap-local ownership metadata contains the consumer real path and is not caller project source",
+        "stillBound": [
+          ".persona/project-profile.jsonc",
+          "root-gradle-build-and-settings",
+          "git-source-identity",
+          "public-reports-and-evidence"
+        ]
+      },
+      "required": [
+        "caller-workflow-filename-ref-and-sha",
+        "reusable-workflow-sha-and-certificate-SAN",
+        "repository-id-and-slug",
+        "source-head-and-source-identity",
+        "workflow-run-and-attempt",
+        "artifact-id-and-sha256",
+        "original-archive-members"
+      ],
+      "storeSchema": "consumer-authority-original-artifact.2"
+    },
+    "modeledContract": {
+      "acceptedTopology": "separate-enrolled-caller-and-reusable-signer",
+      "proof": "source-built-and-fresh-packed-installed-public-bootstrap-bound-discovery-exact-once-finish-and-replay-test",
+      "rejected": [
+        "caller-workflow-mismatch",
+        "reusable-workflow-or-certificate-SAN-mismatch",
+        "repository-source-or-run-mismatch",
+        "artifact-digest-or-archive-mismatch",
+        "stale-or-replayed-terminal-record"
+      ],
+      "authorityClaim": "none-before-a-current-original-artifact-is-verified-online"
+    },
+    "fixturePlan": {
+      "artifact": "project-finish-attestation",
+      "consumer": "public-java-spring-gradle",
+      "postmergeAction": "normal-push-to-main",
+      "registryInstall": "npm install persona-harness@0.8.0-beta.22 --registry https://registry.npmjs.org"
+    },
+    "hostedFixture": {
+      "callerWorkflowPath": ".github/workflows/research-attestation.yml",
+      "certificateSanIdentity": "reusable-producer-workflow",
+      "event": "push",
+      "ref": "refs/heads/main",
+      "repository": "jyt6640/persona-harness-attestation-claim-fixture",
+      "reusableWorkflowPath": ".github/workflows/persona-harness-project-finish.yml",
+      "revision": "postmerge-persona-harness-beta22-main-sha"
+    },
+    "verification": {
+      "predicate": "project-finish-attestation.1",
+      "route": "fixed-product-owned-online",
+      "unavailable": "bounded-non-authoritative"
+    },
+    "fetchDiagnostic": {
+      "allowedCodes": [
+        "authority-fetch-evidence",
+        "authority-fetch-invalid",
+        "authority-fetch-network",
+        "authority-fetch-policy"
+      ],
+      "childEnvelope": "only-exit-one-fixed-code-ok-false",
+      "persistence": "blocked-child-leaves-no-artifact-or-authority-state",
+      "privacy": "no-token-path-url-or-raw-child-output",
+      "publicState": "missing"
+    }
+  },
+  "externalAttestationCommandPlan": {
+    "certificateOidcIssuer": "https://token.actions.githubusercontent.com",
+    "command": [
+      "attestation",
+      "verify"
+    ],
+    "denySelfHostedRunners": true,
+    "exitClassification": {
+      "authenticationRequired": 4,
+      "normalVerificationFailure": 1,
+      "verified": 0
+    },
+    "format": "json",
+    "predicateType": "https://github.com/jyt6640/persona-harness/attestations/project-finish-attestation.1",
+    "repositorySelector": {
+      "flag": "--repo",
+      "source": "caller-enrollment.repositorySlug"
+    },
+    "schemaVersion": "consumer-authority-external-attestation-command-plan.1",
+    "signerDigest": {
+      "flag": "--signer-digest",
+      "source": "reusable-signer.workflowSha"
+    },
+    "signerSelector": {
+      "flag": "--signer-workflow",
+      "source": "reusable-signer.workflowPath"
+    },
+    "sourceDigest": {
+      "flag": "--source-digest",
+      "source": "caller-source.sourceSha"
+    },
+    "sourceRef": {
+      "flag": "--source-ref",
+      "source": "caller-source.ref"
+    },
+    "tokenIsolation": {
+      "artifactAccess": "forbidden-during-preflight",
+      "credential": "absent",
+      "output": "bounded-classification-only"
+    }
+  },
+  "prearmedExternalHandoff": {
+    "prepare": {
+      "allowedBeforeFixture": [
+        "prepare-one-exact-git-backed-fixture-clone-and-isolated-home-store",
+        "source-bound-bootstrap-before-final-fixture-commit",
+        "retain-identical-unpushed-final-fixture-commit-as-the-installed-consumer-cwd-head",
+        "post-commit-excluded-runtime-build-only-preparation",
+        "pre-push-parent-cwd-top-level-head-and-source-identity-assertion",
+        "public-pre-authority-readiness",
+        "public-initialized-finish-state",
+        "observer-credential-preflight",
+        "external-attestation-command-plan-preflight",
+        "external-artifact-transport-plan-preflight",
+        "enroll-after-prefetch-readiness",
+        "status-and-explain-on-ready-same-consumer"
+      ],
+      "consumer": "isolated-exact-registry-install",
+      "credentialPreflight": {
+        "acquisition": "host-gh-auth-token-read-once",
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-observer.mjs --json",
+        "consumerHome": "isolated-ephemeral",
+        "hostCredential": "host-gh-only",
+        "logging": "forbidden",
+        "observerWorker": "github-actions-read-only",
+        "persistence": "forbidden",
+        "productFallback": "forbidden",
+        "scope": "fixed-authenticated-user-and-empty-sentinel-actions-metadata",
+        "tokenEnvironment": "PH_OBSERVER_PREFLIGHT_GITHUB_TOKEN"
+      },
+      "attestationCommandPreflight": {
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-external-attestation.mjs --json",
+        "credential": "absent",
+        "input": "no-artifact-grammar-sentinel-only",
+        "output": "bounded-exit-classification-only",
+        "productFallback": "forbidden"
+      },
+      "prohibitedBeforeArtifact": [
+        "artifact-download",
+        "online-crypto-validation",
+        "authority-fetch",
+        "finish-consumption",
+        "replay-observation"
+      ],
+      "requiredBeforeFixtureAuthorization": "public-initialized-finish-blocked-only-on-trusted-authority-required",
+      "artifactTransportPreflight": {
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-external-artifact-transport.mjs --json",
+        "credential": "absent",
+        "input": "no-artifact-fixed-topology-and-metadata-sentinel-only",
+        "output": "bounded-parser-classification-only",
+        "productFallback": "forbidden"
+      }
+    },
+    "trigger": {
+      "onlyAfter": "immutable-prepush-fixture-commit-and-final-observer-procedure-prefetch-ready-and-natural-current-version-original-artifact",
+      "steps": [
+        "pre-push-fixture-parent-cwd-head-and-source-identity-ready",
+        "normal-push-of-the-same-final-fixture-commit-to-main",
+        "current-original-artifact-transport-and-online-crypto",
+        "verify-online-before-leaf-certificate-notAfter",
+        "authority-fetch-discovers-and-binds-original-artifact",
+        "same-consumer-trusted-unconsumed-no-readiness-blocker",
+        "finish-consume-once",
+        "finish-replay-blocked"
+      ]
+    },
+    "nonAuthority": [
+      "preflight-does-not-self-validate",
+      "readiness-does-not-authorize-fixture",
+      "readiness-does-not-grant-authority",
+      "readiness-does-not-persist-or-log-host-credential",
+      "command-plan-preflight-does-not-access-artifact-or-network",
+      "command-plan-preflight-does-not-reuse-beta15-artifact",
+      "transport-plan-preflight-does-not-access-an-artifact-or-network",
+      "transport-model-safety-is-not-online-crypto-or-authority-evidence"
+    ],
+    "finalObserverProcedure": {
+      "failureHandling": {
+        "afterFetch": "do-not-reinitialize-switch-reset-or-retry",
+        "beforeFetch": "abandon-and-recreate-the-consumer-before-any-live-fetch"
+      },
+      "liveSteps": [
+        "normal-push-of-the-same-final-fixture-commit-to-main",
+        "current-original-artifact-transport-and-online-crypto-within-leaf-window",
+        "authenticated-fetch-once",
+        "same-consumer-status-and-explain-trusted-unconsumed-with-no-readiness-blocker",
+        "Finish-consume-once",
+        "immediate-Finish-replay-blocked"
+      ],
+      "noReinitializationAfterFetch": [
+        "consumer-cwd-git-head-or-source-profile-change",
+        "consumer-home-or-authority-store-replacement",
+        "bootstrap-plan-report-evidence-or-loop-state-reset",
+        "consumer-switch-or-copied-state"
+      ],
+      "postCommitPreparation": {
+        "allowedMutations": [
+          ".persona/.ph-init-manifest.json",
+          ".persona/evidence/**",
+          ".persona/workflow/**",
+          ".gradle/**",
+          "build/**",
+          "node_modules/**"
+        ],
+        "forbiddenSourceBoundMutations": [
+          ".github/workflows/research-attestation.yml",
+          ".gitignore",
+          ".opencode/opencode.json",
+          ".persona/conventions/**",
+          ".persona/harness.jsonc",
+          ".persona/policies/**",
+          ".persona/project-profile.jsonc",
+          ".persona/rules/**",
+          "AGENTS.md",
+          "root-gradle-build-and-settings",
+          "src/**"
+        ]
+      },
+      "prePushCommit": {
+        "cwd": "must-be-exact-fixture-git-toplevel-and-canonical-project-root",
+        "finalCommit": "one-final-commit-contains-only-allowed-source-bound-bootstrap-outputs-and-reusable-pin",
+        "head": "must-remain-the-identical-unpushed-final-fixture-commit",
+        "remoteParent": "must-remain-unchanged-immediately-before-normal-push",
+        "sourceBoundBootstrap": "must-complete-before-final-commit",
+        "sourceIdentity": "must-be-clean-except-excluded-runtime-and-build-residue"
+      },
+      "prefetchSteps": [
+        "one-exact-git-backed-fixture-clone-cwd-head-and-isolated-home-store",
+        "source-bound-bootstrap-before-final-fixture-commit",
+        "one-final-commit-with-only-source-bound-bootstrap-allowlist-and-reusable-pin",
+        "post-commit-excluded-runtime-build-only-preparation",
+        "pre-push-parent-cwd-top-level-head-and-source-identity-assertion",
+        "public-bootstrap-accepted-plan-and-current-loop-state",
+        "public-Gradle-test-compileJava-and-clean",
+        "public-README-profile-and-Java-evidence",
+        "public-implementation-and-review-report-ingress",
+        "public-plan-status",
+        "default-Finish-blocked-only-trusted-authority-required"
+      ],
+      "procedureRecord": {
+        "location": "coordinator-governed-immutable-external-procedure-record-no-local-path",
+        "sha256": "8b2537fa1ca4e8209790a3c9539666abbb0a5ffda13d6a82cb9e5c7e2635b863"
+      },
+      "schemaVersion": "consumer-authority-final-observer-procedure.2"
+    }
+  },
+  "hostedResidual": {
+    "id": "beta22-prearmed-same-commit-current-artifact-fetch-consume-replay",
+    "requiredEvidence": "one separately authorized normal push of the prearmed exact fixture commit; immediate current-version original-artifact transport, online verification before leaf-certificate-notAfter, one authenticated fetch, one Finish consumption, and immediate replay rejection occur in the same unchanged consumer",
+    "whyLocalCannotClose": "A real current signed artifact, leaf-certificate validity window, isolated external credential, online verification, and GitHub Actions discovery cannot be produced locally. Local source and packed contracts prove the pre-push source identity procedure, public readiness, privacy, trusted modeled fetch, one Finish consumption, and replay block without accessing a live artifact."
+  },
+  "mutationBoundary": {
+    "performed": false,
+    "prohibited": [
+      "npm-publish",
+      "tag-or-dist-tag-mutation",
+      "release-creation",
+      "artifact-download-or-live-verification",
+      "Finish-consumption",
+      "fixture-push-or-workflow-dispatch"
+    ]
+  },
+  "beta16HistoricalExternal": {
+    "outcome": "external-gh-artifact-download-exit-zero-with-zero-byte-output-before-zip-validation",
+    "reusableForBeta17": false,
+    "version": "0.8.0-beta.16"
+  },
+  "externalArtifactTransportPlan": {
+    "api": {
+      "accept": "application/vnd.github+json, application/octet-stream",
+      "origin": "https://api.github.com",
+      "version": "2022-11-28"
+    },
+    "artifact": {
+      "maximumBytes": 8388608,
+      "source": "validated-actions-artifact-metadata"
+    },
+    "endpoint": {
+      "method": "GET",
+      "path": "/repos/{caller-enrollment.repositorySlug}/actions/artifacts/{artifact.id}/zip"
+    },
+    "output": {
+      "files": [
+        "original.zip",
+        "bundle.json"
+      ],
+      "root": "private-observer-mkdtemp",
+      "write": "no-follow-reserved-and-promote-after-validation"
+    },
+    "redirect": {
+      "authorization": "api-origin-only",
+      "maximum": 1,
+      "permittedHosts": [
+        "pipelines.actions.githubusercontent.com",
+        "results-receiver.actions.githubusercontent.com",
+        "*.blob.core.windows.net"
+      ]
+    },
+    "response": {
+      "contentTypes": [
+        "application/octet-stream",
+        "application/zip"
+      ],
+      "status": 200,
+      "timeoutMs": 15000
+    },
+    "schemaVersion": "consumer-authority-external-artifact-transport-plan.1"
+  },
+  "beta17HistoricalPublish": {
+    "beta16Registry": "present-in-public-registry",
+    "outcome": "canonical-tar-and-provenance-completed-before-authorization-shaped-registry-put-e404",
+    "reusableForBeta18": false,
+    "version": "0.8.0-beta.17"
+  },
+  "canonicalPackagePublisherPlan": {
+    "canonicalPackerRuntime": {
+      "node": "20.19.0",
+      "npm": "10.8.2"
+    },
+    "canonicalTar": {
+      "handoff": "exact-canonical-tarball-sha256-and-package-content-identity",
+      "source": "canonical-package-packer-output-and-package-facts"
+    },
+    "preflight": {
+      "argv": [
+        "npm",
+        "publish",
+        "<canonical-tarball>",
+        "--access",
+        "public",
+        "--tag",
+        "<selected-dist-tag>",
+        "--provenance",
+        "--dry-run"
+      ],
+      "credentials": "no-custom-token-exchange-or-auth-state-output",
+      "mode": "node24-npm11-exact-canonical-tarball-dry-run"
+    },
+    "publisherEnvironment": {
+      "canonicalPackerConfigInheritance": "forbidden",
+      "isolated": [
+        "HOME",
+        "NPM_CONFIG_CACHE",
+        "NPM_CONFIG_GLOBALCONFIG",
+        "NPM_CONFIG_USERCONFIG"
+      ]
+    },
+    "publisherRuntime": {
+      "node": "24.18.0",
+      "npm": "11.16.0"
+    },
+    "npmTrustedPublishingMinimum": {
+      "node": "22.14.0",
+      "npm": "11.5.1"
+    },
+    "registryPut": {
+      "evidence": "hosted-only",
+      "historicalBeta17": "authorization-shaped-registry-response-not-package-absence"
+    },
+    "schemaVersion": "canonical-package-publisher-plan.1"
+  },
+  "beta18HistoricalPublish": {
+    "contentIdentity": "bf3de031ae9ed6d9ab290291f151d0befc1fc4804465f55bddb5ad382399a150",
+    "outcome": "registry-publish-succeeded-and-canonical-registry-bytes-matched-before-an-unsupported-githead-metadata-requirement-blocked-readback",
+    "rawTarballSha256": "66ef460552d03fd067baf412c1d4952e5bd42811b419c585092fc7a75b4c54e6",
+    "reusableForBeta19": false,
+    "version": "0.8.0-beta.18"
+  },
+  "beta19HistoricalPublish": {
+    "outcome": "published-immutable-staging-package-not-reusable-as-current-package-evidence",
+    "reusableForBeta20": false,
+    "version": "0.8.0-beta.19"
+  },
+  "beta20HistoricalFinalObserver": {
+    "outcome": "trusted-unconsumed-live-fetch-followed-by-intentional-workflow-state-uninitialized-block-not-reusable-as-closure-evidence",
+    "procedureRecordSha256": "1d370a4e4cdd55b20e27c016073246b78c373548c84c89c3499b3838e27980a7",
+    "reusableForBeta21": false,
+    "version": "0.8.0-beta.20"
+  },
+  "beta21HistoricalFinalObserver": {
+    "outcome": "online-crypto-and-bindings-passed-after-leaf-window-expired-before-authority-fetch-not-reusable-as-closure-evidence",
+    "reusableForBeta22": false,
+    "version": "0.8.0-beta.21"
+  }
+}

package/docs/current/release/v0.8.0-beta.22-release-notes.md

@@ -0,0 +1,59 @@
+# v0.8.0-beta.22 Release Notes
+
+## Pre-Push Final Observer Procedure
+
+This document records the `0.8.0-beta.22` Consumer Authority Beta
+procedure-only source candidate. It makes no npm publication, tag, dist-tag
+movement, GitHub release, original signed consumer artifact, promotion, Finish
+authority, or issue closure claim.
+
+`0.8.0-beta.21` is non-reusable temporal final-observer evidence. Its online
+crypto and identity bindings passed only after the leaf certificate window
+expired, so authenticated fetch, Finish consumption, and replay were not run.
+That timing result is not a product defect and must not be retried.
+
+Beta22 changes no product fetch, authority, Finish, transport, workflow, or CI
+behavior. It binds the coordinator-governed immutable future final-observer
+procedure record by SHA-256
+`8b2537fa1ca4e8209790a3c9539666abbb0a5ffda13d6a82cb9e5c7e2635b863`.
+No local absolute path is a source of truth.
+
+The package-visible
+[`consumer-authority-beta22-acceptance.json`](consumer-authority-beta22-acceptance.json)
+record binds the procedure to the existing release and observer boundaries.
+
+## Required Procedure
+
+Use one exact Git-backed fixture clone and one isolated consumer HOME/store.
+Complete source-bound bootstrap before the final fixture commit. The final
+commit may contain only the immutable reusable workflow pin and declared
+source-bound bootstrap outputs. Retain that same unpushed final fixture commit
+as the installed consumer CWD/HEAD.
+
+After that commit, slow preparation may modify only excluded runtime or build
+state: the bootstrap-local `.persona/.ph-init-manifest.json`, `.persona/evidence`,
+`.persona/workflow`, `.gradle`, `build`, and `node_modules`. It may not alter
+the pin, source-bound bootstrap files, project source, root Gradle descriptors,
+or the Git identity. Immediately before the one normal push, require the remote
+parent, CWD, Git top-level, HEAD, and source identity to remain bound to that
+final commit.
+
+Before enrollment, live artifact work, or fetch, run public strict bootstrap,
+the accepted plan/current loops, Gradle test/compileJava/clean,
+README/profile/Java evidence reads, public implementation/review report ingress,
+and plan status. A default Finish must then block only on
+`trusted-authority-required`. Only that unchanged consumer may enroll, fetch
+the one current artifact, recheck trusted/unconsumed status and explain with no
+readiness blocker, consume Finish once, and check immediate replay rejection.
+After fetch, do not bootstrap, reset/copy lifecycle state, change CWD/HEAD/
+source/profile, replace HOME/store, or switch consumers. A prefetch failure
+requires abandoning and recreating the consumer before any live fetch.
+
+## Required Live Evidence
+
+After protected integration and current-package installation, the sole hosted
+residual is one separately authorized normal push of the prearmed final fixture
+commit. The observer immediately performs original-artifact transport, online
+verification inside the leaf window, authenticated fetch, one Finish consumption,
+and replay rejection in that same unchanged consumer. It does not substitute
+local modeled evidence for live crypto or authority.

package/docs/releases/package-index.md

@@ -141,6 +141,7 @@ Use this index to scan package history. Use the linked release notes,
 | `0.8.0-beta.17` | 2026-08-02 | historical Consumer Authority Beta source preparation | [`release notes`](../current/release/v0.8.0-beta.17-release-notes.md), [`beta lifecycle`](../current/release/consumer-authority-beta.md) | canonical tar and provenance were created, but the Node20/npm10 registry PUT was authorization-shaped; it is not a package-absence or authority fact |
 | `0.8.0-beta.18` | 2026-08-02 | immutable Consumer Authority Beta staging evidence | [`release notes`](../current/release/v0.8.0-beta.18-release-notes.md), [`beta lifecycle`](../current/release/consumer-authority-beta.md) | registry bytes matched canonical facts, but an unsupported registry gitHead predicate blocked workflow readback; it is not reusable lifecycle evidence |
 | `0.8.0-beta.19` | 2026-08-02 | Consumer Authority Beta source preparation | [`release notes`](../current/release/v0.8.0-beta.19-release-notes.md), [`beta lifecycle`](../current/release/consumer-authority-beta.md) | workflow-bound canonical source to registry-byte reconciliation with one fresh hosted registry PUT/readback residual |
+| `0.8.0-beta.22` | 2026-08-02 | Consumer Authority Beta procedure-only source preparation | [`release notes`](../current/release/v0.8.0-beta.22-release-notes.md), [`beta lifecycle`](../current/release/consumer-authority-beta.md) | source-bound bootstrap before one final fixture commit; the same unpushed commit is the installed consumer CWD/HEAD for the one future hosted observation |
 
 ## Future Migration Notes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "persona-harness",
-  "version": "0.8.0-beta.21",
+  "version": "0.8.0-beta.22",
   "private": false,
   "type": "module",
   "packageManager": "npm@10.8.2",
@@ -150,6 +150,8 @@
     "scripts/consumer-authority-beta20-acceptance-schema.mjs",
     "scripts/consumer-authority-beta21-acceptance-schema.d.mts",
     "scripts/consumer-authority-beta21-acceptance-schema.mjs",
+    "scripts/consumer-authority-beta22-acceptance-schema.d.mts",
+    "scripts/consumer-authority-beta22-acceptance-schema.mjs",
     "scripts/consumer-authority-external-artifact-transport-plan.d.mts",
     "scripts/consumer-authority-external-artifact-transport-plan.mjs",
     "scripts/consumer-authority-external-observer-boundary.d.mts",

package/scripts/consumer-authority-beta22-acceptance-schema.d.mts

@@ -0,0 +1,9 @@
+export const BETA22_ACCEPTANCE_SCHEMA_VERSION: "consumer-authority-beta22-acceptance.1"
+
+export class Beta22AcceptanceManifestError extends Error {
+  readonly code: string
+}
+
+export function canonicalBeta22AcceptanceManifest(): Readonly<Record<string, unknown>>
+export function readBeta22AcceptanceManifest(packageRoot: string): Readonly<Record<string, unknown>>
+export function parseBeta22AcceptanceManifest(value: unknown, packageVersion: string): Readonly<Record<string, unknown>>

package/scripts/consumer-authority-beta22-acceptance-schema.mjs

@@ -0,0 +1,171 @@
+import { readFileSync } from "node:fs"
+import { join } from "node:path"
+import { isDeepStrictEqual } from "node:util"
+
+import { canonicalBeta21AcceptanceManifest } from "./consumer-authority-beta21-acceptance-schema.mjs"
+import {
+  parseCanonicalPackagePublisherPlan,
+} from "./canonical-package-publisher.mjs"
+import {
+  parseExternalArtifactTransportPlan,
+} from "./consumer-authority-external-artifact-transport-plan.mjs"
+import { parseExternalAttestationCommandPlan } from "./consumer-authority-external-attestation-command-plan.mjs"
+
+export const BETA22_ACCEPTANCE_SCHEMA_VERSION = "consumer-authority-beta22-acceptance.1"
+
+const BETA22_PACKAGE_VERSION = "0.8.0-beta.22"
+const ACCEPTANCE_PATH = join("docs", "current", "release", "consumer-authority-beta22-acceptance.json")
+const PROCEDURE_RECORD_SHA256 = "8b2537fa1ca4e8209790a3c9539666abbb0a5ffda13d6a82cb9e5c7e2635b863"
+const EXPECTED_MANIFEST = buildExpectedManifest()
+
+export class Beta22AcceptanceManifestError extends Error {
+  constructor(code) {
+    super(code)
+    this.code = code
+  }
+}
+
+export function canonicalBeta22AcceptanceManifest() {
+  return structuredClone(EXPECTED_MANIFEST)
+}
+
+export function readBeta22AcceptanceManifest(packageRoot) {
+  let packageVersion
+  let value
+  try {
+    packageVersion = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8")).version
+    value = JSON.parse(readFileSync(join(packageRoot, ACCEPTANCE_PATH), "utf8"))
+  } catch {
+    fail()
+  }
+  return parseBeta22AcceptanceManifest(value, packageVersion)
+}
+
+export function parseBeta22AcceptanceManifest(value, packageVersion) {
+  if (packageVersion !== BETA22_PACKAGE_VERSION || !isDeepStrictEqual(value, EXPECTED_MANIFEST)) fail()
+  parseCanonicalPackagePublisherPlan(value.canonicalPackagePublisherPlan)
+  parseExternalAttestationCommandPlan(value.externalAttestationCommandPlan)
+  parseExternalArtifactTransportPlan(value.externalArtifactTransportPlan)
+  return value
+}
+
+function buildExpectedManifest() {
+  const manifest = canonicalBeta21AcceptanceManifest()
+  manifest.schemaVersion = BETA22_ACCEPTANCE_SCHEMA_VERSION
+  manifest.package.version = BETA22_PACKAGE_VERSION
+  manifest.beta21HistoricalFinalObserver = {
+    outcome: "online-crypto-and-bindings-passed-after-leaf-window-expired-before-authority-fetch-not-reusable-as-closure-evidence",
+    reusableForBeta22: false,
+    version: "0.8.0-beta.21",
+  }
+  manifest.authority.fixturePlan.registryInstall = "npm install persona-harness@0.8.0-beta.22 --registry https://registry.npmjs.org"
+  manifest.authority.hostedFixture.revision = "postmerge-persona-harness-beta22-main-sha"
+  manifest.prearmedExternalHandoff.finalObserverProcedure = finalObserverProcedure()
+  manifest.prearmedExternalHandoff.prepare.allowedBeforeFixture = [
+    "prepare-one-exact-git-backed-fixture-clone-and-isolated-home-store",
+    "source-bound-bootstrap-before-final-fixture-commit",
+    "retain-identical-unpushed-final-fixture-commit-as-the-installed-consumer-cwd-head",
+    "post-commit-excluded-runtime-build-only-preparation",
+    "pre-push-parent-cwd-top-level-head-and-source-identity-assertion",
+    "public-pre-authority-readiness",
+    "public-initialized-finish-state",
+    "observer-credential-preflight",
+    "external-attestation-command-plan-preflight",
+    "external-artifact-transport-plan-preflight",
+    "enroll-after-prefetch-readiness",
+    "status-and-explain-on-ready-same-consumer",
+  ]
+  manifest.prearmedExternalHandoff.trigger.onlyAfter = "immutable-prepush-fixture-commit-and-final-observer-procedure-prefetch-ready-and-natural-current-version-original-artifact"
+  manifest.prearmedExternalHandoff.trigger.steps = [
+    "pre-push-fixture-parent-cwd-head-and-source-identity-ready",
+    "normal-push-of-the-same-final-fixture-commit-to-main",
+    "current-original-artifact-transport-and-online-crypto",
+    "verify-online-before-leaf-certificate-notAfter",
+    "authority-fetch-discovers-and-binds-original-artifact",
+    "same-consumer-trusted-unconsumed-no-readiness-blocker",
+    "finish-consume-once",
+    "finish-replay-blocked",
+  ]
+  manifest.hostedResidual = {
+    id: "beta22-prearmed-same-commit-current-artifact-fetch-consume-replay",
+    requiredEvidence: "one separately authorized normal push of the prearmed exact fixture commit; immediate current-version original-artifact transport, online verification before leaf-certificate-notAfter, one authenticated fetch, one Finish consumption, and immediate replay rejection occur in the same unchanged consumer",
+    whyLocalCannotClose: "A real current signed artifact, leaf-certificate validity window, isolated external credential, online verification, and GitHub Actions discovery cannot be produced locally. Local source and packed contracts prove the pre-push source identity procedure, public readiness, privacy, trusted modeled fetch, one Finish consumption, and replay block without accessing a live artifact.",
+  }
+  return manifest
+}
+
+function finalObserverProcedure() {
+  return {
+    failureHandling: {
+      afterFetch: "do-not-reinitialize-switch-reset-or-retry",
+      beforeFetch: "abandon-and-recreate-the-consumer-before-any-live-fetch",
+    },
+    liveSteps: [
+      "normal-push-of-the-same-final-fixture-commit-to-main",
+      "current-original-artifact-transport-and-online-crypto-within-leaf-window",
+      "authenticated-fetch-once",
+      "same-consumer-status-and-explain-trusted-unconsumed-with-no-readiness-blocker",
+      "Finish-consume-once",
+      "immediate-Finish-replay-blocked",
+    ],
+    noReinitializationAfterFetch: [
+      "consumer-cwd-git-head-or-source-profile-change",
+      "consumer-home-or-authority-store-replacement",
+      "bootstrap-plan-report-evidence-or-loop-state-reset",
+      "consumer-switch-or-copied-state",
+    ],
+    postCommitPreparation: {
+      allowedMutations: [
+        ".persona/.ph-init-manifest.json",
+        ".persona/evidence/**",
+        ".persona/workflow/**",
+        ".gradle/**",
+        "build/**",
+        "node_modules/**",
+      ],
+      forbiddenSourceBoundMutations: [
+        ".github/workflows/research-attestation.yml",
+        ".gitignore",
+        ".opencode/opencode.json",
+        ".persona/conventions/**",
+        ".persona/harness.jsonc",
+        ".persona/policies/**",
+        ".persona/project-profile.jsonc",
+        ".persona/rules/**",
+        "AGENTS.md",
+        "root-gradle-build-and-settings",
+        "src/**",
+      ],
+    },
+    prePushCommit: {
+      cwd: "must-be-exact-fixture-git-toplevel-and-canonical-project-root",
+      finalCommit: "one-final-commit-contains-only-allowed-source-bound-bootstrap-outputs-and-reusable-pin",
+      head: "must-remain-the-identical-unpushed-final-fixture-commit",
+      remoteParent: "must-remain-unchanged-immediately-before-normal-push",
+      sourceBoundBootstrap: "must-complete-before-final-commit",
+      sourceIdentity: "must-be-clean-except-excluded-runtime-and-build-residue",
+    },
+    prefetchSteps: [
+      "one-exact-git-backed-fixture-clone-cwd-head-and-isolated-home-store",
+      "source-bound-bootstrap-before-final-fixture-commit",
+      "one-final-commit-with-only-source-bound-bootstrap-allowlist-and-reusable-pin",
+      "post-commit-excluded-runtime-build-only-preparation",
+      "pre-push-parent-cwd-top-level-head-and-source-identity-assertion",
+      "public-bootstrap-accepted-plan-and-current-loop-state",
+      "public-Gradle-test-compileJava-and-clean",
+      "public-README-profile-and-Java-evidence",
+      "public-implementation-and-review-report-ingress",
+      "public-plan-status",
+      "default-Finish-blocked-only-trusted-authority-required",
+    ],
+    procedureRecord: {
+      location: "coordinator-governed-immutable-external-procedure-record-no-local-path",
+      sha256: PROCEDURE_RECORD_SHA256,
+    },
+    schemaVersion: "consumer-authority-final-observer-procedure.2",
+  }
+}
+
+function fail() {
+  throw new Beta22AcceptanceManifestError("beta22-acceptance-schema")
+}

package/scripts/preflight-consumer-authority-external-artifact-transport.mjs

@@ -2,7 +2,7 @@ import { realpathSync } from "node:fs"
 import { dirname } from "node:path"
 import { fileURLToPath, pathToFileURL } from "node:url"
 
-import { readBeta21AcceptanceManifest } from "./consumer-authority-beta21-acceptance-schema.mjs"
+import { readBeta22AcceptanceManifest } from "./consumer-authority-beta22-acceptance-schema.mjs"
 import { runExternalArtifactTransportPreflight } from "./consumer-authority-external-artifact-transport-plan.mjs"
 
 const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
@@ -14,7 +14,7 @@ async function main() {
     process.exitCode = 1
     return
   }
-  readBeta21AcceptanceManifest(packageRoot)
+  readBeta22AcceptanceManifest(packageRoot)
   const result = await runExternalArtifactTransportPreflight()
   process.stdout.write(`${JSON.stringify(result)}\n`)
   process.exitCode = result.state === "ready" ? 0 : 1

package/scripts/preflight-consumer-authority-external-attestation.mjs

@@ -2,7 +2,7 @@ import { realpathSync } from "node:fs"
 import { dirname } from "node:path"
 import { fileURLToPath, pathToFileURL } from "node:url"
 
-import { readBeta21AcceptanceManifest } from "./consumer-authority-beta21-acceptance-schema.mjs"
+import { readBeta22AcceptanceManifest } from "./consumer-authority-beta22-acceptance-schema.mjs"
 import { runExternalAttestationGrammarPreflight } from "./consumer-authority-external-attestation-command-plan.mjs"
 
 const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)))
@@ -15,7 +15,7 @@ function main() {
     process.exitCode = 1
     return
   }
-  const manifest = readBeta21AcceptanceManifest(packageRoot)
+  const manifest = readBeta22AcceptanceManifest(packageRoot)
   const result = runExternalAttestationGrammarPreflight(
     manifest.externalAttestationCommandPlan,
     grammarOnlyTopology(manifest),