Hold the fully qualified post-v1 action-evidence estate for physical acceptance

[BigBirdReturns]

Immutable embodied action-evidence closure

Controlling closure candidate:

a5bfe8be5340821bab7190d211856bd6a8367a80

Functional custody implementation contained by this closure:

69b7f9a7bad5b4a94210313ca267a9b479402f09

The closure is exactly two commits ahead of the functional custody donor and changes one file only:

docs/RODOH_ACTION_EVIDENCE_CLOSURE.md

No strict parser, session, spool, journal, shard, CLI, or workflow law changes.

Coordinated authorities and execution surfaces:

World receiver PR #203
World receiver 52162c757f905aae5c2383f6896de3b258e7cf8f
Arc action authority 6eef311836ee7cb3a43a94ce51f448a2699c3b04
Genesis kernel 9074e7fb2e9cedde692b248cdd0c6a805e77d8ac
qualified offline operator kit PR #205
physical acceptance issue BigBirdReturns/axm-world#204

Exact custody boundary

The candidate owns bounded physical-session evidence only:

• duplicate-key and resource-bounded JSON refusal before semantic interpretation;
• exact cartridge and actspec1_ identity continuity;
• append-only hash-chained axm-embodied-action-session/1 journals;
• physical observations whose campaignEffect remains null;
• provisional rodoh-action-execution-candidate/1 before any accepted Arc receipt;
• compressed trace validation;
• resumable transactional spool ingestion;
• sequence rollback, root-change, path-escape, payload-hash, duplicate-attachment, unsupported-kind, receipt-order, and tamper refusal;
• Genesis-facing shard projection without campaign mutation authority.

Arc owns accepted action and campaign outcomes. World and Unity own presentation, input sampling, and provisional execution. Genesis may preserve the final shard without acquiring action or campaign authority.

Single permanent supergate

Ordinary .github/workflows/ci.yml owns the complete repository and action-evidence boundary. It binds the exact head, installs Genesis 9074e7fb2e9cedde692b248cdd0c6a805e77d8ac, runs focused strict/session/spool transaction tests, runs the complete regression, performs Genesis drift checking, requires a clean checkout, writes axm-embodied-action-evidence-qualification/1, and uploads custody evidence from runner.temp.

tests/test_action_evidence_workflow.py freezes that consolidation and refuses reintroduction of the superseded dedicated wrappers:

rodoh-action-evidence.yml
rodoh-action-session.yml
rodoh-action-spool.yml
rodoh-action-strict-json.yml

Exact aggregate artifact qualification

Disposable carrier PR #16 executed the exact functional donor, not its transient qualification tree:

run                30240590242
functional donor   69b7f9a7bad5b4a94210313ca267a9b479402f09
successful carrier f9a62b5d789a05d90abb836b43b51260394a711e
Genesis kernel     9074e7fb2e9cedde692b248cdd0c6a805e77d8ac

It passed:

focused strict/session/spool/workflow contracts   25 passed
complete embodied regression                      68 passed
Genesis kernel-boundary drift                      clean
functional donor checkout                         pristine

Retained aggregate artifact:

name    rodoh-action-evidence-custody-v9
id      8643101202
sha256  8a0822340dc71193482e7033017f9a7ec9203523dbaf9cfbdeb1d74556214d8e

The artifact contains exact candidate, carrier, and Genesis identities; focused and complete logs; the drift receipt; and a passing axm-embodied-action-evidence-qualification/1 record naming duplicate-key refusal, bounded JSON, session authority, candidate-before-receipt ordering, hash-chain tamper refusal, spool restart, sequence rollback refusal, path escape refusal, payload-hash refusal, transactional rollback, workflow consolidation, complete regression, Genesis drift, and clean-checkout proof.

All temporary qualification workflows were removed and PR #16 was closed without merge after harvesting.

Machine-bound acceptance

World issue #204 is the only completion path. The separate operator kit in World PR #205 has passed its Windows syntax, authority-pin, phase-separation, TypeScript, and packaging gate. It is pinned to the exact World, Arc, functional custody, and Genesis commits above.

The remaining facts require the actual machine and device:

1. Unity 6000.0.66f2 imports the exact package into the named Embodied-AR-Lab worktree.
2. The generated First Charter scene and EditMode suite pass.
3. The Windows standalone build reaches its terminal deterministic smoke.
4. The Quest APK builds, installs, and starts on the named device.
5. A real headset session records tracking and safety facts and writes one immutable provisional candidate.
6. This custody implementation ingests the spool, Arc accepts the exact trace, and the completed journal and Genesis-facing shard verify independently.

This PR remains draft. It must not merge into the frozen v1 line, activate Book IV, or claim a physical session before issue #204 carries those records.

[BigBirdReturns]

Coordinated closure set: World PR #203 at 5c892be5f468682f8dfd64ce4e42270d1445d6b0, Arc PR #175 at a9cca28fba99f78aad904710eced3382ff22747c, and physical acceptance issue BigBirdReturns/axm-world#204. This PR is the sole embodied custody candidate; closed moving PR #7 and temporary receipt children are not acceptance inputs.