[Cuarroc]

Die Abnahmematrix unterscheidet jetzt vier belegte Zeilen von 23 Zeilen mit konkreten Restbedingungen.
Jede Zeile nennt datierte Quellen, damit Tests, frühere PC-Belege und noch fehlende Abnahmen nachvollziehbar bleiben.
Der Dauerbetrieb bleibt ausgeschaltet; aus diesem Dokument entsteht keine neue Freigabe oder Nutzeraufgabe.

Report

Package / operator / tier: MATRIX-RECONCILE / PFLEGEN / C.
Authority / parent / ticket / owner: Root dispatch dated 2026-10-09; TEMPO-KERN Ready-Queue refill; ticket 258d2a57; srv-matrix-reconcile.
Goal: reconcile all 27 acceptance rows with dated evidence without inventing passes or changing acceptance requirements.
Native evidence: get_goal returned goal: null; create_goal returned an active bounded MATRIX-RECONCILE goal covering this file, full prepush, verified push and draft-PR handover. Parent acceptance is separate.
Base: a1d9a5fba38d2e50fe72727a644cb587edbe9357, fetched at start; git merge-base --is-ancestor dd7391cd064a0720b2d1f747e959bbeab5a3fe7d origin/main exited 0. Existing assigned branch already matched fetched origin/main.
Candidate: 78f0f4cdc841f8ab06ceebf78ebda723ff037107.
Scope / overlap: only .pa/continuous_acceptance_matrix.md; 41 additions + 27 deletions = 68 diff lines, below 120. BUGS.md remains owned by docs-sync #764. No runtime, dependency, license, seam or architecture-allowlist changes.
Red-first: No-Test: documentation only (acceptance matrix reconcile).

What changed and evidence for every row

The original requirement, required-proof and proof-type cells remain byte-for-byte unchanged. The dated introduction distinguishes historical evidence from a new runtime measurement. PR reports and merge metadata were checked against origin/main and the W4-02/M4/current Z4/decision rows in PLAN. The old evidence ledger is explicitly historical. Backup and singleton passes are retained as partial evidence; the specific missing artifacts are named rather than inferred.

Row	Disposition / remaining gate	Evidence source
1	Open: installed-app runtime audit	PR #315 (2026-10-04), #481 (2026-10-05): audit/config tests and locked activation
2	Open: durable user decision and policy revision	PR #481 (2026-10-05); PLAN E21 still open
3	Open: verdict-bound resume or explicit scope decision	PR #453 (2026-10-05) only proves resume refusals; PLAN E18
4	Open: integrated project boundary and atomic write authorization	PR #405 (2026-10-05), PLAN Z4-M4B-0 through 4 and M4 blocker
5	Open: competing claims/fences with real worker processes	PR #412 (2026-10-05): fake-adapter concurrency and stale-write refusal
6	Open: integrated dispatcher controls, restart and real sessions	PR #440 (2026-10-05): Store controls and legacy-queue isolation only
7	Open: positive end-to-end dispatch with accepted provider/scheduler gates	PR #340 (2026-10-04), #412 (2026-10-05): test permit and negative matrix
8	Open: integrated claim/launch authorization without bypass	PR #431/#443 (2026-10-05): claim fix and fake-dispatcher refusals; PLAN Z4-M4B-3
9	Open: dependency cases with a real worker process	PR #412 (2026-10-05): satisfied/open/missing/foreign/truncated cases with fake adapter
10	Open: real RAM/capacity drill	PR #500 (2026-10-05) explicitly excludes it; PLAN Z4-W303-PC-REST
11	Open: observed execution identity for each authorized adapter	PR #500 (2026-10-05): basic workers lack HQ runs; PLAN Z4-W303-PC-REST
12	Open: sourced, dated provider collector/usage evidence	PR #500 (2026-10-05), PLAN HQ2-05b remains open
13	Open: real crash, normal exit and lost-response reconciliation	PR #443 (2026-10-05): fake-adapter reconciling refusal only
14	Fulfilled at the cited test scope	PR #365 (2026-10-04), merge 9f75ac3: HTTP/Store, fake child abort/resume, checkpoint replay and stale refusal
15	Fulfilled at the narrowed HTTP/Store scope	PR #360 (2026-10-04), merge 81e58c0: commit/run binding, isolation, foreign/stale refusal and frozen policy
16	Open: independent candidate-bound review and rejected self/unverified review	PLAN E22 open as inspected 2026-10-09; W5-02d remains after M4
17	Fulfilled at the narrowed HTTP/Store scope	PR #374 (2026-10-04), merge bfc88c4: persistent A-to-B invalidation, replay, stale refusal; approvalEligible stays false
18	Open: delivery-chain PR with run ID, review disposition and protection proof	PR #408/#448 (2026-10-05): audit and Continuous integration refusal; PLAN E20
19	Open: uninterrupted planning audit coverage across write/audit boundary	PR #358 (2026-10-04), #408/#423/#444 (2026-10-05); #44 (2026-10-02) proves UPDATE/DELETE guards; #444 explicitly retains a crash window
20	Fulfilled for the historical installed-app drill only	PR #500 (2026-10-05), merge f0693a3: installed v1.5.0 ec58a1c, empty inventory after 961 ms
21	Open: installed-PC recovery at every critical transition	PR #456 (2026-10-05) Store kill points; #500 excludes PC crash drill; PLAN Z4-W303-PC-REST
22	Open: referenced snapshot/restore/integrity manifest including WAL and maintenance	PR #500 (2026-10-05) records the backup pass; detailed artifacts are not in that report
23	Open: installed success/cancel/fail updater drills and signed relaunch	PR #500 (2026-10-05), PLAN W3-07; merged W3-02 kits do not prove the installed run
24	Open: five approved benchmark runs with all metrics and run/evidence bindings	PR #73 (2026-10-03): W4-01 tooling, no complete measurement report
25	Open: individual multistart/recovery/session-preservation artifacts	PR #500 (2026-10-05) records the singleton pass without the individual manifests
26	Open: complete candidate-bound cross-platform acceptance	PR #48 (2026-10-02), PLAN W4-02: matrix definition, not overall acceptance
27	Open: user-authored committed attestation and matching release audit	PR #398 (2026-10-04): verifier only; PLAN E20 inspected 2026-10-09

Evidence

Command / observation	Exit code / result
git fetch origin and base ancestry check above	0
git log origin/main with package/continuous/audit/drill filters	0
gh pr list --state merged --search <id> for M4, drill, M4-R8, unassigned, W4-01 and W5-05; gh pr view for detailed proof reports	0
bash scripts/ci/gates.sh lane prepush in the assigned worktree with the final matrix content	0; 22 gates, 268 s; Rust: 1,892 passed, 7 skipped
Inline Python document invariant check: 27 rows, unchanged acceptance cells, 4 fulfilled, 23 explicit open gates, date in every status	0
git diff --check	0
bash scripts/ci/secret-scan.sh after staging	0; no leaks
git commit with required No-Test trailer, including precommit hook	0
git push -u origin codex/matrix-reconcile with full prepush hook at candidate 78f0f4c	0; 22 gates, 137 s; Rust: 1,892 passed, 7 skipped
git ls-remote origin refs/heads/codex/matrix-reconcile	0; remote equals 78f0f4cdc841f8ab06ceebf78ebda723ff037107

NICHT ABGEDECKT

• Linux does not compile or execute #[cfg(windows)] tests or Windows clippy arms; the Windows lane runs in the merge queue.
• Browser smoke, frontend build and workflow gates are outside prepush; external updater/mirror services were not exercised.
• No new installed-app run, provider probe, PC drill, benchmark, user attestation or release acceptance was performed. Historical evidence is not a current-head runtime certification. Four fulfilled rows do not make M4 complete.
• The local lage-jetzt mirror and a memory tool were unavailable; live git/PR sources and PLAN were used. Start check verified RAM/build capacity before prepush; no usage file or runtime-model observation was available.

Reviews and disposition

Review: ausstehend (Stufe C); pending Root dispatch. No external review or review bot was started by this worker. Tier C needs no external review under AGENTS.md; readiness/integration remains the orchestrator's decision.

Open points / handover

• Documentation implemented and locally tested; draft PR only, not accepted or merged.
• The 23 remaining gates are listed individually above and in the matrix. Continuous Mode remains disabled and frozen until M4.
• Next owner: Root/orchestrator for dispatch disposition and integration. No ready flag, labels or queue action requested by this worker.

Root-Abnahme (09.10.2026, head 78f0f4c)

Tier C — docs only (.pa/continuous_acceptance_matrix.md); rows reconciled with dated evidence, no invented passes (KI-sweep row B:63). Gates suffice, no external review required; worker evidence: own gates.sh lane prepush exit 0 and push verified with git ls-remote (see Report).

NICHT ABGEDECKT addendum: Windows lane comes from the merge queue.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-09T00:50:27.341483Z	78f0f4c	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-10-09 00:57 UTC · Rule: default · triggered by merge protections
• ✅ Checks passed · on draft merge queue: checking #781 + #784 + #780 + #788 together on main (c98e275), stacked on #737 #794
• ✅ Merged — 2026-10-09 01:17 UTC · at e74b1d4c2e59351292c9a0137024b77a890b4faf · merge

This pull request spent 19 minutes 58 seconds in the queue, including 14 minutes 11 seconds running CI.

Required conditions to merge

• check-success = gates (linux)
• check-success = gates (windows)
• check-success = red-first
• github-review-approved [🛡 GitHub repository ruleset rule main-pr-required-checks]
  • fix(setupgate): classify X and x as dead process states (KI-25) #780
  • docs: reconcile dated continuous acceptance evidence #781
  • fix(questions): await complete fixture cleanup before drop returns #784
  • fix(dev): reject option-like push remotes before git calls #788
• label != do-not-merge
  • fix(setupgate): classify X and x as dead process states (KI-25) #780
  • docs: reconcile dated continuous acceptance evidence #781
  • fix(questions): await complete fixture cleanup before drop returns #784
  • fix(dev): reject option-like push remotes before git calls #788
• any of [🛡 GitHub repository ruleset rule main-pr-required-checks]:
  • check-success = @github-actions/gates (linux)
  • check-neutral = @github-actions/gates (linux)
  • check-skipped = @github-actions/gates (linux)
• any of [🛡 GitHub repository ruleset rule main-pr-required-checks]:
  • check-success = @github-actions/gates (windows)
  • check-neutral = @github-actions/gates (windows)
  • check-skipped = @github-actions/gates (windows)
• any of [🛡 GitHub repository ruleset rule main-pr-required-checks]:
  • check-success = @github-actions/red-first
  • check-neutral = @github-actions/red-first
  • check-skipped = @github-actions/red-first
• any of [🛡 GitHub repository ruleset rule main-pr-required-checks]:
  • check-neutral = @mergify/Mergify Merge Protections
  • check-skipped = @mergify/Mergify Merge Protections
  • check-success = @mergify/Mergify Merge Protections