fix: close ANDON 145/146 live producer boundary gaps

Exact-SHA GitHub CI run 29380177169 failed at command 109/179 when
Linux reused a same-name directory inode and the adapter's device/inode-only
custody adopted and deleted a foreign replacement. A separate no-network
synthetic canary proved that capability inspection also read, retained, and
passed a credential value before authorization or reservation existed.

Replace capability's secret-bearing boundary with a Boolean metadata-only
credential-carrier fact. Keep the exact Codex version, structured GPT-5.5
catalog, high-effort, parsed-option, and owned-launcher checks, while deferring
credential acquisition until submit after the claim and reservation gates.

Bind each isolation root and worker to a create-once noncredential witness
whose device, inode, ctime, byte count, and SHA-256 are revalidated before
destructive cleanup. Preserve foreign replacements, unexpected entries, and
missing, changed, copied, recreated, symlinked, or reparse witnesses. Do not
weaken existing process custody, authorization, fan-out, evidence, residue,
or finalization checks.

Verification:
- reviewed-campaign contract: 91/91 PASS on Windows
- focused ANDON 145 capability/defer-order canaries: 7/7 PASS
- focused ANDON 146 witness/replacement canaries: 5/5 PASS
- independent reviewer-selected no-provider canaries: 13/13 PASS
- closure ledger/render, contract and validation registries, CI coverage,
  Task 7 fixtures, producer parity, execution-tooling, capture finalization,
  structural completion, and staged diff hygiene: PASS
- independent exact-tree review: ACCEPT, 0 Critical / 0 Important / 0 Minor
- staged prospective tree: 5cbc7bd

Path-based verify/delete retains a bounded TOCTOU window under the required
zero-competing-writer and owned-process teardown gates. Carrier metadata does
not prove credential validity, expiry, or provider acceptance. Fresh Linux
GREEN remains unclaimed until exact-SHA CI starts from command 1.

This commit does not establish a source receipt, candidate, capability
success, campaign authorization, usage reservation, provider/model execution,
assessment, release, owner acceptance, or terminal closure. Paid producer
execution remains 0/5; no retry or replacement call is authorized.

Author: theislampill

docs/audits/v0.4.6.0-wip-andon-closure-ledger.json

@@ -4421,10 +4421,10 @@
         },
         {
           "kind": "file_sha256",
-          "source_ref": "Task 11bk independently accepted the exact current structured-admission parser, content-addressed admission prefix, five-way submit-before-observe barrier, strict non-finite rejection, provider-fact rederivation, deadline, and teardown bytes; no provider invocation claim",
+          "source_ref": "Task 11bk independently accepted predecessor live-adapter sha256 0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af; Task 11bv current ANDON 145/146 owner repair preserves those joins while making capability metadata-only and secret-free and binding destructive directory cleanup to an immutable create-once ownership witness; this row binds exact current bytes only and does not claim provider invocation, independent successor acceptance, exact-SHA CI, candidate maturity, or terminal closure",
           "commit_sha1": null,
           "blob_sha1": null,
-          "sha256": "0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af",
+          "sha256": "3a099b84c09443eaa214bafc6f0f3c149cc9e79c69c794ed4e7c048ef1a85d68",
           "command": null,
           "exit_code": null,
           "retained_artifact": "tools/codex_live_producer_adapter.py",
@@ -4443,14 +4443,14 @@
         },
         {
           "kind": "command_result",
-          "source_ref": "Task 11bj owner report sha256 ce6cb5f9e3a96da211be5915802edcfb91191e066fca17cb591f16ef4f5a8da8 and Task 11bk independent APPROVE sha256 9d5c056a0a57e8de23af58f06c5934c51c729f921eb663b3ec288a00a8ec61eb; exact current live adapter sha256 0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af, orchestrator sha256 d86aba11c685aacd48002ea5dc4904fa3bf5b49cc61bd82576a5e7112d21eea9, and reviewed-campaign test sha256 2599d5e96cc9dcd9e9307e2bba5ed3f8d3e2509692f54d71ca0f8d10b6da3622; full reviewed-campaign suite is 84/84 GREEN including strict non-finite admission/rederivation, exact mixed-receipt replay, five-way barrier, and zero-dispatch replay",
+          "source_ref": "Task 11bv current ANDON 145/146 owner verification; exact current live adapter sha256 3a099b84c09443eaa214bafc6f0f3c149cc9e79c69c794ed4e7c048ef1a85d68, unchanged orchestrator sha256 d86aba11c685aacd48002ea5dc4904fa3bf5b49cc61bd82576a5e7112d21eea9, and reviewed-campaign test sha256 6535adfe42e0242430d8f496be2ef6aa5e8176bd40fdc9e52cce4bb01e807fde; full reviewed-campaign suite is 91/91 GREEN including metadata-only secret-free capability, deferred credential acquisition after authority and reservation, immutable directory-witness replacement custody, strict non-finite admission/rederivation, exact mixed-receipt replay, five-way barrier, and zero-dispatch replay",
           "commit_sha1": null,
           "blob_sha1": null,
           "sha256": null,
           "command": "python -B tests/reviewed-campaign-orchestration/test_contract.py",
           "exit_code": 0,
           "retained_artifact": null,
-          "unretained_reason": "raw stdout and stderr and local durable Task 11bj/11bk records are not tracked repository artifacts; bounded deterministic acceptance does not imply provider execution, final whole-branch acceptance, or terminal closure"
+          "unretained_reason": "raw stdout and stderr and the local durable Task 11bv owner record are not tracked repository artifacts; bounded deterministic acceptance does not imply independent successor acceptance, provider execution, final whole-branch acceptance, or terminal closure"
         },
         {
           "kind": "command_result",
@@ -4465,7 +4465,7 @@
         },
         {
           "kind": "command_result",
-          "source_ref": "Task 11bj owner verification after Task 11bk acceptance; current aggregate schema sha256 7940b0c37441e79d8e55bca92662b9045ca333e6b34a46bff05e6cd78311c732, tooling-bound promoter sha256 191050e83875687d95a4c97d3e74f039aa0020399a464617418e4ff98d6a7756, and permanent test sha256 079f3f0346978f6b75322f065d195e8352a080ca4cc696e076cdbf017c12783f; registered producer-structural suite is 17/17 GREEN including tooling canaries, scripted/test finalizer barrier, and shallow-fabrication rejection",
+          "source_ref": "Task 11br ANDON 144 owner verification after bounded independent acceptance; current aggregate schema sha256 7940b0c37441e79d8e55bca92662b9045ca333e6b34a46bff05e6cd78311c732, tooling-bound promoter sha256 579715d8417af03e2f8adcafa495911dcab204dc7a25631efa5d1663e76b4339, and permanent test sha256 079f3f0346978f6b75322f065d195e8352a080ca4cc696e076cdbf017c12783f; registered producer-structural suite is 17/17 GREEN including Linux same-inode rollback custody, tooling canaries, scripted/test finalizer barrier, and shallow-fabrication rejection",
           "commit_sha1": null,
           "blob_sha1": null,
           "sha256": null,

docs/audits/v0.4.6.0-wip-andon-closure-ledger.md

@@ -598,11 +598,11 @@ Evidence references:
 - kind=file_sha256; source=Owner closeout of the five concrete R4 repairs; no new deterministic whole-branch evidence or terminal claim; sha256=3fb5885c19d28536165f30b9331d43908b93495f22c8cbf1d02b95de4b0071bb; retained=docs/audits/evidence/v0.4.6.0-b10/task7-whole-branch-r4-repair-owner-report.md
 - kind=file_sha256; source=Independent bounded acceptance of all five R4 repairs; not a whole-branch review of the later final tree; sha256=339dc781749e5de9f2adf29c0ec3a5138ec18e3ec21937699d93cf43a9018a6e; retained=docs/audits/evidence/v0.4.6.0-b10/task7-whole-branch-r4-repair-independent-closeout.md
 - kind=file_sha256; source=Task 11bi rejected predecessor repair tree 2e6d34ebfee35d0c0cb15052666966f2fcd95eb0; Task 11bj owner report sha256 ce6cb5f9e3a96da211be5915802edcfb91191e066fca17cb591f16ef4f5a8da8 and Task 11bk independent APPROVE sha256 9d5c056a0a57e8de23af58f06c5934c51c729f921eb663b3ec288a00a8ec61eb bind exact repaired strict-JSON, mixed-terminal replay, execution-tooling, predispatch, and timeout contracts; sha256=d86aba11c685aacd48002ea5dc4904fa3bf5b49cc61bd82576a5e7112d21eea9; retained=tools/reviewed_campaign_orchestrator.py
-- kind=file_sha256; source=Task 11bk independently accepted the exact current structured-admission parser, content-addressed admission prefix, five-way submit-before-observe barrier, strict non-finite rejection, provider-fact rederivation, deadline, and teardown bytes; no provider invocation claim; sha256=0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af; retained=tools/codex_live_producer_adapter.py
+- kind=file_sha256; source=Task 11bk independently accepted predecessor live-adapter sha256 0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af; Task 11bv current ANDON 145/146 owner repair preserves those joins while making capability metadata-only and secret-free and binding destructive directory cleanup to an immutable create-once ownership witness; this row binds exact current bytes only and does not claim provider invocation, independent successor acceptance, exact-SHA CI, candidate maturity, or terminal closure; sha256=3a099b84c09443eaa214bafc6f0f3c149cc9e79c69c794ed4e7c048ef1a85d68; retained=tools/codex_live_producer_adapter.py
 - kind=file_sha256; source=Task 11bk reconfirmed the inherited exact Windows suspended-launch Job Object custody, stable-handle membership verification, governed timeout teardown, and zero-active-member readback bytes; no PID-ancestry or taskkill fallback; sha256=f769d96653aefc8b7e6e89fffc55979f57e9a0b1610000aaebf3abb6e90a2461; retained=tools/run_local_ci.py
-- kind=command_result; source=Task 11bj owner report sha256 ce6cb5f9e3a96da211be5915802edcfb91191e066fca17cb591f16ef4f5a8da8 and Task 11bk independent APPROVE sha256 9d5c056a0a57e8de23af58f06c5934c51c729f921eb663b3ec288a00a8ec61eb; exact current live adapter sha256 0d357768608eae2e6bc0b3c73d1af5846bba7abce855347daf79ab1f2fdad2af, orchestrator sha256 d86aba11c685aacd48002ea5dc4904fa3bf5b49cc61bd82576a5e7112d21eea9, and reviewed-campaign test sha256 2599d5e96cc9dcd9e9307e2bba5ed3f8d3e2509692f54d71ca0f8d10b6da3622; full reviewed-campaign suite is 84/84 GREEN including strict non-finite admission/rederivation, exact mixed-receipt replay, five-way barrier, and zero-dispatch replay; command=python -B tests/reviewed-campaign-orchestration/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and local durable Task 11bj/11bk records are not tracked repository artifacts; bounded deterministic acceptance does not imply provider execution, final whole-branch acceptance, or terminal closure
+- kind=command_result; source=Task 11bv current ANDON 145/146 owner verification; exact current live adapter sha256 3a099b84c09443eaa214bafc6f0f3c149cc9e79c69c794ed4e7c048ef1a85d68, unchanged orchestrator sha256 d86aba11c685aacd48002ea5dc4904fa3bf5b49cc61bd82576a5e7112d21eea9, and reviewed-campaign test sha256 6535adfe42e0242430d8f496be2ef6aa5e8176bd40fdc9e52cce4bb01e807fde; full reviewed-campaign suite is 91/91 GREEN including metadata-only secret-free capability, deferred credential acquisition after authority and reservation, immutable directory-witness replacement custody, strict non-finite admission/rederivation, exact mixed-receipt replay, five-way barrier, and zero-dispatch replay; command=python -B tests/reviewed-campaign-orchestration/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and the local durable Task 11bv owner record are not tracked repository artifacts; bounded deterministic acceptance does not imply independent successor acceptance, provider execution, final whole-branch acceptance, or terminal closure
 - kind=command_result; source=Task 11bj owner verification after Task 11bk acceptance; current tooling-bound capture schema sha256 e0616acb1ff645c31e21a766b99f9671c6c3e652150926ef1acc37901b48a859, bridge sha256 6f5416c4170f5c0e9b848a70895d50d2549a5668d88892e589d4bf1de3c400af, and permanent test sha256 66513599523fc762f8e079c4f3330ef5e65b2f1115338935409fad54815483db; 2/2 GREEN including valid execution-tooling manifest fixture custody and exact result/captured-output/provider-subject identity; command=python -B tests/producer-capture-finalization/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and the local durable owner record are not tracked repository artifacts; exact-current per-case bridge bytes remain within A16 PARTIAL pending fresh deterministic and whole-branch review
-- kind=command_result; source=Task 11bj owner verification after Task 11bk acceptance; current aggregate schema sha256 7940b0c37441e79d8e55bca92662b9045ca333e6b34a46bff05e6cd78311c732, tooling-bound promoter sha256 191050e83875687d95a4c97d3e74f039aa0020399a464617418e4ff98d6a7756, and permanent test sha256 079f3f0346978f6b75322f065d195e8352a080ca4cc696e076cdbf017c12783f; registered producer-structural suite is 17/17 GREEN including tooling canaries, scripted/test finalizer barrier, and shallow-fabrication rejection; command=python -B tests/producer-structural-completion/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and local durable review records are not tracked repository artifacts; bounded structural acceptance is not campaign, candidate, release, or terminal closure
+- kind=command_result; source=Task 11br ANDON 144 owner verification after bounded independent acceptance; current aggregate schema sha256 7940b0c37441e79d8e55bca92662b9045ca333e6b34a46bff05e6cd78311c732, tooling-bound promoter sha256 579715d8417af03e2f8adcafa495911dcab204dc7a25631efa5d1663e76b4339, and permanent test sha256 079f3f0346978f6b75322f065d195e8352a080ca4cc696e076cdbf017c12783f; registered producer-structural suite is 17/17 GREEN including Linux same-inode rollback custody, tooling canaries, scripted/test finalizer barrier, and shallow-fabrication rejection; command=python -B tests/producer-structural-completion/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and local durable review records are not tracked repository artifacts; bounded structural acceptance is not campaign, candidate, release, or terminal closure
 - kind=command_result; source=Task 11v Branch 11 Task 7 namespace owner report sha256 3cd7e18d25625ea0090bd5b7c687ad6e01c51190634c820199f68432d55c5628; schema sha256 4f578bbdbd2a71b978e4508b344b500c4710cffe24d14eda88d7345862ed008e, checker sha256 5d324874cdeb5d1d6ef9ab95881def50adb3f3cc7264c278aebc85e13220d311, and test sha256 7858272da46ac5e49d6298cf782ed2af2136124f29e1f50a9a92ba381b835e17; versioned Branch 10 and Branch 11 namespaces are disjoint and independently 14/14 GREEN; command=python -B tests/task7-deterministic-evidence-namespace/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and the local durable owner report are not tracked repository artifacts; final generated Branch 11 cohort remains pending the final source freeze
 - kind=command_result; source=Task 11bk independently reconfirmed exact current Windows Job custody and CI-readback integration; checker sha256 36c74e09a56914f93a27a5e5d57d5963f37c07dc99f24e5068f31b0a732701eb, schema sha256 6e607b2dbfed00591b843bd1d86528b448b73c9e132037028b7dbc9b9f4443ca, test sha256 8bbbd00f486c6b09a5b196565b83f671493bf9bb547914e1bc81b88a75c01ba7, builder sha256 21640026d561bc9da66138dc32dcdcb492f9ad18d9ee4cda14e3ec9c1a00a12d, and runner sha256 f769d96653aefc8b7e6e89fffc55979f57e9a0b1610000aaebf3abb6e90a2461; full contract 60/60 GREEN including the governed real timeout tree canary; command=python -B tests/ci-readback/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and local durable Task 11bk review are not tracked repository artifacts; final create-once Branch 11 Task 7 evidence and exact-tree whole-branch review remain open
 - kind=command_result; source=ANDON 135 failed Task 7 freeze sha256 f4cccaf78f177403d3658973e79ce92b63641bd152d50acde8901518ddb2e1be and native no-model report sha256 0c057ab8a6b867f13679208e96d11f537ee2af4a1281a9981bdba11e65d4832e remain in tree-keyed failed-attempt history with no PASS role/report/log; Task 11ad owner report sha256 1e736475d1d763d5248ccd7c6dbf6670f6f315dd23877120e252d1b532b93381 and Task 11ae independent review sha256 7ff63f20f7f25ced3a2eb311a8e8528da1aa6c0ea98428ebf65b2c43a14d9f44; current isolated maturity fixture test sha256 2d5a82067982e577bcb3be43c1ae5678c6dddaed0779aede2df011837fd91c43 is independently APPROVED with direct 21/21 and self-test 36/36 GREEN; command=python -B tests/no-model-candidate-maturity/test_contract.py; exit=0; unretained_reason=raw stdout and stderr and ignored failed-attempt/review records are not tracked repository artifacts; fresh Task 7 freeze and all downstream gates remain open