feat(artifacts): add verified checker-output custody

.ci/auth-boundaries/TEST_STRUCTURE_DEBT.json

@@ -110,11 +110,11 @@
     },
     {
       "capability": "oversized_authorization_structure",
-      "content_sha256": "6552c4f594bc0ad05a231f1d9c202b78e5b4e31a0ce05ea32e7eb48b67d440ba",
-      "end_line": 2864,
+      "content_sha256": "ef1302419840b5659d01e45efd5806b904507ad8f9c0e457287597ac3ecbfb6f",
+      "end_line": 2847,
       "hard_limit": 1200,
       "kind": "test_file",
-      "observed_lines": 2864,
+      "observed_lines": 2847,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": null,
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -171,26 +171,26 @@
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "2fac78c747fd82908991bde192ba874d3847b3ad105a827575dfc6afd73614be",
-      "end_line": 2277,
+      "end_line": 2281,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 194,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "test_guide_admission_consumes_real_project_manager_prep_atomically",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 2084
+      "start_line": 2088
     },
     {
       "capability": "oversized_authorization_structure",
       "content_sha256": "12f1dd1e0632ec3e5fb80ea19eb01bcce2b9a14015a04e120fb304f9b343b828",
-      "end_line": 2081,
+      "end_line": 2085,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 132,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "test_guide_admission_derives_three_scopes_without_provider_evidence",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 1950
+      "start_line": 1954
     },
     {
       "capability": "oversized_authorization_structure",

.ci/behavior-ownership/partition.v1.json

@@ -258,15 +258,23 @@
     },
     {
       "group": "artifacts",
-      "target": "backend/app/modules/artifacts/api/submission_materialization.py"
+      "target": "backend/app/modules/artifacts/api/submission_preparation.py"
     },
     {
       "group": "artifacts",
-      "target": "backend/app/modules/artifacts/api/submission_preparation.py"
+      "target": "backend/app/modules/artifacts/authorization.py"
     },
     {
       "group": "artifacts",
-      "target": "backend/app/modules/artifacts/authorization.py"
+      "target": "backend/app/modules/artifacts/checker_output_bindings.py"
+    },
+    {
+      "group": "artifacts",
+      "target": "backend/app/modules/artifacts/checker_output_custody.py"
+    },
+    {
+      "group": "artifacts",
+      "target": "backend/app/modules/artifacts/checker_outputs.py"
     },
     {
       "group": "artifacts",
@@ -724,6 +732,14 @@
       "group": "artifacts",
       "target": "backend/app/modules/checkers/api/history.py"
     },
+    {
+      "group": "artifacts",
+      "target": "backend/app/modules/checkers/api/materialization.py"
+    },
+    {
+      "group": "artifacts",
+      "target": "backend/app/modules/checkers/api/output_custody.py"
+    },
     {
       "group": "artifacts",
       "target": "backend/app/modules/checkers/api/policy_compilation.py"
@@ -1473,7 +1489,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "45c8605a1e6b8a29cd5c9fb59771f423f8e87f04ed7da07833139cc1f657e22b",
+  "authority_digest": "c836827deba926d6b40689de2d7a723c9640fe209b11edb49d78dacb12b5744e",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }

.ci/module-boundaries/private-edge-debt.v1.json

@@ -205,24 +205,12 @@
       "imported_private_path": "app.modules.tasks.models",
       "repair_owner": "WS-ARCH-001-03"
     },
-    {
-      "source_file": "backend/app/modules/artifacts/repository.py",
-      "target_module": "checkers",
-      "imported_private_path": "app.modules.checkers.models",
-      "repair_owner": "WS-ARCH-001-04"
-    },
     {
       "source_file": "backend/app/modules/artifacts/repository.py",
       "target_module": "projects",
       "imported_private_path": "app.modules.projects.models",
       "repair_owner": "WS-ARCH-001-03"
     },
-    {
-      "source_file": "backend/app/modules/artifacts/repository.py",
-      "target_module": "tasks",
-      "imported_private_path": "app.modules.tasks.models",
-      "repair_owner": "WS-ARCH-001-03"
-    },
     {
       "source_file": "backend/app/modules/artifacts/service.py",
       "target_module": "actors",

.commitrail/INDEX.md

@@ -8,12 +8,12 @@ for current product capability.
 |---|---|---|
 | [WS-DB-002](initiatives/WS-DB-002/OVERVIEW.md) | Complete | Shared UUIDv7 record generation, native-UUID relationships and fresh v0.1 baseline; natural-owner retry custody and aligned CI/local setup |
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Three self-service tools delivered through WS-MCP-002-02; 24 tools remain and WS-MCP-002-03 administrative reads are next |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Canonical ARCH-04A delivered; Automatic unified setup delivered; POL-05/06 manager review and separate approvals delivered; POL-07B internal checker phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers delivered; ARCH-03B1 detached metadata and ARCH-03B2 ready and ARCH-03B3 management/operational queue facts and ARCH-03B4 hidden task detail and ARCH-03B5 current contributor/manager work context and ARCH-03B6 locked-context and ARCH-03B7 requirements projections delivered; ARCH-03B8 hidden task audit evidence delivered; AUTH-OUTBOX-01 unavailable dispatcher contract delivered; CON-02B hidden delivery/recovery custody delivered; AUTH-OUTBOX-02 live authority/audit binding and worker integration delivered; ARCH-03B9 hidden exact assignment invalidation delivered; ARCH-03C1 exact reconciler authority and decision receipts delivered; ARCH-03C2 atomic publication and registered prefork delivery delivered; ARCH-03C3 exact manager task readiness and replay delivered; ARCH-03C4 exact-authorized public queues delivered; ARCH-03C5 exact-authorized detail and requirements delivered; ARCH-03C6 exact-authorized locked-context reads delivered; ARCH-03C7 bounded audit history delivered; CP05A public Finance policy administration delivered; AUTH-18 public manager activation/context delivered; ARCH-03D hidden approved-guide intake delivered; hidden exact post-submit materialization delivered; ARCH-04B2 output custody next |
-| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Hidden exact post-submit input materialization delivered; ARCH-04B2 output custody next |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Shared dispatcher authority and phase custody after delivered CP05; POL-04B consumes completed finalization authority; AUTH-12F4 supplies proposal authority; POL-05B public composition delivered; AUTH-12G post-policy authority delivered; POL-06B public composition delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers delivered; ARCH-03B1 detached metadata and ARCH-03B2 ready and ARCH-03B3 management/operational queue facts and ARCH-03B4 hidden task detail and ARCH-03B5 current contributor/manager work context and ARCH-03B6 locked-context and ARCH-03B7 requirements projections delivered; ARCH-03B8 hidden task audit evidence delivered; AUTH-OUTBOX-01 unavailable dispatcher contract delivered; CON-02B hidden delivery/recovery custody delivered; AUTH-OUTBOX-02 live authority/audit binding and worker integration delivered; ARCH-03B9 hidden exact assignment invalidation delivered; ARCH-03C1 exact reconciler authority and decision receipts delivered; ARCH-03C2 atomic publication and registered prefork delivery delivered; ARCH-03C3 exact manager task readiness and replay delivered; ARCH-03C4 exact-authorized public queues delivered; ARCH-03C5 exact-authorized detail and requirements delivered; ARCH-03C6 exact-authorized locked-context reads delivered; ARCH-03C7 bounded audit history delivered; CP05A public Finance policy administration delivered; AUTH-18 public manager activation/context delivered; ARCH-03D hidden approved-guide intake delivered; hidden exact post-submit materialization delivered; ARCH-04B2 output custody next |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | CP06 selected-policy validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers delivered; ARCH-03B1 detached metadata and ARCH-03B2 ready and ARCH-03B3 management/operational queue facts and ARCH-03B4 hidden task detail and ARCH-03B5 current contributor/manager work context and ARCH-03B6 locked-context and ARCH-03B7 requirements projections delivered; ARCH-03B8 hidden task audit evidence delivered; AUTH-OUTBOX-01 unavailable dispatcher contract delivered; CON-02B hidden delivery/recovery custody delivered; AUTH-OUTBOX-02 live authority/audit binding and worker integration delivered; ARCH-03B9 hidden exact assignment invalidation delivered; ARCH-03C1 exact reconciler authority and decision receipts delivered; ARCH-03C2 atomic publication and registered prefork delivery delivered; ARCH-03C3 exact manager task readiness and replay delivered; ARCH-03C4 exact-authorized public queues delivered; ARCH-03C5 exact-authorized detail and requirements delivered; ARCH-03C6 exact-authorized locked-context reads delivered; ARCH-03C7 bounded audit history delivered; CP05A public Finance policy administration delivered; AUTH-18 public manager activation/context delivered; ARCH-03D hidden approved-guide intake delivered; hidden exact post-submit materialization delivered; ARCH-04B2 output custody next |
-| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | TASK/checker canonical history authority delivered and alternate gate removed; AUTH-18 public manager activation and ARCH-03D hidden intake delivered; ARCH-04B hidden input delivered; continue boundary recovery with ARCH-04B2 output custody next |
-| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, separate draft proposals and guide document intake delivered; Hidden proposal review/correction/pre-policy approval custody delivered; AUTH-12F4 proposal authority delivered; POL-05B public review/approval/manual correction dispatch delivered; POL-06A hidden post-policy projection/read/approval/correction delivered; AUTH-12G live authority delivered; POL-06B public access and automatic derivation delivered; POL-07A ART pre-submit attempt recovery delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers delivered; ARCH-03B1 detached metadata and ARCH-03B2 ready and ARCH-03B3 management/operational queue facts and ARCH-03B4 hidden task detail and ARCH-03B5 current contributor/manager work context and ARCH-03B6 locked-context and ARCH-03B7 requirements projections delivered; ARCH-03B8 hidden task audit evidence delivered; AUTH-OUTBOX-01 unavailable dispatcher contract delivered; CON-02B hidden delivery/recovery custody delivered; AUTH-OUTBOX-02 live authority/audit binding and worker integration delivered; ARCH-03B9 hidden exact assignment invalidation delivered; ARCH-03C1 exact reconciler authority and decision receipts delivered; ARCH-03C2 atomic publication and registered prefork delivery delivered; ARCH-03C3 exact manager task readiness and replay delivered; ARCH-03C4 exact-authorized public queues delivered; ARCH-03C5 exact-authorized detail and requirements delivered; ARCH-03C6 exact-authorized locked-context reads delivered; ARCH-03C7 bounded audit history delivered; CP05A public Finance policy administration delivered; AUTH-18 public manager activation/context delivered; ARCH-03D hidden approved-guide intake delivered; hidden exact post-submit materialization delivered; ARCH-04B2 output custody next |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Public guide activation and task reads, hidden approved-guide intake, exact post-submit input materialization and hidden ARCH-04B2 checker-output custody delivered; ARCH-04C durable execution is next |
+| [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Hidden exact post-submit input materialization and ARCH-04B2 output custody delivered; ARCH-04C durable execution next |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Manager guide activation, public task authority, dispatcher mechanics and hidden intake are delivered; ARCH-04B input and ARCH-04B2 output custody exist with deny-only/unavailable production authority; ARCH-04C durable execution is next |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | ContributionPolicy administration and guide binding plus hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C durable execution precedes shared FinalAcceptance, submitter ContributionRecord and applicable awards |
+| [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | TASK/checker canonical history authority delivered and alternate gate removed; AUTH-18 public manager activation and ARCH-03D hidden intake delivered; ARCH-04B hidden input and ARCH-04B2 output custody delivered; continue boundary recovery with ARCH-04C durable execution next |
+| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, public manager policy operations, phase composition, public guide activation, hidden intake, post-submit input and ARCH-04B2 output custody delivered; ARCH-04C durable execution is next |
 | [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Shared acceptance/source and existing fence foundations; human hidden review work remains independently dependency-gated |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |

.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md

@@ -14,7 +14,8 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 - Current boundary: one CHECKERS catalogue, compiler/parser and implementation
   per checker ID serve active policy consumers; production post-submit phase
   execution remains unavailable.
-- Next usable boundary: checker output custody (ARCH-04B2), following delivered hidden input materialization (ARCH-04B). Production execution and live materialization authority remain unavailable.
+- Delivered storage boundary: hidden [ARCH-04B2 checker-output custody](WS-ARCH-001-04B2.md), following hidden input materialization (ARCH-04B). Typed store, byte-free recovery and flush-only verified binding exist; production CHECKERS reservation and authority remain unavailable.
+- Next usable boundary: ARCH-04C durable execution and results, including the current structural catalogue's valid empty output set.
   [AUTH-18](../WS-AUTH-001/WS-AUTH-001-18.md) delivers public manager activation
   context and exact guide activation using the existing CP07 operation.
   [CP05A](WS-ARCH-001-CP05A.md) supplies public Finance policy administration and recoverable draft selectors.