docs: bind corrected CK-07R1 successor overlay

AGENTS.md

@@ -40,10 +40,16 @@ behavior or the frozen baseline and is accepted at exact main `30983d4`;
 QG1 PR #392 passed hosted CI, squash-merged, and was exact-main verified at
 `68050b93`. CK-07R1A corrected
 the exact hosted Python 3.14 lifecycle-tail blocker; the linked CK-07R1A0
-authorities, including argv correction, are merged through `479cbdb`. The
-existing CK-07R1 worker remains stopped pending coordinator disposition of the
-preserved `prelaunch_failed` witness incident and a clean exact-main
-reapplication path. PR #394 remains stale failed read-only.
+authorities, including argv correction, are merged through `479cbdb`.
+Coordinator disposition and clean exact-main reapplication from `cf44f4fd`
+derived the exact `66c015de…` / `4b1c62b2…` / `75d03f53…` candidate cohort.
+The versioned
+[`shared-successor-overlay-authority-v1`](docs/decisions/evidence/ck07r1a0/shared-successor-overlay-authority-v1.json)
+preserves accepted CK-08R1B, CK-08R1, and CK-QG1 bytes while admitting only
+that complete cohort as CK-07 `worker_prequalification`.
+The existing CK-07R1 worker remains stopped until that authority transition is
+merged and exact-main verified; no launch or token use is authorized. PR #394
+remains stale failed read-only.
 Retained R3 evidence proved the EvidenceService outer query
 physically unbounded; CK-08R3A owns that isolated fix and R3 awaits its
 accepted, merged, exact-main-verified result.

docs/INDEX.md

@@ -109,24 +109,29 @@ authority](decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json)
 and [run-invocation authority](decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json)
 keep CK-07R1 `blocked_hold`
 (`docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json`).
-The shared-preparation transition is exactly two-state: live exact-main
-preparation `408d18e4…` before R3A, and the current session-bounded preparation
-`6689d61f…` only inside the complete R3A cohort after its acceptance. Prior
-candidate `e204e0da…` and historical candidate `d192c858…` are retained
-read-only, revoked for the new base, and forbidden for direct use. CK-07 must
-later reapply its retained lifecycle diff onto the accepted R3A base to derive
-a new exact preparation digest before any run. PR #394 remains a stale failed
+The accepted source history retains R3A preparation `6689d61f…` as a
+historical predecessor and R1B/current exact-main preparation `7d1831ff…` as
+the live predecessor. The sole CK-07 worker-prequalification successor is the
+atomic `66c015de…` preparation, `4b1c62b2…` benchmark, and `75d03f53…`
+lifecycle-test cohort derived from exact main `cf44f4fd`. Mixed or incomplete
+cohorts, prior candidate `e204e0da…`, and historical candidate `d192c858…`
+fail closed. PR #394 remains a stale failed
 read-only witness; it is not updated, rerun, or merged. The old argv-guard attempt remains the historical
 `pre_child_argv_guard_failure`: exit 2 after `0.075241709` seconds, with no
 child, PID, handshake, token, output, ledger, stdout, stderr, receipt, or
 runtime evidence. The corrected guard is
 `(sys.argv[0], *sys.argv[1:]) == LAUNCH_COMMAND[1:]`. The run authority freezes
 the exact launch, fixture, revoked malformed dispatch value, 720-second wrapper
 timeout, four-path non-overwriting preflight, evidence, token, and no-retry
-contract while preserving the 5000/120000/100/500/500 ms budgets. No worker
-resumes from this authority task, no run token is consumed, no launch/output is
-authorized, no other successor is advanced, and the one-run gate remains
-unspent. Reclassification and maintainability remain open. The central authority is
+contract while preserving the 5000/120000/100/500/500 ms budgets. This
+versioned
+[`shared-successor-overlay-authority-v1`](decisions/evidence/ck07r1a0/shared-successor-overlay-authority-v1.json)
+is the only additive consumer bridge: accepted CK-08R1B v1, CK-08R1 evidence,
+and CK-QG1 authority bytes remain exact, and the overlay grants neither
+implementation acceptance nor launch authority. This
+authority task does not resume the worker, consume the run token, authorize
+launch/output, or advance another successor. The one-run gate remains unspent
+and unavailable. The central authority is
 [REMAINING_EXECUTION_PLAN.md](roadmap/REMAINING_EXECUTION_PLAN.md).
 
 The finite source/runtime state machine is currently `authority_main`: the live

docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json

@@ -1,11 +1,11 @@
 {
-  "schema": "codex-usage-tracker.lifecycle-run-invocation-authority.v5",
-  "authority_version": 5,
+  "schema": "codex-usage-tracker.lifecycle-run-invocation-authority.v6",
+  "authority_version": 6,
   "owner": "CK-07R1A0",
-  "authority_base_sha": "7d5a4b1717db78891fd2c38d8803d7fe2f922986",
+  "authority_base_sha": "cf44f4fdd3f54ad53263b5e744203be468fbe5ca",
   "status": "blocked_no_run",
   "shared_preparation_binding": {
-    "authority_main_sha256": "408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872",
+    "authority_main_sha256": "7d1831ff5229e8e2a9819f0bd155d116ad97c3c3579bfa0444f791fe81e81feb",
     "r3a_atomic_cohort_sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
     "historical_d192_sha256": "d192c858b48e44b5aa7a7e39ef524e5ec2f08085655fe485639f5e875a727aa1",
     "r3a_requires_complete_cohort": true,
@@ -27,8 +27,8 @@
     "corrected_guard": "(sys.argv[0], *sys.argv[1:]) == LAUNCH_COMMAND[1:]",
     "corrected_candidate_status": "frozen_not_run",
     "corrected_candidate_artifacts": {
-      "benchmark_sha256": "f173837d71e393e53e13f0253f3f1ede4045befb5dab2cbf81d6fe147be4b47a",
-      "lifecycle_test_sha256": "b6468b609dd7e47462d4e0c958f33d37d876959c90fb17ae02d64c3d18c22eed"
+      "benchmark_sha256": "4b1c62b2d56bf808b66f47c71b1bb1fa3595e2d590d0fa0192b5f7be3b2b4dde",
+      "lifecycle_test_sha256": "75d03f5346ffe2d02ffedc5df007ce45bef5533b324202ccf41b535de8b33cd2"
     },
     "old_candidate_artifacts": {
       "benchmark_sha256": "6a864c74a403da3edb671d9750fc2b2a59b73899102075ee0cec89fbb429b783",
@@ -92,35 +92,35 @@
     "states": [
       {
         "name": "authority_main",
-        "source_sha256": "408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872",
-        "source_role": "live_predecessor",
+        "source_sha256": "7d1831ff5229e8e2a9819f0bd155d116ad97c3c3579bfa0444f791fe81e81feb",
+        "source_role": "accepted_current_r1b_predecessor",
         "runtime_acceptance": "not_claimed",
         "receipt_policy": "receipt_absent_and_non_qualifying",
         "evidence_identity_policy": "not_available",
         "merge_policy": "current_authority_state"
       },
       {
         "name": "worker_prequalification",
-        "source_sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
-        "source_role": "selected_r3a_atomic_cohort_preparation",
+        "source_sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
+        "source_role": "selected_ck07_exact_candidate",
         "runtime_acceptance": "not_claimed",
         "receipt_policy": "not_yet_available",
         "evidence_identity_policy": "not_available",
         "merge_policy": "authority_merge_and_exact_main_required_before_entry"
       },
       {
         "name": "post_single_run",
-        "source_sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
-        "source_role": "selected_r3a_atomic_cohort_preparation",
+        "source_sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
+        "source_role": "selected_ck07_exact_candidate",
         "runtime_acceptance": "qualified_only_with_complete_planner_valid_receipt",
         "receipt_policy": "complete_planner_valid_receipt_required",
         "evidence_identity_policy": "bind_exact_dynamic_receipt_and_evidence_identity",
         "merge_policy": "worker_merge_and_exact_main_required_for_final_acceptance"
       },
       {
         "name": "final_accepted",
-        "source_sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
-        "source_role": "selected_r3a_atomic_cohort_preparation",
+        "source_sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
+        "source_role": "selected_ck07_exact_candidate",
         "runtime_acceptance": "accepted_only_with_worker_merge_and_exact_main",
         "receipt_policy": "same_complete_planner_valid_receipt_identity_required",
         "evidence_identity_policy": "same_exact_dynamic_receipt_and_evidence_identity",
@@ -133,8 +133,8 @@
         "to": "worker_prequalification",
         "requires": [
           "this authority is merged and exact-main verified",
-          "the existing worker starts from that exact main in a fresh worktree",
-          "the worker deliberately reapplies only the exact selected successor over the live predecessor",
+          "the existing worker resumes only the preserved exact candidate worktree",
+          "the worker presents the byte-exact 66c015de/4b1c62b2/75d03f53 cohort over the 7d1831ff predecessor",
           "runtime_acceptance remains not_claimed",
           "authority-integrity and prelaunch gates pass",
           "maximum_new_end_to_end_runs remains 1 and unspent_unavailable",
@@ -146,7 +146,7 @@
         "from": "worker_prequalification",
         "to": "post_single_run",
         "requires": [
-          "only the exact corrected selected successor digest is present",
+          "only the exact corrected selected successor cohort is present",
           "exact prelaunch gates pass and one child launch consumes the run token",
           "a complete planner-valid receipt is produced",
           "receipt schema, static identities, workload_transition_digest, and stdout/stderr/output evidence identities validate",
@@ -204,31 +204,31 @@
     ]
   },
   "selected_candidate": {
-    "status": "r3a_shared_preparation_not_ck07_candidate",
-    "base_sha": "7d5a4b1717db78891fd2c38d8803d7fe2f922986",
-    "retained_branch": "not_applicable_until_ck07_reapplication",
-    "retained_worktree": "not_applicable_until_ck07_reapplication",
-    "witness_status": "r3a_candidate_retained_uncommitted_read_only_not_ck07_qualified",
-    "source_predecessor_sha256": "408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872",
-    "source_successor_sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
+    "status": "exact_ck07_successor_permitted_not_accepted",
+    "base_sha": "cf44f4fdd3f54ad53263b5e744203be468fbe5ca",
+    "retained_branch": "feature/ck-07r1-launcher-correction-v7",
+    "retained_worktree": "2026-08-11/codex-usage-tracker-ck07r1-launcher-correction-v7",
+    "witness_status": "retained_uncommitted_read_only_exact_candidate",
+    "source_predecessor_sha256": "7d1831ff5229e8e2a9819f0bd155d116ad97c3c3579bfa0444f791fe81e81feb",
+    "source_successor_sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
     "runtime_acceptance": "not_claimed",
-    "requires_complete_r3a_cohort": true,
-    "direct_ck07_use": "forbidden",
+    "requires_complete_candidate_cohort": true,
+    "direct_ck07_use": "worker_prequalification_only_after_authority_exact_main",
     "launch_authorized": false,
     "artifacts": [
       {
         "path": "src/codex_usage_tracker/agent_kernel/publication/preparation.py",
-        "sha256": "6689d61fbf6d7948e1958a9d0bc58b4ea326a7f04221914b74c0651e0be1e37c",
-        "role": "r3a_shared_preparation_not_ck07_source"
+        "sha256": "66c015de949a6c380bd49964cb6c48c30dee64ecb14074b480837c44024328ea",
+        "role": "source"
       },
       {
         "path": "scripts/benchmark_ck07r1_lifecycle_scale.py",
-        "sha256": "f173837d71e393e53e13f0253f3f1ede4045befb5dab2cbf81d6fe147be4b47a",
+        "sha256": "4b1c62b2d56bf808b66f47c71b1bb1fa3595e2d590d0fa0192b5f7be3b2b4dde",
         "role": "benchmark"
       },
       {
         "path": "tests/agent_kernel/publication/test_lifecycle_scale.py",
-        "sha256": "b6468b609dd7e47462d4e0c958f33d37d876959c90fb17ae02d64c3d18c22eed",
+        "sha256": "75d03f5346ffe2d02ffedc5df007ce45bef5533b324202ccf41b535de8b33cd2",
         "role": "lifecycle_test"
       },
       {
@@ -237,7 +237,7 @@
         "role": "linked_evidence"
       }
     ],
-    "binding": "r3a_preparation_is_not_a_ck07_candidate; complete_cohort_required_before_ck07_reapplication",
+    "binding": "only the byte-exact 66c015de/4b1c62b2/75d03f53 cohort may enter worker_prequalification after this authority merges and exact-main verifies",
     "worker_revalidation_required": true
   },
   "preserved_authorities": {
@@ -249,9 +249,9 @@
     },
     "lifecycle_source_digest": {
       "path": "docs/decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json",
-      "sha256": "fdda4898e1f2f638453410b9536d7de12b6e16f7034243e28624bb5c975b611e",
+      "sha256": "6156780a7e8663859658bb5309f13eb6bf5283704784d8270edf0512c167d70b",
       "schema_path": "docs/decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.schema.json",
-      "schema_sha256": "b31270111e700ea3bc78d60ce539f1f1dce510f8cac3df929ee1635fbac44405"
+      "schema_sha256": "4026a4e971c1b6b177b467440a36931bc6a15a0b376918bdc4169b732a0d489c"
     }
   },
   "launch_contract": {
@@ -270,6 +270,20 @@
         "one_tool_tail": 500
       }
     },
+    "launcher_safety": {
+      "overlay_and_cohort_verification": "must_complete_before_ledger_fork_child_release_or_token_consumption",
+      "receipt_binding": "must_equal_exact_overlay_verification_result_and_three_artifact_cohort",
+      "post_token_or_release_failure_state": "failed_after_launch",
+      "termination_sequence": [
+        "SIGTERM",
+        "wait_up_to_5_seconds",
+        "SIGKILL"
+      ],
+      "final_reap_timeout_seconds": 5,
+      "retry": "none",
+      "restart": "none",
+      "replacement": "none"
+    },
     "repository_relative_command": [
       ".venv/bin/python",
       "scripts/benchmark_ck07r1_lifecycle_scale.py",
@@ -566,7 +580,7 @@
     "refund": false,
     "prior_identities_reused": false,
     "concurrent_processes_allowed": false,
-    "eligibility": "only after this authority merges and exact-main verifies, the stopped existing worker deliberately reapplies only the corrected exact candidate, and all gates pass",
+    "eligibility": "only after this authority merges and exact-main verifies, the stopped existing worker resumes only the preserved exact 66c015de/4b1c62b2/75d03f53 candidate cohort, and all gates pass",
     "first_successful_launch": "exactly one first successful child launch may consume the still-unspent token; this is not a retry, restart, or replacement of a launched process",
     "old_candidate_reuse": "forbidden"
   },
@@ -629,14 +643,15 @@
   },
   "feasibility": {
     "candidate_script": "scripts/benchmark_ck07r1_lifecycle_scale.py",
-    "candidate_status": "corrected_no_run_runtime_unqualified",
-    "exact_blocker": "the corrected no-run candidate is identity-reconciled but the stopped worker has not deliberately reapplied it on exact merged main or produced the planner-valid receipt; the sole end-to-end gate remains unconsumed",
+    "candidate_status": "exact_successor_bound_no_run_runtime_unqualified",
+    "exact_blocker": "the exact successor cohort is authority-bound but this authority is not yet merged and exact-main verified, the stopped worker has not re-entered worker_prequalification, and no planner-valid receipt exists; the sole end-to-end gate remains unconsumed",
     "authority_action": "freeze contract only; do not implement runtime or harness behavior in this authority",
     "run_action": "do not execute production or end-to-end qualification; do not consume the run token; keep CK-07R1 blocked",
     "fixture_identity_status": "proven_for_static_manifest_and_file_values; workload_transition_digest remains a required runtime-produced value"
   },
   "scope": {
     "authority_only_files": [
+      "AGENTS.md",
       "docs/INDEX.md",
       "docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json",
       "docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.schema.json",