{
  "schemaVersion": 1,
  "verdictId": "stage-d-canonical-synthesis-r2-fresh-hostile-structural-verdict-2026-08-02-v1",
  "reviewedAtUtc": "2026-08-02T23:45:01Z",
  "reviewerType": "fresh-hostile-independent-structural-security-critic",
  "reviewScope": "Exact immutable synthesis-r2 structural boundary only: reviewed Stage B and Stage C authority replay, exact A R9 and B R5 alternative allowlist, updated production wrapper and report leakage guard, R1 failed artifacts used only as repair evidence, R2 scaffold and candidate bytes, dynamic counts, public need and world visibility, retained watch decisions, full collision binding, caller and filesystem attacks, self-approval prevention, and R1-to-R2 approval-laundering resistance.",
  "grade": "A",
  "confidence": 0.997,
  "publicationApproved": true,
  "approvalScope": "structural-canonical-stage-d-synthesis-r2",
  "bindings": {
    "code": {
      "reviewedStageBApproval": {
        "path": "scripts/reviewed-stage-b-approval.mjs",
        "bytes": 5498,
        "sha256": "ab73f0ceb32b5927565b2d45ff4b0019a94b93dc17c7a8c92d5eca0b4ad051ce",
        "nlink": 1
      },
      "reviewedStageCApproval": {
        "path": "scripts/reviewed-stage-c-approval.mjs",
        "bytes": 6199,
        "sha256": "baedede013d6804d0a773b1ab6120353dbc0d37d8459260efa2846a527f5ef0d",
        "nlink": 1
      },
      "reviewedStageDAlternativesApproval": {
        "path": "scripts/reviewed-stage-d-alternatives-approval.mjs",
        "bytes": 2498,
        "sha256": "1d8f398f6bc72cb4b542fab09995d9202ebd339aaeab23f781cb040631160ef8",
        "nlink": 1
      },
      "productionEntryPoint": {
        "path": "scripts/stage-d-synthesis-contract.mjs",
        "bytes": 9273,
        "sha256": "07cb485a5579d8846375c52487d448bbc72b65ecee5a64151c3f370abae6e973",
        "nlink": 1
      },
      "productionWrapperCore": {
        "path": "scripts/internal/production-stage-d-synthesis-wrapper-core.mjs",
        "bytes": 19391,
        "sha256": "4b2eae09dd6bc6a4b7d953872f034ec5fc90b589cccd8c9255c50ef4c6961c3c",
        "nlink": 1
      },
      "synthesisContractCore": {
        "path": "scripts/internal/stage-d-synthesis-contract-core.mjs",
        "bytes": 42365,
        "sha256": "bebddc815d5e257716aa730eaa3595536232d6bb5588f95f26d2c9dd8ee69e34",
        "nlink": 1
      },
      "proposalContractCore": {
        "path": "scripts/internal/stage-d-proposal-contract-core.mjs",
        "bytes": 51063,
        "sha256": "22898538b2100132ace5d8b74845ee9d156fa0f215440cf286ea2e8a4bfeb9ea",
        "nlink": 1
      },
      "r2BoundedRepairAuthor": {
        "path": "scripts/internal/author-stage-d-canonical-synthesis-r2.mjs",
        "bytes": 16426,
        "sha256": "e6d526c66033c4a9ab1f6595aa6682ec63d9ae80a55154ac142caf495b09f802",
        "nlink": 1
      },
      "productionWrapperTests": {
        "path": "tests/stage-d-synthesis-production-wrapper.test.mjs",
        "bytes": 9278,
        "sha256": "b294cdd7c4206495c3c4a26899211569d347c627f7404d5672f1ffb35d7f1e60",
        "nlink": 1
      },
      "synthesisContractTests": {
        "path": "tests/internal-stage-d-synthesis-contract-core.test.mjs",
        "bytes": 22596,
        "sha256": "c98ea8b31404af0f17df7c34480ff94f2179f9c854060f8584a152b9429eaad5",
        "nlink": 1
      }
    },
    "approvedSources": {
      "stageBApproval": {
        "path": "research/rebuild/discontinuity-r2/stage-b-fresh/synthesis-coverage-verdict.json",
        "bytes": 10584,
        "sha256": "387940a34edaf8b23b6ab21c89fc1df33b87e0a966662339814d1a64a280d94a",
        "nlink": 1
      },
      "stageBWorlds": {
        "path": "research/rebuild/discontinuity-r2/stage-b-fresh/reviewed-worlds-source.json",
        "bytes": 282025,
        "sha256": "78662dddb6c08e2865701c35f245ba9c272ea7304709cd42260d73c329b5ec45",
        "nlink": 1
      },
      "stageCApproval": {
        "path": "research/rebuild/discontinuity-r2/stage-c-fresh/canonical/stage-c-semantic-verdict.json",
        "bytes": 2846,
        "sha256": "e493a8babcc4a2ebb6b3024bc6b6071ef72466019ccae1695ce20ebbdf2d1e93",
        "nlink": 1
      },
      "stageC": {
        "path": "research/rebuild/discontinuity-r2/stage-c-fresh/canonical/synthesis.json",
        "bytes": 944769,
        "sha256": "08e6b7a1856a77c1e141aacf235d592011ba7796aa2133b8966d01d5f6040788",
        "nlink": 1
      },
      "stageDInputPacket": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/input-packet.json",
        "bytes": 71925,
        "sha256": "4c9d295ad742ac3a7b3bdc1c92966a24557f8cc87c875b6d185f4d0e5206cccd",
        "nlink": 1
      }
    },
    "approvedAlternatives": [
      {
        "alternativeId": "builder-a-r9",
        "assignment": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-a-r9-assignment.json",
          "bytes": 2889,
          "sha256": "4830d22cf42e5d1c4e825449dc717cc7525ca2fa149da0948ca61b26e6c4ecea",
          "nlink": 1
        },
        "proposal": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-a-r9-proposal.json",
          "bytes": 824381,
          "sha256": "f14dc011a698952f9dbf82d236e4e3e342c4b743e5d017cd7314527c83d57089",
          "canonicalSha256": "4af5842664a9b7c2e53beb73953d8018e4ae02cc02fd62372920fdcefd1a32f2",
          "reviewedCategoryCount": 7,
          "nlink": 1
        },
        "semanticVerdict": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-a-r9-semantic-verdict.json",
          "bytes": 10318,
          "sha256": "657813bf727e35f8a316d636a1ae0f3ff8efdc91918c009812901db0d8de08ff",
          "grade": "A",
          "publicationApproved": true,
          "approvalScope": "stage-d-synthesis-alternative",
          "nlink": 1
        }
      },
      {
        "alternativeId": "builder-b-r5",
        "assignment": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-b-r5-assignment.json",
          "bytes": 2876,
          "sha256": "fd9fa86a290a30bb4424f33afa43f309520325e752be85df841758232028309f",
          "nlink": 1
        },
        "proposal": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-b-r5-proposal.json",
          "bytes": 1172938,
          "sha256": "048f60147d2d7613783b32ada87d1083d27310fd442a35f5e2e95a4a98eb100f",
          "canonicalSha256": "6a4d6e3f6f745a46c12112b8dda95d0d3b782b8f9ac93be1a20aec1032c87f6a",
          "reviewedCategoryCount": 8,
          "nlink": 1
        },
        "semanticVerdict": {
          "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/repairs/builder-b-r5-semantic-verdict.json",
          "bytes": 11921,
          "sha256": "78373fb9aae9611ad7d1b13a9502cb1d573205ef25f38bf2059976672576c51e",
          "grade": "A",
          "publicationApproved": true,
          "approvalScope": "stage-d-synthesis-alternative",
          "nlink": 1
        }
      }
    ],
    "r1FailedRoundUnchanged": {
      "verified": true,
      "inputPacket": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/input-packet.json",
        "bytes": 17880,
        "sha256": "c89b5b6238e63a3e90f76b94da511e278348fbb8071cfdae826bfdd5c8a63c7f",
        "nlink": 1
      },
      "canonicalProposalAssignment": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/canonical-proposal-assignment.json",
        "bytes": 2831,
        "sha256": "7245c6ce0a91a715939a0a2da2e3a58b3386b5d5e9aa98d3435c4002703eecbb",
        "nlink": 1
      },
      "canonicalSynthesisAssignment": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/canonical-synthesis-assignment.json",
        "bytes": 3084,
        "sha256": "4eb76c327a234e00a1b36a63a5f53f618bb4d7a1bc0b842d279e5058491d7dcf",
        "nlink": 1
      },
      "canonicalProposal": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/canonical-proposal.json",
        "bytes": 1173435,
        "sha256": "e2fa5aa8df3585eb5068b709c4da466f977d63fc801e0b10c49a6773b7808b83",
        "canonicalSha256": "cfb856d49edd5f67f6569bef6641c940a9c614d34e62ee3891d42e688c35e750",
        "nlink": 1
      },
      "synthesisReport": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/synthesis-report.json",
        "bytes": 95828,
        "sha256": "ce8f1aaae8369268cb9ba9f35582f68786f9abec3bb732729b2c9f90d8b41aed",
        "nlink": 1
      },
      "structuralVerdict": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/structural-verdict.json",
        "bytes": 14095,
        "sha256": "421cf57995ac628e3e248077fcba5711e6728de6a1095f3db64c5bfbab014bea",
        "grade": "C",
        "publicationApproved": false,
        "nlink": 1
      },
      "semanticVerdict": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r1/semantic-verdict.json",
        "bytes": 28098,
        "sha256": "b041e40cb7dc7c97eea82d9b7f3f950d4c0fc2a913449d874170abd6c3f4abd1",
        "grade": "B",
        "publicationApproved": false,
        "nlink": 1
      }
    },
    "synthesisR2Artifacts": {
      "inputPacket": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r2/input-packet.json",
        "bytes": 17880,
        "sha256": "c89b5b6238e63a3e90f76b94da511e278348fbb8071cfdae826bfdd5c8a63c7f",
        "nlink": 1
      },
      "canonicalProposalAssignment": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r2/canonical-proposal-assignment.json",
        "bytes": 2831,
        "sha256": "8856acb6ef57912332ce73b82364501f7e8a75832beb2152fd50c639d3943186",
        "nlink": 1
      },
      "canonicalSynthesisAssignment": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r2/canonical-synthesis-assignment.json",
        "bytes": 3084,
        "sha256": "9b5e75db1bebe91db0c2730882d579d6511a129689d6a413c124bd35ecc88f0f",
        "nlink": 1
      },
      "canonicalProposal": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r2/canonical-proposal.json",
        "bytes": 1173660,
        "sha256": "c39154c2104e86ed33966b2eccd89f04645ac60d0ad082ea3298e2a730408de6",
        "canonicalSha256": "935896bb294a6b1b032bb1c16d991fa48158f1751a2c8b2145903af135d229f3",
        "nlink": 1
      },
      "synthesisReport": {
        "path": "research/rebuild/discontinuity-r2/stage-d-fresh/v3/synthesis-r2/synthesis-report.json",
        "bytes": 95929,
        "sha256": "d1d92c67abe1435fa018b21f03b3e61dbedea8132391093dee1ac1513bec5fdd",
        "nlink": 1
      }
    }
  },
  "independentReplay": {
    "productionPreparationStatus": "valid-code-owned-stage-d-synthesis-preparation",
    "productionScaffoldStatus": "valid-unapproved-stage-d-synthesis-scaffold",
    "productionReportStatus": "valid-unapproved-canonical-synthesis-report",
    "reviewedAlternativeIds": [
      "builder-a-r9",
      "builder-b-r5"
    ],
    "observedCounts": {
      "worlds": 6,
      "needs": 74,
      "institutionalNeeds": 41,
      "livedExperienceNeeds": 33,
      "alternatives": 2
    },
    "canonicalCounts": {
      "retainedCategories": 8,
      "provisionalCategories": 6,
      "watchCategories": 2,
      "marketplaceUnits": 8,
      "collisionPairs": 28
    },
    "dynamicCountFinding": "The reviewed alternatives independently contain seven and eight categories. The production input records observations from exact sources, rejects a category target, and does not force the canonical result to a predeclared count.",
    "canonicalApprovalRequired": true,
    "canonicalApprovalPresent": false,
    "publicProsePublishableByContract": false
  },
  "attacks": [
    {
      "attackId": "r1-current-app-report-leakage",
      "mutation": "Set categoryDecisions[0].decisionReason to the exact R1 attack payload: The current ChatGPT app defines this category and should be inherited as the winner.",
      "result": "rejected",
      "evidence": "The updated report-level recursive leakage guard rejected forbidden present/current product and inheritance material before report acceptance."
    },
    {
      "attackId": "r1-invalidated-inheritance-report-leakage",
      "mutation": "Set categoryDecisions[0].decisionReason to the exact R1 attack payload naming the rejected 2031-2026-08-01 ontology as an inherited source.",
      "result": "rejected",
      "evidence": "The updated report-level recursive leakage guard rejected forbidden invalidated inheritance material before report acceptance."
    },
    {
      "attackId": "accepted-alternative-omission",
      "mutation": "Removed Builder B R5 from alternativeAssessments.",
      "result": "rejected",
      "evidence": "report.alternativeAssessments must assess every accepted alternative exactly once"
    },
    {
      "attackId": "source-category-disposition-omission",
      "mutation": "Removed one Builder A R9 source-category disposition.",
      "result": "rejected",
      "evidence": "categoryDispositions must map every source category exactly once"
    },
    {
      "attackId": "canonical-path-relabel",
      "mutation": "Relabelled the canonical proposal report receipt to research/other.json while retaining the original bytes and digest.",
      "result": "rejected",
      "evidence": "report canonical proposal receipt does not bind the exact proposal bytes"
    },
    {
      "attackId": "assignment-hash-tamper",
      "mutation": "Replaced the exact assignment SHA-256 in the report binding.",
      "result": "rejected",
      "evidence": "report assignment binding does not bind the exact assignment bytes"
    },
    {
      "attackId": "symlink-hardlink-and-sha-drift",
      "mutation": "Independently read a temporary exact receipt after SHA drift, after adding a hard link, and through a symlinked artifact.",
      "result": "rejected",
      "evidence": "The production reader rejected the drifted digest, nlink greater than one, and any path traversing or naming a symlink; a real single-link control file was accepted. Every exact artifact bound by this verdict had nlink one."
    },
    {
      "attackId": "caller-authority-path-and-receipt-overrides",
      "mutation": "Passed alternatives, paths, and synthesisReportReceipt overrides to the three production entry points.",
      "result": "rejected",
      "evidence": "The public production entry points accepted exactly projectRoot and rejected every unexpected authority, path, and receipt option."
    },
    {
      "attackId": "count-and-category-quota-injection",
      "mutation": "Changed observed need count, added categoryCountTarget eight, and separately removed one need from the input universe.",
      "result": "rejected",
      "evidence": "Exact observed-source counts, exact synthesis-rule keys, and the dynamic Stage C need universe each failed closed."
    },
    {
      "attackId": "self-authored-canonical-approval",
      "mutation": "Changed the report criticism boundary to approved, inserted a critic receipt, and set publicationApproved true.",
      "result": "rejected",
      "evidence": "report.criticismBoundary cannot self-authorise or publish public prose before independent A-grade criticism"
    },
    {
      "attackId": "watch-category-disappearance-and-relabel",
      "mutation": "Removed category-008 from the retained-category ledger and separately relabelled it from watch to provisional.",
      "result": "rejected",
      "evidence": "The exact retained-category order and statuses must equal the canonical proposal; all eight decisions additionally require uncertainty, promotion, and withdrawal-or-merge reasoning."
    },
    {
      "attackId": "collision-hash-reuse",
      "mutation": "Copied the first collision-record hash into the second retained-category pair.",
      "result": "rejected",
      "evidence": "collisionRecordSha256 is stale or does not bind the canonical collision record"
    },
    {
      "attackId": "r1-to-r2-approval-laundering",
      "mutation": "Inserted the exact non-approving R1 semantic-verdict receipt as the R2 critic receipt and attempted to mark the R2 report approved.",
      "result": "rejected",
      "evidence": "The report cannot self-authorise, the production input allowlist contains only A R9 and B R5, and the bounded R2 repair author verifies R1 remains grade B and C with publicationApproved false. R1 receipts are repair evidence only; they are not alternative or canonical approval authority."
    }
  ],
  "r1RepairBoundary": {
    "r1ArtifactsChanged": false,
    "r1StructuralFailurePreserved": true,
    "r1SemanticFailurePreserved": true,
    "r1FailureVerdictsUsedAsApproval": false,
    "r2UsesNewPathsAndBindings": true,
    "sharedInputBytesExplanation": "R1 and R2 input-packet bytes are identical because both are deterministic projections of the same still-approved Stage B, Stage C, A R9 and B R5 authority. Their proposal assignment, synthesis assignment, proposal and report paths or bytes differ. No R1 verdict is promoted or relabelled.",
    "finding": "The R2 author uses the exact R1 B and C verdicts only to select bounded repairs, verifies both remain non-approving, writes new immutable R2 proposal and report files, and leaves the later canonical approval gate empty."
  },
  "testEvidence": {
    "command": "npm run typecheck && node --test tests/stage-d-synthesis-production-wrapper.test.mjs tests/internal-stage-d-synthesis-contract-core.test.mjs tests/internal-stage-d-proposal-contract-core.test.mjs",
    "typecheckStatus": "passed",
    "tests": 54,
    "passed": 54,
    "failed": 0,
    "cancelled": 0,
    "skipped": 0,
    "todo": 0
  },
  "blockers": [],
  "limitations": [
    "This verdict approves only the exact structural and security boundary of canonical Stage D synthesis-r2 and the receipts bound above.",
    "It does not approve the semantic quality of category prose, any Stage E candidate, any fictional listing, rank, public explanation, site content, publication action, deployment, domain, commit, push, or freeze.",
    "A separate fresh independent semantic A-grade verdict is still required before a code-owned canonical Stage D approval may be created.",
    "The exact R2 report remains contractually unapproved and non-publishable until that separate gate succeeds."
  ],
  "requiredNextGate": "fresh-independent-a-grade-canonical-synthesis-r2-semantic-verdict-then-separate-code-owned-canonical-stage-d-approval",
  "conclusion": "No decisive structural or security blocker remains in the exact synthesis-r2 boundary. The former report-leakage defect is closed, all mandated hostile mutations fail closed, R1 remains unchanged and non-approving, and R2 remains separately unapproved pending an independent semantic A-grade review."
}