[rdpollard]

Preserve the successful checkout diagnostic and both prior Mint sessions before any later media preparation. Record the owner-supplied CHECKOUT_VALIDATED evidence, local listener exit, owner-attested disabled activation and manual remote runner removal. Keep permission diagnostic success distinct from unvalidated cleanup/authentication safety and the earlier stopped media failure.

Prepare an ownership/quiescence/collision-checked archive-and-fresh-session procedure plus a pure injected-observation planning model. The model has no host inspector, executor or CLI; its data is explicitly non-executable and cannot authorize operations. Require source identity binding, bounded distinct identities, absent archive/journal, native no-overwrite support and explicit safety facts. Stop without retry/rollback on uncertainty. Preserve the older failed session untouched and the completed checkout tree in a fixed run-bound archive.

Review fixed missing journal-collision checks and unbounded identity fields, added malformed/aliased observation coverage, and clarified the ordered prose procedure's mandatory revalidation, journal/fsync and failure gates. Native execution/atomicity/cleanup remain unimplemented and unvalidated.

Final review added explicit per-ancestor unknown-ACL rejection and worst-case serialized output bounds. No further implementation defects found; native execution remains a separate unimplemented gate.

QA: 134 mocked/static checks, focused actionlint and whitespace checks passed. Full branch diff is exact infrastructure-only scope, with mixed application/key changes requiring normal application CI. Automatic CI adds only the mocked planner suite and its exact path filters. Existing launcher, manual workflows, source guard and media transport/validator are unchanged.

Keep this PR unmerged for review and #73 draft/unmerged. No activation, host operations, runner registration/start, dispatch, downloads, guests, builds, packages or releases. Any future operation requires separate explicit authorization and reviewed native implementation; this PR only prepares evidence, procedure and a pure model.

[rdpollard]

Merged reviewed head 6524fcc via normal GitHub squash merge with exact-head guard, no admin bypass, as 2bbfc0a. Pre-merge policy/scope/workflow-checks passed and native fixtures/application jobs were skipped.

Post-merge main evidence: run 39133877319 policy passed; run 39133877366 scope passed, checks/native/update-trust/release all skipped. No manual dispatch or native/application build was performed. PR #73 remains open and draft. Activation settings were not changed and native execution remains deferred.

The merged archival procedure/model is preparation only, with no host inspector or mutation executor. Native no-replace rename, bounded ownership/quiescence inspection, durable phase journal and interruption recovery remain implementation/validation gates before any host operation. Existing sessions must remain untouched until separately authorized. Sole-maintainer self-approval remains the standing policy.