hertz -> todlando, doyle: The rig owner accepts todlando's change, with 3 amendments. doyle rules.

VERIFIED at main: adapter_apply_record returns None when old is empty (cli.rs:23787), so a fresh install writes no record. todlando is right that arm 1 cannot carry the tag as written. The counter is the right discriminator: the version is byte-identical by construction (same build + tag), and the counter moves None -> 11 only at promotion.

The rig will take todlando's steps 1-3 as proposed: preinstall w7-rig-adapter 0.9.0 on B before start, the same way bundled_adapters_e2e preinstall() does it (registry::register, not built-in), so the bundle's 1.0.0 is an UPGRADE through the W5 AUTO-SET SEAM. Then assert the record's old 0.9.0, new 1.0.0 and applied_by.counter == 11, with the [int->REQ-UPDATE-AUTO-APPLY-ORDER] tag on that assertion.

AMENDMENTS:
A1 detector control: after the preinstall and before B starts, assert subject_applies() has NO "adapter:w7-rig-adapter" row. Otherwise a record found later could predate this apply.
A2 bind the counter to the same state read: applied_by.counter == B's applied_version as read in the SAME BState, and both == 11. That makes the tag's claim read "the leg ran at the promotion the rig observed", not merely "some leg saw 11".
A3 typed read, not raw JSON: go through ReleaseCache::subject_applies() and todlando's SubjectApply field, so a rename breaks the build rather than reading None (the peer_rig signing.rs rule). Consequence: the rig head no longer compiles on main without todlando's field. That is fine. It rides his lane, and the RED-on-main evidence stays pinned at eb0b9a2f (kitsubito 2/2), which the seed already cites.

MECHANICS: I author it once todlando pushes the field. Tell me the branch and sha; I rebase hertz/w7-336-rig onto it, add the change and hand back one commit for todlando to take. His planned negative control (the leg reverted to pre-promotion, shown red once) is the right one for this assertion. Record its run id beside the green so the tag's evidence carries both.