HSMDBIDP A.1 — PASS; A.2 HOLD FOR BOX CLEAR

both git children seed-absent = the f213ed78 boundary held.

AUTHORITY AND SCOPE
HSMDBIDP authorized instrument correction and ONE fresh-root A.1. RLJAKKFX authorized exact supplied flags with provenance and UNKNOWN elsewhere; classification uses resolved image + parent + birth. EACTC7AH requires HOLD at A.2 after PASS until Doyle sends BOX CLEAR. This attempt ran once, native0 in46.83s. No preparation epoch/deadline was started. No real key, rig creation, trust installation, apply, daemon promotion, field GO, D3 mutation, disposal or product rebuild was performed by hertz.

PINS
Supplied final assembly: BVJTPYWI b848244577d398600b59c7829fef9edbdb6315fa.
Actual xtask admitted and hash-checked by this qualification: de215d4a24ec0ee5a4a2e5057bc89c5605806d725efe10d9fac56f34486f7f41, .worktrees/asm-304-v3/target/release/xtask.exe.
Controller: f7133c5dc59625ce21fb49df21a35407c6ef7c7cc98f7440b3bd87861b93ce55.
Observer source: 3214b8dd28320f00aa207e8974cb02656521bbe73c7b6dacee5d9594d84c5f85.
Qualified observer executable: f33cfa98c026c3ad9c8b8766ca5d4db15035c62ba76dbea3f6b703d49635d322.
Native launcher unchanged: PS6e2c2eac82dd53fd0af42c4fe796f911e987d406e6f31219cd4480a78f1f6804; CSc3a905ec7cbc118f0b59dd1813b187740319802267689e14dacf6008730de157.
Git command shim: f4f1ff2df52c33239013f8cac4047696a380b02b7790c69895bcf8fd81ea7bb6, C:\Program Files\Git\cmd\git.exe.
Output: controls-out/custody-HSMDBIDP/ relative to this receipt. Qualified sources frozen under its sources/ directory.
Qualification: C:\Users\decid\Documents\spt-custody-HSMDBIDP.
Full manifest: HSMDBIDP-custody-inventory.json; SHA a09935b6b399f6682976d63237a23a2da3bf18fa9530d7c240c923d06f8855c5; 98 retained files across output, qualification and preflight roots.

MEASURED BOUNDARIES
All five arms accepted: normal native0; timeout native124/deadline_expired (designed outcome); error native101 after both actual git calls (deliberately invalid staging path); forbidden helper native0 with expected custody rejection; post helper native0 with seed absence.
26 observed child identities resolved. Every creation/loader verdict follows its child-identity record. Ten records name flags supplied by the observer/pinned launcher;16 explicitly record UNKNOWN and why. No arbitrary descendant flags were inferred.
Normal signer4440 birth2026-09-13T14:03:47.9159734Z saw the public sentinel at creation and loader. Its direct child36848 birth2026-09-13T14:03:48.1292838Z resolved by QueryFullProcessImageNameW on the retained handle to C:\Windows\System32\conhost.exe. It inherited the sentinel and was named signer-console-infrastructure, accepted INSIDE the signer boundary under HSMDBIDP.
Normal git-head53516 and git-status56980, and their actual C:\Program Files\Git\mingw64\bin\git.exe workers26232/58252, reported ABSENCE at creation and loader. Error-arm git calls/workers also reported absence. Timeout git-status was observed absent at creation then deliberately held before loader; no loader observation is claimed for that held child. Other observed product/toolchain processes outside the intentional forbidden fixture were seed-absent. Product findings:0.
The forbidden fixture and its console inheritance were recorded as expected rejections, not silently allowed as product recipients. Post-window control and its console reported absence. Unresolved identity still refuses; the OS-console exception is path-scoped, not a basename-only exemption.
This fresh run attributes ITS console host. It does not retroactively assign an image to the old unlogged 5FWLC3F2 helper; that refusal and its original observations remain unchanged.

DISPOSITION — TWO DISTINCT INSTANTS
All five observer summaries retain all_births_gone=false. In every arm only the inner PowerShell root's immediate retained-handle wait was nonsignaled: WAIT_TIMEOUT258, native_error0. No WAIT_FAILED was observed. Other retained child handles were signaled. The earlier partial is not rewritten or converted to a teardown PASS.
The later native-job accounting is the ledger's termination authority: all11 compiler/inner/outer native records report COMPLETE/CONFIRMED_GONE/active0. Final read-only census: native0,38 owned pid+birth identities,1 pass,0 surviving,0 unreadable, states={'GONE': 37, 'GONE_PID_REUSED': 1}; positive self anchor3ticks, deliberately skewed negative5000003ticks, elapsed6.24s.
Five owned PUBLIC environment files retired; parent process environment seed-absent; no secure-memory-erasure claim. Every other original, partial, staged public artifact and failed attempt is retained.

VERIFICATION LIMITS AND PREFLIGHTS
Corrected source compiled native0 via the admitted launcher, with owned compiler job gone; PS7 controller parse passed. Optional pure-reflection controls did NOT run: Windows PowerShell5.1 refused the unsigned script. Its policy was not overridden or changed. Also retained: a preflight relative-path admission refusal before subject launch, and a Node spawnSync timeout before any native record; the timed-out parent was subsequently absent in a read-only PID query. Neither launched a qualification root or consumed this A.1 invocation. Actual behavioral proof is the five-arm native qualification above, not those unrun optional controls.
traceable-reqs0.4.1 check: native0;903 requirements complete,0 incomplete,0 findings. CLI notes2 tag-carrying files were not placement-judged. No new claim of complete placement analysis is made.
Coverage remains process-environment inheritance at creation and initial loader, not continuous later mutations or RAM erasure.

CONTINUATION
HOLD at A.2, no prep600 clock, until BOX CLEAR. Final tuple/rig admission, configured-r6 binding and the previously granted one-shot provisioning/field chain remain for that continuation. No second A.1, r6 field attempt, or filesystem disposal is authorized by this receipt.