[PSP-P01-W03] Land encrypted custody for private evidence artifacts

[4444J99]

PSP-P01-W03 — Land encrypted custody for private evidence artifacts

Parent: #2166
Execution chunk: PSP-C01 — Repair and freeze the foundation
Target: organvm/limen · private-vault, docs, scripts

Outcome

PR 2141 merges and private research/evidence can be preserved without public-path leakage.

Deliverables

• Green exact-head checks
• security review
• merged PR receipt

Dependencies

• Program: #2167
• Live reference: PR-2141 · organvm/limen#2141 — encrypted private-artifact custody

Effect and authority

• Effect: external
• Reasoning class: deep
• Assigned model: gpt-5.6-sol via codex
• Assigned effort: xhigh
• Assignment basis: sensitive-capability override — Security, privacy, legal, or conduct-boundary work receives a stronger execution profile.
• Model authority: Human model/effort override requested 2026-08-09
• Catalog observed: 2026-08-09T16:15:43Z
• If unavailable: fail blocked, refresh the live catalog, and obtain a new explicit assignment; never silently substitute
• Required capabilities: github_review, security, ci
• GitHub issue is not a lease; a registered native lane must obtain current broker authority before mutation.
• Human gates: none

Acceptance condition

gh pr view 2141 --repo organvm/limen --json state --jq '.state == "MERGED"'

Executable completion predicate

python3 scripts/positioning-program.py --verify-work PSP-P01-W03

The command passes only when the latest marked GitHub receipt matches this acceptance condition, records a non-circular successful predicate, and carries durable authority, exact-head, evidence, and rollback data.

Return evidence

• Merge commit
• exact-head CI
• custody recovery test

Rollback / return path

Revert code through review while retaining encrypted custody and recovery receipts.

Close only after the predicate passes and the durable receipt is linked. New work must enter the manifest through review, not remain only in an issue comment or agent transcript.

[4444J99]

PSP-P01-W03 non-terminal handoff (2026-08-10 11:05 EDT)

• Exact PR head: 66cfe340603e3bc1eacadb550055b8e7a7377be1. PR feat(custody): private-vault — git-tracked ciphertext custody for high-value private artifacts #2141 remains OPEN; no merge was attempted.
• Current REST observation: mergeable=true, mergeable_state=clean. Exact-head python, web, worker, CodeQL, and pr-gate are complete/success. compat is skipped by design.
• Review state: all 22 actionable threads were answered and resolved; zero unresolved threads was the last confirmed exact-head GraphQL result before that API resource was exhausted.
• Local exact-tree evidence: the 17-gate scoped cheap wave passed; custody verification passed; 25 focused tests passed; CI hardening, gate validation, merge policy, and merge-queue contract passed. The local heavy shard was not admitted because the host swap-fraction guard fired; exact-head required CI subsequently passed remotely.
• Security/recovery evidence: tracked-private-namespace rejection, exact recipient pinning, immutable-source snapshotting, bounded locking/processes, atomic publication, and deletion-aware gate selection are covered. A real scratch-key encrypt/decrypt recovery round trip passed. The production-key synthetic canary remains passphrase-gated; no production vault payload was decrypted, copied, or published.
• Observation blocker: the sanctioned waiter stopped when GitHub GraphQL reported zero remaining resources (reported reset: 2026-08-10 11:07 EDT). No admin/direct merge or alternate merge API was used.
• C01 heartbeat recovery: re-query PR feat(custody): private-vault — git-tracked ciphertext custody for high-value private artifacts #2141's unchanged exact head, required checks, mergeability, and unresolved review threads after GraphQL recovers. Only if all remain green, run scripts/await-pr.sh 2141 --repo organvm/limen --timeout 1200 --interval 20 --merge. Then attach the marked PSP-P01-W03 receipt with merge commit and evidence, run python3 scripts/positioning-program.py --verify-work PSP-P01-W03 from current main, and close [PSP-P01-W03] Land encrypted custody for private evidence artifacts #2169 only on exit 0.

[4444J99]

PSP-P01-W03 non-terminal merge relay (2026-08-10 11:32 EDT)

• Exact PR head: 667edb4843a96c13a32e439c82ca0a0a8a85c4fa. PR feat(custody): private-vault — git-tracked ciphertext custody for high-value private artifacts #2141 remains OPEN and mergeable; no merge was attempted.
• Review state: all newly raised exact-head custody threads were classified, answered, and resolved. Current GraphQL observation is zero unresolved threads with no pagination remainder.
• Implemented blockers: monotonic committed-custody history; strict string IDs; regular non-symlink manifest; bounded/signing-safe history tests; environment-respecting optional real-GPG test; non-mutating validation of existing restore destinations; committed public-key fingerprint/subkey validation; exact encryption-subkey selection. The missing-tool suggestion was resolved without weakening the explicitly fail-closed custody gate.
• Local exact-tree evidence: custody verification passed; 31 focused tests passed; the 17-gate scoped cheap wave passed, including CI hardening, merge policy, merge-queue contract, ruff, and gate validation. The local heavy shard was not admitted because the host swap-fraction guard fired.
• CI observation: exact-head CodeQL actions/javascript/ruby summary, web, and worker are green; compat is skipped by design. CodeQL Python, python, and pr-gate remain in progress.
• Bounded-wait state: the sanctioned non-merge waiter reached its 600-second limit on the preceding head and instructed handoff rather than re-arming. Subsequent authentic review fixes produced this new head. The single authorized scripts/await-pr.sh ... --merge invocation remains unused.
• Recovery: once exact-head CI completes, re-attest that PR feat(custody): private-vault — git-tracked ciphertext custody for high-value private artifacts #2141 still points to 667edb4843a96c13a32e439c82ca0a0a8a85c4fa, every required check is green, the PR is mergeable, and unresolved review count remains zero. Only then invoke scripts/await-pr.sh 2141 --repo organvm/limen --merge exactly once. After actual merge, post the marked W03 receipt, run python3 scripts/positioning-program.py --verify-work PSP-P01-W03 from current main, and close [PSP-P01-W03] Land encrypted custody for private evidence artifacts #2169 only on exit 0.

[4444J99]

PSP-P01-W03 nonterminal relay — exact-head custody review fixes pushed; no merge attempted.

• PR: feat(custody): private-vault — git-tracked ciphertext custody for high-value private artifacts #2141 remains OPEN.
• Exact head: 465c4b5d1e41d6c86ff4fd0d00db9d91c8bf2b33.
• Live attestation: MERGEABLE, zero unresolved review threads, no review decision requirement reported.
• Exact-head checks at the bounded snapshot: pr-gate, python, web, and CodeQL analysis jobs are still in progress; worker is successful. No check was rerun.
• The preceding exact head eeaaa85b7e7270e1b9e9140b78f7ff2360e2524f completed pr-gate successfully, proving the observed long run was healthy rather than externally stalled: https://github.com/organvm/limen/actions/runs/31407586172/job/93517554011
• Current security fixes pin immutable admitted-ciphertext metadata across committed v2 history, reject ciphertext symlinks before inspection, and reject secret-key material in the committed public-key input.
• Local evidence on the current head: vault verification passed; 37 focused tests passed; all admitted cheap scoped gates passed. The scoped runner then stopped only at machine-wide heavy-work admission (swap-fraction), not on a code/test failure.
• Custody boundary preserved: no private payload was decrypted, copied, published, or placed in this issue/PR.
• Merge rail status: the authorized scripts/await-pr.sh 2141 --repo organvm/limen --merge invocation remains unused. No admin merge, bypass, direct-main write, force-push, or tasks.yaml edit occurred.

Recovery: after exact-head CI observation is allowed again, re-attest this unchanged head, required checks, mergeability, and zero unresolved threads. Only when all required gates are green, invoke scripts/await-pr.sh 2141 --repo organvm/limen --merge exactly once. After an actual merge, post the marked W03 receipt with merge/exact-head/security/recovery evidence, run python3 scripts/positioning-program.py --verify-work PSP-P01-W03, and close #2169 only if that predicate passes.

[4444J99]

{
  "schema_version": "limen.positioning_work_receipt.v1",
  "work_id": "PSP-P01-W03",
  "acceptance_sha256": "40bdd38245f1251a958658f98aa0c617ecf635a2633420b31e974ca59c7cdbcd",
  "outcome": "succeeded",
  "authority": {
    "kind": "direct_human_session",
    "session_id": "019febd0-d994-79e3-a328-69997ee24b79",
    "executor": "codex",
    "human_protected": true
  },
  "changed_paths": [
    ".gitignore",
    "cli/tests/test_private_vault.py",
    "institutio/governance/gates.yaml",
    "institutio/vault/artifact-001.gpg",
    "institutio/vault/artifact-002.gpg",
    "institutio/vault/artifact-003.gpg",
    "institutio/vault/artifact-004.gpg",
    "institutio/vault/manifest.jsonl",
    "scripts/private-vault.py",
    "scripts/tests/verify-ci-hardening.test.sh",
    "scripts/verify.py"
  ],
  "predicate": {
    "command": "gh pr view 2141 --repo organvm/limen --json state --jq '.state == \"MERGED\"'",
    "exit_code": 0,
    "output_sha256": "a17fcf0a2f50e2d495e4f90ce263410edc183add6c62699a2facbccf60410f74",
    "observed_at": "2026-08-10T20:59:53Z"
  },
  "evidence_urls": [
    "https://github.com/organvm/limen/pull/2141",
    "https://github.com/organvm/limen/commit/7c269d54e51024c37099ce2f4bcd248fdcfa58bf",
    "https://github.com/organvm/limen/actions/runs/31430655863/job/93593071030",
    "https://github.com/organvm/limen/actions/runs/31430655877/job/93592997581",
    "https://github.com/organvm/limen/pull/2141#discussion_r3753240198"
  ],
  "rollback": {
    "invoked": false,
    "state": "not needed"
  },
  "observed_heads": {
    "organvm/limen": "19bd23c22b94b21219f86ed08ac63b089d0691bd"
  }
}

Merged by the normal exact-head rail as squash commit 7c269d54e51024c37099ce2f4bcd248fdcfa58bf; no admin merge or bypass was used. Exact-head pr-gate, required CI, CodeQL, and zero-unresolved-review attestation were green before merge. Public-safe security/recovery evidence comprises the 90-test private-vault suite, live custody verification, history/index/link/snapshot/restore-path protections, atomic no-clobber publication and rollback coverage, and synthetic restore/recovery paths. No private plaintext or artifact contents were decrypted, copied, or published in this issue or PR.