CODE-DESIGN-ANA-SEMI-ROOT-PREFLIGHT-ORCHESTRATION-V007-V033

0. 状态、前置项与唯一修复范围

• owner：dev.developer.ana.cai。
• predecessor：V032=29274/ebc5a2d63742b905b148ad857c7f7254ae92457df726d49134c8ebdb74342b21；独立审核=HOLD/3/3；audit=302529/3ee8e54ac9fd4051fef5bbe0df306652fe46091743c1af2c1381ea68eb985783。
• 本版只关闭：BLOCK-V032-01（PID reuse/process identity）、BLOCK-V032-02（PTY stdin echo）、BLOCK-V032-03（rescue observable matrix）。V030/V031 已关闭的 child deadline、single Kill/Wait 与 exact12 success contract 不回退。
• 本版是 append-only 计划，不执行 parent/child/rescue/taskkill，不物化 Y01-Y04，不创建 Y05-Y08/run，不连接数据库。

1. 继承且不变的固定输入

• Y01-Y04 exact payload/path/profile、51206-byte transcript、child source、T13/T14 normal terminal 均继承 V028-V032。
• transcript=51206/6ea1f921913927009045a0c6168f2693de0d65d4f2ba0d33056bbafb38c9b052；child=2797/aeeddde8793d352af5f81988aa603a30cea9c145eaeb6024c5e83801800b30cc；EncodedCommand=7460/5b3931022b452facf7a0941c26549cea24da3d8eafd01476a9152025c2d924ee；Arguments=7535/8e27019d502f352e946fd87354fbc53a9b29720b7ff8d8219e3d823a66b46cb9；CommandLine=7593/f2a7b2c7b0ba55b8091e34410d2df8203128724756ca58919ba34a94a2797e07。
• T13=1223/1cd50b60922da80e25622119c47edff61d13f9646783c44050ecf1807b83b264；T14=1271/772d2f2f02d0dadd886f219768ebeb421b489aece0eb284ed97ab583184949da。
• taskkill=C:\Windows\System32\taskkill.exe / 101376/56f8cc2c1790c389394733b84c3fb55e10977e9f0fe0c08110ac11f0fe47f05e / 10.0.19041.1 (WinBuild.160101.0800)。

2. V033 parent 的两个逐字节变换

V033 parent 由 V032 第 3 节唯一 parent preimage 按顺序执行以下三个 ordinal、count=1 的替换产生；除这三个替换外禁止任何变化。

1. 删除旧行（含 final LF）：

[Console]::Out.Write('PARENT_PID:'+$PID+"`n");[Console]::Out.Flush()

1. 在 parent 的 function Sha... 与 function ReadExact... 之间插入以下 exact LF-only block（child here-string 中的同名函数不匹配该双函数 anchor）：

function EmitIdentity {
  try{
    $self=[Diagnostics.Process]::GetCurrentProcess();$search=[Management.ManagementObjectSearcher]::new("SELECT ProcessId,CommandLine,ExecutablePath,SessionId FROM Win32_Process WHERE ProcessId=$PID");$search.Options.Timeout=[TimeSpan]::FromMilliseconds(2000)
    try{$wr=@($search.Get())}finally{$search.Dispose()}
    if($wr.Count-ne1-or$null-eq$wr[0].CommandLine){throw 'IDENTITY_PROVIDER'}
    $image=[string]$self.MainModule.FileName;if($image-cne'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe'){throw 'IDENTITY_IMAGE'}
    if([string]$wr[0].ExecutablePath-cne$image-or[int]$wr[0].SessionId-ne[int]$self.SessionId){throw 'IDENTITY_CROSS_FIELD'}
    $cmdHash=Sha ([Text.UTF8Encoding]::new($false).GetBytes([string]$wr[0].CommandLine));$nonce='ANA-V007-STAGE-S-V033-PARENT-IDENTITY-001'
    [Console]::Out.Write('PARENT_ID:'+$PID+':'+$self.StartTime.ToUniversalTime().Ticks+':'+$self.SessionId+':'+$cmdHash+':'+$nonce+"`n");[Console]::Out.Flush()
  }catch{[Console]::Out.Write('PARENT_ID_ERROR:'+$_.Exception.GetType().Name.ToUpperInvariant()+"`n");[Console]::Out.Flush();exit 27}
}
EmitIdentity

1. 将同步五行读取逐字节替换为以下 startup-deadline 读取：

  $startup=[Diagnostics.Stopwatch]::StartNew();$lines=@();for($i=0;$i-lt5;$i++){$rt=[Console]::In.ReadLineAsync();$remain=[Math]::Max(0,5000-[int]$startup.ElapsedMilliseconds);if($remain-le0-or-not$rt.Wait($remain)){throw 'TRANSCRIPT_START_TIMEOUT'};$v=$rt.Result;if($null-eq$v){throw 'TRANSCRIPT_EOF'};$lines+=$v};$transcript=($lines-join"`n")+"`n"

生成结果固定为：parent=14599/c9e4ac6dec174a59ea2abfa63c257a511577d97b8e235b06de726163e0584eed；Windows PowerShell 5.1 parser errors=0；CR/LF/final=0/93/0x0A；PARENT_ID: token=1；TRANSCRIPT_START_TIMEOUT token=1。parent identity provider 也固定 2000ms Timeout；identity wire 必须匹配：

\APARENT_ID:(?<pid>[1-9][0-9]{0,9}):(?<start>[1-9][0-9]{0,18}):(?<os_session>[0-9]{1,10}):(?<cmd_sha>[0-9a-f]{64}):ANA-V007-STAGE-S-V033-PARENT-IDENTITY-001\n\z

cmd_sha 是 Win32_Process.CommandLine exact STRING 的 UTF-8(no BOM) SHA-256；start 是同一 process 的 StartTime.ToUniversalTime().Ticks；wire 与 exec_command 返回的唯一 session_id 组成不可分割的 original-session identity。

3. plain-pipe 外层调用，禁止 PTY 回显

• parent exec_command 固定：shell=powershell、login=false、tty=false、workdir=E:\mb-ms-doc\project-info、yield_time_ms=2000、max_output_tokens=4096、cmd=exact V033 parent preimage。
• 禁止 tty=true。plain pipe 下 stdin 不进入 output；parent/child 都不主动 echo transcript；因此 51206-byte transcript 不可能成为两行 terminal wire 的组成部分。
• 初次调用若 live，必须返回 exactly one numeric session_id，且 output 恰好一条 identity wire、original_token_count<=4096、无 truncation。后续 transcript write 与 terminal poll 必须使用同一个 session_id；任何 session drift 均为 governance27。
• transcript write 固定 exactly once：write_stdin(chars=<exact 51206 ASCII>,yield_time_ms=30000,max_output_tokens=4096)。normal aggregate output 是按 tool call 顺序拼接的 initial.output + write.output，必须恰好 identity line + one V003 JSON line；没有第三行、stderr 文本、echo、truncation 或未知 chunk。
• 若初次 identity wire 缺失/错误，禁止发送 transcript、禁止 taskkill；parent 的 5000ms startup deadline 将自行退出。coordinator 只允许对原 session 一次 empty poll yield_time_ms=7000,max_output_tokens=4096。poll 仍 live/unknown 时使用 T17，禁止猜测 PID 或 materialized subset。

4. exact identity-bound rescue wrapper

以下 fence（不含 fence，含一个 final LF）是唯一 rescue wrapper template。四个 placeholder 各出现一次，只能替换为已通过 identity wire 验证的 canonical decimal/hash；任何未知或 drift 禁止启动 taskkill。

$ErrorActionPreference='Stop'
$sw=[Diagnostics.Stopwatch]::StartNew();$targetPidText='{{PID}}';$expectedStartText='{{START_TICKS}}';$expectedSessionText='{{OS_SESSION_ID}}';$expectedCmdHash='{{CMD_SHA256}}';$expectedImage='C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe'
$identity='UNKNOWN';$actualStart=$null;$actualSession=$null;$actualImage=$null;$actualCmdHash=$null;$taskkillStarted=$false;$taskkillExited=$false;$taskkillExit=$null;$taskkillTimedOut=$false;$taskkillKillIssued=$false;$taskkillUnknown=$false;$stop=$null;$wrapperExit=27
function Sha([byte[]]$b){$s=[Security.Cryptography.SHA256]::Create();try{return([BitConverter]::ToString($s.ComputeHash($b))).Replace('-','').ToLowerInvariant()}finally{$s.Dispose()}}
function Emit {
  $o=[ordered]@{schema_id='ANA.SEMI.STAGE.S.RESCUE.WRAPPER.V002';identity_status=$script:identity;target_pid=$(if($script:targetPidText-cmatch'\A[1-9][0-9]{0,9}\z'){[uint32]$script:targetPidText}else{$null});expected_start_ticks=$(if($script:expectedStartText-cmatch'\A[1-9][0-9]{0,18}\z'){[int64]$script:expectedStartText}else{$null});actual_start_ticks=$script:actualStart;expected_os_session_id=$(if($script:expectedSessionText-cmatch'\A[0-9]{1,10}\z'){[int32]$script:expectedSessionText}else{$null});actual_os_session_id=$script:actualSession;expected_image_path=$script:expectedImage;actual_image_path=$script:actualImage;expected_commandline_sha256=$script:expectedCmdHash;actual_commandline_sha256=$script:actualCmdHash;taskkill_started=$script:taskkillStarted;taskkill_exited=$script:taskkillExited;taskkill_exit_code=$script:taskkillExit;taskkill_timed_out=$script:taskkillTimedOut;taskkill_kill_issued=$script:taskkillKillIssued;taskkill_liveness_unknown=$script:taskkillUnknown;stop_code=$script:stop;wrapper_exit_code=$script:wrapperExit}
  [Console]::Out.Write(($o|ConvertTo-Json -Compress)+"`n");[Console]::Out.Flush()
}
try{
  if($targetPidText-cnotmatch'\A[1-9][0-9]{0,9}\z'-or$expectedStartText-cnotmatch'\A[1-9][0-9]{0,18}\z'-or$expectedSessionText-cnotmatch'\A[0-9]{1,10}\z'-or$expectedCmdHash-cnotmatch'\A[0-9a-f]{64}\z'){throw 'IDENTITY_INPUT'}
  $targetPid=[int]$targetPidText;$expectedStart=[int64]$expectedStartText;$expectedSession=[int]$expectedSessionText
  $p=[Diagnostics.Process]::GetProcessById($targetPid);$actualStart=[int64]$p.StartTime.ToUniversalTime().Ticks;$actualSession=[int]$p.SessionId;$actualImage=[string]$p.MainModule.FileName
  if($actualStart-ne$expectedStart-or$actualSession-ne$expectedSession-or$actualImage-cne$expectedImage){$identity='MISMATCH';throw 'IDENTITY_PROCESS'}
  $search=[Management.ManagementObjectSearcher]::new("SELECT ProcessId,CommandLine,ExecutablePath,SessionId FROM Win32_Process WHERE ProcessId=$targetPid");$search.Options.Timeout=[TimeSpan]::FromMilliseconds(2000)
  try{$wr=@($search.Get())}finally{$search.Dispose()}
  if($wr.Count-ne1-or$null-eq$wr[0].CommandLine){throw 'IDENTITY_PROVIDER'}
  $actualCmdHash=Sha ([Text.UTF8Encoding]::new($false).GetBytes([string]$wr[0].CommandLine))
  if([uint32]$wr[0].ProcessId-ne[uint32]$targetPid-or[int]$wr[0].SessionId-ne$expectedSession-or[string]$wr[0].ExecutablePath-cne$expectedImage-or$actualCmdHash-cne$expectedCmdHash){$identity='MISMATCH';throw 'IDENTITY_WMI'}
  if($sw.ElapsedMilliseconds-ge3000){throw 'PREKILL_DEADLINE'}
  $p2=[Diagnostics.Process]::GetProcessById($targetPid);if([int64]$p2.StartTime.ToUniversalTime().Ticks-ne$expectedStart-or[int]$p2.SessionId-ne$expectedSession-or[string]$p2.MainModule.FileName-cne$expectedImage){$identity='MISMATCH';throw 'IDENTITY_RECHECK'}
  $identity='VERIFIED';$psi=[Diagnostics.ProcessStartInfo]::new();$psi.FileName='C:\Windows\System32\taskkill.exe';$psi.Arguments='/PID '+$targetPid+' /T /F';$psi.UseShellExecute=$false;$psi.CreateNoWindow=$true;$psi.RedirectStandardOutput=$true;$psi.RedirectStandardError=$true
  $tk=[Diagnostics.Process]::new();$tk.StartInfo=$psi;if(-not$tk.Start()){throw 'TASKKILL_START_FALSE'};$taskkillStarted=$true;$ot=$tk.StandardOutput.ReadToEndAsync();$et=$tk.StandardError.ReadToEndAsync()
  if(-not$tk.WaitForExit(5000)){$taskkillTimedOut=$true;$taskkillKillIssued=$true;try{$tk.Kill()}catch{};if(-not$tk.WaitForExit(1000)){$taskkillUnknown=$true;throw 'TASKKILL_LIVENESS'}}
  $taskkillExited=$true;$taskkillExit=[int]$tk.ExitCode;if(-not($ot.Wait(1000)-and$et.Wait(1000))){throw 'TASKKILL_STREAM'}
  if($taskkillExit-ne0){throw 'TASKKILL_NONZERO'};$wrapperExit=0
}catch{
  $m=[string]$_.Exception.Message;$stop=$(if($m-cmatch'\A[A-Z0-9_]+\z'){$m}else{'RESCUE_'+$_.Exception.GetType().Name.ToUpperInvariant()});if($identity-ne'MISMATCH'-and$identity-ne'VERIFIED'){$identity='UNKNOWN'};$wrapperExit=27
}finally{Emit}
exit $wrapperExit

• wrapper=4694/47b374888df31245a4bb0096bce66333ae426430e16cc29ee77c4b1175e8cf3a；PS5.1 parser=0；CR/LF/final=0/29/0x0A；placeholder=4/4 unique。
• wrapper 的 ManagementObjectSearcher Timeout=2000ms；sw>=3000ms 时禁止启动 taskkill。即使 provider 在 tool 视角延迟返回，也不能在 3s gate 后迟发 taskkill。
• identity 必须先通过 PID + UTC start ticks + OS SessionId + exact image + exact Win32 CommandLine UTF-8 SHA-256，随后紧邻 taskkill Start 前再次 GetProcessById 并复核 start/session/image。任何 mismatch/unknown 均 identity_status!=VERIFIED 且 taskkill_started=false。
• taskkill wrapper 内部最多 Start=1、WaitForExit(5000)=1、Kill=0..1、WaitForExit(1000)=0..1；stdout/stderr 仅在内存 drain，不进入 wrapper stdout wire。

5. exact tool call contract

所有 calls 固定 workdir=E:\mb-ms-doc\project-info。C0/C2 禁止 PTY、禁止 login shell；C1/C3/C4 只接受 tool 的单一 combined output 字段。任何 original_token_count>max_output_tokens、truncation、missing/duplicate session、unexpected exit/session/cardinality 均为 UNKNOWN，不得补 poll 或重启。

6. total observable truth table

表中 NORMAL 表示只按 V003/T13/T14 验证；NATIVE 表示 ANA.SEMI.STAGE.S.OUTER.RESCUE.V002、governance27、四行 U、consumed/counts=null。任一行命中后禁止继续匹配后续行。

Precedence：NORMAL exact wire 仅 M00/M02/M04；identity mismatch/no kill→T18；identity verified + taskkill exit0 + original session terminal→T19；其余所有 rescue/unknown→T20。T19 也不等于 source/package success，只证明 tree termination；所有 NATIVE families 禁止 raw observer 与 success inference。

7. native V002 schema 与固定 literals

以下四个 JSON fence 的 canonical preimage 不含 closing fence 前为 Markdown 排版所需的单一 LF；bytes/hash 均按最后一个 } 结束的 JSON bytes 计算。

ordered top keys：schema_id,terminal_state,stop_code,governance_exit_code,source_session_id,parent_identity_status,parent_pid,parent_start_ticks,parent_os_session_id,parent_commandline_sha256,initial_result_kind,initial_output_status,transcript_write_started,transcript_write_result,rescue_wrapper_started,rescue_wrapper_result,rescue_wrapper_exit_code,identity_revalidation,taskkill_started,taskkill_exited,taskkill_exit_code,taskkill_timed_out,taskkill_liveness_unknown,parent_poll_started,parent_poll_result,parent_session_exited,parent_session_exit_code,tree_kill_confirmed,authorization_consumed,observed_existing_count,valid_count,rows。

• STRING enums：identity=UNKNOWN|OBSERVED；initial=TERMINAL|LIVE_SESSION|ERROR|UNKNOWN；output=IDENTITY_ONLY|IDENTITY_PLUS_TERMINAL|INVALID|TRUNCATED|UNKNOWN；write/wrapper/poll=NOT_RUN|TERMINAL|LIVE_SESSION|LIVE_OR_UNKNOWN|ERROR|TRUNCATED|UNKNOWN；revalidation=NOT_RUN|VERIFIED|MISMATCH|UNKNOWN。
• source_session_id=INT32|null；pid=UINT32|null；ticks=INT64|null；os_session=INT32|null；cmd hash=64 lowercase hex|null。bool/int process evidence 在未观察时必须 null，禁止把 unknown 写成 false/0。
• parent_session_exited=false|null 时 exit 必须 null；tree_kill_confirmed=true 当且仅当 identity VERIFIED、taskkill started/exited/exit0 且 C3 terminal。
• authorization_consumed、observed_existing_count、valid_count 在 native path 恒 null；rows 恒 4 个 ordered Y01-Y04 的 9-key U rows。

T17 identity wire/liveness unknown

{"schema_id":"ANA.SEMI.STAGE.S.OUTER.RESCUE.V002","terminal_state":"PARENT_IDENTITY_OUTPUT_INVALID_LIVENESS_UNKNOWN","stop_code":"PARENT_IDENTITY_WIRE","governance_exit_code":27,"source_session_id":7001,"parent_identity_status":"UNKNOWN","parent_pid":null,"parent_start_ticks":null,"parent_os_session_id":null,"parent_commandline_sha256":null,"initial_result_kind":"LIVE_SESSION","initial_output_status":"INVALID","transcript_write_started":false,"transcript_write_result":"NOT_RUN","rescue_wrapper_started":false,"rescue_wrapper_result":"NOT_RUN","rescue_wrapper_exit_code":null,"identity_revalidation":"NOT_RUN","taskkill_started":null,"taskkill_exited":null,"taskkill_exit_code":null,"taskkill_timed_out":null,"taskkill_liveness_unknown":null,"parent_poll_started":true,"parent_poll_result":"LIVE_OR_UNKNOWN","parent_session_exited":false,"parent_session_exit_code":null,"tree_kill_confirmed":false,"authorization_consumed":null,"observed_existing_count":null,"valid_count":null,"rows":[{"id":"Y01","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y02","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y03","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y04","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"}]}

T17=1627/3f9493c83dd0cce10fb5e341d804e6b53436e9544fa5c3c1b0c536a09b98c28f。

T18 identity mismatch/no kill

{"schema_id":"ANA.SEMI.STAGE.S.OUTER.RESCUE.V002","terminal_state":"RESCUE_IDENTITY_MISMATCH_NO_KILL","stop_code":"IDENTITY_REVALIDATION_MISMATCH","governance_exit_code":27,"source_session_id":7001,"parent_identity_status":"OBSERVED","parent_pid":4242,"parent_start_ticks":638891234567890123,"parent_os_session_id":1,"parent_commandline_sha256":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","initial_result_kind":"LIVE_SESSION","initial_output_status":"IDENTITY_ONLY","transcript_write_started":true,"transcript_write_result":"LIVE_SESSION","rescue_wrapper_started":true,"rescue_wrapper_result":"TERMINAL","rescue_wrapper_exit_code":27,"identity_revalidation":"MISMATCH","taskkill_started":false,"taskkill_exited":false,"taskkill_exit_code":null,"taskkill_timed_out":false,"taskkill_liveness_unknown":false,"parent_poll_started":true,"parent_poll_result":"TERMINAL","parent_session_exited":true,"parent_session_exit_code":27,"tree_kill_confirmed":false,"authorization_consumed":null,"observed_existing_count":null,"valid_count":null,"rows":[{"id":"Y01","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y02","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y03","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y04","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"}]}

T18=1699/681a31f657227c026b359f414151072e51065b65fdff29fc2fe4af7db9b30979。

T19 tree kill confirmed, package unknown

{"schema_id":"ANA.SEMI.STAGE.S.OUTER.RESCUE.V002","terminal_state":"OUTER_TIMEOUT_TREE_KILLED_PACKAGE_UNKNOWN","stop_code":"OUTER_TIMEOUT_RESCUE","governance_exit_code":27,"source_session_id":7001,"parent_identity_status":"OBSERVED","parent_pid":4242,"parent_start_ticks":638891234567890123,"parent_os_session_id":1,"parent_commandline_sha256":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","initial_result_kind":"LIVE_SESSION","initial_output_status":"IDENTITY_ONLY","transcript_write_started":true,"transcript_write_result":"LIVE_SESSION","rescue_wrapper_started":true,"rescue_wrapper_result":"TERMINAL","rescue_wrapper_exit_code":0,"identity_revalidation":"VERIFIED","taskkill_started":true,"taskkill_exited":true,"taskkill_exit_code":0,"taskkill_timed_out":false,"taskkill_liveness_unknown":false,"parent_poll_started":true,"parent_poll_result":"TERMINAL","parent_session_exited":true,"parent_session_exit_code":-1,"tree_kill_confirmed":true,"authorization_consumed":null,"observed_existing_count":null,"valid_count":null,"rows":[{"id":"Y01","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y02","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y03","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y04","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"}]}

T19=1691/ba9cf790c0f631f27df893c03032c3aa08d45d86e2ada1757bd277797f21a6a9。

T20 rescue/poll unknown

{"schema_id":"ANA.SEMI.STAGE.S.OUTER.RESCUE.V002","terminal_state":"OUTER_OR_RESCUE_LIVENESS_UNKNOWN","stop_code":"OUTER_RESCUE_UNKNOWN","governance_exit_code":27,"source_session_id":7001,"parent_identity_status":"OBSERVED","parent_pid":4242,"parent_start_ticks":638891234567890123,"parent_os_session_id":1,"parent_commandline_sha256":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","initial_result_kind":"LIVE_SESSION","initial_output_status":"IDENTITY_ONLY","transcript_write_started":true,"transcript_write_result":"LIVE_SESSION","rescue_wrapper_started":true,"rescue_wrapper_result":"LIVE_OR_UNKNOWN","rescue_wrapper_exit_code":null,"identity_revalidation":"UNKNOWN","taskkill_started":null,"taskkill_exited":null,"taskkill_exit_code":null,"taskkill_timed_out":null,"taskkill_liveness_unknown":null,"parent_poll_started":true,"parent_poll_result":"LIVE_OR_UNKNOWN","parent_session_exited":false,"parent_session_exit_code":null,"tree_kill_confirmed":false,"authorization_consumed":null,"observed_existing_count":null,"valid_count":null,"rows":[{"id":"Y01","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y02","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y03","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"},{"id":"Y04","attempted":null,"created_by_attempt":null,"exists":null,"object_type":"UNKNOWN","reparse":null,"bytes":null,"sha256":null,"validation":"UNKNOWN"}]}

T20=1703/f4a93036cb42099e9694b2b1978f9f0ea285af2800ae9a068f53ad65c1cf9f5b。T17-T20 均 strict JSON、32 ordered top keys + 4x9 ordered rows、compact reserialization byte-identical。

8. gates、zero state 与下一步

• independent plan review 必须重算 V032→V033 transform、parent/wrapper parser/hash、plain-pipe no-echo、identity revalidation、M00-M12 totality、T17-T20 bytes/hash/cross-fields。
• reviewer PASS 前不得请求 management authorization；PASS 也不是执行授权。
• 当前 Y01-Y04=ABSENT_4_OF_4；Y05-Y08/run absent；parent/child/rescue/taskkill/candidate未执行；Stage S/Stage V/database authorization=NOT_ISSUED/NOT_ISSUED/NOT_ISSUED；formal target=0；BATCH-001=HELD；darkline_restored=false。
• 禁止旧 candidate/A001 复用；未来只能建立全新 management item/plan/audit/candidate identity。禁止 Python/PowerShell/csc/node/mysql/SQL/database/network/credential/formal target/R3/BATCH-001/YAML/.mbx/binding/session/role/permission/Git mutation。