08 — G4: Staged artifacts — KB path, file list, sizes, hashes, readback

Exact KB path (EVIDENCE SSOT = knowledge tree): knowledge/dev/laws-new/reports/c1-lego-dryrun-plan-hardening-no-prod-write/ (absolute local-staging path: /Users/nmhuyen/Documents/Manual Deploy/web-test/…). Classification of everything below: LOCAL_STAGING_NOT_SSOT — see 00a.

1. Report files (12 + this) — sha256 (first 16) + bytes

File	sha256:16	bytes
00a-SSOT-source-of-truth-classification	fbda3c06317dcdfd	4983
01-current-state-and-source-readback	51559392030c5c1e	4482
02-registrar-path-normalization-defect-and-mitigation-proof	8f37894b7148bb58	5913
03-targeted-registration-dot-approved-proof	f6005de4933027c2	3800
04-contract-register-path-proof	764d3e5835874262	3419
05-c1-endpoint-no-mutation-deploy-path-proof	167fada60994cc55	4611
06-grant-ownership-issuer-path-proof	e53b232dc3cea164	2978
07-dot-c1-lifecycle-birth-governance-ledger-proof	f628f7adc678bbf5	3651
09-owner-approved-write-plan-w1-to-w9	a7dcd58aa1d733cf	9193
10-internal-codex-negative-review	477af9c016d68f0f	5636
11-final-decision	6868924567be5cfd	4770
08 (this) + 00 (index)	generated last	—

2. Staged artifacts (18 files) — sha256 (first 16) + bytes

Path under staged-artifacts/	sha256:16	bytes
_SSOT-CLASSIFICATION.md	c5a77309a36a48dc	815
dot-manage/dot-manage-c1-ledger-update.staged.md	bddd9dcdc8276eff	2700
evidence/codes.txt (live SELECT code FROM dot_tools)	da03d15a42012cc3	4574
evidence/disk.txt (live ls /opt/incomex/dot/bin/dot-*)	a3c170baffc90ad0	13178
evidence/registered.txt (live SELECT file_path …)	188f5b2afe08afab	7895
evidence/runA-old-matcher-repro.txt (OLD matcher = 287)	4419de57533c839f	169
evidence/runB.txt (new no-filter = 15)	fcd6848ec10448ca	1176
evidence/runC1.txt (C1-filter today = 0)	57f4ccd17e704308	476
evidence/runC2.txt (C1-filter post-W1 = 7)	8d3f9c4ca236c127	858
patches/executor-main-py-c1.additive-design.md	d42c9e61e89a9b7c	5371
payloads/c1_vocab_fixture_v1.json	5791dd0502ea931c	2359
payloads/c1_vocab_manifest.json	3b52cd1c7ec8036c	3058
payloads/dot_agent_api_contract_rows.json	8461b23948ba7ee7	2222
payloads/governance_build_authorization_grant.json	535509d041993ffe	1023
scripts/dot-c1-bad-input-harness	9bbd87506cb8fcae	3339
scripts/dot-c1-contract-register	fa858ec977d6bd79	3101
scripts/dot-c1-grant-issue	189faf1fb73b8b98	3787
scripts/dot-dot-register-c1-hardened	c7049342b617c6d6	6622

3. Required-artifact checklist (macro §3.6)

Required artifact	Present as
C1 DOT scripts/specs	scripts/dot-c1-{contract-register,grant-issue,bad-input-harness} + report 07 family table
birth/admission/governance notes	report 07 + dot-manage/dot-manage-c1-ledger-update.staged.md
registry/catalog payloads	scripts/dot-dot-register-c1-hardened (registration) + report 03
Directus/schema/table_registry payloads	report 09 W3/W5 (reused dot-collection-create/-register/-table-registry-ensure)
dot_agent_api_contract payloads	payloads/dot_agent_api_contract_rows.json
endpoint no-mutation patch/design	patches/executor-main-py-c1.additive-design.md + payloads/c1_vocab_fixture_v1.json
grant/ownership payload	payloads/governance_build_authorization_grant.json
DOT-manage handbook/ledger update payload	dot-manage/dot-manage-c1-ledger-update.staged.md
bad-input harness	scripts/dot-c1-bad-input-harness
W1→W9 execution plan	report 09

4. Readback content samples (proves files are real & re-readable)

• evidence/runC2.txt → GENUINE NEW: 7 + the 7 DOT_C1_* codes (DOT_C1_VOCAB_BUILD … DOT_C1_CONTRACT_REGISTER).
• evidence/runA-old-matcher-repro.txt → OLD-matcher GENUINE NEW = 287.
• payloads/c1_vocab_manifest.json → operation_count: 14, the 14 apr_action_types codes.
• payloads/dot_agent_api_contract_rows.json → 2 rows (DOT_C1_VOCAB_BUILD producer/endpoint_bound, DOT_C1_VOCAB_VERIFY verifier/contract_ready).
• scripts/dot-dot-register-c1-hardened line 2 → the 5-label SSOT banner.

5. Result

G4 = PROVEN. All required artifacts present at the exact KB path with recorded sizes + sha256, readable back, content-sampled. Evidence inputs (disk/registered/codes) are the real live read-only snapshots, making every simulation result reproducible. C1_LEGO_PLAN_HOLD_KB_STAGED_ARTIFACT_READBACK_FAILED does not fire.

Note: hashes are content-addressable for integrity/readback within this evidence SSOT; they are not a claim of governed-runtime state. The artifacts remain LOCAL_STAGING_NOT_SSOT until operator-applied to the VPS.