O8F Report 07 — Artifact manifest & sha (G6)

• macro: v0.6-o8f-implement-f2-f3-gap6-deploy-proof
• date_utc: 2026-05-21 · gate: G6 — commit & artifact · result: G6 PASS

1. Commit

commit:   fdcf580351b943dc67807ed7337a14fe7e4fc540
parent:   cad989a7c7c37c1b042778f0b601a599a6d04ee3  (O8D)
branch:   main
message:  feat(orchestrator/O8F): F2 live-text sourcing + F3 generic
          recorders + GAP6 compensation
files:    7 changed, +2242 / -16
  M cutter_agent/orchestrator/__init__.py
  M cutter_agent/orchestrator/discover.py
  A cutter_agent/orchestrator/governance_writers.py
  A cutter_agent/orchestrator/compensation.py
  A tests/test_orchestrator_o8f_f2_live_text.py
  A tests/test_orchestrator_o8f_f3_generic_recorders.py
  A tests/test_orchestrator_o8f_gap6_compensation.py

2. Artifact

artifact_filename:  iu-cutter-v0.6-fdcf580.tar.gz
artifact_sha256:    23cf94ad0fe0416000934f0f837c12f16cd730e2b6f30b5d644541842975f0bc
artifact_bytes:     221743
file_count:         88   (O8D 83 -> 88; +5 new files)
build_method:       git archive HEAD | tar  — only committed tree
built_host:         Nguyens-MacBook-Air.local
built_utc:          2026-05-21T07:31:28Z

3. Cleanliness

excluded:  .git / .env / __pycache__ / *.pyc / tmp — none present in the
           staged tree (verified by find). git archive emits only the
           committed tree, so no cache or secret can leak in.
manifest:  DEPLOY-MANIFEST.txt — 13-line header + per-file sha256 for all
           88 files, sorted. Transferred alongside the artifact as a deploy
           companion (it is not inside the tar — it cannot hash itself).

4. VPS transfer integrity

scp -> contabo:/tmp/iu-cutter-v0.6-fdcf580.tar.gz
sha256 on VPS:  23cf94ad0fe0416000934f0f837c12f16cd730e2b6f30b5d644541842975f0bc
match:          YES — byte-identical to the Mac build.

g6: PASS — commit fdcf580, clean 88-file artifact sha256 23cf94ad…,
    manifest generated, transfer integrity verified.