v0.2 Fresh-Fetch / Reconstruct Report (2026-06-10)

Status: NON_AUTHORITY · NOT_PROMOTED · may_gate=false · decision_effect=NONE · Object: TKT-OBJ-150 Macro: TKT_V02_ADOPT_REAL_SUT_AND_KB_NATIVE_REPRO_PACKET_APPROVAL_LANE_MACRO · Author: T2/Claude-Code/Fable5 · Codex: NO · FIX7/V3 baseline mutated: NO

Verdict: FRESH-FETCH / RECONSTRUCT = RUN + PASS (end-to-end)

A reviewer with governed KB access can rebuild the entire runnable packet from the KB alone and reproduce every behavioural claim.

1. Reconstruct tool

reconstruct_from_kb.py — modeled on the FIX7 Recheck-9 proven reconstructor (R9-B4). Manifest-driven: it fetches HASH_MANIFEST.sha256 first, then fetches exactly the files the manifest pins (so it can never drift from the packet), plus the baseline SUT from its canonical V3 document id. READ-ONLY (get_document_for_rewrite only); writes only inside <outdir>. Fails closed on any missing/mismatched pinned file or SUT-hash mismatch.

2. End-to-end run (command + actual result)

python3 v02-dev-repro-packet/reconstruct_from_kb.py /tmp/v02-fresh
  → SUT_HASH MATCH: d9caa9fe…
  → RECONSTRUCTION: OK (25 pinned files match HASH_MANIFEST; baseline SUT fetched)
cd /tmp/v02-fresh && bash RERUN.sh
  → HASH_MANIFEST: OK
  → SUT_HASH: MATCH d9caa9fe…
  → v0.2 selftest exit 0 (7/7) · black-box exit 0 (6/6) · fail-open exit 0 (M2–M6)
  → real-SUT adoption exit 0 (PASS_WITH_FINDINGS)
  → RERUN_RESULT: PASS

The freshly-reconstructed /tmp/v02-fresh tree (never the working copy) reproduced the full suite. This is a genuine KB→fresh-tree→PASS, not a same-directory rerun.

3. Round-trip proof

The reconstruct relies on byte-exact KB round-trip, independently proven: publish_verify_packet.py verify → ROUND_TRIP: ALL_BYTE_EXACT over 26 files. Both KB→local (SUT fetched as exactly d9caa9fe…) and local→KB→local are byte-exact.

4. Offline path for Codex/reviewer

The same tool runs offline with MCP_URL / MCP_KEY env (or ~/.claude.json agent-data). The MCP API key is never embedded. A reviewer runs:

python3 reconstruct_from_kb.py /tmp/v02-fresh && cd /tmp/v02-fresh && bash RERUN.sh

5. Blocker status

• V02-PB-KBPKT-1 (prototype not KB-published / not fresh-fetchable) → CLOSED by this macro.
• No new fresh-fetch blocker. The only residual is raw-log storage (NVSZ, separate report).