FIX7 Authority Closure — P7 Codex Re-seal Request (rev3)

• Date: 2026-06-10 · Patched: 2026-06-11 (fail-open + provenance) · Lane: FIX7 authority-seal contract executable macro · rev2 closed Codex AS-P4; rev3 closes FINAL-AS-VALUE-GRAMMAR for P7.
• Authority of THIS doc: request only. P7 is the Codex/authority act of pinning the canonicalizer SSOT (rev3) as the authoritative canonicalizer_sha256/canonicalizer_revision. T1 does not and cannot perform it.
• Executable artifact schema: P7 is a seal document with a byte-exact digest (authority_seal_pin_sha256), authored via authority_seal_encoder.py seal_p7() / real path encode_real_p7() (sha256 13344f92…957144b8); schema in authority-seal-encoder-spec.md §5. A prose-only pin is rejected (SEAL_PROSE_ONLY_PIN_REJECTED).

1. P7 fixed roster (AS-P4)

Domain tag FIX7_AUTHORITY_SEAL_PIN_V1; output authority_seal_pin_sha256; fields in this exact order:

#	field	value/source	actor
1	schema_version (FIX7-AUTHORITY-SEAL-V1)	const	contract
2	node_id (P7)	const	contract
3	pinned_canonicalizer_document_id	…/canonicalizer-fix7-canon-v1-ssot.md (grammar path)	engineering
4	pinned_canonicalizer_revision	3 (grammar posint)	engineering
5	pinned_canonicalizer_utf8_bytes	38756 (grammar posint)	engineering
6	pinned_canonicalizer_sha256	49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0 (= N2, grammar hex)	engineering
7	pinned_packet_v3_tree_sha256	b95df0a5d2f41f80bea0cef8621c1f8bb0f6b49a40175116418494ed4141ca6d (grammar hex)	engineering
8	codex_report_document	report document_id@revision	Codex
9	codex_checkpoint_document	checkpoint document_id@revision	Codex
10	envelope_manifest_sha256	N7	from N7
11	detached_seal_sha256	N8	from N8
12	approval_event_id	A1	Codex
13	pin_scope (CANDIDATE_TO_AUTHORITATIVE_PIN_BLUEPRINT_ONLY)	const	contract

• Value grammar (new): pinned_canonicalizer_revision="not-an-int" → SEAL_FIELD_BAD_INT; pinned_canonicalizer_utf8_bytes="-1"/"0" → SEAL_FIELD_BAD_INT; empty pinned_canonicalizer_document_id → SEAL_FIELD_EMPTY; non-hex pinned hashes → SEAL_FIELD_NOT_HEX.
• Dependency direction (acyclic): P7 → N2,N7,N8. P7 FOLLOWS N7 and N8; nothing depends back on P7 (has_cycle(EDGES) = False).
• verify_pin() recomputes P7; mutating the pinned canonicalizer hash or Packet V3 tree changes the digest ⇒ verify FAIL.

2. Supporting evidence set (for Codex to hash/confirm at seal time)

• Packet V3: root knowledge/dev/laws/tool-kiem-thu/packets/fix7-codex-recheck-9-2026-06-10/, tree b95df0a5…ca6d.
• Codex final-seal reject knowledge/dev/reports/architecture/codex-fix7-final-authority-seal-n7-n8-p7-2026-06-10/00-readme-first.md (rev1).
• Blocker ledger knowledge/dev/laws/tool-kiem-thu/checkpoints/fix7-recheck9-remaining-authority-blocker-ledger-2026-06-10.md.

3. Requested Codex action

1. Fresh-fetch the SSOT at revision 3 via governed MCP; recompute SHA-256 over full content bytes; confirm == 49c386a9…b734d0 and 38756 bytes.
2. After a real N7 and N8 are authored over a real (non-REHEARSAL) N6 chain, run encode_real_p7() over the §1 roster → authority_seal_pin_sha256.
3. Record the P7 seal event and the report/checkpoint document ids used.

4. Explicit statement

The values above remain candidates until Codex authors the P7 seal via encode_real_p7(). P7 cannot be authored while SEAL_REAL_N6_NOT_AVAILABLE stands. T1 asserts reproducibility and a byte-exact schema, not authority. No prose-only pin is acceptable.