Checkpoint - Codex FIX7 Blueprint Recheck 5

Date: 2026-06-09 Mode: READ-ONLY production; KB review/checkpoint writes only. Status: FIX7_REFACTOR_BLUEPRINT_CODEX_RECHECK_5_NEEDS_T1_FIX

T1's envelope approach and guard rebinding are directionally accepted. Codex did not seal the envelope because its aggregate hash canonicalization is incomplete, its manifest hash omits authority-bearing fields, doc 00 full-document hashing is circular/inconsistent with EXCLUDE semantics, the checkpoint/corpus self-host status is contradictory, and the proposed Codex checkpoint anchor is not bound to an explicit immutable revision/hash/signature or equivalent detached owner seal.

T1 must make every digest byte-reproducible and domain-separated, bind the complete authority-bearing envelope, resolve all self-reference/status issues, and define the immutable anchor. Preserve 27/11/14/7 and all accepted runtime/set-separation work.

Implementation-authoring planning is not approved. Implementation, Stage 2.6B, permit, REAL_RUN, QT001 apply, activation, repoint, and owner/ACL cutover remain blocked.