Check C - Fail-Closed Drift Recheck

Verdict: FAIL_CLOSED_DRIFT_NEEDS_FIX

The intended behavior is correct: revision/content/marker/fence/registry/guard/section/membership drift blocks authoring and requires a new Codex recheck.

The current proof is incomplete. envelope_manifest_sha256 is defined only over document/revision/normalized-content rows plus membership/registry/guard hashes. It does not explicitly bind all envelope authority fields, including the superseded-boundary hash, exact active-section identities, full-document hashes, approval metadata, checkpoint anchor, and recheck-on-change flag. Editing omitted fields can therefore evade scenario 11's claimed envelope-equality proof.

T1 must make the entire authority-bearing envelope canonical and hash-bound, then specify an immutable/detached Codex seal anchor. Missing/extra/unknown fields and any anchor drift must fail closed.