{
  "schemaVersion": "kingy-independent-native-duplicate-boundary-review/1.0.0",
  "checkedAt": "2026-10-17T22:58:10.835656+00:00",
  "approved": true,
  "freezeSha256": "8a5f05ec2c5b18111fe3a0e8083593c6c788ad825c656561feaec9b892feb6ba",
  "files": {
    "serve-once.py": "4a84dc3c3d8c89b3bcfca2cb3bab230c599adc1e3f8abeeb03aba01382e3b8f1",
    "duplicate-once.applescript": "f42b79e7c1129182a573ecdf39b82b9997ada7a97c9dc0893e1454740b287f88",
    "request-structural.mjs": "20dd49f49124f351f98f114cc97ee45c8446dbe918e7a5a0d5e2a18f26c78fa4",
    "bindings.mjs": "a0dbf428132a93dfc53156c6316a74f36b66c09a688ba0f29989233f1c47adc5",
    "prepare-menu.py": "10aca8b540135558045593a1969be26cb69b936c6657ef26207544b56418fa39",
    "open-structural-menu.applescript": "4bc4471c528c214ca0db32d8c23cf4c441c218ba1cf65165de235893cec55b06"
  },
  "scope": "Distinct six-file D3 preparation and Duplicate-boundary transport. Preparation truthfully verifies canonical outer AXPress and sole structural menu while explicitly leaving native focus unverified/deferred. Actual one-use native Duplicate boundary must establish current PID659 sole focused More and direct enabled Duplicate immediately before one AXPress. No text/Send/model action; frozen candidate/method/D2 core unchanged.",
  "sourceFindings": [
    "Initial binding could fall through to ordinary app.click for unexpected opened-boundary target or a second Duplicate after action. Exact isolated sentinels demonstrated both; corrected binding now rejects both, preserving initial bytes/results.",
    "CUA singleton/menu direct-child checks remain and reject actual dual unnamed native overlay even when focused More line exists. Missing CUA focus text is not synthesized or used; current native focus is checked by the action carrier.",
    "AS recursively inventories process menus excluding menu bars, including unnamed/outside-HTML menus, within finite depth/node bounds; requires sole focused More, unique direct enabled Rename/Duplicate and exposed AXPress; rechecks exact focus/foreground before one Duplicate.",
    "Python checks exact frozen60 sources, D2 core/template/PDF/config identity, owned process executable/PIDs, all retained records and current substantive equality, log/manifest prefixes, pending-null, fresh prepared token and one-use claim before action; consumes token and captures uncertain failures without blind retry.",
    "Successful helper acknowledgment additionally requires exactly one new blank10-file native clone with unique frozen backing hashes/config11 and unchanged measurement originals/log.",
    "Client validates exact four-file source review/pins, job scope/identity/age, fresh prepared receipt, one exclusive request and fresh exact acknowledgment; no arbitrary command or recurring automation interface.",
    "New preparation uses a distinct D3 schema/token/receipt/source hash; it does not relabel any failed D2 focus acknowledgment. Focus flags are explicitly nativeFocusVerified=false and nativeFocusDeferredToDuplicate=true.",
    "New structural AS requires exact owned canonical row/outer AXGroup popup/inner More label and enabled/action guards, one outer AXPress, then sole process menu plus unique direct enabled Rename/Duplicate. All secondary/unnamed menus count as overlays; menu bars are excluded.",
    "New preparation/serve witness explicitly require canonical native name unique at exact source path and source not any current or retained measured original; these preserve D2 identity guards.",
    "Client and server now bind their own D3 structural receipt. Server verifies exact structural source freeze and script hash, target metadata, blank/structural/deferral flags, token freshness and nonconsumption.",
    "Bindings logic remains identical to passed one-use correction; only the request-module query key changed so stale cached four-file clients are not reused. No CUA focus text is invented.",
    "Documented CUA loader rejected relative query import before action. Changed only physical request client filename, matching import and exact source-pin filename sets; textual substitutions independently asserted. All guard/action logic unchanged. The old client and failed import evidence remain preserved.",
    "A native role getter failed during full menu inventory after the one canonical outer press; later read-only same traversal completed28nodes/one menu. Cause remains unknown. AS correction retries only an entire reset inventory after native read errors -10000/-1719/-1728; never accepts partial results, never repeats outer/Duplicate action, and rethrows deterministic bounds/overlay guards. Structural wait remains8s; Duplicate adds4s complete-inventory readiness before unchanged exact focus/direct-child/one-press conditions.",
    "Existing menu may be reconciled read-only only through the exact pinned failed canonical outer-press receipt541687b5 and preserved opening sourcefcbe8c89. Both wrappers rehash this lineage. Prior failure remains return1/postblankfalse/structuralfalse; the new receipt truthfully identifies read-only reconciliation with newOuterPressActions0, historical source hash and focus still deferred. A one-use marker prevents repeated lineage reconciliation; exact counts23/log48/canonical/all103 witness and fresh complete structural inventory are required. Normal fresh openings remain separately identified as one outer press.",
    "Documented CUA reset/fresh physical import reconciles stale loaded four-file client; original nonce60b5 never received request/action/ack or consumed token and expired without native action. New prepare --refresh accepts only exact pinned expired successful structural receipt/nonce/failure/claim and no-action marker absence; before24/count23/log48 and all103/source/config guards remain. It archives old ready byte-exact, uses one exclusive refresh marker, performs only fresh complete observe-existing inventory and emits a distinct truthful zero-new-press token. No old token/nonce/action is reused.",
    "Same single neutral Duplicate persisted as exact blank10/config11 after original8second helper readiness guard. Extended only external read-only clone readiness to20s; finite job90s, minimum reserve45s/clientwait60s cover AS18+readiness20+witness, and one created timestamp fixes exact90s duration. Added strict prepared-token epoch expiry recheck immediately before native AXPress, so longer acknowledgment budget never extends60s token freshness at action. Historical failed job remains failed; no re-Duplicate or new measurement occurred.",
    "Initial additive action-expiry NSDate.date() bridge failed before any native Duplicate/question. Replaced both epoch reads with materialized NSDate dateWithTimeIntervalSinceNow:0 then timeIntervalSince1970; expiry thresholds and all action guards unchanged. No extra neutral rehearsal requested. Added result diagnostics only: raw stdout/stderr retained outside public export roots in0700/0600 private folder; public native-result contains returncode, fixed acknowledgment match, opaque hashes, source-whitelisted guard text and integer error codes. Timeout124 is preserved without retry; no additional native action.",
    "Root-authorized exact legacy97fd consumed-token reconciliation only, not a general refresh framework. Both wrappers rehash its eight historical files. New read-only branch requires exact canonical opening receipt, unchanged prior103/log48 state, fixed native filename inventory, expired job, preserved request/action markers and missing ack/native-result plus original uncertain failure; one marker prevents replay. It observes existing full structural menu and emits a distinct zero-new-press token carrying priorDiagnosticMissing/priorActionUncertaintyRetained=true. Never labels missing old diagnostic or generic failure as proof of no native action, and never reuses consumed token. Actual Duplicate boundary guards remain unchanged."
  ],
  "controls": {
    "exactCopiedBindingAndRequestCases": 25,
    "passed": 25,
    "initialCasesPassed": 23,
    "initialCasesTotal": 25,
    "initialFailedGuardProbesPreserved": true,
    "initialReceiptSha256": "64e268e05de8159c9102c9c16ff24e45a0e42d9bb1b30cbc9d81dbfed7cc780d",
    "finalReceiptSha256": "f97112c49c1104bd0ff24ef376e9bce8a4826488e6c8ca39cca9bb8a725e4df2",
    "pythonCompilePassed": true,
    "appleScriptCompiledWithoutExecution": true,
    "actualHelperOrUiInvokedByReviewer": false,
    "pythonWitnessAndASGuardsReviewedStatically": true,
    "all60FrozenSourcesUnchanged": true,
    "D2CoreUnchanged": true,
    "structuralPreparedActualFunctionCases": 16,
    "structuralPreparedPassed": 16,
    "structuralPreparedReceiptSha256": "7703d5ffcd8668259971e907fcccee573de6dfeebd0450c4713c5db06e2a591e",
    "changedStructuralClientCases": 6,
    "changedStructuralClientPassed": 6,
    "structuralClientReceiptSha256": "df7748317284aa4f3643a556ebee2a3ea1daab79820af193f029be39d7283b9a",
    "unchangedMenuStructureOneUseAndAckCasesNotRepeated": true,
    "structuralAppleScriptCompiledWithoutExecution": true,
    "bothPythonSourcesCompilePassed": true,
    "physicalClientRenameExactSubstitutionsVerified": true,
    "guardAndActionLogicUnchangedAfterClientRename": true,
    "unchanged25Plus22ControlsNotRepeated": true,
    "physicalClientAndBindingNodeSyntaxPassed": true,
    "bothInventoryReadinessASCompiledWithoutExecution": true,
    "onlyTwoASFilesChangedForReadiness": true,
    "readinessRetriesWholeInventoryOnly": true,
    "partialInventoryCannotAuthorizeAction": true,
    "deterministicGuardErrorsNotSuppressed": true,
    "lineageActualPreparedAndReconcileGuardCases": 15,
    "lineageCasesPassed": 15,
    "lineageReceiptSha256": "186225fedffec0ac6b6930fc47059c5ca0069c4889f7256d941dc72020966f72",
    "readOnlyObserveBranchASCompiledWithoutExecution": true,
    "unchangedPrior25Plus22ControlsNotRepeated": true,
    "unusedRefreshExactGuardCases": 11,
    "unusedRefreshCasesPassed": 11,
    "unusedRefreshReceiptSha256": "2adfbf11b0d1ebca8bf2ccd79279ff1d300a4155fb51c8e0a412cd8f6e1c8f31",
    "onlyPrepareSourceChangedForRefresh": true,
    "actualOldNonceRequestActionAckConsumedAbsentVerified": true,
    "oldExpiredReadyAnd4HistoryPinsVerified": true,
    "unchangedPriorActionAndReceiptControlsNotRepeated": true,
    "budgetClientExact90SecondBoundaryCases": 2,
    "budgetClientCasesPassed": 2,
    "budgetClientReceiptSha256": "d8a1e5f3fe0956c152e1dfb8911547eb2168c9d890f79229caa0c17b823f9e1c",
    "additiveActionExpiryASCompiledWithoutExecution": true,
    "singleCreatedTimestampVerified": true,
    "unchangedStructureActionReceiptControlsNotRepeated": true,
    "materializedDateASCompiledWithoutExecution": true,
    "diagnosticPythonCompilePassed": true,
    "diagnosticPublicFieldsWhitelistedAndRawOutsideExportRootsReviewed": true,
    "dateFixNoAdditionalRehearsal": true,
    "unchangedGuardControlsNotRepeated": true,
    "exactLegacyDateTokenGuardCases": 5,
    "exactLegacyCasesPassed": 5,
    "exactLegacyReceiptSha256": "54f3613b4595a7e3bad696cc06b9d12452192a7303b04e1e77ef70c209f2006d",
    "all8HistoricalLineagePinsAndNativeInventoryMatch": true,
    "bothChangedPythonSourcesCompilePassed": true,
    "unchangedASAndActionControlsNotRepeated": true
  },
  "neutralPilotConditions": [
    "Run one unscored frozen-ui clone only with fresh separately pinned D3 structural menu receipt, distinct nonce and one-use claims; native focus must pass at actual Duplicate boundary, no coordinator.next/question/text/Send/model call.",
    "Record actual sole new blank clone zero messages/empty input/10 unique exact frozen PDF hashes/config11; verify native UI10 previews/removes and required screenshot success without exposing private pixels.",
    "Verify all103 retained measurement records, current substantive originals, canonical and log48 unchanged; retain all failed preparations and receipts.",
    "Only after independently bound actual neutral proof may root-authorized original24 run once; inspect its actual five generation configuration groups before original25.",
    "Routine demonstrated implementation fixes remain within root scoped authorization and must preserve failures/source predecessors with exact updated review; never retry an unchanged uncertain Duplicate."
  ],
  "nextModeConditions": [
    "New prepared canonical token and nonce per original; unchanged frozen coordinator/clone/Send/blank/config checks remain.",
    "Do not replay original23 or any other original; original23 remains incomplete/unverified.",
    "At end, account and seal240 originals before quality/ref/answer audit; measurement completion gate remains failed and1.5 launch held."
  ],
  "actualNeutralProofApproved": false,
  "original24MayProceedFromSourceApprovalAlone": false,
  "freshQuestionReferenceAnswerOrGradeViewed": false,
  "nativeUiActions": 0,
  "modelCalls": 0,
  "frozenCandidateMethodOrD2Changed": false,
  "publicationApproved": false,
  "launchApproved": false,
  "revision": 9,
  "priorReviewPreservedSha256": "fa34a645c67fd3cf7bb29acecb6880755083c277b8c8ff2084122ecedb1ad30a",
  "priorStructuralPreparationFailure": {
    "receipt": "menu-receipts/59a2cfa5-f711-4733-b13a-cbfc6b3d1334.preparation.json",
    "sha256": "541687b576fa60c9708dc120b58f652857af53dd6db7f7e5b28fcf2445bfcff8",
    "nativeDuplicateActions": 0,
    "nonceJobsStarted": 0,
    "failedReceiptNotReused": true
  },
  "reconcileLineage": {
    "receipt": "menu-receipts/59a2cfa5-f711-4733-b13a-cbfc6b3d1334.preparation.json",
    "receiptSha256": "541687b576fa60c9708dc120b58f652857af53dd6db7f7e5b28fcf2445bfcff8",
    "script": "open-structural-menu.before-inventory-readiness-fcbe8c89.applescript",
    "scriptSha256": "fcbe8c893223324fece9b9054a1523d9cfcd1adac40b8be105b6af6c6b8e6599"
  },
  "existingMenuReconciliationConditions": [
    "Use only exact pinned prior failed59a2 preparation at its same canonical path/index and current unchanged23/log48/all103/source/config witness.",
    "Only observe-existing mode; skip every row/outer AXPress statement and perform a complete current structural inventory. New token must explicitly identify historical press lineage and zero new press.",
    "Do not claim old failed focus/structural result succeeded. Final current focus, single-menu and direct enabled Duplicate remain mandatory at actual one-action boundary."
  ],
  "refreshLineage": {
    "token": "e34ddf32-050c-47ae-9abf-b61e30478580",
    "jobDirectory": "jobs/60b5a920-ffa2-4b7e-9860-c9eeec864f1d",
    "readySha256": "4e0c595f7ca280cad57b8010bceffff01d2d4ce2e054888888c197816be2b3f1",
    "files": {
      "menu-receipts/e34ddf32-050c-47ae-9abf-b61e30478580.preparation.json": "4e0c595f7ca280cad57b8010bceffff01d2d4ce2e054888888c197816be2b3f1",
      "jobs/60b5a920-ffa2-4b7e-9860-c9eeec864f1d/job.json": "cd72472aad8a3222e9068644fbb952514a5f117e91af6d03c2a280db1808129d",
      "jobs/60b5a920-ffa2-4b7e-9860-c9eeec864f1d/failure.json": "37d1deecad420ada7520649041ce87baf94e7de76ee9793a2f75d8cd1a98e774",
      "claims/e34ddf32-050c-47ae-9abf-b61e30478580.json": "5feeeb314babfc5c28d1bc01af6b19fb1a0b964f2517f3ded109c8898d50b93c"
    }
  },
  "moduleCacheResetReconciliationSha256": "3e322c74fa392628ffd77ce3ef20a14a5909d59e3e4bc576087d6e46da50dae1",
  "dateFailureLineage": {
    "token": "a3038b89-41b5-4198-87ff-faff26cdb6ee",
    "preparation": "menu-receipts/a3038b89-41b5-4198-87ff-faff26cdb6ee.preparation.json",
    "preparationSha256": "d52f535260b6fe12e0d98c2972c1f8422473d92ef8f6bd4a6c0a046ef282a000",
    "jobDirectory": "jobs/97fdcbeb-78ed-463f-a37e-bf6a6aba6079",
    "nativeFileNamesSha256": "fc0d1cd1bd519df055809f6bd5bcd0eac6d2b61c6a798f21ea2c85c44ed45b75",
    "files": {
      "menu-receipts/a3038b89-41b5-4198-87ff-faff26cdb6ee.preparation.json": "d52f535260b6fe12e0d98c2972c1f8422473d92ef8f6bd4a6c0a046ef282a000",
      "menu-receipts/a3038b89-41b5-4198-87ff-faff26cdb6ee.consumed.json": "d52f535260b6fe12e0d98c2972c1f8422473d92ef8f6bd4a6c0a046ef282a000",
      "jobs/97fdcbeb-78ed-463f-a37e-bf6a6aba6079/job.json": "723d380476fbba073b6fbe3b8e38f1ee58e3e7cbe183185f3fc0a903e31b364a",
      "jobs/97fdcbeb-78ed-463f-a37e-bf6a6aba6079/request.json": "b9f2c689ba25a301d25306cf80c86e7c45e8342514ef4b03b276d263fdc85dd2",
      "jobs/97fdcbeb-78ed-463f-a37e-bf6a6aba6079/action-started.json": "eb17b859a91f2f3cfad104dd184c4b1810a7cada286298bfa2c47adfc8c48a6a",
      "jobs/97fdcbeb-78ed-463f-a37e-bf6a6aba6079/failure.json": "b51a6ec610e6ab4b9d324a2bed5c1de1d5104ad81e8e7db13688f98654593ca5",
      "original24-preparation-interruption.json": "0d8c870a7a92f68d767b560f8bf18a0995ebd0b36d3dd042284666c810b7706e",
      "duplicate-once.before-date-and-diagnostics-ae9f36ed.applescript": "ae9f36ed66e2a9f6d17f15fc31ed8efe1d846b70368084004c218d3c252319cb"
    },
    "limitation": "Legacy native diagnostic unavailable; exact reviewed old NSDate source fails in read-only reproduction before native UI actions. Preserve historical uncertainty; this refresh performs observation only."
  }
}