carlos / platform Public

Add an unmounted canonical signup-scope descriptor codec. It pins the authority, database lineage and resolved storage fields into a bounded versioned byte format; no production caller, schema, provider adapter or signup handler uses it.

Actual Opus design and code review accepted this bounded unit after a test-only correction added an independent custom-mode wire fixture. Focused normal/race checks include all five fuzz seeds. Independent compiling mutants detect weakened field bounds, collapsed prefixes, dropped lineage and a changed custom-mode byte. Exact source/patch hashes and review logs are retained under the paid-launch runroot.

Commit a7ce3b5236de543fa35283017247f319a0b88bb2 is a separate preparatory checkpoint based on verified integration491428a2. Exact-commit Amadan CI and complete local disk-backed FULL validation are running; no integrated acceptance claimed. The existing monolithic timeout failures remain FAILED. The host-specific validation exception does not change gate code, timeout or durability and does not prove crash/power-loss behavior.

Factory binding, scope pin/enrolment, capability evidence and restore/continuity contracts still require accepted designs before remote wiring. Commercial exhaustion/storage/USD-GBP decisions, experimental VFS and sidecar/rollout holds remain. LIVE BILLING OFF. No main merge, deployment or production/provider changes.