amadan
Independent whole-branch claude-fable-5 review APPROVE at 16024be; exact-head hub CI verified success (vet/fmt/build/unit/race). Review final result: /tmp/oficina-shared-seal-review/review.ndjson. Reviewer checked unchanged Home namespace, derivation, two-way historical ciphertext compatibility, namespace ambiguity rejection, copied-key concurrency, immutable published module and fixed errors. Non-blocking stale go.sum entries noted, no dependency ambiguity in go.mod. Frozen ARM64 artifact SHA256 0e82efcfb23d014e651f052908050a42caf1cd79f85ca7f9e2668020c15fa34f. Preview-only deployment now watching both role hosts; not yet verified and no merge or production change.
Reusable purpose sealing with Home ciphertext compatibility open
Branch feat/shared-purpose-seal at16024be, isolated overnight-shared-seal. Required extraction from approved Docs identity-link design2e69825: public nested handoff/seal takes explicit namespace; Home adapter preserves oficina/home, key derivation and historical AES-GCM envelope. Fixed historical vectors plus old/new envelope readers protect both directions. Namespace/purpose/key/tamper/truncation and copied-key concurrency tests pass. Full local unit/race passes; meaningful namespace/delimiter mutations fail intended compatibility checks. Public source967d29f was fetched through canonical Go module resolution and root consumes that immutable pin, no replace. No live key/data change or deployment yet. Fable5 code review active under oficina-shared-seal-review-20260908.service.
DEPLOYED and VERIFIED 16024be on both existing Home previews. /tmp/oficina-shared-seal-release/verified.json records matching API bodies and headers plus artifact SHA; eight live Chromium/WebKit JS/width checks passed in browser/results.json. Scope is entry, secure pending/intent cookies, fresh-age acceptance and invalid-age refusal; no live emailed authentication claimed. Independent configured claude-fable-5 canary evidence review APPROVE, /tmp/oficina-shared-seal-review/canary-review.ndjson. Same keys/config/data paths; production unchanged. Ready to merge bounded extraction with prior exact-head CI and code approval.