docs: freeze CK-07R1 lifecycle run-invocation authority

docs/INDEX.md

@@ -28,13 +28,16 @@ CK-07R1A0 is accepted at exact main `519b503aa3b23019033b6481687c08b23fc6c31e`.
 Its transition authority makes the planner-valid receipt a CK-07R1 successor
 acceptance output rather than a pre-dispatch dependency. PR #394 remains a
 stale failed read-only witness; it is not updated, rerun, or merged. CK-07R1
-is held behind the linked [source-digest authority](decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json),
-which freezes predecessor `408d18e4…` to the permitted successor
-`d192c858…` and requires exact-main worker revalidation before any one-run
-gate can be considered. CK-07R1 is Conditional Ready only after that
-source-digest authority merges and exact-main verifies; no other successor is
-advanced and the one-run gate remains unspent. Reclassification and
-maintainability remain open. The central authority is
+is held behind the linked [source-digest authority](decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json)
+and [run-invocation authority](decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json)
+(`docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json`).
+The source authority freezes predecessor `408d18e4…` to the permitted
+successor `d192c858…`; the run authority freezes the exact launch, fixture,
+evidence, token, and no-retry contract. The retained candidate is explicitly
+blocked because it cannot support that launch contract without behavioral
+implementation. CK-07R1 remains blocked, no run token is consumed, no other
+successor is advanced, and the one-run gate remains unspent. Reclassification
+and maintainability remain open. The central authority is
 [REMAINING_EXECUTION_PLAN.md](roadmap/REMAINING_EXECUTION_PLAN.md).
 
 ## Authority set

docs/roadmap/REMAINING_EXECUTION_PLAN.md

@@ -31,10 +31,11 @@ worker implementation. PR #394 is a stale failed witness: head
 `ordinary.2000_call_tail` gate and is superseded read-only. It must not be
 updated, rerun, or merged. The planner-valid lifecycle receipt is an
 acceptance output of the existing CK-07R1 worker only after it revalidates the
-retained candidate on this authority's exact merged main; it is not a
-pre-dispatch dependency. The first sample, all five budgets, one-run ceiling,
-and every fail-closed rule remain binding. CK-07R1 is Conditional Ready only
-after the source-digest authority is accepted, merged, and exact-main
+retained candidate on the source-digest and run-invocation authorities' exact
+merged main; the run-invocation authority is not a pre-dispatch dependency.
+The first sample, all five
+budgets, one-run ceiling, and every fail-closed rule remain binding. CK-07R1
+is blocked until both authorities are accepted, merged, and exact-main
 verified. Earlier wording that says to resume, refresh, or rerun PR #394 is
 historical provenance and does not authorize action. This source-digest
 authority supersedes earlier CK-07R1 wording that says to resume, refresh, or
@@ -114,10 +115,8 @@ conditions in the table and child files; they are not unconditional DAG edges.
   }, {
     "condition": "CK-QG1A0 merged and exact-main verified",
     "tasks": ["CK-QG1A"]
-  }, {
-    "condition": "CK-07R1/CK-07R1A0 source-digest authority accepted, merged, and exact-main verified; worker pre-run gates remain required",
-    "tasks": ["CK-07R1"]
   }],
+  "blocked": ["CK-07R1"],
   "tasks": [
     {"id": "CK-08R0", "file": "tasks/ck-08r0-freeze-corrective-contracts.md", "dependencies": []},
     {"id": "CK-08R1A", "file": "tasks/ck-08r1a-freeze-answer-semantics.md", "dependencies": ["CK-08R0"]},

docs/roadmap/TASK_PACKETS.md

@@ -15,8 +15,8 @@ parents are accounting umbrellas.
 - Completed corrective child tasks: **5 — CK-08R0, CK-08R2, CK-QG1A0, CK-07R1A, CK-07R1A0**
 - Remaining delegable child tasks: **45**
 - Ready child tasks: **0**
-- Conditional-ready child tasks: **4 — CK-08R1A, CK-08R3A; CK-QG1A after CK-QG1A0 exact-main; CK-07R1 after this authority exact-main**
-- Blocked child tasks: **41**
+- Conditional-ready child tasks: **3 — CK-08R1A, CK-08R3A; CK-QG1A after CK-QG1A0 exact-main**
+- Blocked child tasks: **42 — CK-07R1 pending the source-digest and the run-invocation authority**
 
 ## Parent packets
 
@@ -61,8 +61,8 @@ other corrective locks are unchanged.
 - [ ] **CK-08R3A — Implement bounded EvidenceService physical queries** · Conditional Ready after corrective authority exact-main verification; CK-08R0 remains accepted · [packet](tasks/ck-08r3a-implement-evidence-physical-query.md)
 - [ ] **CK-08R3 — Qualify evidence service scale** · Blocked on CK-08R3A accepted merge and exact-main verification · [packet](tasks/ck-08r3-qualify-evidence-scale.md)
 - [x] **CK-07R1A — Correct hosted lifecycle tail** · Accepted/merged at `4d807495`; exact-main verified · [packet](tasks/ck-07r1a-correct-hosted-lifecycle-tail.md)
-- [x] **CK-07R1A0 — Freeze lifecycle planner/recovery path authority** · Completed on merge; exact-main verified at `519b503a`; linked source-digest correction pending its own merge/exact-main verification · [packet](tasks/ck-07r1a0-freeze-lifecycle-path-authority.md)
-- [ ] **CK-07R1 — Correct lifecycle preparation scale** · Conditional Ready only after the source-digest authority merge/exact-main; revalidate the retained candidate on exact merged main; planner-valid receipt is a successor acceptance output and PR #394 is stale read-only · [packet](tasks/ck-07r1-correct-lifecycle-preparation-scale.md)
+- [x] **CK-07R1A0 — Freeze lifecycle planner/recovery path authority** · Completed on merge; exact-main verified at `519b503a`; linked source-digest and run-invocation authorities require their own merge/exact-main verification · [packet](tasks/ck-07r1a0-freeze-lifecycle-path-authority.md)
+- [ ] **CK-07R1 — Correct lifecycle preparation scale** · Blocked pending source-digest and run-invocation authority merges/exact-main verification; revalidate the retained candidate only on exact merged main; planner-valid receipt is a successor acceptance output and PR #394 is stale read-only · [packet](tasks/ck-07r1-correct-lifecycle-preparation-scale.md)
 - [ ] **CK-QG1A — Correct page-executor complexity** · Conditional Ready after CK-QG1A0 exact-main · [packet](tasks/ck-qg1a-correct-page-executor-complexity.md)
 - [ ] **CK-QG1 — Enforce replacement-kernel maintainability** · Blocked on CK-QG1A and refresh of existing PR #392 on corrected main · [packet](tasks/ck-qg1-enforce-agent-kernel-maintainability.md)
 - [ ] **CK-08R4 — Reclassify physical named plans** · Blocked on CK-08R1/R2/R3 and CK-07R1 · [packet](tasks/ck-08r4-reclassify-physical-plans.md)

docs/roadmap/tasks/ck-07r1-correct-lifecycle-preparation-scale.md

@@ -1,6 +1,6 @@
 # CK-07R1 — Correct lifecycle preparation scale
 
-**Status:** Conditional Ready after the source-digest authority merges and exact-main verifies; worker pre-run gates remain required
+**Status:** Blocked pending the source-digest and run-invocation authorities merging and exact-main verification; worker pre-run gates remain required
 
 **Parent:** Corrective prerequisite for CK-09
 
@@ -24,7 +24,8 @@ contracts.
 **Dependencies:** CK-07R1A accepted, merged, and exact-main verified at
 `4d8074952f679877f2b4fbb3e89c51015e96a197`; CK-07R1A0 path authority accepted
 at exact main `519b503aa3b23019033b6481687c08b23fc6c31e`; and the linked
-source-digest authority accepted, merged, and exact-main verified. The worker
+source-digest and the run-invocation authority accepted, merged, and exact-main
+verified. The worker
 must then start from that exact merged main and reapply the retained candidate,
 revalidating predecessor and successor digests before any end-to-end run. PR #394 head
 `98a9b5b82951d136644a5fe5f8a70d320131ba08` is a stale failed read-only
@@ -59,8 +60,9 @@ standard/production fixtures, five unprofiled samples, 30-day/all-time gates,
 `just v/vc`.
 
 **Acceptance:** Work is linear in observations plus prior transitions and all
-publication-valid scale gates pass through the CK-07R1A0 reachable path. The
-existing worker must revalidate the exact predecessor-to-successor digest
+publication-valid scale gates pass through the CK-07R1A0 reachable path and
+the frozen CK-07R1A0 run-invocation contract. The existing worker must
+revalidate the exact predecessor-to-successor digest
 transition, bind every frozen path and prior identity, produce the
 planner-valid receipt, and consume at most one new end-to-end run. Receipt
 absence before dispatch is not a blocker; receipt absence or invalidity at

docs/roadmap/tasks/ck-07r1a0-freeze-lifecycle-path-authority.md

@@ -1,6 +1,6 @@
 # CK-07R1A0 — Freeze lifecycle planner/recovery path authority
 
-**Status:** Completed on merge; exact-main verified at `519b503aa3b23019033b6481687c08b23fc6c31e`; linked source-digest correction is pending merge and exact-main verification, so the existing CK-07R1 worker remains held
+**Status:** Completed on merge; exact-main verified at `519b503aa3b23019033b6481687c08b23fc6c31e`; linked source-digest and run-invocation authorities are pending merge and exact-main verification, so the existing CK-07R1 worker remains held
 
 **Release-candidate package ceilings:** sdist remains at most 2,000,000
 bytes and wheel remains at most 1,000,000 bytes. The historical 828000/383000
@@ -35,6 +35,9 @@ contract is
 with its schema. The linked [source-digest authority](../../decisions/evidence/ck07r1a0/lifecycle-source-digest-authority.json)
 and its schema freeze the exact predecessor/successor transition. The retained
 CK-07R1 implementation/profile/evidence diff is read-only evidence.
+The linked run-invocation authority is
+`docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json`;
+it adds no runtime implementation and keeps the retained candidate blocked.
 
 **Produces:** A frozen entry-path contract, APPEND_SAFE_SMALL selection rule,
 independent lifecycle oracle/postconditions, exact source/diff identity,
@@ -69,9 +72,9 @@ predecessor digest is
 `408d18e44c87da234d220c29298ebac1780e9426e2dce767b0bfc3ae65e8a872` and the
 permitted-not-accepted retained successor digest is
 `d192c858b48e44b5aa7a7e39ef524e5ec2f08085655fe485639f5e875a727aa1`; generic
-or different digest drift fails closed; CK-07R1 becomes Conditional Ready only
-after this source-digest authority is accepted, merged, and exact-main
-verified; the five budgets remain `5000/120000/100/500/500` ms; every prior
+or different digest drift fails closed; CK-07R1 remains blocked until the
+source-digest and run-invocation authorities are accepted, merged, and
+exact-main verified; the five budgets remain `5000/120000/100/500/500` ms; every prior
 attempt and its identity/timestamp/failure remains visible; receipt
 `935e4427b93e67c5ca649b773b0b3895dafac87f49bc76d7ed8917dff2f0250d` remains
 writer-only evidence and is never reused or upgraded.
@@ -83,9 +86,9 @@ rules; one final read-only review; hosted CI; squash merge; attached
 exact-main verification.
 
 **Acceptance:** The authority artifact validates, exact identities and run
-accounting are preserved, only the two retained CK-07R1 scope additions are
+accounting are preserved, only the retained CK-07R1 authority additions are
 bound, the stale failed PR #394 is explicitly superseded read-only, and CK-07R1
-becomes Conditional Ready only after this authority's merge and exact-main
+remains blocked until the linked authorities merge and exact-main
 verification. The planner-valid receipt is a future successor acceptance
 output, not a pre-dispatch dependency. This packet does not run or authorize a
 production qualification run by itself.
@@ -100,7 +103,7 @@ from a manually forced plan.
 
 **Handoff:** Coordinator `019fbeb3-00d5-7f22-ba65-ae4672838140` and parent
 `019fbea6-66b5-71e0-b85a-b6654fd414c5` receive the merged SHA, source-digest
-authority path, exact candidate source/diff identity, preserved
+and run-invocation authority paths, exact candidate source/diff identity, preserved
 attempts/digests, validation/reviewer/CI/exact-main results, and unchanged
 downstream gates.
 

scripts/check_kernel_scope.py

@@ -760,6 +760,14 @@
     }
 )
 
+CK07R1_RUN_INVOCATION_AUTHORITY_ADDITIONS = frozenset(
+    {
+        "docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.json",
+        "docs/decisions/evidence/ck07r1a0/lifecycle-run-invocation-authority.schema.json",
+        "tests/kernel/test_lifecycle_run_invocation_authority.py",
+    }
+)
+
 CK08_PREREQUISITE_BLOCKER_ADDITIONS = frozenset(
     {
         "docs/decisions/evidence/ck08/fact-backed-oracle-prerequisite-gap.json",
@@ -820,6 +828,7 @@
     | PACKAGE_BUDGET_POLICY_ADDITIONS
     | CK07R1A0_AUTHORITY_ADDITIONS
     | CK07R1_LIFECYCLE_SCOPE_ADDITIONS
+    | CK07R1_RUN_INVOCATION_AUTHORITY_ADDITIONS
     | CK08_PREREQUISITE_BLOCKER_ADDITIONS
     | CI_PERFORMANCE_QUALIFICATION_ADDITIONS
 )

tests/kernel/test_documentation_authority.py

@@ -176,7 +176,8 @@ def test_remaining_execution_plan_is_complete_acyclic_and_fail_closed() -> None:
     manifest = json.loads(manifest_match.group(1))
     assert manifest["schema"] == "codex-usage-tracker.remaining-delegation-dag.v1"
     assert manifest["orchestration"]["spawn"] == "all_newly_ready_successors"
-    conditional_ready = {"CK-08R1A", "CK-08R3A", "CK-QG1A", "CK-07R1"}
+    conditional_ready = {"CK-08R1A", "CK-08R3A", "CK-QG1A"}
+    blocked = {"CK-07R1"}
     assert manifest["completed"] == [
         "CK-08R0",
         "CK-08R2",
@@ -197,18 +198,12 @@ def test_remaining_execution_plan_is_complete_acyclic_and_fail_closed() -> None:
             "condition": "CK-QG1A0 merged and exact-main verified",
             "tasks": ["CK-QG1A"],
         },
-        {
-            "condition": (
-                "CK-07R1/CK-07R1A0 source-digest authority accepted, merged, and "
-                "exact-main verified; worker pre-run gates remain required"
-            ),
-            "tasks": ["CK-07R1"],
-        },
     ]
+    assert manifest["blocked"] == ["CK-07R1"]
     assert "Completed packets: **14 / 22**" in ledger
     assert "Not started: **8**" in ledger
     assert "Critical-path completion: **14 / 21**" in ledger
-    assert "Blocked child tasks: **41**" in ledger
+    assert "Blocked child tasks: **42" in ledger
     assert f"Ready child tasks: **{len(manifest['ready'])}" in ledger
     assert (
         f"Conditional-ready child tasks: **{sum(len(item['tasks']) for item in manifest['conditional_ready'])}"
@@ -301,6 +296,8 @@ def test_remaining_execution_plan_is_complete_acyclic_and_fail_closed() -> None:
             assert "**Status:** Conditional Ready after" in body
         elif packet_id in ready:
             assert "**Status:** Ready" in body
+        elif packet_id in blocked:
+            assert "**Status:** Blocked" in body
         elif packet_id in {"CK-08R0", "CK-08R2", "CK-QG1A0", "CK-07R1A", "CK-07R1A0"}:
             assert "**Status:** Completed on merge" in body
         else:
@@ -522,8 +519,8 @@ def test_corrective_seam_packet_is_critical_path_authority() -> None:
                 "fold_lifecycle",
                 "935e4427b93e67c5ca649b773b0b3895dafac87f49bc76d7ed8917dff2f0250d",
                 "one-run authorization condition",
-                "CK-07R1 becomes",
-                "Conditional Ready",
+                "CK-07R1 remains blocked",
+                "run-invocation authority",
                 "The planner-valid receipt is a future successor acceptance",
                 "stale failed PR #394 is explicitly superseded read-only",
             ),
@@ -534,10 +531,7 @@ def test_corrective_seam_packet_is_critical_path_authority() -> None:
     assert "strict Authority v2" in ck07r1a0
     assert "supersedes earlier CK-07R1 wording" in central
     assert "Blocked on CK-QG1A" in ckqg1
-    assert (
-        "Conditional Ready after the source-digest authority merges and exact-main verifies"
-        in ck07r1
-    )
+    assert "Blocked pending the source-digest and run-invocation authorities" in ck07r1
 
 
 def test_ck07r1a0_authority_is_strict_and_preserves_attempt_identity() -> None:

tests/kernel/test_kernel_scope.py

@@ -19,6 +19,7 @@
     CK07D_EFFECTIVE_DATED_VALUATION_ADDITIONS,
     CK07E_INDEPENDENT_FACT_ADAPTER_ADDITIONS,
     CK07R1_LIFECYCLE_SCOPE_ADDITIONS,
+    CK07R1_RUN_INVOCATION_AUTHORITY_ADDITIONS,
     CK07R1A0_AUTHORITY_ADDITIONS,
     CK08_PREREQUISITE_BLOCKER_ADDITIONS,
     CK08_QUERY_EVIDENCE_ADDITIONS,
@@ -675,6 +676,7 @@ def test_k6_additions_are_explicit_and_bounded() -> None:
         | PACKAGE_BUDGET_POLICY_ADDITIONS
         | CK07R1A0_AUTHORITY_ADDITIONS
         | CK07R1_LIFECYCLE_SCOPE_ADDITIONS
+        | CK07R1_RUN_INVOCATION_AUTHORITY_ADDITIONS
         | CK08_PREREQUISITE_BLOCKER_ADDITIONS
         | CI_PERFORMANCE_QUALIFICATION_ADDITIONS
     )