Core external original admission associations: candidate CE1

Status: concrete entire architecture candidate, SOURCE ONLY, 2026-10-05. No architecture GO, product SOURCE GO, authentic provider/caller/ROOT, native qualification, provisioning or execution. Complete Core1643 remains unfinished. Current profile/catalogue/input-authority enrollment is genuinely EMPTY. This candidate replaces the complete circular registry proposal rather than moving only profile bytes. CLI PA1 is reference evidence, not imported Core authority or codec.

Existing authority and minimal private extension

The authority remains Blueprint21 source-owned profile/admitted native roots, Blueprint99 separate original owner initialization with source-owned authorization/custody, Blueprint103 independently admitted actual qualification references, SourceSafe independently admitted original source owner/publisher tuple and ADR original authorized native initialization. Blueprint31 ordinary23 commands cannot initialize/rotate/enroll; Blueprint97/101 native Audit and five original MAC domains remain separate. Source-owner/publisher authority is distinct from provider/profile key lineage. The existing selected SOURCE owner/publisher and separately authorized native owner administrative initialization are the eligible actors. No new actor, key, source-signing scheme, credential, privileged launcher, public/profile field, settings change or resource activation is selected.

CE1 adds one PRIVATE original-input acquisition capability under that existing independent owner/source admission authority. The capability returns the complete original external profile P, private routing grant G, all required original calibration records C, original qualification archive Q, source/publication associations S and original initialization receipt I together. The exact authentic provider/caller code and original independent authority must be implemented and included in the complete final source; an opaque type, matching SHA, SourceOwner string, default implementation, OS root/admin/SID/uid, protected file or provider MAC does not implement this authority. No actual eligible provider/source pin/authority object is supplied here.

Eligibility, authentication and original caller

The sole eligible producer/caller is the separately SOURCE-admitted native consumer of the EXISTING original owner administrative initialization/input-admission action. It must possess that action's genuine original source-owner authorization and independently admitted complete source/native/publication packet BEFORE acquisition. It is a required existing owner/source role, not a declaration that a current process or service has it. Ordinary Core HTTP/MCP clients, even service:configure principals or the trusted Admin proxy application class, cannot enroll or mint this role. Key-provider signing ability, SourceAuthor edits, native image hash alone and file ownership do not grant it.

Authentication has TWO conjunctive parts. First, actual original caller/provider process, birth, native owner, complete source/image/dependency association and original native control/transfer objects are authenticated under independently admitted ORIGINAL owner/input authority. Second, that same original authority must authenticate the exact source-owner approval/native-input ROOT/source-publication/qualification admission association for EACH offered object. Native peer/image authentication alone proves the producer, not the offered packet's admission. The producer cannot replace these with fields in P/G/C, a caller digest, a self-issued marker, callback durable:true or signed-looking JSON. Current independent authority/caller association ABSENT means genuine acquisition unavailable.

The eligible caller executes only the separately authorized owner action under its original scope; it cannot be selected by request/argv/env/path. Its independent source/image baseline must not embed the eventual final Core image/P/G/C/Q digest and must itself be originally admitted. A pin to independent producer B is usable only after B's genuine independent admission and only if B does not embed the eventual Core/P/G/C/Q associations. No guessed B pin becomes a trust root. The concrete integration must use the already selected owner's authentic admission realm/caller, not install a substitute supervisor/broker or reinterpret key HMAC as source admission.

Producer/consumer and concrete native interface

Owner-side private producer retainOriginalCoreOwnerInputs(originalOwnerAuthorization, originalAdmittedPacket) is invoked ONLY from that existing authentic owner action/input realm. It validates the original approval/packet association under that realm, retains genuine native read-only object leases, and binds the completed P/G/C/Q/S/I tuple before exposing acquisition. OriginalOwnerAuthorization is an actual authenticated original owner/source authority context, not a constructible scalar or JSON approval. Its exact authentic realm adapter/producer must be part of the source implementation; current absence cannot be repaired by an endpoint.

Production Core native bootstrap is the sole consumer of acquireOriginalCoreAdmissionInputs(). It acquires once, BEFORE any native admission store/stage/client effect or positive linked-binding context. Generic existing Core API/config/auth/lifecycle/runtime remains available when native admission is unavailable. Ordinary context(workspaceRoot,servicesRoot,remaining) and connect(profileDigest,workspaceIdentityDigest) only correlate with the previously acquired original scope; they cannot load, enroll, replace, retry or renew authority. No new23 operation or five-route request field is added.

The native lease contains actual retained original caller/provider process/image/owner/birth/transfer observations, original independent authority/admission/approval references, the COMPLETE original input ROOT association, and actual held objects for P/G/every C/Q/S/I. For each source object it binds exact source repository/full commit/genuine Git blob framing/hash, raw SHA256/length and native object identity. Git commit/blob metadata is externally original association, never a literal of its own containing source commit. Source/publication/qualification references remain native object associations; names/paths/hashes alone are routing/correlation only.

The transfer is a PRIVATE native original-object interface of the existing owner/input realm, not ordinary companion23/key-provider operations, HTTP, a JSON callback or a fifth Template public asset. Platform integration uses genuine original retained Windows HANDLE/duplicate provenance or Linux descriptor/SCM_RIGHTS provenance ONLY within the already admitted original owner/input channel. A portable handle integer alone is never accepted. The exact original authority/control/transfer implementation and source-built producer/consumer must be included in the ENTIRE final source. If that existing realm cannot provide genuine original leases/authority, the source must preserve unavailable, provide concrete counterevidence and obtain a governed whole amendment; no ad-hoc endpoint/credential/rights grant is substituted.

Private readers readOriginalCoreProfile, readOriginalCoreGrant, readOriginalCoreCalibration, readOriginalCoreQualification and readOriginalCoreInitialization consume the SAME held original leases, native type/owner/identity before/after, exact raw count/SHA/genuine EOF, source/commit/blob association and independently admitted original authority. They never return an admitted object from parser acceptance alone. Objects cannot be reopened by a request path or replaced after a failed read. Complete qualification semantics, native provenance and source-object association are independently checked before resource constructor use.

Exact external codecs and correlation

P remains the EXACT existing10-key service-lasso.core-admission-profile.v1: schema,platform,coreImage,companionImage,observerImage,workspaceIdentity,storageIdentity,endpoint,keyProvider,capabilities. Images remain exactly repository/full commit/sourceSha256/imageSha256/version. keyProvider remains providerId,providerImageSha256,keySetId,currentVersion,retainedVersions. Capability rows remain exactly name/qualificationRef in the11 ordered Blueprint103 names. No boolean capability, extra profile field or compatibility profile is introduced. Real native identities and qualification refs resolve through authenticated original lease metadata, not a name lookup granting authority.

G is a NEW PRIVATE six-key routing codec proposed ONLY by CE1: schema,profileDigest,workspaceRoot,servicesRoot,storageRoot,catalogRoot. schema is service-lasso.core-admission-input-grant.v1. profileDigest is actual completed external P raw SHA256; each routing value is bounded131072-byte NUL/control-free strict UTF8, subject to the platform's original absolute/native component rules. The original raw G bound is1048576 bytes with strict duplicate-aware closed JSON/depth16/finite token96 reader; it accommodates ALL four maximum strings plus metadata instead of silently inheriting CLI's16KiB grant/path limits. These strings authorize nothing. Every root must correlate to its genuine original held native lease, original owner/rights/admitted source, profile workspace/storage refs and exact service/catalogue scope. Core context roots are only byte/native correlations. No keyPath/clientUsers/sourceOwner field is copied from CLI PA1. Key authority remains separately selected original provider/key-set/version lease.

C is a NEW PRIVATE closed original measurement record codec proposed by CE1, not a claimed historical native reader. Exact keys schema,profileDigest,actor,sourceImageSha256,sourceAssociationRef,qualificationRef,allocationDomain,measurementRef,outcome. schema is service-lasso.core-admission-calibration.v1. profileDigest names completed P; actor is core/companion/key-provider/observer, sourceImageSha256 names that actual final actor image; allocationDomain is core-admission; outcome is qualified. The three references resolve authenticated ORIGINAL source/native measurement bodies within Q/S. Scalar refs are bounded4096-byte strict UTF8 routing identifiers, never path authority; raw record bound65536/depth16/token128. No numeric runtime memory grant is in C. Actual independent measurement/source/native ownership is mandatory; strings/outcome/hash equality cannot create calibration. ALL required records are acquired as actual original leases; no universal four-record count, truncation or fabricated record fills a missing component/copy/IO/parser/control owner.

Q and S retain their complete ORIGINAL native/source/qualification/input ROOT and actual source/publisher approval bodies; CE1 does not replace their existing private21/shared18/10/11/13/primitive11 schemas or invent qualification receipts. Readers must implement complete original associations and proof semantics, not shape-only acceptance. I remains EXACT Blueprint99 keys schema,profileSha256,workspaceIdentityRef,storageIdentityRef,keyProviderIdentityRef,keySetId,currentVersion,absenceObservationRefs,lockObservationRef,initialJournalGenerationRef,markerRef,flushReadbackRefs,outcome. I authenticates initialized native provider/profile/storage lineage under its existing authority and never independently approves S/Q/source publication. No equal initialized Journal MAC becomes input authority.

Acyclic production ordering

1. Freeze and independently review complete source-only inputs/actual source code associations S0. Produce final Core/companion/provider/observer images A from those exact source/build/dependency inputs after separate executable admission. Images contain invariant readers/ABI/source expectations, NEVER their completed P/G/C/Q/runtime admission ROOT digests. Complete actual build provenance is retained; generated commit/source metadata is honestly derived without changing that commit.
2. Under separately authorized ORIGINAL owner/native qualification scope, produce genuine native qualification and physical allocator/IO/image observations of those SAME actual final images/filesystems/providers. This is not a production constructor override or permission granted here. Missing prior qualification/owner authority cannot be solved by asserting current profile capabilities. Preserve original raw Q measurement bodies and exact named reference/attempt associations.
3. Complete external P with actual final image SHA/source versions and exact independently admitted qualification refs. Stable qualified member refs in P are original identities, not Q's own future digest. Complete external C records bind actual P/source image and original measurement bodies; the originally authenticated source/input authority binds the full Q/S association externally. The producer must check exact native qualification/calibration production dependencies and reject any same-body self-digest claim.
4. Perform ONLY separately authorized existing owner initialization using that authentic original owner/input authority and completed independently qualified P/Q/C; retain genuine I/native roots/key lineage. Ordinary23 cannot do this. Complete external G and owner/input acquisition association after P/root paths are fixed. Input package source repository/full commit/blob metadata is recorded externally after its actual files exist; no P/G/C body embeds its own containing commit.
5. The existing original input authority authenticates and supplies P/G/all C/Q/S/I together. Production bootstrap independently reads/correlates all originals and current actual source/image/provider/roots before native constructor/store effects. Every complete architecture/source/execution ROOT includes actual ORIGINAL associations, not a convenient scope excluding relevant objects. Source-only S0 and runtime admission ROOT are distinct original objects with explicit complete lineage.

If a qualification path requires its own future Q/G/P approval before it can produce that object, it is a concrete remaining cycle; producer may not use a dummy grant, qualification:true, fixture receipt or production override. Actual existing qualification/bootstrap authority and source-only execution admission must resolve that path separately before activation. No resource/image/profile/measurement is provided by this ordering, and no build/probe is authorized here.

Constructor, physical owner and closure

After ALL authenticated originals and native current image/root/provider checks, the real generic constructor creates NativeApplicationConnection and stateful23 engine under that same original scope. It registers no source-approved catalogue tuple unless independently actual owner/publication/native-qualified four assets exist; current empty catalogue is genuine. All23 complete effects, native key-resolution/replay-before-expiry, exact stage/ZIP/JSON/materialization/confirmation, accepted generation/outbox/Audit/index/recovery/discovery/observer/closure/production packaging and original API/auth/config/lifecycle obligations remain full; no two-command-only service or interface stub is final delivery.

Bootstrap uses the SAME existing finite source-owned128MiB native admission owner and actual independent original bootstrap calibration/ownership BEFORE parsing untrusted C. It cannot create a second allowance, read a large Root into uncharged std::vector metadata or derive a runtime grant from C numbers. Q/S/source-root full inventories are streamed through bounded original native reads with all current held leases/parser/copy/capture/runtime/IO/metadata charged, not truncated to a historic count or arbitrary source cap. Full valid64MiB capsule support remains required without duplicate67MiB envelopes or blanket budget denial. Physical allocator arena/actual ended allocation/native object/observer proof remains mandatory; source counters, GC/soft targets and RSS assertions are not ownership proof.

Original caller/provider/image/source packet/P/G/C/Q/S/I/root/transfer objects remain in finite native custody through their complete intended service use and bound original archive/readback/observer proof. Source authority cannot expire/reconnect into a different association unnoticed. Actual close of one read handle never proves all borrower/native metadata retired. Lost/mismatched source/qualified object, partial IO, unknown closure or contradictory provider/version leaves original scope/resources/charge UNKNOWN retained. Native finalization/GC cannot ACK or declare FREE. Complete source controls must demonstrate real native IO/metadata/source lifetime and source-image executable mapping/dependency integrity.

Absence, rollback and entire review

No authentic source owner/input authority/provider/caller/raw association/P/G/C/Q/S/I means native admission unavailable BEFORE native stage/store effects. Ordinary Core remains full existing product. Request-side fallback, path/env activation, OS-owner enrollment, compiled self-hash table, provider-MAC approval, fake calibration/pin/catalogue, initialized empty-success store and ordinary init/rotation are prohibited. Rollback disables native positive admission and retains all originals/failures/uncertain state; no cleanup/migration/newest-slot retry/lifecycle action follows.

CE1 plus ENTIRE original Core/CLI/architecture/review/source/private custody inputs must receive DIFFERENT independent whole architecture review before positive acquisition/trust source implementation. The review must assess exact additional private capability/eligible authentic original owner/source realm/caller, six-key Core G/nine-key C codecs, production/cycle order, complete original lease/native ownership, original128MiB/64MiB scope, separate source versus key authority, empty production denial and unchanged public/profile/shared wire/source semantics. No actual provider/caller/authority tuple or setup is supplied. Whole finished product still needs DIFFERENT final ENTIRE SOURCE GO and NEW complete actual inputROOT before every executable action; release/resource provisioning/installation/publication stay separately authorized.

CE1 different ENTIRE architecture decision recorded — 2026-10-05

Different independent full CE1 review: D:/projects/service-lasso/_audit/core1643-ce1-entire-architecture-review-oct05-02/REPORT.md, actual SHA256 c75e0b44fe38fc679b3c1c94e2e0ba958d6fb32462214fc1504edc2149e39ad0; review ROOT5f0c91996941de9b5d803e91184cb6c8e3634f7232208e2c08da0b76feeb167b. Parent independently FULLread/report/root/all4 review members and all28207 actual associations PASS. Exact verdict WHOLE_ARCHITECTURE_GO_FOR_EXACT_CE1_SOURCE_IMPLEMENTATION_ONLY permits complete coherent CE1 source implementation: strict duplicate-aware G six-key1048576/depth16/token96 and C nine-key65536/depth16/token128 readers, original native leases/producer-consumer/authority association and full unchanged P/Q/S/I ownership. Actual authentic existing owner/input realm/provider/resources remain ABSENT; no opaque positive callback, OSowner/hash/MAC/source-label authority substitution. Authentic integration requires genuine independent existing realm and both producer/packet admission conjuncts. Native application context remains byte correlation only. This is not final product SOURCE GO, a provision/resource grant, an execution ROOT or complete product delivery. All23 effects/nativeAudit/outbox/recovery/materializer/observer/finitephysicalowner/currentmappedimage/production packaging and real original callers remain mandatory. Frozen CE1 inputs retain their original exact hashes.