Record authorized independent initial continuation and strict invitation quarantine

doc/plans/2026-10-26-chat-catalog-eval-progress.md

@@ -6,10 +6,10 @@ Updated: 2026-10-27. This is the single progress record for [the saved goal](202
 
 - **Frozen inventory:244 scenarios /35areas /191capabilities;196 eligible passes required.** Inventory digest `9dc9cf6a5426cf1b56bc30a3571851f233f9dd5e93a1292eaee414d33b52df77`. Original queries, contexts and outcomes remain unchanged; blocked, partial and unrun cases stay in the denominator.
 - **All244 callbacks authored and authoring-resolved** in immutable remaining-initial source `68e8534e3127dec27ae979bbf9f33d8a26422e4b`:238 without declared gaps and6 concrete executable blocker probes,0 absent/unfinished (242 lazy definitions +2 legacy). Grok, named ChatGPT and private GitHub after-grant callbacks are integrated. This is authored coverage, not live acceptance.
-- **78 scenarios processed /79 completed measurements:12 initial passes and67 failures;0 running.** Actual retained native usage:30,660,590 tokens; subscription dollars remain unpriced. The68e continuation stopped after4 initials (1pass/3failures) on a genuine private invite-capability match in product logs;166 IDs remain unattempted. All4 new results report cleanup passed/DBremoved, independently verified by exact PID/container/root-label/root absence. Original failed measurements are unchanged; two older historical cleanup uncertainties remain unresolved. Closed receipt:`tests/runner-e2e/results/chat-catalog-campaign/closed-initial-checkpoint-78-79.json`. Initial passes remain provisional pending actual final selected-identity checks; the necessary TSX resolver correction changed archive-company's selected grader identity and its held-B requirement is explicitly recorded.
+- **Last closed checkpoint:78 scenarios processed /79 completed measurements,12 initial passes and67 failures.** Actual retained native usage:30,660,590 tokens; subscription dollars remain unpriced. The first68e continuation stopped after4 initials (1pass/3failures) on a genuine private invite-capability match in product logs;166 IDs remained unattempted at that stop. The authorized independent continuation is now live; the atomic ledger/parent state record current reservations. All4 new results report cleanup passed/DBremoved, independently verified by exact PID/container/root-label/root absence. Original failed measurements are unchanged; two older historical cleanup uncertainties remain unresolved. Closed receipt:`tests/runner-e2e/results/chat-catalog-campaign/closed-initial-checkpoint-78-79.json`. Initial passes remain provisional pending actual final selected-identity checks; the necessary TSX resolver correction changed archive-company's selected grader identity and its held-B requirement is explicitly recorded.
 - **Single coherent final-B retry set remains held.** Goal-tree exhausted two measurements. All original outcomes, evidence and measured digests remain unchanged. Actual current selected identity review is retained in `closed-pass-identity-review-b65.json`; changed selected execution/grader closures require reviewed revalidation within the same max-two budget. Unrelated Git revisions and unchanged failed behavior do not justify reruns.
 - **Two-case concurrency qualification completed and manager accepted continued waves of two.** Immutable `c167a54162fadffe665b4d35a7a1308c6233b75d`:companies.archive-company passed and connection-setup.choose-provider failed its actual reply check; each1native/1source human. Worker overlap25.479s; separate roots, ports53206/53205, containers and PostgreSQL system identifiers. Both containers and exact-root-labeled volumes are absent, both roots removed, and coordinator/child PIDs absent. A parent-only duplicate Playwright import prevented the passing completion from initially recording; isolated-process replay confirmed unchanged selected identity and finalized the existing result without rerun/reservation. Original parent error/stop preserved and owner lock retained. Receipt:`tests/runner-e2e/results/chat-catalog-campaign/two-lane-qualification-closed-c167.json`;5 offline replay controls passed. Full repository typecheck/build and final scoped E2E typecheck passed; broad test:run failed/incomplete on host embedded-PostgreSQL bootstrap, with all owned check processes absent. The qualified Docker lane is unchanged.
-- **The authorized170-case continuation is paused after its first4 actual initials.** Immutable `68e8534e3127dec27ae979bbf9f33d8a26422e4b`, exact per-case limits and zero retries unchanged. access.private-resource passed; access.cli-authorization, access.other-company and activity.agent-feedback failed. Feedback also triggered exact-secret reporter redaction/ZIP omission; its setup registers the generated human invite token before the public accept request, and retained redacted logs show the known token-bearing invite-route logging defect (#17848 unmerged). The final31-file evidence manifest has0leaks/0missing and omitted ZIP is absent; no fresh raw-root rescan is claimed after private cleanup. Parent stop/lock retained; no later wave or installed prerequisite admitted. Cause/cleanup/normal repair path:`operations/agent-feedback-privacy-cause-68e.json`. No scanner weakening, rerun or automatic continuation. Remaining166 retain ordinary/source, genuine missing-input probes, closed CLI and distinct sequential installed lanes for root disposition.
+- **Root authorized and resumed144 independent IDs from unchanged immutable68e:141source cases in drained waves of two, then3installed prerequisites sequentially.** Exact whitelist is `independent-initial-selection-68e8534e31.json`, derived from the original170 receipt without changed definitions/bounds. Actual first wave started11:17:56Z:agent-chat.chat-disabled and agent-chat.multiple-handoffs, ordinal1 each, one case per child/retries0. All22 unsafe enrollment IDs are rejected by actual operational negative controls (22/22); they remain unprocessed in the244 denominator. Prior owner/children and exact resources were verified absent, the old lock retired by retained hash, and the original privacy stop preserved. Source parentSHA`05d146850efb305393ff6f5b4368bbc37ccdc5e2ad05f229d101e9986b375805`; ownership/selection receipts:`operations/ownership-transfer-independent-68e.json` and `operations/independent-handoff-68e.json`. No new health/refreeze, no scanner weakening and no B rerun. All genuine privacy/isolation/shared-infrastructure/cleanup stop conditions remain enforced.
 - **Known invite-path dependency quarantine is source-qualified for22 of166 remaining IDs.** Exact selected setup call chains (including observerPerson wrappers) are recorded in `remaining166-invite-setup-dependencies-68e.json`;144 independent IDs remain, including3 distinct installed cases. This is a dependency inventory, not processed live setup proof. No safe equivalent public membership setup is already implemented/proven; no fake identities, database grants, scanner weakening or automatic continuation is introduced.
 - **Infrastructure is qualified:**owned local Docker PostgreSQL18.6 at the pinned installed image, normal onboarding/migrations/API and final persisted-state scan passed with zero model/native/scenario work; exact resources removed. No further infrastructure health is needed for the unchanged lane. The proposed host SysV cleanup was never performed and is no longer needed. Source/build/native bytes remain bound to production baseline `8373d7867963674ff960d2345d0d28086f799bc7`; no core candidate is used as benchmark proof.
 - **Separate core PRs remain OPEN/unmerged, auto-merge off.** Doctor [#17847](https://github.com/paperclipai/paperclip/pull/17847), head `a042fb4a28f2e1574972798ed80de2e616daf9fc`, and invite logging [#17848](https://github.com/paperclipai/paperclip/pull/17848), head `98a2432f88c33afacff2e014bd8c30630b26b339`, each have55 successful checks. Budget [#17857](https://github.com/paperclipai/paperclip/pull/17857), head `b6cd49d4b6926fae61a2c68a31ce7c659b69eaa6`, has fresh CI/review pending. Approval routing [#17858](https://github.com/paperclipai/paperclip/pull/17858), head `b60aaf19343389faf67580fb1ff7a561983bb4f5`, has55 successful/2skipped/1neutral checks and no pending checks, Greptile5/5 with0unresolved threads. None changes measured baseline8373. No eval PR or merge is eligible.