Freeze remaining initial metadata and reviewed continuation provenance

doc/plans/2026-10-26-chat-catalog-eval-progress.md

@@ -8,7 +8,8 @@ Updated: 2026-10-27. This is the single progress record for [the saved goal](202
 - **All244 callbacks authored and authoring-resolved** at closed source `b65cce861b5667f2424bdfacbdfd610fa697ba60`:238 without declared gaps and6 concrete executable blocker probes,0 absent/unfinished (242 lazy definitions +2 legacy). Grok, named ChatGPT and private GitHub after-grant callbacks are integrated. This is authored coverage, not live acceptance.
 - **74 scenarios processed /75 completed measurements:11 initial passes and64 failures;0 running.** Actual retained native usage:28,615,045 tokens; subscription dollars remain unpriced. The concurrent qualification pair produced1pass/1failure with successful independent cleanup. Archive-company's selected identity still matches current source; its pass remains provisional until the final closed-source checkpoint. The other10 initial passes require their already-recorded selected-closure revalidation. Two older cleanup uncertainties remain unresolved; original measurement bytes are preserved.
 - **Single coherent final-B retry set remains held.** Goal-tree exhausted two measurements. All original outcomes, evidence and measured digests remain unchanged. Actual current selected identity review is retained in `closed-pass-identity-review-b65.json`; changed selected execution/grader closures require reviewed revalidation within the same max-two budget. Unrelated Git revisions and unchanged failed behavior do not justify reruns.
-- **Two-case concurrency qualification completed; further admissions held for manager review.** Immutable `c167a54162fadffe665b4d35a7a1308c6233b75d`:companies.archive-company passed and connection-setup.choose-provider failed its actual reply check; each1native/1source human. Worker overlap25.479s; separate roots, ports53206/53205, containers and PostgreSQL system identifiers. Both containers and exact-root-labeled volumes are absent, both roots removed, and coordinator/child PIDs absent. A parent-only duplicate Playwright import prevented the passing completion from initially recording; isolated-process replay confirmed unchanged selected identity and finalized the existing result without rerun/reservation. Original parent error/stop preserved and owner lock retained. Receipt:`tests/runner-e2e/results/chat-catalog-campaign/two-lane-qualification-closed-c167.json`;5 offline replay controls passed. Heavy broad source verification is running separately before further timed initials.
+- **Two-case concurrency qualification completed and manager accepted continued waves of two.** Immutable `c167a54162fadffe665b4d35a7a1308c6233b75d`:companies.archive-company passed and connection-setup.choose-provider failed its actual reply check; each1native/1source human. Worker overlap25.479s; separate roots, ports53206/53205, containers and PostgreSQL system identifiers. Both containers and exact-root-labeled volumes are absent, both roots removed, and coordinator/child PIDs absent. A parent-only duplicate Playwright import prevented the passing completion from initially recording; isolated-process replay confirmed unchanged selected identity and finalized the existing result without rerun/reservation. Original parent error/stop preserved and owner lock retained. Receipt:`tests/runner-e2e/results/chat-catalog-campaign/two-lane-qualification-closed-c167.json`;5 offline replay controls passed. Full repository typecheck/build and final scoped E2E typecheck passed; broad test:run failed/incomplete on host embedded-PostgreSQL bootstrap, with all owned check processes absent. The qualified Docker lane is unchanged.
+- **All170 remaining ordinal1 initials are authorized from immutable `68e8534e3127dec27ae979bbf9f33d8a26422e4b`.** Exact selection and bounds are in `remaining-initial-selection-68e8534e31.json`:167source-build cases in finite waves of two, then3 distinct sequential installed prerequisite cases. Groups:112ordinary/local,5 concrete probes,7 selected-key,38 private-resource,5 closed CLI,3 installed. Required missing inputs execute actual reserved setup probes; unknown installed product identity cannot qualify. Actual archive CLI--list244, scoped typecheck0, resolver9 controls and operational positive/negative/credential controls passed. No new infrastructure probe; no automatic/final retries. The retired prior lock and original parent failure are preserved. Parent source and receipt hashes are in `operations/remaining-initials-handoff-68e8534e31.json`.
 - **Infrastructure is qualified:**owned local Docker PostgreSQL18.6 at the pinned installed image, normal onboarding/migrations/API and final persisted-state scan passed with zero model/native/scenario work; exact resources removed. No further infrastructure health is needed for the unchanged lane. The proposed host SysV cleanup was never performed and is no longer needed. Source/build/native bytes remain bound to production baseline `8373d7867963674ff960d2345d0d28086f799bc7`; no core candidate is used as benchmark proof.
 - **Separate core PRs remain OPEN/unmerged, auto-merge off.** Doctor [#17847](https://github.com/paperclipai/paperclip/pull/17847), head `a042fb4a28f2e1574972798ed80de2e616daf9fc`, and invite logging [#17848](https://github.com/paperclipai/paperclip/pull/17848), head `98a2432f88c33afacff2e014bd8c30630b26b339`, each have55 successful checks. Budget [#17857](https://github.com/paperclipai/paperclip/pull/17857), head `b6cd49d4b6926fae61a2c68a31ce7c659b69eaa6`, and approval routing [#17858](https://github.com/paperclipai/paperclip/pull/17858), head `b60aaf19343389faf67580fb1ff7a561983bb4f5`, have CI/review pending at the latest manager checkpoint. None changes measured baseline8373. No eval PR or merge is eligible.
 - **Genuine missing inputs:**AgentMail/GitHub read-only discovery was authorized and completed; designated self-mail/recipient and repository choices remain pending. Standard provider-key source references exist, but validity and disposable remote/operator targets remain unqualified. No provider send, remote setup or account discovery is implied by authoring coverage.

tests/runner-e2e/chat-catalog-descriptors.json

@@ -2545,6 +2545,10 @@
   {
     "scenarioId": "connection-setup.unreachable-mcp",
     "sourceFiles": [
+      "../../ui/src/App.tsx",
+      "../../ui/src/pages/apps/Browse.tsx",
+      "../../ui/src/features/connections/ConnectionSetupFlow.tsx",
+      "../../ui/src/pages/apps/app-connect-policy.ts",
       "chat-catalog-domains/external-mcp-failure.ts",
       "chat-catalog-domains/external-provider.ts",
       "chat-catalog-domains/external-support.ts",