Record approved Identity ADRs and validate Decisions build

.config/egolint/repository-intelligence.toml

@@ -54,7 +54,7 @@ source-path = "schemas/repository-intelligence.v1.schema.json"
 
 [adrs]
 # "present" selects the existing corpus for inspection; it is not conformance.
-# Relay's separate adr-adoption: legacy preserves incomplete migration.
+# Relay selects present after the approved canonical metadata migration.
 state = "present"
 policy-reference = "docs/decisions/policy-reference.json"
 decision-directory = "docs/decisions"

.github/workflows/decision-validation.yml

@@ -21,7 +21,7 @@ concurrency:
 
 jobs:
   decisions:
-    name: Inspect legacy ADR evidence without publication
+    name: Validate canonical ADR evidence without publication
     permissions:
       contents: read
     # Reviewed Relay source adoption; this does not claim an immutable release.
@@ -31,8 +31,8 @@ jobs:
       mode: advisory
       repository-contract-adoption: unknown
       repository-contracts: "[]"
-      # Source exists, but historical dispositions still need human review.
-      adr-adoption: legacy
+      # Human dispositions are recorded; validate the canonical corpus.
+      adr-adoption: present
       adr-policy: ".config/egolint/repository-intelligence.toml"
       diagram-adoption: unknown
       diagram-roots: "[]"

docs/decision-migration-2026-10-10.md

@@ -4,6 +4,29 @@ Issue: [Identity #69](https://github.com/egohygiene/identity/issues/69).
 Audit and reconstruction date: 2026-10-10.
 Source boundary: [`8aae2c6767d07714ea16bf0ea493e1f1ac399b6e`](https://github.com/egohygiene/identity/tree/8aae2c6767d07714ea16bf0ea493e1f1ac399b6e).
 
+## Current review checkpoint
+
+The inventory below remains bound to its original source audit. Since that
+audit, PR #90 and PR #91 merged; current reviewed main is
+`434f60c8b829c695b3bcd1a45faf5e0c114d37cf`. PR #90's five issue-body edits
+were separately reconciled and applied on 2026-10-10, as recorded in
+[organization #30](https://github.com/egohygiene/.github/issues/30).
+
+Maintainer `szmyty` subsequently approved the exact
+[R1 packet at `418aa975`](https://github.com/egohygiene/identity/blob/418aa9757898b6c09b4f01eface522778cff90e8/docs/decision-disposition-review-2026-10-10.md)
+on 2026-10-10. The [durable disposition](https://github.com/egohygiene/identity/pull/92#issuecomment-6099135806)
+retains ADR-001–018 with R1's clarifications and separately accepts ADR-019–021.
+The [ratification record](decision-ratification-2026-10-10.md) records the scope.
+This candidate applies the approved canonical metadata/anatomy and dated notes
+while preserving original substantive prose, dates/status claims and provenance.
+The frozen R1 packet and pre-approval validation receipt remain unchanged.
+
+The original audit and requested-review sections below describe the earlier
+evidence boundary. Their unresolved historical authority/date observations are
+preserved; current approval is dated 2026-10-10 and does not backdate them.
+Do not request R1 approval again. Source conformance and publication still need
+their own immutable validation and delivery evidence.
+
 ## Outcome and present limitation
 
 Preserve Identity's existing decision history, inventory its authority gaps,
@@ -70,9 +93,11 @@ ratification of ADR-001–ADR-018 or proposed ADR-021. The
 records historical release evidence; it is not a separate architectural
 ratification or a fresh release check.
 
-Unmerged Identity PR #90 prepares issue-coordination edits; it is not included
-in audited main and merging it does not apply those issue updates. It is not
-evidence that the pilot, publication, or human authority gates have cleared.
+At the original audit boundary, Identity PR #90 was unmerged and prepared
+issue-coordination edits. It was not included in that audited main; merging
+alone did not apply its issue updates. The current review checkpoint above
+records the later merge and separately verified application. Neither event
+supplies ADR ratification or Decisions publication evidence.
 
 ## Existing-record migration and disposition table
 
@@ -174,7 +199,8 @@ Broader roadmap/publication documentation reconciliation remains
 
 ## Concrete human disposition requested
 
-Review the migration PR's exact **candidate commit** and this 18-row table.
+Review the exact **packet commit**, the R1 recommendations linked above and
+this preserved 18-row provenance table.
 For each existing ADR, choose one of the following; a single explicit statement
 may cover an enumerated group of IDs if the same disposition applies:
 

docs/decision-ratification-2026-10-10.md

@@ -0,0 +1,62 @@
+# Identity ADR human disposition — 2026-10-10
+
+Maintainer **szmyty** explicitly approved recommendation set **R1** on
+2026-10-10 and authorized its recording and canonicalization.
+
+- Reviewed packet: [`418aa9757898b6c09b4f01eface522778cff90e8`](https://github.com/egohygiene/identity/blob/418aa9757898b6c09b4f01eface522778cff90e8/docs/decision-disposition-review-2026-10-10.md).
+- Reviewed ADR source: `434f60c8b829c695b3bcd1a45faf5e0c114d37cf`.
+- Durable disposition: [PR #92 approval record](https://github.com/egohygiene/identity/pull/92#issuecomment-6099135806),
+  recorded by Codex on the maintainer's behalf from explicit approval.
+- Actual approval date: **2026-10-10**. No historical acceptance date is inferred.
+
+## Dispositions recorded
+
+Retain the accepted direction now for ADR-001, ADR-002, ADR-003, ADR-004,
+ADR-005, ADR-006, ADR-007, ADR-008, ADR-009, ADR-010, ADR-011, ADR-012, ADR-013,
+ADR-014, ADR-015, ADR-016, ADR-017 and ADR-018, subject to R1's scope qualifiers
+and exact notes N004, N005, N006, N007, N008, N009, N010, N011, N012, N013,
+N016 and N017.
+
+Separately accept:
+
+- ADR-019 — independent immutable release contract.
+- ADR-020 — channel-registry governance, lifecycle and verification.
+- ADR-021 — governed mascot source and derivative package.
+
+The [canonical index](decisions/README.md) links each record. Canonical
+front-matter dates identify the current disposition for legacy records;
+their original declared dates, status claims, rationale and provenance remain
+visible as history. ADR-019–021 retain their October 10 reconstruction date.
+All approval objects link the durable human disposition above.
+
+## Scope and preserved limits
+
+R1 preserves the intended future Rust validation port while recording current
+Python validation. DTCG support, optional font/Storybook adapters, rendering
+and reproducibility requirements retain truthful implementation limits.
+Canonical history remains complete while public guidance projection follows
+the approved public/review boundary.
+
+The existing Brand Kit and organization experience retain separate ownership.
+This disposition selects no Decisions host or route composition, activates no
+external account, approves no new creative asset, and publishes no release.
+Implementation, corpus conformance, artifact admission and live deployment
+remain independently evidenced.
+
+## Migration and next evidence
+
+This candidate transcribes the approved disposition into the existing records,
+preserves original substantive prose, adds required anatomy and the approved
+dated notes, and keeps the frozen R1 packet unchanged. No ID or filename is
+renumbered, no policy pin changes, and no unsupported supersession is added.
+Missing historical rationale or alternatives remain explicitly unknown.
+
+The original [migration inventory](decision-migration-2026-10-10.md) and
+pre-approval [validation receipt](evidence/identity-adrs-2026-10-10.json) remain
+dated evidence. New source validation and collection results must bind an
+immutable candidate; this approval alone does not upgrade their old results.
+
+After source admission, review the shared production artifact and the explicit
+hosting/composition proposal. Deploy and verify the real Decisions page, then
+obtain maintainer feedback before repository-by-repository fleet adoption.
+Identity #69 and Relay #115 retain their remaining acceptance work.

docs/decision-validation.md

@@ -1,8 +1,8 @@
 # Identity decision validation
 
 Identity [#69](https://github.com/egohygiene/identity/issues/69) adopts shared
-validation in advisory mode while historical decision dispositions remain under
-human review. [The policy](../.config/egolint/repository-intelligence.toml)
+validation in advisory mode after the explicit
+[2026-10-10 human disposition](decision-ratification-2026-10-10.md). [The policy](../.config/egolint/repository-intelligence.toml)
 selects EgoLint's existing rules; [the workflow](../.github/workflows/decision-validation.yml)
 calls Relay without copying its validator or acquiring publication authority.
 
@@ -21,20 +21,50 @@ The separately pinned roadmap/projection contract entries in the TOML retain
 their proposed authority; the accepted ADR policy does not promote them.
 
 The TOML declares ADR source `present` so the native validator inspects it.
-The workflow declares adoption `legacy` because migration is incomplete. These
+The workflow now declares adoption `present` for the canonical corpus. These
 are different dimensions: a successful job cannot accept a historical decision
-or promote legacy coverage to conformance. Metadata, missing approval, lineage,
-and index findings remain visible warnings. Roadmap, commit history, repository
+or turn source presence into conformance. Metadata, approval, lineage,
+and index findings remain visible if a future change introduces them. Roadmap, commit history, repository
 contracts, and diagrams remain unknown in this bounded check.
 
-Expected outcomes are `legacy` or `nonconformant` with `warning`, depending on
-the inspected corpus. Runtime, acquisition, unsafe input, or evidence-retention
+The intended ADR-domain result is valid metadata and complete observed
+collection after the approved migration. Repository-contract, roadmap/history
+and diagram domains remain explicitly uncollected; whole-repository status may
+therefore remain incomplete/warning. Report actual results for each immutable
+source and domain without promoting those gaps to conformance. Runtime, acquisition, unsafe input, or evidence-retention
 failure still fails execution. No skipped or unavailable check counts as a
 pass. Inspect the retained semantic status, coverage, and actual artifact-upload
 outcome separately. An ordinary PR represents GitHub's merge candidate SHA;
 record it separately from the branch head. Hosted checks and live publication
 are not established by these configuration files or local results.
 
+## Ratified corpus checkpoint — 2026-10-10
+
+The [ratified-source receipt](evidence/identity-adrs-ratified-2026-10-10.json)
+binds source `12227dad43c90b02e14971030f22242f3a205c9d` and observation
+`2026-10-10T15:43:57Z`. Immutable ADR collection exited 0, reported ready,
+and collected all 21 accepted decisions with complete/current coverage.
+Hygiene and coverage checks were valid, Observatory normalized the input,
+and EgoLint retained incomplete status for uncollected domains.
+
+Architecture validation exited 0 with incomplete/warning status: five warnings
+for unknown surfaces, unavailable diagram semantics and the bounded history
+scan; no ADR metadata, lifecycle, index or lineage findings remain. Two native
+replays were byte-identical. This is ADR-domain admission, not complete
+repository-wide conformance.
+
+The shared production action also ran locally against two clean full-history
+checkouts. Its fresh ADR admission and bundle validation passed; all 19 output
+files were byte-identical. The Decisions page has 21 records, declared approval
+evidence and immutable canonical source links, with no broken local links or
+anchors. Acceptance does not imply implementation completion: twelve records
+are implemented, seven in progress and two not started.
+
+The generated artifact has not been deployed. The native route is
+`/intelligence/decisions/`; consumer hosting, route composition, a `/decisions/`
+alias and rollback remain separate work. The receipt distinguishes local build
+evidence from the hosted advisory validation run and its retained artifact.
+
 ## Local validation through the same adapter
 
 Use trusted source checkouts outside Identity at the exact pins above. Follow
@@ -76,7 +106,7 @@ request = {
     },
     "mode": "advisory",
     "adoption": {
-        "repository-contracts": "unknown", "architecture-records": "legacy",
+        "repository-contracts": "unknown", "architecture-records": "present",
         "diagram-sources": "unknown",
     },
     "inputs": {
@@ -108,16 +138,17 @@ defines the equivalent CI parameters and retention behavior.
 ## Review collection and later publication
 
 For normalized review evidence, use the separately prepared runtime and
-`collect_repository_adrs.py collect --adoption legacy` documented in Relay's
+`collect_repository_adrs.py collect --adoption present` documented in Relay's
 [ADR collector guide](https://github.com/egohygiene/relay/blob/4137cb07a017b7bbae2ee38fe9b039c58b0b17eb/docs/repository-adr-collector.md).
 Its output must be `adr-collection.review.json` outside Identity. Exit `2`
 retains partial/invalid evidence; exit `3` denotes a runtime/input denial.
 Every review envelope remains `publication: denied` and is not a site snapshot.
 
-After explicit disposition review and complete source validation, review a
+After the recorded disposition and complete source validation, review a
 separate opt-in to the shared `collect-adrs: true` build. It requires complete,
-fresh validated ADR coverage; it cannot publish the current legacy review
-envelope. Consumer-owned hosting, routes, composition, deployment receipts and
+fresh validated ADR coverage; it does not publish a review envelope.
+A successful local production-script artifact is distinct from hosted
+execution and live deployment. Consumer-owned hosting, routes, composition, deployment receipts and
 rollback remain separate acceptance work. Preserve the release-backed Brand Kit
 at `identity.egohygiene.io` and the independent organization `/identity/`
 experience described in the [publication guide](publication/IDENTITY_PAGES.md).

docs/decisions/ADR-001-creative-approval-human-owned.md

@@ -1,13 +1,91 @@
+---
+schema: "egohygiene.architecture-decision/v1"
+id: "ADR-001"
+title: "Keep creative approval human-owned"
+status: "accepted"
+date: "2026-10-10"
+decision_scope: "repository"
+visibility: "public"
+owners: ["egohygiene/identity"]
+issue: "https://github.com/egohygiene/identity/issues/69"
+pull_request: "https://github.com/egohygiene/identity/pull/92"
+related: ["ADR-012", "ADR-013", "ADR-021"]
+supersedes: []
+superseded_by: []
+affected_repositories: ["egohygiene/identity"]
+affected_contracts: []
+implementation_status: "implemented"
+evidence:
+  - type: "approval"
+    url: "https://github.com/egohygiene/identity/pull/92#issuecomment-6099135806"
+    description: "Explicit maintainer szmyty disposition on 2026-10-10 for R1; recorded by Codex on their behalf, not inferred from merge or implementation."
+  - type: "documentation"
+    url: "https://github.com/egohygiene/identity/blob/418aa9757898b6c09b4f01eface522778cff90e8/docs/decision-disposition-review-2026-10-10.md"
+    description: "Approved R1 recommendation set and exact scope clarifications at the reviewed immutable packet commit."
+  - type: "documentation"
+    url: "https://github.com/egohygiene/identity/blob/434f60c8b829c695b3bcd1a45faf5e0c114d37cf/docs/decisions/ADR-001-creative-approval-human-owned.md"
+    description: "Immutable pre-canonicalization record preserving its historical wording, date, status claim, and provenance."
+  - type: "commit"
+    url: "https://github.com/egohygiene/identity/commit/5ec2d88ef5c1ace7e7782bd000b48183af0e47f2"
+    description: "Original record introduction; evidence of recorded history rather than proof of historical human approval."
+  - type: "implementation"
+    url: "https://github.com/egohygiene/identity/blob/434f60c8b829c695b3bcd1a45faf5e0c114d37cf/docs/contracts/IDENTITY_V1.md"
+    description: "Inspected implementation or governing source contract; bounded evidence, not a newly executed verification result."
+approval:
+  date: "2026-10-10"
+  by: "szmyty"
+  evidence: "https://github.com/egohygiene/identity/pull/92#issuecomment-6099135806"
+exceptions: []
+---
+
 # ADR-001: Keep creative approval human-owned
 
-- **Status:** Accepted as the current architectural direction
-- **Date:** 2026-08-19
+## Context
+
 - **Context:** Repository evidence and ecosystem ownership require an explicit durable boundary.
+
+## Decision
+
 - **Decision:** Keep creative approval human-owned.
+
+## Alternatives considered and rejected
+
+The original inline record does not identify alternatives or rejection rationale. That historical information remains unknown; this migration does not invent it.
+
+## Consequences and tradeoffs
+
 - **Consequences:** The choice improves ownership and predictability while requiring maintained contracts, validation, and migration discipline.
+
+## Implementation and evidence links
+
+The inspected source contract requires approved source bytes, provenance, and a human decision for the same subject. Studio handoff separately requires a named reviewer. This supports the implemented ownership boundary; validation of a record does not itself establish actual human approval.
+
+[Inspected source](https://github.com/egohygiene/identity/blob/434f60c8b829c695b3bcd1a45faf5e0c114d37cf/docs/contracts/IDENTITY_V1.md). The front-matter implementation status is independent of human acceptance. No new runtime, browser, release, or deployment verification is claimed.
+
+[PR #4](https://github.com/egohygiene/identity/pull/4) introduced the original record in [commit `5ec2d88ef5c1ace7e7782bd000b48183af0e47f2`](https://github.com/egohygiene/identity/commit/5ec2d88ef5c1ace7e7782bd000b48183af0e47f2) on 2026-08-19. That introduction does not prove a historical approval date.
+
+## Replacement or exit strategy
+
 - **Reconsider when:** New evidence shows that the boundary prevents standalone usefulness, safety, portability, or maintainability.
 
-## Migration provenance
+## Follow-up work
+
+Validate the final canonical corpus and index through the pinned shared tools at an immutable source revision. Preserve current implementation limitations and obtain separate evidence for future capability, release, and publication claims. Acceptance of this direction does not require completing every planned adapter before ADR source admission.
+
+## Current human disposition — 2026-10-10
+
+Maintainer `szmyty` explicitly retained this direction now under [R1 at `418aa9757898b6c09b4f01eface522778cff90e8`](https://github.com/egohygiene/identity/blob/418aa9757898b6c09b4f01eface522778cff90e8/docs/decision-disposition-review-2026-10-10.md). The [durable approval](https://github.com/egohygiene/identity/pull/92#issuecomment-6099135806) was recorded by Codex on the maintainer's behalf. The canonical date and approval date record this current human disposition; they do not backdate acceptance to the legacy record date or establish additional implementation or publication authority.
+
+## Historical metadata and provenance
+
+The following original metadata is preserved as historical evidence. Its status and date lines are legacy claims, not the current approval record. [Original record at `434f60c8b829c695b3bcd1a45faf5e0c114d37cf`](https://github.com/egohygiene/identity/blob/434f60c8b829c695b3bcd1a45faf5e0c114d37cf/docs/decisions/ADR-001-creative-approval-human-owned.md).
+
+- **Status:** Accepted as the current architectural direction
+- **Date:** 2026-08-19
+
+### Migration provenance recorded before the current disposition
+
+The following preserved migration wording describes the earlier unresolved state. The current human disposition above resolves that authority gap without changing the original claim or inventing an earlier approval.
 
 Extracted on 2026-10-10 without changing the original record body or status
 claim. The legacy acceptance claim lacks durable human disposition evidence;