PASS [real-ddl] 4 DDL statements extracted from the LIVE store (table + indexes, incl. the UNIQUE partial op_key index)
PASS [real-ddl] the extracted live-store schema is BORN v8 — contributor_type/contributor_ref present natively (nullable; legacy rows unaffected); the amendment's ALTERs are already materialised
PASS [op-key] ONE import operation, THREE rows (C carries B+A transitively, B carries A) inserted under per-row canonical keys — the accepted UNIQUE partial index ACCEPTS the plan
PASS [op-key] the v9 one-key-per-plan design raises IntegrityError on row 2 (the reviewer's executed break, kept as a regression) — per-row keys are REQUIRED, not stylistic
PASS [op-key] DELIMITER-BEARING ids ('a:b'+'c' vs 'a'+'b:c') insert under ONE operation — the injective framed-digest form; the v10 colon-join collided here (R9-2, the reviewer's IntegrityError)
PASS [idempotent] HISTORY DRIFT detected: a direct A->C link and a flattened A->(B)->C copy carry DIFFERENT plan ids AND sites — the drift WRITES (surfacing to the primitive's DESTINATION_CHANGED conflict rule), never silently skips (R9-3)
PASS [construction] THE FIVE-VALID-CELL ORACLE: every valid (writer, payload-class) cell — native/flattened (the native-context constructor call, sup-domain op), import/reconstructed, import/flattened+reconstructed, prune/reparented, prune/marker — constructor-BUILT and INSERTED against the extracted real DDL: 5/5 stored, keys derived in-primitive (acceptance obligation 1, shipped)
PASS [construction] the EXHAUSTIVE validator matrix: 77/77 malformed rows refuse across every field, both sites, closed payload shapes (literal-True markers; unknown keys; wrong-site classes; cross-field combos) — R10-3
PASS [null-dedup] an unidentified contributor (identity_digest NULL) deduplicates by the deterministic plan_row_id PRIMARY KEY — a re-minted op key does not evade it; SQLite NULL-uniqueness decides nothing
PASS [idempotent] RE-IMPORT under a new minted operation: 3 rows detected exact-equal by deterministic id, 0 written (contributions=0, contributions_existing=3)
PASS [reopen] STRUCTURED-EXPORT derivation from STORED rows: derive(A)=B and derive(B)=C before the prune; the retention-contract prune of B is INSERT-ONLY (A10 drops B's own rows; ONE new validated reparented row lands on C; the old flattened copy survives byte-identical and non-canonical) — derive(A)=C, unique both sides (R9-1/R10-1)
PASS [reopen] MISSING-COPY prune path: the inserted closure-incompleteness marker (identity None) is NEVER canonical — derive(A9)=None, the export OMITS the field, and the import-side note rule fails closed (R10-2's launder closed structurally)
PASS [concurrent] two connections, same plan, BEGIN IMMEDIATE: one writes, one observes-and-skips — 1 row total, no duplicates, no partial state
PASS [reopen] rows persist across close/reopen and the LEDGER-RESIDENT closure classifies the A→B→C survivor UNRESOLVED from stored rows alone (typed refs; no records, no notes needed — R8-1 closed)
ledger plan harness: 14 checks pass against the EXTRACTED real DDL + the amendment ALTERs
