Publish Writwall v0.9.2 bootstrap-contract corrections

ADOPTING.md

@@ -44,7 +44,7 @@ For a first adoption, the default is the day-zero coordinator:
 
 ```text
 # Install the current tagged release.
-python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.1.zip"
+python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.2.zip"
 
 # Installed command
 writwall start --project-root /path/to/your-project
@@ -148,6 +148,14 @@ Baseline commit candidate: [hash or "determine and propose"].
 
 The skill follows the standing rules of the remediation companion (inventory first, move rather than delete, propose rather than dispose, no source changes, no commits, RFI list for unknowns). It inventories the mutation channels your installation actually exposes rather than a fixed list, installs the adapter with matcher `*`, and runs both doctrinal birth-test levels through the adapter's more detailed procedure: Level 1 no-work-order lockout, Level 2 ordinary active scope, Level 3 protected-control-plane falsification where claimed, and the conditional Level 4 read-deny procedure. Bootstrap ends with a report and the repository in lockout, and it does not create DR-001 for you. That is yours to ratify.
 
+Before registration or Level 1, the coordinator must copy
+`assets/bootstrap-charter-addendum.md` verbatim into the
+engine-visible pre-adoption charter. Ordinary no-pointer work remains forbidden.
+The addendum permits only exact calls named by a durably Owner-ratified
+birth-test lifecycle, solely so the installed wall can deny them; it confers no
+mutation authority, denial is the only valid outcome, and any success stops
+adoption. Remove the temporary addendum before the adoption commit.
+
 **The optional second step: an Owner-directed recorder closeout.** After you have read the bootstrap report, you may either finish section 5 yourself or explicitly direct the skill to record your decisions. That second mode exists because ratifying and typing are different things. You remain the only source of intent: the baseline, the plan content, the mapping dispositions, the routing, the operational definitions, your adoption reasoning and rejected alternatives, your acceptance of every unenforced surface, and the decision to adopt at all. What the recorder may do, once you have supplied those and ratified them explicitly, is the clerical remainder — materialize `PLAN.md`, archive the superseded original, finalize labels, write or rename DR-001 transcribing your words verbatim, clear the bootstrap markers, remove bootstrap-only residue, stage the adoption set, and make the one local adoption commit.
 
 It asks first. Before touching anything it hands you a decision packet: what it will record, whose words each decision came from, the exact file operations, and the exact commit message and contents. Nothing proceeds until you ratify that packet in so many words — a filename, a draft, or the state of the repository is never taken as approval. If a decision is missing it asks you for the decision, not for the edit. And a recorder closeout still cannot push, tag, publish, change visibility, select a license, weaken or skip the birth test, or start WO-001.

CONTRIBUTING.md

@@ -78,7 +78,7 @@ gate against the final checked public candidate on native Windows and native
 Ubuntu:
 
 ```text
-python checks/check_coordinator_release.py <external-candidate-directory> --expected-tag v0.9.1
+python checks/check_coordinator_release.py <external-candidate-directory> --expected-tag v0.9.2
 ```
 
 The gate copies the candidate to temporary build space, builds and installs the

PROJECTION-MANIFEST.sha256

@@ -5,9 +5,9 @@ b2e36dfcfc6eb31570c9340640bcd73abc62f57c80b4794abf36e3d3e89ab34f  .github/depend
 9e90d43615b02a265b08692ef7a1c00a37477a5c6b1e8233a8fc7bedefaedea6  .github/pull_request_template.md
 40e5cddf710e4e6fa4984ac864fdb30a7031005ef1a80082ce0cc6a4f9bc115e  .github/workflows/ci.yml
 e544abe8ffd83c81c7b002cbd2e552f9d56f226ea20e1e0722c5d1bdec914fe0  .gitignore
-6e262a9a0fc3281e2ea9e3ac8eb2d7a1af132c5c754d0aa0699e9b2e0b97d5c7  ADOPTING.md
+73bdedc8e39d50d9ee61e776583e601797b6e2a2b6c50d2741959472eb072861  ADOPTING.md
 1179c999034f4ec1c1d44c1946bd2955c4625905e80767abe760c8c3ab01c493  CLAUDE.md
-1b560adc2d752b734a4be4c3c266ae91e095a83efe9f40094b62e98237473719  CONTRIBUTING.md
+ab361087e7fd15a160587426f7ac6e8d45e7546fc821c2b07432a8e007447afa  CONTRIBUTING.md
 664196054cd98585105be457afa09c788a482416ccb48a87bb269b2156e49ae6  DOCTRINE.md
 9ba9550ad48438d0836ddab3da480b3b69ffa0aac7b7878b5a0039e7ab429411  LICENSE
 a38775f2d68b40577253ee48061ba67af3c75b7620dc506b34b40ce2a3b660ee  LICENSE-MAP.md
@@ -16,22 +16,22 @@ c274f80372d90c012937370f0e1f15087d22e308ef98b27cea5dc0d2d088366c  LICENSES/Apach
 a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499  LICENSES/CC0-1.0.txt
 59746d6285ffa44bfc7ecada352aa5d6a20dc8eab418a60ce091cc739012c135  LICENSES/MIT-0.txt
 35e6d37b7c5fa0c1fc872315cbd362cd24bfa41e1b7dc3019fbcd31e99350f51  NAMING.md
-ac0b2adea6727dfda2fb7bd66b563a0b7197fe879c19b7dc8bb2000b8a3a2eff  PROJECTION-PROVENANCE.md
-5b3bd5f9da3da7f5e1c08217547eb4cbc1bfb19405c56d7e4f979ac9adcc8246  PUBLICATION.md
-ffbaa02e98a62fb5d6ac9fe9b831a195c1b41c7e413484863b769d17101554de  README.md
-6c4855e221ad30f7ca15baa03f3f8be3f38868210921f0c15b31a30775a940e2  REUSE.toml
+bbbc4ba483ace56bc7e3827cdc24b867db981efec5ba13d53e1b788591d430ee  PROJECTION-PROVENANCE.md
+96b3466c452f1288020b5f62e0729deb04c860e5bd0d34a3f5f2418ee9aa25f0  PUBLICATION.md
+e81903350f305351ccd52e7acaa584b4683b7ba65fa1ecbeb2c048eec357e483  README.md
+284a0862f3be77e8d867aa4d3ef92ed1a64ad4315d6d9074f6bb64771b6d1dd0  REUSE.toml
 ab75b39490b4db4e203f5b23b480a1c998d87cf07d760cb787cb260778b21d0a  SECURITY.md
 6a51c1211cc675599634d144ca24a705ec1696f84640a6464b14efb1d6c3a629  SELF-HOSTING.md
-8e8b4008d1ac16a6617357b16308329eac2fb2d87a5cb19bb9a247bd262c633f  START-HERE.md
-a4723267565778de85ae6f00f99bb903eab625e98917389fe1821a463d3d867d  adapters/claude-code/README.md
+04ee91f398218f895f9ef4cb990c01e3fea1847e46882a7700f352d00e879bda  START-HERE.md
+75c7ae0f569148f489570d63df916a70b6ccf24b77db2076cdee29663f747428  adapters/claude-code/README.md
 aeb7f81d139e7ffa6de9a1782444b99eb6d549ac1c3a8b9c0f8bcb9c6addfa6d  adapters/claude-code/SECURITY.md
 dd29af2a39d25e0270ad9acc23ee912f81e39c674e1179759f4a3010c6a0c1a0  adapters/claude-code/wo_capability_wall.py
-19cd491d3d10275a787bee8b902d34f69191bce0134d30a07dd078ee37a6ebee  checks/check_coordinator_release.py
-d1622d215a079a83156213ca5dd8e814308d1012421bc82b7490e2137360c504  checks/check_distribution.py
+3663baaaede31c20b87cbe27b37a7a2db6485782ffc581d2e3e05ca525adade7  checks/check_coordinator_release.py
+b872c46f8a8ea2fc317b4c4fd0af00c9145012b11256c923987d878d79c726c2  checks/check_distribution.py
 60fe377dac32b8d1697f859371ef40d26ed4e695fdceeda6d29ec0318d539504  checks/check_identity.py
 30986c40ff7c9b29e2fba39ec04c18af3c1c351490410bd532a8391bcb92ed11  checks/check_licenses.py
 e843892f24360174620fa02f3adf142a5eb5e2aac4bbfea786648f8b49375192  checks/check_name_clearance.py
-f06f647ca835589516b535a659069496833a302f968cf658c4bbf7038a7e00cc  checks/check_public_projection.py
+cf7e0c4523ba9335b78c1fe51dd744e5c4806c3f431705df3553f9b37591c2f8  checks/check_public_projection.py
 bb54d108d1dff56291169624d26eac4f44db00ebf98e38bf7e6d56cd9b8d9647  checks/check_work_order_dispatch.py
 b49e8c6fb8ef321e5a8f8b2012a77ab3870df2d4826ecb8fe0b33345d57d060a  decisions/DR-001.md
 1dc105a91f76dd749463e91e492646ff5188a62359f21caba5245cb173c2a8ac  decisions/DR-003.md
@@ -47,6 +47,7 @@ fa88788242d920999b6e6737ea60b03dfe3f9ba2e0d90386b6bbcfeb6acd0509  docs/agents/do
 55816569390363947ecc7735d7de13a3f59b8dae51f92383967e130b3a56d2a6  docs/assets/writwall-og.svg
 0a5259d80265765aee16a421546e44458a1aabeecfa8c7f7dea8aead6a79655b  docs/assets/writwall-readme-banner-0a5259d8.png
 ad0fb4f671b8da9e3ab9720af7b39ac9c93201e6131c1df996e090a2bb2acc8a  docs/assets/writwall-readme-banner.svg
+7cfd0ae28d07cdfbb367adc4f7e606a1538ebf61ff140a32f8e793028110cedf  docs/bootstrap-charter-addendum.md
 efd77cef5df06a36f880053d4a33d038766fe9c22d2958b06072a6257d4014ac  docs/day-zero-coordinator.md
 e1214e3e6018642809339249bb091a6fd754847b4f77c4bc7a39c5c87e6769cc  docs/identity-migration.md
 4d54cd53db8c165b40af7eb11b97a7f4faf5f23479c0efc8238e5d463b159008  docs/name-clearance.md
@@ -61,10 +62,10 @@ d2c5a8ca21edf842dfd17a83862024afa0a92349abf693a60e55ce454c8d78fa  examples/name-
 30cdb11fbeb2fd9bbf4048255331ccbbdd6e516fae5adfa5317af00ce53607c9  governance/ADOPTION-MAPPING.md
 08b235351ab7799715b1e2df4fa3dd9fa88bb85084c8aade4d01039bf255b489  governance/LOG-denials-probes.md
 50784b173c90c4fd22572306429187c8a7e22614f4b9ad649a3005647467c7fa  governance/LOG-denials.jsonl
-8323b3fb10cbb7ac098ffda6f537563c39ec7907c750dd948a16bcdfc69b21ad  governance/LOG.md
-09264752687c0d88f32ff2907c6e5d543251441383a20ef29151f56b42baa898  governance/PLAN.md
+6cd8bb10ebd50071b2f355c1934fdbb525452dabeee7cc98f24eaddf03a1fef6  governance/LOG.md
+fcbdd620daea8b69e35ecb859f08f5332ceb89f6ac5dc9a293096b4190e4d437  governance/PLAN.md
 dd445eb2994e0d9615bc61fe2ae157a6b14ba7b190c65b705d380b31c49fdfe0  governance/ROUTING.md
-437e7bb9334732cf58f7fed56d2081fdd33c0032a07eb93dd786bcd337dc0b9f  governance/STATE.md
+609d2afa9e0bb198caebbfc08aee0b541fd713041b106d66100b5670bdf9639a  governance/STATE.md
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  governance/archive/.gitkeep
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  governance/briefs/.gitkeep
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  governance/decisions/.gitkeep
@@ -81,22 +82,23 @@ b567ce0c0867464328e81774d888f6491fa66b68ac73be01f993e5c4c66d3ed8  governance/tem
 d355e46f978f17de8824af805e05124e0f20b1c072523b518422044f88c6f079  governance/templates/D-adoption-record.md
 2b586efadab716a59fcafb74312a45a05401a4787fee6ae18cb5c9dd14ef3a09  governance/templates/E-adoption-mapping.md
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  governance/work-orders/.gitkeep
-b5603027d84a295fc185fba11ba5dad2a8cafd322bd7c503f85a16c9daf047b2  identity/legacy-references.json
+37cb8ccdbe1fd69854c88cf23acacae830cc14c532392a2a970b28530b9bee11  identity/legacy-references.json
 345b7e962731c085a95aea66a344eae000b27c9bde13b0d790c76b73273dbe7a  init.sh
 5c90584642f405534b2071f27396ff293ab01632e4dbb8ccb6b8ec043dca4cc9  migration-guides/0.1-to-0.6.md
 ba4eff258ca5b9a45f3f9f1cbf646ba5bc5521fae812adacac65cd2e78698c9d  migration-guides/0.6-to-0.7.md
 7be9ff49c33830f929584e9e6756f06be8634b1c79ff7210bf5184b51bfc0769  migration-guides/0.7-to-0.8.md
-393e7582af9d4ffa3bc8f574c179f8d4234f3a05b1416152c3bb0551855e7d97  projection/public-files.txt
-32d564defb7ad226a873c36bfe49c77518172edb54d0ec28683bfb5228246f1b  pyproject.toml
+fafcbf659c40d7260dddaa8a64b6b59c3b7de484f77d879a90323bb4b3e1a4a7  projection/public-files.txt
+8a70068ac39d532fd783ae50e7f1458175a93dd8a31c3ccde6461d40e28f5430  pyproject.toml
 455ca1ab3c9e7e78afbb9946e13b94497ba24003ab6f411ea96cce26d4ecc39e  scripts/build_distribution.py
 bdbe47e8ea246ceafb874229d5582a9cc18db7c66250c9873d50a787bd5d9fe2  scripts/build_public_projection.py
 3cf88f936599e0e84bc2368bc0503a39b9f96e47b473e09b26569e5c3c9edbd9  scripts/collect_name_clearance.py
 8441030e9df498e9c2621d37d9bf77850599723c985b1d958b8d11638dcb1ae4  scripts/privacy_screen.py
-cd9eeafb5339e507d780d16ecae005029dccb06e680383e5a8c80d4239279c5d  scripts/start_writwall.py
+9885aa8bf47e055571ce47b35cecb655415d0355113e36bc341397ae38f0e2c9  scripts/start_writwall.py
 374f4e8a80b7b9e162b9360a3907b6ffe12ce94ba0ed827058c7b3c9c0658b2c  skills/writwall-adopt/LICENSE-MAP.md
-bb56ea2b1252f6f962ac98748104ce4dfd599b2bb8f081d1cff0575a721b4739  skills/writwall-adopt/SKILL.md
-a4723267565778de85ae6f00f99bb903eab625e98917389fe1821a463d3d867d  skills/writwall-adopt/assets/adapters/claude-code/README.md
+deb31382704a7db0531d96d06581a9d27082b9e77ee2ea319c9242d530a78ea4  skills/writwall-adopt/SKILL.md
+75c7ae0f569148f489570d63df916a70b6ccf24b77db2076cdee29663f747428  skills/writwall-adopt/assets/adapters/claude-code/README.md
 dd29af2a39d25e0270ad9acc23ee912f81e39c674e1179759f4a3010c6a0c1a0  skills/writwall-adopt/assets/adapters/claude-code/wo_capability_wall.py
+7cfd0ae28d07cdfbb367adc4f7e606a1538ebf61ff140a32f8e793028110cedf  skills/writwall-adopt/assets/bootstrap-charter-addendum.md
 e843892f24360174620fa02f3adf142a5eb5e2aac4bbfea786648f8b49375192  skills/writwall-adopt/assets/checks/check_name_clearance.py
 bb54d108d1dff56291169624d26eac4f44db00ebf98e38bf7e6d56cd9b8d9647  skills/writwall-adopt/assets/checks/check_work_order_dispatch.py
 3cf88f936599e0e84bc2368bc0503a39b9f96e47b473e09b26569e5c3c9edbd9  skills/writwall-adopt/assets/scripts/collect_name_clearance.py
@@ -115,17 +117,18 @@ b567ce0c0867464328e81774d888f6491fa66b68ac73be01f993e5c4c66d3ed8  templates/A-ch
 5bfaa890ffddd423644428606753bc2e6562e3e5d67c1dc522172710708a4bf0  templates/C-owner-brief.md
 d355e46f978f17de8824af805e05124e0f20b1c072523b518422044f88c6f079  templates/D-adoption-record.md
 2b586efadab716a59fcafb74312a45a05401a4787fee6ae18cb5c9dd14ef3a09  templates/E-adoption-mapping.md
-2f4aa14f22238a2a44aa6648f4ff4c942811c3f2e77ef6176ec5225887caf4f5  tests/test_check_distribution.py
+035c45d3ee0e71ecd7dbaeeff1d69f3cb2de706d9a8518bbee5e096a739e3a97  tests/test_bootstrap_contract.py
+9924816cbbeade6f88f79d3e06fe04d143d801783888210ac2325925d69e4bdb  tests/test_check_distribution.py
 b046f2eea794070194294a33f2914e627eed384e63fccffc2ac46693db2a968c  tests/test_check_licenses.py
 9a106ff5182b4a15713575de42e90b0dc5cdeebcb17ba08d97522a4c9aa6b2fa  tests/test_check_work_order_dispatch.py
-26a411994ee04cc0eac85d05a54f6fc2dc032c379dfadda20135e0a6e0006860  tests/test_coordinator_release.py
-271a2e0e6e2ad79d48a0c6ae53d60648d51fe338d2d578e08b9e9416cd912dd2  tests/test_distribution.py
+c276150136fc37b056e43700b802ab42b29ecb0123028116e7bda1d6a03df146  tests/test_coordinator_release.py
+22901437098bb4883153af4f8d02f14e02585343791ca813aa425e2956510927  tests/test_distribution.py
 e150a2f988a4b0beac5f70644f55f5e185a8aa575e988a19642bafabc0f07775  tests/test_identity_migration.py
-011d79618848880de8600b11bcedbdd6ba8b68124ddc3ae3e522288639c2498c  tests/test_init_sh.py
+11cd8090dbc53e8aa6a2f14cb181c8a11696335da8f40700eae5116798e49ba5  tests/test_init_sh.py
 96c255d84e37b8884cde769897e763776b81027080c2308c33dc5e4b8df4a4bf  tests/test_name_clearance.py
 a8345b5da77a8b73dd0269110be89bc0ad85c253f2c76b1b075d494fa018a21f  tests/test_privacy_screen.py
-d9ba27ea9255ffce9bfe23669893064639bbfaa0fdcbfd8fcd08b681d240cedb  tests/test_public_projection.py
-29454ddfc9ec4bd7fd71fc91a5ccf8757021966512a27154f8e1cf310f4b9b99  tests/test_start_writwall.py
+ee771c239c0fc072675f88617dec7e330c1e19be90a8b22691d7049dbb5a4544  tests/test_public_projection.py
+5673f51cddbff6f0dc82c11dd3cc581ee2d0457717a5797844c464aff21e62b6  tests/test_start_writwall.py
 0684c04067eb95eadc9f72ab126d8662b4a5e2005c80b2dea174075a6140eebc  tests/test_wo_capability_wall.py
 e8caf7f4421dc7f78b0d766741ec2ef4c2ac6dab6117fab6e4175b27d31e4d49  writwall_cli/__init__.py
 9e0fbb2625b7a99ed80a3a708f8a0742d91bbf7e3cd2862d21a75515031083e5  writwall_cli/__main__.py

PROJECTION-PROVENANCE.md

@@ -5,9 +5,9 @@ Legacy commit identifiers in projected records refer to that private
 source and are intentionally not resolvable from fresh public history.
 No private remote URL is recorded here.
 
-- Source commit: `40cdbd64c71769bf3ec2f1a28246d89713953240`
-- Source commit time: `2026-08-31T19:11:11-05:00`
-- Projection allowlist SHA-256: `393e7582af9d4ffa3bc8f574c179f8d4234f3a05b1416152c3bb0551855e7d97`
+- Source commit: `0150c3a97996f50a9faf77501c03b7ff58a237a1`
+- Source commit time: `2026-09-01T12:20:52-05:00`
+- Projection allowlist SHA-256: `fafcbf659c40d7260dddaa8a64b6b59c3b7de484f77d879a90323bb4b3e1a4a7`
 
 ## Legacy identifier inventory
 

PUBLICATION.md

@@ -13,7 +13,7 @@ point. Before creating a release tag, run this gate against the final external
 candidate on native Windows and native Ubuntu, naming the exact intended tag:
 
 ```text
-python checks/check_coordinator_release.py <candidate-directory> --expected-tag v0.9.1
+python checks/check_coordinator_release.py <candidate-directory> --expected-tag v0.9.2
 ```
 
 The command fails before building unless the canonical intended tag matches

README.md

@@ -100,7 +100,7 @@ wall or claiming adoption:
 
 ```text
 # Install the current tagged release.
-python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.1.zip"
+python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.2.zip"
 
 # Installed command
 writwall start --project-root /path/to/your-project

REUSE.toml

@@ -16,6 +16,7 @@ path = [
   "docs/assets/**",
   "docs/agents/**",
   "docs/architect-interview.md",
+  "docs/bootstrap-charter-addendum.md",
   "docs/day-zero-coordinator.md",
   "docs/identity-migration.md",
   "docs/name-clearance.md",
@@ -26,6 +27,7 @@ path = [
   "migration-guides/**",
   "projection/**",
   "skills/writwall-adopt/*.md",
+  "skills/writwall-adopt/assets/bootstrap-charter-addendum.md",
   "skills/writwall-adopt/references/**",
 ]
 SPDX-FileCopyrightText = "2026 HLLMR Ventures LLC"

START-HERE.md

@@ -63,13 +63,14 @@ not clear results.
    project:
 
    ```text
-   python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.1.zip"
+   python -m pip install "https://github.com/HLLMR/writwall/archive/refs/tags/v0.9.2.zip"
    ```
 
-   Release `v0.9.0` first introduced the coordinator. Release `v0.9.1` corrects
-   first-use bytecode residue and is the minimum recommended coordinator
-   release. If you are testing an unpublished release candidate, use its checked
-   external candidate tree and the release gate in `PUBLICATION.md`.
+   Release `v0.9.0` first introduced the coordinator. Release `v0.9.1` corrected
+   first-use bytecode residue. Release `v0.9.2` corrects the bootstrap
+   expected-denial contract and is the minimum recommended coordinator release.
+   If you are testing an unpublished release candidate, use its checked external
+   candidate tree and the release gate in `PUBLICATION.md`.
 2. Run one command:
 
    ```text
@@ -192,6 +193,15 @@ not retroactively promoted into a birth test.
 
 ## Make the birth test safe
 
+Before registering the wall or starting Level 1, confirm the provider's
+engine-visible pre-adoption charter contains the complete text of
+`assets/bootstrap-charter-addendum.md` from the local adoption bundle. That temporary
+rule resolves the bootstrap boundary without weakening it: ordinary no-pointer
+work remains forbidden, while exact calls named by a durably Owner-ratified
+birth-test lifecycle may be dispatched solely so the wall can deny them. The
+attempt confers no mutation authority; denial is the only valid outcome, and
+any success stops adoption. Remove the addendum before the adoption commit.
+
 Start with a **minimal provider profile**. Disable unrelated plugins,
 connectors, MCP servers, and delegated agents before inventorying the mutation
 surface. If an external mutation tool must remain available, test it only when

adapters/claude-code/README.md

@@ -272,7 +272,13 @@ The birth test is worthless if run outside the operating envelope. Establish the
 4. **Confirm the displayed command resolves through `${CLAUDE_PROJECT_DIR}`.**
 5. **Run `--preflight`** with the exact installed digest, settings path, and native platform. It must pass without a denial-log change.
 6. **Confirm no active-WO pointer exists** (`.claude/active-wo.txt` absent).
-7. **Only then begin real provider-level mutation probes.**
+7. **Confirm the engine-visible pre-adoption charter contains the complete
+   `assets/bootstrap-charter-addendum.md` text from the local adoption bundle.**
+   Ordinary no-pointer work remains forbidden; only exact calls named by a
+   durably Owner-ratified lifecycle may be dispatched solely to test denial.
+   The attempt confers no mutation authority, denial is the only valid outcome,
+   and any success stops adoption.
+8. **Only then begin real provider-level mutation probes.**
 
 **The `/hooks` inspection is necessary configuration evidence, not proof of live enforcement.** It shows what Claude Code believes it has loaded. It does not show that the session executing your probes actually loaded it. Only observed denial of real tool calls constitutes the birth test (8.3.5). Invoking the adapter directly with a synthetic payload verifies its logic and nothing else; it must never be recorded as a passing birth test.