From b491b8abfeac175b90143a4c1b57349378bf76e6 Mon Sep 17 00:00:00 2001
From: Val Alexander <val@opencoven.ai>
Date: Tue, 22 Sep 2026 15:44:38 -0500
Subject: [PATCH] Repin the harness authority to the preferred stage diagnostic

#365 landed as a merge commit, so the governed bytes for the producer and
the protected workflow now differ from the revision the lock selects.
Point the harness authority at that merge and refresh the two moved
entries, per the two-PR rule.

Kept to one commit so the reviewed head has the harness authority as its
sole parent, which spares the SDK binding an intermediate authority-path
entry.

SDK rebinding, both scope rotations and a fresh protected run remain
required. This binding alone is not acceptance.

Refs OpenCoven/chat#219

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 docs/phase1-conformance.md          |  4 ++--
 phase1-conformance.lock.json        | 14 +++++++-------
 src/phase1-conformance-lock.test.ts | 12 ++++++------
 3 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/docs/phase1-conformance.md b/docs/phase1-conformance.md
index 7c3799cd..dc6dc74c 100644
--- a/docs/phase1-conformance.md
+++ b/docs/phase1-conformance.md
@@ -214,8 +214,8 @@ assignment, RPC decoder and primary/secondary exception pipeline. This fixture
 correction does not establish the protected installation failure's cause or
 relax the round-trip assertions.
 
-The lock now selects reviewed source `e969c888cc548072bb5d3cf96f96672289b8df63`,
-tree `fe44ee907d41048179212c5f2fa6d257549a3ead`, including all 25 governed files
+The lock now selects reviewed source `97803d0ab42b21e7aa1f33fffb3824df3a16a765`,
+tree `23edb8111ba78d67cb716af505a6a8a9dabf1cfc`, including all 25 governed files
 and ten production deltas. The checkout regression exercises all five labels
 from that immutable revision. SDK rebinding, both scope rotations and fresh
 protected validation remain required; this binding alone is not acceptance.
diff --git a/phase1-conformance.lock.json b/phase1-conformance.lock.json
index 3cddcd08..a6041621 100644
--- a/phase1-conformance.lock.json
+++ b/phase1-conformance.lock.json
@@ -18,11 +18,11 @@
   },
   "harness": {
     "repository": "OpenCoven/chat",
-    "revision": "e969c888cc548072bb5d3cf96f96672289b8df63"
+    "revision": "97803d0ab42b21e7aa1f33fffb3824df3a16a765"
   },
   "harnessAuthority": {
-    "revision": "e969c888cc548072bb5d3cf96f96672289b8df63",
-    "tree": "fe44ee907d41048179212c5f2fa6d257549a3ead",
+    "revision": "97803d0ab42b21e7aa1f33fffb3824df3a16a765",
+    "tree": "23edb8111ba78d67cb716af505a6a8a9dabf1cfc",
     "files": [
       {
         "path": "scripts/phase1-conformance.mjs",
@@ -81,8 +81,8 @@
       },
       {
         "path": "scripts/phase1-schema-v2-producer.mjs",
-        "blob": "40ab6fafb759df5fcd6306aaa9071d1ba6c1d018",
-        "sha256": "6b2f58e223fea1381efb912782ba4e58b6a4e67ed97f0682dd52a1f137323dfa"
+        "blob": "7990dcc75b65c4e2d2304749505455e857f3816e",
+        "sha256": "21f6a3aa36478d1dcee824b7e4f2b0420b8b8b330e2b6f16e46af2eb4ddbf994"
       },
       {
         "path": "scripts/phase1-linux-secret-service.mjs",
@@ -146,8 +146,8 @@
       },
       {
         "path": ".github/workflows/client-v1-conformance.yml",
-        "blob": "e4fcc078c7ec1a89f8df3a382ef5bbfd1bfde190",
-        "sha256": "3bf4a605d497cf72313f7d325e53a957488a0a311cae54eb37e17d1cba211d62"
+        "blob": "ce6ab14ed48ffe3a1b045c5acfc3f4bcbbc485b3",
+        "sha256": "c33edc4815f3ac1bbe0a9a532aada13f132f9406e7c6fa88e840e8c632db7694"
       }
     ],
     "productionDeltas": [
diff --git a/src/phase1-conformance-lock.test.ts b/src/phase1-conformance-lock.test.ts
index 5e9b0927..c666d156 100644
--- a/src/phase1-conformance-lock.test.ts
+++ b/src/phase1-conformance-lock.test.ts
@@ -80,8 +80,8 @@ const committedHarnessAuthority = JSON.parse(
   readFileSync(resolve(projectRoot, 'phase1-conformance.lock.json'), 'utf8'),
 ).harnessAuthority;
 const expectedBehaviorAuthority = {
-  revision: 'e969c888cc548072bb5d3cf96f96672289b8df63',
-  tree: 'fe44ee907d41048179212c5f2fa6d257549a3ead',
+  revision: '97803d0ab42b21e7aa1f33fffb3824df3a16a765',
+  tree: '23edb8111ba78d67cb716af505a6a8a9dabf1cfc',
   files: [
     {
       path: 'scripts/owned-temp-directory.mjs',
@@ -105,8 +105,8 @@ const expectedBehaviorAuthority = {
     },
     {
       path: 'scripts/phase1-schema-v2-producer.mjs',
-      blob: '40ab6fafb759df5fcd6306aaa9071d1ba6c1d018',
-      sha256: '6b2f58e223fea1381efb912782ba4e58b6a4e67ed97f0682dd52a1f137323dfa',
+      blob: '7990dcc75b65c4e2d2304749505455e857f3816e',
+      sha256: '21f6a3aa36478d1dcee824b7e4f2b0420b8b8b330e2b6f16e46af2eb4ddbf994',
     },
     {
       path: 'scripts/phase1-artifact-secret-scan.mjs',
@@ -140,8 +140,8 @@ const expectedBehaviorAuthority = {
     },
     {
       path: '.github/workflows/client-v1-conformance.yml',
-      blob: 'e4fcc078c7ec1a89f8df3a382ef5bbfd1bfde190',
-      sha256: '3bf4a605d497cf72313f7d325e53a957488a0a311cae54eb37e17d1cba211d62',
+      blob: 'ce6ab14ed48ffe3a1b045c5acfc3f4bcbbc485b3',
+      sha256: 'c33edc4815f3ac1bbe0a9a532aada13f132f9406e7c6fa88e840e8c632db7694',
     },
     {
       path: 'scripts/process-owned-artifact-root.mjs',