[ancongui]

A worker could consume its final response and then fail during local source acceptance. Startup could also relabel that held task, and recovery rejected an explicit not_requested QA report. Preserve the same attempt and immutable response custody, revalidate the frozen execution actor, and settle eligible saved output through typed API/SDK/CLI/MCP interfaces. The neutral QA declaration stays in the runtime report; it grants no browser evidence or trusted QA result. Verification remains a separate authorized step, with spent usage and earlier receipts preserved.

Signed SCM deliveries now wake authenticated provider polling. The worker drains available pages fairly, separates delivery IDs from comment IDs, and retains provider intervals and backoff. Repository-hook signatures do not invent an App installation or grant execution. Natural replies use the configured AI, verified facts and safe diagnostic excerpts; the arbitrary classifier prompt ceiling is removed.

Validation on current source 098a8ef7:

• 23 controlled recovery cases and 158 epoch/polling/startup cases pass. Real model/network/SQL effects are denied in those host cohorts; fixture Git and in-memory transports are recorded separately.
• Fresh Native250 passes against the frozen 2,954-file source: 235 supported boundary cases and 15 diagnostics, 251 controlled requests, zero paid model calls, and drained owned processes/streams. Alias diagnostics retain their explicit limitations; this does not attest whole-controller OS confinement.
• Full mypy (411 files), Ruff/format and strict MkDocs pass. All 27 historical profile literals remain intact under the new REG31/loader32 epoch.
• Fresh SQL169 validation and current profile registration/installation are pending. Full hosted CI is running; the six earlier CI fixture-contract failures have focused regression coverage.

The earlier V31 installed candidate passed a real no-model ConfigurationRPC and reproduced the neutral-QA refusal on the retained local CRM. That run remains at attempt 3 / WAL353, with a verified cold backup. No new CRM commit, PR or live successor synchronization acceptance is claimed. GitLab/Bitbucket live acceptance remains separate.

Version 0.2.49 is unreleased. Runtime deployment remains local; this PR stays draft until its remaining gates pass.