docs: record verified 1148-frame runtime copy

docs/hd-art.md

@@ -2,7 +2,7 @@
 
 The Rust Options screen includes **HD art**. It starts disabled. Enable it to use reviewed artwork from the selected data directory's `hd/hd.json`; each missing or rejected frame keeps the selected original / 2x / 3x / 4x crisp treatment. The bundled runtime uses `data/`, while development artwork and review jobs live under `../data/`. The scale setting still determines the indexed rendering resolution, and the HD toggle can be changed while paused. HD art is presentation only: simulation, collision sizes, banking positions and save content IDs stay unchanged.
 
-The development base-game pack currently supplies **1,148 reviewed replacement frames in 421 complete sequences**. These include all twenty-one light, dark and firing-flash player poses, 232 boss frames, complete vehicle families, ground defenses and opening bunkers, all forty-seven equipment and pickup pictures, projectile and effect animations, eleven HUD picture glyphs, nine pilot portraits, four difficulty portraits, both title logos, three standalone opening cards and 416 canonical terrain tiles. The tracked Linux/Windows playable snapshots contain the separately frozen 800 reviewed frames, copied by the root assembler and committed at `964ba93`. Later development approvals remain separate from this runtime checkpoint. The complete catalog backlog and generation status are listed in [hd-backlog.md](hd-backlog.md).
+The development base-game pack currently supplies **1,148 reviewed replacement frames in 421 complete sequences**. These include all twenty-one light, dark and firing-flash player poses, 232 boss frames, complete vehicle families, ground defenses and opening bunkers, all forty-seven equipment and pickup pictures, projectile and effect animations, eleven HUD picture glyphs, nine pilot portraits, four difficulty portraits, both title logos, three standalone opening cards and 416 canonical terrain tiles. Root has copied this exact 1,148-frame pack into the shared Linux/Windows runtime data. Updated archives and Stage2 platform validation are being finalized separately; the previous 800-frame archives and their proofs remain historical. Later candidates and approvals stay outside this frozen runtime checkpoint. The complete catalog backlog and generation status are listed in [hd-backlog.md](hd-backlog.md).
 
 | Reviewed artwork | Original asset IDs | Supplied / complete frames |
 | --- | --- | ---: |

docs/hd-backlog.md

@@ -1,6 +1,6 @@
 # Original artwork HD backlog
 
-The checked catalog contains **5,753 standalone picture frames**. The active local HD pack supplies **1,148**; **4,605** have no registered HD replacement. These counts include unnamed graphics outside `sprites/`. Scale2x/3x/4x filtering is crisp scaling, not a newly authored HD replacement. Authored mod SD/HD art is separate from this original-catalog audit.
+The checked catalog contains **5,753 standalone picture frames**. The active local HD pack supplies **1,148**; **4,605** have no registered HD replacement. These counts include unnamed graphics outside `sprites/`. Scale2x/3x/4x filtering is crisp scaling, not a newly authored HD replacement. Authored mod SD/HD art is separate from this original-catalog audit. Root has copied the exact reviewed 1,148-frame / 421-sequence pack into shared runtime data. New Linux/Windows archives await root's Stage2 export and validation; the previous 800-frame archives remain historical. Later reviewed candidates do not change this frozen pack.
 
 | Category | Picture frames | Registered HD | Missing HD | Declared sequences / terrain sets |
 | --- | ---: | ---: | ---: | ---: |

docs/hd-coordinator-checkpoint.md

@@ -1,6 +1,6 @@
 # HD coordinator checkpoint — 11 October 2026
 
-The reviewed external development pack contains **1,148 original picture frames in 421 complete sequences**. The committed Linux and Windows playable snapshots remain **800 frames / 340 sequences**, assembled at `964ba93` from the immutable 800-frame handoff. Root owns runtime data, binaries, libraries and archives; coordinator owns external development registration and this metadata. Bundled originals and approved runtime art are tracked under this repository's data/. Working originals, prompts, job candidates and review evidence remain external under ../data/.
+The reviewed external development pack contains **1,148 original picture frames in 421 complete sequences**. Root has copied the exact **1,148-frame / 421-sequence** handoff into shared Linux/Windows runtime data. Updated archives and Stage2 platform validation remain root-owned and pending; the previous **800-frame / 340-sequence** archives and `964ba93` assembly are historical. Root owns runtime data, binaries, libraries and archives; coordinator owns external development registration and this metadata. Bundled originals and approved runtime art are tracked under this repository's data/. Working originals, prompts, job candidates and review evidence remain external under ../data/.
 
 ## Verified development coverage
 
@@ -37,9 +37,9 @@ Orange9 retains warm ray/fragment/fade character despite stronger4x cell-edge ou
 
 The batch-1071-approval.json journal adds **34 frames in four complete families** after1037, with136 scale outputs/170 source and rendered PPMs, all byte-identical to peer-reviewed references, and ten complete pages inspected on two boards. The accepted singles300ac/3009d retain central machinery, source frame/post/pod/foot structure and authentic lamps. The two native RGB4 corner losses in3009d are disclosed; every source cell survives2–4 and cue counts are exact1/4/9/16.
 
-Original Set4 jobs9/10,40155–40174, preserve crack routes, rock groups and shallow divots. Standalone40157/4015b corrections exclude prior foreign top connection/crack/rock errors while preserving authentic faint source fragments. Their material density contrast is accepted. The actual160-tile pack retains original lower foliage40179/7a; the separate whole-bush all-HD diagnostic approves neither lower cell. Twenty-two contexts/eighty-two pairs/no states produce544 current compositions; ten unused IDs remain gallery-only. Both lower cells are now in the different, ongoing jobs11/12 review scope.
+Original Set4 jobs9/10,40155–40174, preserve crack routes, rock groups and shallow divots. Standalone40157/4015b corrections exclude prior foreign top connection/crack/rock errors while preserving authentic faint source fragments. Their material density contrast is accepted. The actual160-tile pack retains original lower foliage40179/7a; the separate whole-bush all-HD diagnostic approves neither lower cell. Twenty-two contexts/eighty-two pairs/no states produce544 current compositions; ten unused IDs remain gallery-only. Both lower cells were subsequently independently approved in jobs11/12 and admitted in batch1148; this earlier context-only proof remains unchanged.
 
-The opaque4006e warm center remains held despite coherent gray architecture: the source yellow-inclusive21-cell core becomes13 native cells and about14.19 logical-area cells at4x, with a visibly duller yellow spot. Its job.json inprogress-to-candidate change during peer review came from coordinator hd_job_queue.py bookkeeping in the1037 ledger refresh, not an artist/source change; both byte snapshots and exact unchanged artwork/source pins are preserved. STAG0240088 has independent approval but remains separate from1071 until coordinator inspection/admission.
+The opaque4006e warm center remains held despite coherent gray architecture: the source yellow-inclusive21-cell core becomes13 native cells and about14.19 logical-area cells at4x, with a visibly duller yellow spot. Its job.json inprogress-to-candidate change during peer review came from coordinator hd_job_queue.py bookkeeping in the1037 ledger refresh, not an artist/source change; both byte snapshots and exact unchanged artwork/source pins are preserved. STAG0240088 was subsequently inspected and admitted in batch1148; its earlier approval remained separate from the1071 proof.
 
 ## Final pre-Stage2 reviewer closures
 
@@ -53,17 +53,17 @@ Terrain3 shard3 remains wholly unadmitted: twelve per-frame judgments are positi
 
 ## Private approved 1,148 release input
 
-The separate private handoff at ../data/hd/registered-class-review/handoff-1148-20261011/pack/ contains **1,148 frames / 421 complete sequences**, **398 files / 649,901,106 bytes**:396 artwork files plus hd.json/provenance.json. Its handoff-manifest.json SHA is `a701425c73fe671aca1015c4bed78218cde70fd193ff45ab7418031818ad3b31`; pack hd.json SHA is `5d6b0010049cf5d9d29612391faa72a35d867968f2ce31d6a8e9622e597e4ed8`. Original INDEX SHA remains `4ce78e5e638b6603114dd233ceaa41f386c0963ba4aa02ecf88ce0215b096681`. Every source/destination hash matches and every pack file has a private inode. Copied proof includes all5,740 accepted PPM matches, audit, runtime QA, provenance-correction journal and exact final Stage2 production API source epoch. Root received this reviewable assembly input; coordinator has not changed tracked runtime files. Earlier800/1037 private handoffs remain byte-exact.
+The separate private handoff at ../data/hd/registered-class-review/handoff-1148-20261011/pack/ contains **1,148 frames / 421 complete sequences**, **398 files / 649,901,106 bytes**:396 artwork files plus hd.json/provenance.json. Its handoff-manifest.json SHA is `a701425c73fe671aca1015c4bed78218cde70fd193ff45ab7418031818ad3b31`; pack hd.json SHA is `5d6b0010049cf5d9d29612391faa72a35d867968f2ce31d6a8e9622e597e4ed8`. Original INDEX SHA remains `4ce78e5e638b6603114dd233ceaa41f386c0963ba4aa02ecf88ce0215b096681`. Every source/destination hash matches and every pack file has a private inode. Copied proof includes all5,740 accepted PPM matches, audit, runtime QA, provenance-correction journal and exact final Stage2 production API source epoch. Root copied all398 files into shared runtime data. The coordinator's read-only runtime-1148-copy-verification.json, SHA `7238d482ac7fbf7aa9c00348ab229f0a2722c014ecff5072146c68e213d6afde`, verifies every copied pack hash, 6,848 total data files / 663,083,964 bytes and the unchanged original INDEX. Root owns the current API executables, platform manifests, archive export and Stage2 validation; archive completion is not inferred from this data-copy check. Coordinator has not changed tracked runtime files. Earlier800/1037 private handoffs remain byte-exact.
 
 Root authorized a scoped review-tool repair after Cargo retained two incompatible serde_core feature graphs. Commit `9dba15d` changes only tools/hd_candidate_review.py and its regression test. The helper now compiler-checks Manifest Deserialize/Serialize against the exact frozen game library and freezes the compatible serde_json dependency; dependency-selection.json and runtime QA record the attempted and selected identities. Helper SHA changed from `979558477b61507bf8be587b8f1fc148c3bb5d1f29b58c3b6f6f75aa569d299b` to `ad2ba9c350ecd8d1d59507a69f0a7da8386a3df231d0c9bb639d105b8ced7f80`; old bytes remain under .reference/hd-review-serde-alignment-fix/. A synthetic two-universe rustc regression passes, genuine636 selects compatible89b5 instead of11c796, and a fresh537005 actual SHIP25 gallery passes both source guards with all5 PPMs identical to accepted references. Verification summary SHA is `7976b991b2c47bc9583f9cdbaee60c7b15a512954216f89493a55069ab765de0`. No renderer, policy, raw pixels or production manifests changed.
 
 Corrected complete10400–1040f candidate `2605e5ce6a4b02bbb6b021796e3d010745acf96c379cc23a4e1f1eab297bdaec` is now independently approved by report `7fe17ddcc8e71f75d112f3940b054d9de3091fb4fb9ede7cb198a1be2d57eae2`. Genuine organic10406 resolves the former rectangular-panel hold; fifteen accepted siblings remain exact. All2,380 context cases and4,840 PPMs are bound, with18 changed physical contexts reviewed at all scales. Its636 proof honestly records the later desktop source-age flag as true. This family and approved SHIP25 remain outside the already frozen1,148 handoff pending a later coordinator batch. The historical10406 whole-family hold remains intact.
 
-Flare26v10 is reserved next to hd_full_review at exact candidate `0b9c6e789bd275336a59d38005dfb1d66ed6aaa64172c7f384e2767d0d959fd3`; only10258/66 are genuine replacements, with both source holes clear and other24 bindings/120 PPMs unchanged. Sparkle17v11 remains an unassigned frozen author proposal at `2ba86de91a31034a187bc61adc8f7f3d757f14e0f4e2f9d0f52a3910fdf48d96`, restoring10272–77 while preserving other11 bindings/55 PPMs. Residual contour/material differences require independent whole-family judgment; neither proposal is registered or packaged.
+Flare26v10 remains wholly held at exact candidate `0b9c6e789bd275336a59d38005dfb1d66ed6aaa64172c7f384e2767d0d959fd3`, report `448d1e14825d5ade5d33a10fbc631c083bbd4dcd19facbacd11ddb3ad31fd2c8`. The corrected10258/66 source holes are clear, but10266 pale pinpoints and1026a/b hotter tails change the source material and late fade. Only those three genuine sibling corrections are reserved; other23 bindings and the whole history remain fixed. Sparkle17v11 is independently approved at candidate `2ba86de91a31034a187bc61adc8f7f3d757f14e0f4e2f9d0f52a3910fdf48d96`, report `c2cafad57d5fbe3e079c8d5aeadd4a4f4073d2a88a943660f5ea6ed1af8ab36e`. Its authentic holes, dark rim and bright tips are restored, with exact isolated corner losses, stronger grain and shade variation explicitly accepted. All85 current PPMs match frozen owner output; other11 bindings/55 outputs remain unchanged. Neither family is registered or included in the frozen1,148 runtime. IOTARG14 is the next exclusive hd_full_review reservation.
 
 ## Private development1,037 input
 
-A separate immutable development input is published at ../data/hd/registered-class-review/handoff-1037-20261011/pack/. Its handoff-manifest.json SHA is `51a857fc9a1e584e00ece4800436e3c9411de5c1fba8a25e527c65d1ee542d4f`; hd.json SHA is `707ab815114579828bcb823cc3e62efa80ea05b54ae83e83dc30c5730cde0e96`. It contains1,037 frames/396 complete sequences,366 distinct files/569,685,991 bytes, with source INDEX, complete source/scale proof and original build identity pinned. Every file is a private copy with verified bytes and a distinct inode; future development mutation cannot change the handoff. This is a reviewable future assembly input, not authorization to refresh the existing800 runtime files or archives. The original packaged800 handoff remains untouched.
+A separate immutable development input is published at ../data/hd/registered-class-review/handoff-1037-20261011/pack/. Its handoff-manifest.json SHA is `51a857fc9a1e584e00ece4800436e3c9411de5c1fba8a25e527c65d1ee542d4f`; hd.json SHA is `707ab815114579828bcb823cc3e62efa80ea05b54ae83e83dc30c5730cde0e96`. It contains1,037 frames/396 complete sequences,366 distinct files/569,685,991 bytes, with source INDEX, complete source/scale proof and original build identity pinned. Every file is a private copy with verified bytes and a distinct inode; future development mutation cannot change the handoff. This is a preserved historical assembly input, superseded by the separately verified1,148 runtime copy. The original packaged800 handoff remains untouched.
 
 ## Frozen Linux/Windows800 history
 
@@ -79,13 +79,13 @@ Metadata-only provenance corrections preserve before-byte snapshots and exact ac
 
 Root is temporarily assigning iron_coast_2, iron_coast_3, iron_coast_5, iron_coast_6, windows_persistence, terrain_capture_fixture and campaign_release_review to Iron Coast Stage2: eight levels, one or two weapons and authorized API additions. They must checkpoint existing HD review evidence first. No new independent HD review reservations will be assigned to these seven until Stage2 integration finishes. The scopes listed below record their last HD assignments for later resumption, rather than new active review work.
 
-The terrain-set3 children continue their original HD queues directly. HD artists, hd_full_review, hd_dark_player and hd_enemies_01 continue their disjoint original work. Stage2 uses the same four-slot generation gate; its authored mod art is separate from original catalog coverage. Coordinator does not edit Stage2 mods. Runtime800 stays unchanged until root's explicit release update, and the private immutable1037 assembly input remains available. The1071 proof predates the API changes and remains historical. Current1148 closes a separately rebuilt final Stage2 API epoch, while later source changes still require honest new library/source checks and output continuity.
+The terrain-set3 children continue their original HD queues directly. HD artists, hd_full_review, hd_dark_player and hd_enemies_01 continue their disjoint original work. Stage2 uses the same four-slot generation gate; its authored mod art is separate from original catalog coverage. Coordinator does not edit Stage2 mods. The shared runtime now contains root's exact1,148 copy; later approvals remain separate while root finalizes Stage2 archives. Private800/1037/1148 assembly inputs remain immutable. The1071 proof predates the API changes and remains historical. Current1148 closes a separately rebuilt final Stage2 API epoch, while later source changes still require honest new library/source checks and output continuity.
 
 ## Durable owners and outstanding holds
 
 Coordinator alone registers external development art and refreshes audit/ledger. Queue offsets change after admission; use original durable job IDs. Artists never approve/register their own artwork. Commit only owned paths; docs/hd-full-review.md remains reviewer-owned. Root alone assembles tracked runtime and controls future loader/alpha/shader/encoder policy. No such production policy changed during1037 closure.
 
-- hd_full_review preserved terrain10400's historical whole-family hold and then approved the complete genuine organic10406 sibling; that16-frame family and separately approved SHIP25 remain pending coordinator admission outside1,148. It next reserves frozen complete Flare26v10 and continues original HD review while the other seven reviewers serve Stage2.
+- hd_full_review preserved terrain10400's historical whole-family hold and then approved the complete genuine organic10406 sibling; that16-frame family and separately approved SHIP25 remain pending coordinator admission outside1,148. It closed Flare26v10 with a three-frame material/fade hold and approved complete Sparkle17v11, which also remains outside1,148. Its next exclusive reservation is IOTARG14 while the other seven reviewers serve Stage2.
 - iron_coast_2 closed and checkpointed independently accepted original Set4 jobs1–12/192frames; no further HD review reservation during its Stage2 mission/boss work. Lower40179/7a is now admitted in the target scope, with prior context-only limits preserved.
 - iron_coast_5 closed Terrain3 shards3/4: four30112/13/19/1a gray-remnant holds in shard3, all16 accepted shard4. It now serves Stage2; no active HD review reservation.
 - windows_persistence closed complete LargeAirv11 approval and STAG0240088 approval. Earlier LargeAirv6/v9, SHIP35 and4006e holds remain exact. Its new Stage2 weapon work is separate from original-catalog HD evidence.
@@ -93,7 +93,7 @@ Coordinator alone registers external development art and refreshes audit/ledger.
 - iron_coast_3 preserves admitted10310v4/200a3v4/400acv3 and every failed variant. Its Sparkle17v8 whole hold is complete; no new HD reservation during Stage2. Atlas300a8–abv6 remains held;300a0/200ba alpha-class policy stays root-owned.
 - iron_coast_6 closed the Flare26v8 whole hold, then switched to Stage2. Children continue original middle5–36 and late37–68 HD queues directly under coordinator oversight. Old exact galleries remain pinned; stronger soil/gray/char relief and fallback rectangles remain unapproved.
 - campaign_release_review checkpointed first30 complete Set4 families/480 author-reviewed IDs before Stage2 music work. Job31 has full art and technical proof but uninspected contexts/cardinal/live pages; job32 has only five cross-job crater-quarter proposals. No complete32 or later approval is inferred.
-- campaign_integration retains admitted effects and frozen LargeAirv11; bounded Flare10258/66 and Sparkle10272–77 genuine siblings are author correction scopes only. Ground gold/alpha, smoke visible-enhancement and other holds remain explicit; no RGB compensation for loader artifacts.
+- campaign_integration retains admitted effects and frozen LargeAirv11; Sparkle17v11 is independently approved but unregistered; only Flare10266/1026a/1026b are reserved for further genuine correction after the v10 material/fade hold. Ground gold/alpha, smoke visible-enhancement and other holds remain explicit; no RGB compensation for loader artifacts.
 - hd_enemies_01 retains admitted tanks/singles/STAG02. SHIP25 independent approval is pending coordinator admission; multipart IOTARG/DMOON,4006e warm center, damaged craft/cues and APE refusal stay held. Every failed genuine correction remains preserved.
 - hd_dark_player continues complete23-icon102e1–102f7 production; partial diagnostics are not coverage. HANGP's opaque encoder rounding remains a separate root policy hold. Classic-menu route claims are not inferred through custom Rust menus.
 - Terrain1 has128 registered tiles, Terrain2 has48, Terrain3 has48 and Terrain4 has192. Other completed/partial proposals remain independently held or awaiting exact review. Terrain2's unequal panels/coarse mosaic/foreign rules and Terrain1's bridge row/gap/material issues remain unadmitted.