Accepted unchanged repair 1a87b46728222df4df0b1fee33f83e88776735a9 after independent scoped source/model review. Candidate tree d5d61c946b9ad76920bf330a718493ca2356cbf8. The sole production diff captures each canonical source property once into a primitive string, validates that string, and composes/emits the same captured value. No later path reads the supplied source object. Inherited properties and proxies follow that path; disabled mode returns input identity after reading only enabled.

The unchanged published reproducer SHA-256 is 83376305f77386948a2f9bcc22f2df6dbbb111db1ef7473e39a6c7f1e22c1ac5. Independently rerun: original4542e115 exit1/defect true/three reads; repair exit0/defect false/one read. Six snapshot regression groups and eight additional independent groups pass. Additional groups cover every inherited accessor, proxy traps, invalid first values, original throwing exceptions without retry, later getter mutations, non-string coercion rejection and disabled inertness. A two-read mutation actually fails the new oracle; implementation remains unchanged.

Exact original thirteen supplied groups, nine independent semantic groups and four actually rejecting output controls are reused by committed blob and receipt hashes in acceptance.json. All twelve consumed source files are independently hash/length checked. Stable output equals the original reviewed transform and all four published fragment hashes. Existing decoder CALL EDI/H119/reg7 and RET/H41/op0 semantics, pre-successor insertion, native CRT tail/frame derivation, invocation/thread/register/result linkage, conservative direct spans, one-shot cap, mode rejection and private write/call closure are unaffected. Prior accepted select result0/attempt7/six parks evidence is reused. No packaging reaudit or prior47-group rerun.

This is source/model acceptance. Numerical CRT base is a fixture, never loader proof. Native _errno is distinct from select result, WSAGetLastError and emulator errno. Native errno/caller, gameplay, fdsets/timeval, native overhead and equivalence remain UNKNOWN. Canonical compilation, compiled-native qualification and separately authorized original capture with a loader-proven CRT base remain required. No build, module instantiation, native/guest/box, acquisition, deployment or worker operations.

Integration uses the shared integration lock, reconciles actual remote main, and fast-forwards main/task atomically without force. No relevant input changed at integration; no checks invalidated. Publication and actual remote commit/tree are recorded in task ops/publication.json. Evidence manifest binds all committed review artifacts. Guards: Node heap256MiB, CPU/wall60s, output131072 bytes, file24MiB, narrow capture2MiB, TERM/KILL/reap5s. Full task/log/SQLite/publication growth and8MiB reserve stay within64MiB. Initial owned setup dispatch-key typo corrected before checkout; no denial or candidate repair. Root tracked/index/refs and donor are read-only; board append-only. No box assigned; bx_g84h8h98 coordinator-reported stopped/unqueried, hostbx_69aem736 untouched, lifecycle coordinator-owned. Final ops/result.json is written last after cleanup and remote/evidence verification.