Independent lexical scanner acceptance, 2026-10-29

ACCEPT within the conservative scope below. Candidate fec0a4bc9af1bf10bd3c8056181573f305a1caf9; production tools/recovery/tuxracer-original-win32-recovery-oct28.py SHA-256 69257615178adda7568036fc49e2f20b4ca602c6d3b734f1238caf6143021b17. Production is unchanged by this acceptance commit.

The unchanged historical harness and earliest braced-data reproducer are preserved beside the independent test. The historical harness still contains source hash 5a47f748777d5b3a322e1c28b6acb78e13e6772f3cdb7d3b3d811c7e145b328e. check.py changes only that hash string in memory to the production pin before running every original assertion and fixture unchanged. No on-disk historical edit, assertion weakening, Tcl evaluation or surrogate scanner occurred. This was the first production behavioral checkpoint; its parent-stack mutation was killed and inert braced data passed.

27 new independent groups exercised the exact production API and literal-sources CLI, with result equality for successful cases and rejection for genuinely missing literals. They cover nested multiline braced and quoted data, escaped delimiters, command-boundary and continued comments, newline/semicolon real commands after data, literal hash/semicolon filenames, parent normalization and root confinement. Computed dollar/bracket forms, control bodies, continuations, malformed grouping, absolute paths and all-escaping paths stayed UNKNOWN. A source-only mutation which discards commands after the first inert command was killed by the missing-literal oracle. The retained test scripts use this task's explicit owned paths and require the retained historical donor for byte identity verification; no donor wrapper was executed.

Reused unchanged repair groups: 23 API and 23 production CLI cases from the predecessor's exact candidate/source pin, verified against its canonical receipt and targeted-checks evidence. They were not rerun. Retained evidence: /tmp/tuxracer-serial-lexical-independent-accept-oct29; canonical closeout receipt: receipt.json there. Supervisor and test copies are committed under test/tuxracer-serial-lexical-independent-oct29/.

Scope: only direct top-level source commands recognized by this scanner's lexical subset; literal unescaped bare/braced/quoted target words and the supported literal -encoding option. Newline/semicolon command separation outside grouping is recognized; data/control bodies are never evaluated as scripts. Bracket substitution or malformed/ambiguous grouping makes the remaining audit UNKNOWN. Checked means an inventory candidate exists under lexically normalized extraction-root or script-directory paths. It is not actual Tcl execution, runtime CWD/symlink resolution, file-content qualification, media acceptance, game compatibility or a security proof for arbitrary Tcl. No downloads, build, guest, browser, Boat, FUSE, mount execution or public deployment.

Publication is task-branch only. Root/donor sources and refs remain read-only; the oversized messageboard is delegated via publication-note.txt. Allocation remains held until coordinator closeout. No test box was assigned or touched.