🔧 Auto-commit from sysupdate on 2026-07-23 17:32

REVIEWED.md

@@ -658,3 +658,15 @@ born-digital lane (whole-EPUB injection → per-spine) + promotion.scale_applica
 `verified` status, so no re-verify storm.
 **If AUTHORIZED:** v2.3.0 OPERATIVE; v2.2.0 immutable. Tag commits REVIEWED-68.
 
+## REVIEWED-69 — PENDING-69 — The attested boundary-drop resolution (design-gate passed with corrections)
+**Date:** 2026-07-22
+**Decision:** AUTHORIZED — proceed per the ruling (design-gate passed; a body-conservation REVIEW resolves only by a positive attributed attestation checked for full coverage, interior teeth untouched, never a bypass or computed re-classification).
+**Notes:** Ruling filed verbatim at chamber-library/docs/PENDING-69-boundary-drop-attestation-JURIST-RULING-2026-07-22.md. Package + Addendum: chamber-library/docs/PENDING-69-boundary-drop-attestation-JURIST-PACKAGE-2026-07-22.md. Corrections in force:
+- Q2 — (b) vocabulary-only, AGAINST the executor lean: trim.drop is a controlled label set, not a set of pre-verified drops; every boundary run is per-file attested (the gate can never confirm class membership; a privileged spec-class would be trust-by-name). One layer, not two — relocation is another label, distinguished only by requiring moved_to.
+- Q3 — floor confirmed (coverage + interior-zero + attribution mechanical; classification human). Structural-falsification check ADOPTED (executor decision, recorded, steward-overridable) for index/table-of-contents only — a signature mismatch HOLDS for reconciliation (re-attest or a positive signature_anomaly), never a silent pass, never an un-overridable block; declined where no clean signature exists.
+- Q4 — bind-to-derived-runs ELEVATED to a required property (self-invalidating; forbids inheriting a prior file's attestation).
+- Q5 — moved_to required; an incomplete relocation is a rejected attestation; the fabrication-exclusion is scoped to exactly the named span.
+- Q6 — per-candidate; the omnibus interior-run interaction named (inter-work drops surface as interior runs and FLAG — the boundary-drop mechanism is correctly silent on them; for the Levi second pilot).
+- Q7 — Eichmann as the first fixture PLUS deliberate negatives (un-attested run -> HOLD; interior deletion -> FLAG regardless of a complete boundary attestation).
+- Named tension: this wires human-in-the-loop for discipline, not removal — the 47-file wave is not unattended batch work.
+**If AUTHORIZED:** Q1 minimal constitutional sentence in the §Tiering & Fence one-door subsection (gate-acceptance property; doctrinal-traceability), MINOR — fold into the next assembling supersession or a standalone bump (steward call); mechanism as declared data (attestation schema + controlled vocabulary) in graduation-spec.yaml; the gate's thin-consumer check built test-first with the Eichmann fixture + the two negatives as the ratification condition. Tag commits REVIEWED-69.