@@ -82,7 +82,7 @@ and external AI CLIs require a direct user request. Never merge old work implici
 - Existing Commons run 49092854-f9bd-4b7a-8d12-4ac5ea0e5f70 retains the approved,
   unmerged safe-timer change from job 811bdb98-bcbb-4b65-80b9-f19693aef6b4.
   Preserve it. 29 earlier lab experiments were verified before this release work.
-- Public source: antropos17/commit-zero at c42faa4; all three CI jobs passed with local a13df1e's identical tree. Preserve separate histories.
+- Public source: antropos17/commit-zero at 617ac69; all three CI jobs passed with local 7e56c29's identical tree. Preserve separate histories.
   README GIF is a 15.8s condensed walkthrough of retained Sequence Kit work,
   not a continuous live recording. Static fallback included; desktop/mobile and all
   three CI jobs passed. Evidence: runtime/verification/github-readme-gif-2026-10-19.json.
 
@@ -78,6 +78,33 @@ the final gate. These local summaries are disposable and not signed release rece
 There is one summary per known suite, one lint cache and project-local temporary
 output under `.cache/tmp`. Child processes receive TEMP/TMP/TMPDIR explicitly.
 
+### Source identity and inspection
+
+`npm run source:inspect [-- --samples 5]` reports source-index version, file/byte
+counts, hashes and measured fingerprint durations. Its `inspected` state is a
+read-only input probe; full/browser gates remain separate. The local report is
+`.cache/verification/latest-source-inspection.json`, replaced with running/blocked
+when appropriate, inside the same validated workspace directory as other receipts.
+
+Source index v2 includes every regular tracked input in an ordinary Git checkout,
+plus registered working source/assets/docs. It includes root policy/configuration,
+legacy prototype files and vendored skill references. Git modes participate in the
+hash. Source-only archives use the maintained registered inputs without requiring
+Git metadata; update `scripts/project-files.mjs` and the project map when adding
+an archive input outside the existing roots. No vendored skill engine is executed.
+
+Root private configuration, runtime, dependencies, build output and cache material
+stay outside this index. Forced tracked private/runtime entries, links, unresolved
+stages and sparse/assume-unchanged index flags block source evidence. Inspect the
+reported input and `git ls-files -v` before correcting the intended Git state.
+The probe does not alter index flags, Git configuration or retained data. Raw
+working-byte hashes can differ between Windows and Linux line endings; public
+Git trees and each environment's frozen receipts provide their own association.
+Earlier v1 receipts retain their dated narrower scope; rerun both full gates after
+the v2 change before accepting the expanded source. Full and grouped-browser
+receipts carry `sourceIndexVersion`; the evidence preflight requires the current
+version as well as matching hashes, so an older-version stamp cannot qualify.
+
 ## Find and diagnose problems
 
 - `npm run doctor -- --json`: structured health; use `--url http://127.0.0.1:PORT`
 
@@ -47,6 +47,26 @@ No substitute model is inferred from a familiar display name.
 
 ## Other adopted decisions and their evidence
 
+### Complete the source evidence boundary before publication automation
+
+The primary [Git ls-files reference](https://git-scm.com/docs/git-ls-files), accessed
+2026-10-19, documents NUL-delimited names, stage/mode records and hidden/sparse
+flags. Decision: extend the shared source index to tracked regular inputs and
+registered archive/working inputs, and reject unsupported index states. Expected
+benefit: root policy, configuration and legacy/reference changes invalidate frozen
+receipts. An actual omitted-input inventory and controlled metadata edit exposed
+the gap; nine filesystem/Git/CLI tests verify the correction. [Measurements and
+reproduction](WORKFLOW-MEASUREMENTS.md#source-index-coverage-and-measured-cost).
+The read-only inspection tool adds no provider, model execution or security sandbox.
+
+Git's [commit-tree](https://git-scm.com/docs/git-commit-tree),
+[hash-object](https://git-scm.com/docs/git-hash-object) and
+[compare-and-swap ref update](https://git-scm.com/docs/git-update-ref) documentation
+were also reviewed for a reversible publication preparer. Decision: defer that
+command until source evidence is complete and qualified; continue the established
+explicit copy/tree-compare/normal-push workflow. No new publication executor,
+release or tag was created by this research.
+
 ### Workspace and environment boundaries
 
 Primary sources accessed 2026-10-19:
 
@@ -8,17 +8,17 @@ tracks dated decisions and receipts; this file is the operational entry point.
 ## Repositories and state
 
 - Working repository: `X:\ai-github`, branch `codex/development-foundation`,
-  latest fully checked local commit `a13df1e` at this checkpoint. The local data and model
+  latest fully checked local commit `7e56c29` at this checkpoint. The local data and model
   installation are here. Recheck status before acting; this file can age.
 - Public repository: [antropos17/commit-zero](https://github.com/antropos17/commit-zero),
-  `main` at `c42faa484be0d9e068b23fd1b583f344a63e1e15` after a normal push.
+  `main` at `617ac691c585e0c2562dc3b79d0d470c42feaf8a` after a normal push.
   Its separate checkout is `.cache/publication`. The histories are unrelated;
-  the public tree matches local `a13df1e` (`9a8c3381af33da4f83097347e3f8db03c083a8c5`).
-  Account sign-in/discovery recovery changes are awaiting final gates.
+  the public tree matches local `7e56c29` (`db03106197ea4af66fb88202456de11c6cbf8a4c`).
+  Source-index v2/inspection changes are awaiting final gates.
   Do not merge histories, reset the local branch or force push. Recheck remote
   before publishing anything else.
-- Public CI [run 39237404863](https://github.com/antropos17/commit-zero/actions/runs/39237404863)
-  passed full gate, Chromium and runtime dependency audit for `c42faa4`. Local
+- Public CI [run 39239888882](https://github.com/antropos17/commit-zero/actions/runs/39239888882)
+  passed full gate, Chromium and runtime dependency audit for `617ac69`. Local
   `evidence:status` confirmed equal trees and current full/browser receipts. The
   preceding retry-fixture failure at `5f9f88e` is preserved in the mission log.
 - This mission has not run local or hosted model inference, spawned product
@@ -141,20 +141,30 @@ HTTP tests cover error details, unfinished-body timeout, cancellation and invali
 JSON. [Failure](media/rankings-unavailable-2026-10-19.png) and
 [narrow retained rows](media/rankings-last-known-2026-10-19.png) are inspected
 Chrome captures in disposable services with routed failures and simulated scores.
-Its frozen full 85/85 and Chrome 29/29 gates, then public CI, passed. The pending
+Its frozen full 85/85 and Chrome 29/29 gates, then public CI, passed. The completed
 account-page unit validates discovery types, offers explicit Refresh without
 reloading the draft, scopes unknown availability, and restores failed-auth focus.
 Four focused Chrome tests passed, including malformed data and a routed OAuth
 start rejection with no external request. [Actual 390px error view](media/sign-in-discovery-unavailable-2026-10-19.png)
 uses an explicit fake draft and discovery failure in disposable services; real
 OAuth login remains unqualified.
+Its full 85/85 and Chrome 33/33 gates, then public CI, passed. A later inventory
+found 147 tracked paths outside the older v1 hash boundary. The pending v2 index
+includes all regular tracked inputs and registered working/archive sources,
+including root metadata, legacy prototype files and vendored references. It
+records modes and rejects private/runtime paths, links, unsupported/hidden index
+states and ambient Git overrides. Nine source-index/inspection tests and the
+26-test focused tooling suite passed before the final receipt-version refinement.
+`npm run source:inspect -- --samples 5` is a read-only probe; it does not run gates
+or qualify models/sandboxes. Full/browser v2 gates and current-version preflight
+remain required. Earlier v1 results retain their narrower historical scope.
 
-- Latest local frozen full gate at `a13df1e`: 85/85 Node tests, compiled DOM/axe
+- Latest local frozen full gate at `7e56c29`: 85/85 Node tests, compiled DOM/axe
   2/2, build and static serving passed. Stable source hash
-  `71009df00efbbf03638e1258a3ea3210258e18c6fa4113f7b4a48998f953dd9a`;
-  receipts `runtime/verification/ranking-recovery-{full,browser}-2026-10-19.json`
+  `0b8ac29021e0e1aad89f83b965fe5fb22748503da4694d33420efdf908ff5060`;
+  receipts `runtime/verification/auth-recovery-{full,browser}-2026-10-19.json`
   (ignored by Git).
-- Installed Chrome browser suite passed 29/29 at desktop and 390px. Real captures
+- Installed Chrome browser suite passed 33/33 at desktop and 390px. Real captures
   are `runtime/verification/commons-first-run-{desktop,narrow}-2026-10-19.png`,
   `commons-provider-offline-desktop-2026-10-19.png` and catalog captures. Tests
   used in-memory services; provider-health responses were controlled in the
@@ -223,7 +233,7 @@ OAuth login remains unqualified.
 
 ## Next work, in order
 
-1. Complete account sign-in/discovery recovery: run grouped Chrome and `npm run check` on frozen source,
+1. Complete source-index v2: run grouped Chrome and `npm run check` on frozen source,
    commit it, copy the unpublished local commit into the separate public
    checkout, compare Git trees, push without force and inspect public CI.
    Record exact SHA and receipt.
 
@@ -12,7 +12,7 @@ Start: 03:46:17 UTC. Deadline: 15:46:17 UTC. Final integration reserve begins 14
 
 ## Current action
 
-Finish account sign-in/discovery recovery after three preserved Chrome failures. Keep local drafts/navigation through failed or malformed discovery, offer explicit refresh with unknown availability, and restore failed-auth focus. Four focused Chrome tests passed with no external provider request; complete frozen full gates and publication. Keep all new profiles disabled. The final integration reserve still begins at 14:16:17 UTC.
+Finish source-index v2 after a measured coverage gap. Add tracked metadata/modes and registered archive/working inputs, reject hidden/private/linked index states, and label full/browser receipt versions. Nine host/CLI tests and focused tooling passed before the final version refinement. Run frozen gates and publish; investigate page-error containment next. Keep all new profiles disabled. The final integration reserve still begins at 14:16:17 UTC.
 
 ## Decisions and limits
 
@@ -104,4 +104,9 @@ Finish account sign-in/discovery recovery after three preserved Chrome failures.
 - Chrome exposed a discovery error with no in-page repeat, malformed provider data replacing the workspace with its global error boundary, and a failed local sign-in losing keyboard focus. Baselines: `runtime/verification/auth-discovery-baseline-2026-10-19`, `auth-discovery-malformed-baseline-2026-10-19`, and `auth-submit-focus-baseline-2026-10-19`. Validation and scoped refresh/auth focus now passed four focused Chrome tests, including strict boolean availability, retained drafts and a routed OAuth-start failure with zero external requests. The inspected 390px capture is `docs/media/sign-in-discovery-unavailable-2026-10-19.png`, SHA-256 `04d44a2d`. No real OAuth login was attempted.
 - The existing public latest-release URL was checked: it resolves to v0.3.0 at `1abdf00`. Distribution notes now preserve that tag and request a new tag for the mission's newer main source. The earlier hardcoded release checkpoint was replaced by the live source-evidence workflow. No release or promotional post was created.
 
-Complete focused UI, then freeze all source for the full 33-test browser suite and `npm run check`; commit/publish and inspect CI. Next assess a reversible publication-preparation command against the observed repeated manual-copy workflow and remaining release gaps. Keep the final 90-minute reserve from 14:16:17 UTC.
+- 10:47 UTC: account sign-in/discovery recovery committed locally as `7e56c2900753b93e8b1f811bdb97e7f7f8429fe5` after full 85/85 and Chrome 33/33 on frozen hash `0b8ac29021e0e1aad89f83b965fe5fb22748503da4694d33420efdf908ff5060`. Receipts: `runtime/verification/auth-recovery-{full,browser,evidence}-2026-10-19.json`. Normal push produced `617ac691c585e0c2562dc3b79d0d470c42feaf8a`, identical tree `db03106197ea4af66fb88202456de11c6cbf8a4c`. CI39239888882 passed all three jobs. Doctor confirmed the same live Windows workspace, healthy dependencies/build/Git, 74 GB free, offline ordinary gateway and unprobed model readiness.
+- Before publication automation, an actual inventory found 147 tracked paths outside v1's 272-file / 5.64 MB hash boundary. A source-only fixture changed CONTRIBUTING.md without changing its hash. The initial expanded index covered all 419 tracked paths / 9.92 MB and detected the change. Both five-sample batches are retained under `runtime/verification/source-index-{before,after}-2026-10-19.json`; broader coverage costs more time and no speedup is claimed. v2 additionally includes modes and rejects sparse/assume-unchanged states, links and forced tracked private/runtime inputs. Nine host/CLI tests and focused tooling 26/26 passed; the later receipt-version refinement passed 14 focused source/evidence tests. A first fixture-only missing-cache setup error was corrected; no application or retained data failure occurred.
+- `npm run source:inspect` now reports version/counts/bytes/hash stability without model calls or full-gate claims, using the existing validated workspace report directory. Full and browser receipts carry the source-index version; current preflight rejects missing/older versions. Ordinary archives keep a maintained source index without Git metadata. The separate publication-preparer remains deferred while this evidence dependency is qualified.
+- The parent confirmed public 617ac69/CI and can read normal task checkpoint messages. Continue in this same worker; no new release or tag is authorized. The final 14:16–15:46 UTC reserve remains intact.
+
+Finish focused checks and a source inspection, then freeze all source for the 33-test browser suite and full 94-test Node gate; commit/publish and inspect CI. Next reproduce unexpected page-error containment before considering publication automation. Keep the final 90-minute reserve from 14:16:17 UTC.
@@ -6,6 +6,39 @@ or normal user database write was part of these measurements.
 
 ## Feedback loop
 
+### Source-index coverage and measured cost
+
+At 10:47 UTC, an actual input inventory found 147 tracked paths outside v1's
+272-file / 5,637,895-byte index. These included root contribution/license/security
+and environment-template files, legacy prototype files and vendored references.
+A controlled ordinary source-only fixture changed `CONTRIBUTING.md` without
+changing the old hash. Receipt: `runtime/verification/source-index-before-2026-10-19.json`.
+No real configuration, runtime history or installed model was read or changed.
+
+Decision: source index v2 includes ordinary tracked paths and Git modes alongside
+registered working inputs, with archive support and explicit rejected states.
+The initial expanded probe covered 419 files / 9,918,325 bytes with zero omitted
+tracked files; the same fixture's metadata change now changed its hash. Receipt:
+`runtime/verification/source-index-after-2026-10-19.json`.
+
+| Five observed fingerprint calls, milliseconds | Values |
+| --- | --- |
+| Earlier index | 137, 83, 82, 81, 80 |
+| Initial expanded index | 786, 261, 234, 222, 270 |
+
+Both batches used this Windows host and Node 24.11.1; raw commands and hashes are
+in the receipts. The input payloads and metadata work intentionally differ, the
+first call is cold, and host scheduling/cache effects remain. These observations
+measure the cost of broader evidence coverage and establish no speedup.
+The versioned current reproduction is `npm run source:inspect -- --samples 5`;
+its output reports the exact present file/byte counts and all timed samples.
+
+Nine source-index/CLI tests exercise root and unregistered tracked input changes,
+mode changes, deletion across a real commit, archive operation, private-path and
+link refusal, sparse/hidden flags, ambient Git overrides and unchanged index bytes.
+They use disposable Git/file fixtures, never real credentials or retained stores.
+Inspection failure replaces an earlier inspection; it never counts as a full gate.
+
 ### Browser temporary paths and readiness
 
 Before the browser-runtime change, a read-only Node check returned
 
@@ -30,6 +30,7 @@
     "test:browser": "node scripts/browser-runtime.mjs test",
     "browser:doctor": "node scripts/browser-runtime.mjs doctor",
     "evidence:status": "node scripts/evidence-status.mjs",
+    "source:inspect": "node scripts/source-inspect.mjs",
     "test:dom": "node --test tests/interface.dom.mjs",
     "test:serve": "node scripts/smoke-build.mjs",
     "test:services": "node --test tests/services.test.mjs",
 
@@ -2,7 +2,7 @@ import { spawn } from "node:child_process";
 import { lstat, mkdir, realpath, writeFile } from "node:fs/promises";
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { fingerprint, inside } from "./project-files.mjs";
+import { fingerprint, inside, sourceIndexVersion } from "./project-files.mjs";
 
 const projectRoot = fileURLToPath(new URL("../", import.meta.url));
 
@@ -81,10 +81,11 @@ async function doctor() {
     started = performance.now();
   await writeFile(
     output,
-    JSON.stringify({ status: "running", startedAt }) + "\n",
+    JSON.stringify({ status: "running", startedAt, sourceIndexVersion }) + "\n",
   );
   const report = {
     startedAt,
+    sourceIndexVersion,
     status: "failed",
     browserLaunched: false,
     profileInsideWorkspace: false,
 
@@ -3,7 +3,7 @@ import { readFile, realpath, writeFile } from "node:fs/promises";
 import { relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
-import { fingerprint, inside } from "./project-files.mjs";
+import { fingerprint, inside, sourceIndexVersion } from "./project-files.mjs";
 import { verificationDirectory } from "./browser-runtime.mjs";
 import { browserGroups, browserStats } from "./test-ui.mjs";
 import { qualityPlan } from "./quality-plan.mjs";
@@ -18,6 +18,7 @@ function stamped(report, hash) {
   return (
     /^[a-f0-9]{64}$/.test(hash || "") &&
     report?.status === "passed" &&
+    report.sourceIndexVersion === sourceIndexVersion &&
     report.stable === true &&
     report.sourceHash === hash &&
     report.finalSourceHash === hash &&