Acknowledge validated post-merge OIC repository state

README.md

@@ -1,6 +1,6 @@
 # Open Institutional Compiler
 
-- **Status:** BOUNDED_REFERENCE_IMPLEMENTATION — scoped independent Gate F repository validation passed; merge pending Gate G and owner authorization
+- **Status:** BOUNDED_REFERENCE_IMPLEMENTATION — scoped independent Gate G validation passed for candidate `a2b5053771ce510fb35ce09f3e99f545c21ac20e` and merged to `main` as `c4a325c551ce8904dfcc5b9fe81b05109726a334`
 - **Bootstrap date:** 2026-07-29
 - **Governing design:** TDD-OIC-001 v1.1
 
@@ -44,8 +44,19 @@ that exact candidate only. It does not establish semantic correctness, model
 accuracy, institutional validity, legal effect, provider qualification, rights
 resolution, ontology execution, production compilation, runtime authorization,
 institutional-IR closure, enterprise readiness, or benchmark superiority. It
-also does not establish legal validity or production readiness. Merge remains
-pending Gate G and owner authorization.
+also does not establish legal validity or production readiness. It is not
+validation of any later commit.
+Independent Gate G validation passed for candidate
+`a2b5053771ce510fb35ce09f3e99f545c21ac20e` (tree
+`b8e31ec4786a2fd1aca976a6ff047deeee63ef15`): canonical Linux execution reported
+1720 passed, 0 failed, 0 errors, 1 declared skip, 93.5% coverage, and the same
+byte-identical offline demo digest. Pull request 40 merged that exact tree into
+`main` as merge commit `c4a325c551ce8904dfcc5b9fe81b05109726a334` (first parent
+`9ad37fc80d8f34318c6212ed702de5eab3551cf5`, second parent
+`a2b5053771ce510fb35ce09f3e99f545c21ac20e`), approved by `inventor1975` and
+merged at 2026-09-06T08:14:03Z. That result carries the same twelve exclusions
+and the same ceilings, is scoped to that exact candidate and tree, and is not
+validation of any later commit.
 See [`CAPABILITY_MATRIX.json`](docs/capabilities/CAPABILITY_MATRIX.json) for exact provenance
 and ceilings. NVIDIA is NOT_QUALIFIED; Canada redistribution is UNRESOLVED; Ontology 007R1
 is unexecuted and execution-unauthorized. No model accuracy or legal validity is claimed.

STATUS.md

@@ -2,21 +2,37 @@
 
 ## Current status
 
-**BOUNDED_REFERENCE_IMPLEMENTATION — SCOPED INDEPENDENT GATE F REPOSITORY VALIDATION PASSED**
+**BOUNDED_REFERENCE_IMPLEMENTATION — SCOPED INDEPENDENT GATE G VALIDATION PASSED AND MERGED TO MAIN**
 
 OIC-SEMANTIC-PROMOTION-001 admits only the 58-path maximum recorded in
 `docs/capabilities/CAPABILITY_MATRIX.json`, from main
 `9ad37fc80d8f34318c6212ed702de5eab3551cf5`. It implements an offline synthetic
 reference path, not production compilation, runtime authorization, or canonical meaning.
+
 Independent Gate F repository validation passed for exact candidate
 `c0108a7a80585d6f5732407d4904ba815073ecd2`, tree
 `1d12b17aad7977c939090909171183be166cfd50`. Canonical Linux execution reported
 1714 passed, 0 failed, 0 errors, 1 declared skip, 93.5% coverage, and two
 byte-identical offline demo runs with SHA-256
 `0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a`. The result
 establishes reproducibility, boundary integrity, the specified fail-closed
-properties, packaging, and named adversarial checks for that candidate only.
-Merge remains pending Gate G and owner authorization; no merge is authorized.
+properties, packaging, and named adversarial checks for that candidate only. It
+is not validation of any later commit.
+
+Independent Gate G validation passed for exact candidate
+`a2b5053771ce510fb35ce09f3e99f545c21ac20e`, tree
+`b8e31ec4786a2fd1aca976a6ff047deeee63ef15`. Canonical Linux execution reported
+1720 passed, 0 failed, 0 errors, 1 declared skip
+(`tests/contract/test_canada_acquisition_preflight.py:574`), 93.5% coverage, and
+two byte-identical offline demo runs with SHA-256
+`0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a`. Pull request
+40 merged that exact tree into `main` as merge commit
+`c4a325c551ce8904dfcc5b9fe81b05109726a334`, first parent
+`9ad37fc80d8f34318c6212ed702de5eab3551cf5`, second parent
+`a2b5053771ce510fb35ce09f3e99f545c21ac20e`, approved by `inventor1975` at
+2026-09-06T08:12:51Z and merged at 2026-09-06T08:14:03Z. The merged tree is
+byte-identical to the validated tree. Each result above is scoped to the exact
+commit and tree that produced it and to nothing later.
 
 NVIDIA: NOT_QUALIFIED and excluded from the demo. Canada redistribution: UNRESOLVED.
 Ontology 007R1: unexecuted and execution-unauthorized. Institutional-IR closure:

docs/capabilities/CAPABILITY_MATRIX.json

@@ -305,6 +305,49 @@
       "benchmark superiority"
     ]
   },
+  "gate_g_promotion_evidence": {
+    "status": "GATE_G_PASS",
+    "work_order": "OIC-INDEPENDENT-GATE-G-001",
+    "candidate_commit": "a2b5053771ce510fb35ce09f3e99f545c21ac20e",
+    "candidate_tree": "b8e31ec4786a2fd1aca976a6ff047deeee63ef15",
+    "canonical_linux": {
+      "passed": 1720,
+      "failed": 0,
+      "errors": 0,
+      "skipped": 1,
+      "declared_skip": "tests/contract/test_canada_acquisition_preflight.py:574",
+      "coverage_percent": 93.5
+    },
+    "demo_sha256": "0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a",
+    "promotion": {
+      "pull_request": 40,
+      "pull_request_url": "https://github.com/veraxis-protocol/Institutional-Compiler/pull/40",
+      "base_before_merge": "9ad37fc80d8f34318c6212ed702de5eab3551cf5",
+      "merge_commit": "c4a325c551ce8904dfcc5b9fe81b05109726a334",
+      "merge_first_parent": "9ad37fc80d8f34318c6212ed702de5eab3551cf5",
+      "merge_second_parent": "a2b5053771ce510fb35ce09f3e99f545c21ac20e",
+      "merge_tree": "b8e31ec4786a2fd1aca976a6ff047deeee63ef15",
+      "merge_method": "merge_commit",
+      "approved_by": "inventor1975",
+      "approved_at": "2026-09-06T08:12:51Z",
+      "merged_at": "2026-09-06T08:14:03Z"
+    },
+    "scope": "Scoped independent Gate G acceptance of this exact candidate: identity and boundary, claims audit, adversarial fail-closed challenges, canonical Linux execution, deterministic offline demo, packaging, and repository integrity. Pull request 40 merged this exact tree into main without modification.",
+    "exclusions": [
+      "semantic correctness",
+      "model accuracy",
+      "institutional validity",
+      "legal effect",
+      "provider qualification",
+      "rights resolution",
+      "ontology execution",
+      "production compilation",
+      "runtime authorization",
+      "institutional-IR closure",
+      "enterprise readiness",
+      "benchmark superiority"
+    ]
+  },
   "capabilities": [
     {
       "name": "grounded_candidate_extraction",

scripts/verify_code_start_gate.py

@@ -94,6 +94,65 @@ def validate_independent_validation_evidence(evidence: object) -> None:
     _require(evidence == INDEPENDENT_VALIDATION_EVIDENCE, "independent validation evidence forged")
 
 
+GATE_G_PROMOTION_EVIDENCE = {
+    "status": "GATE_G_PASS",
+    "work_order": "OIC-INDEPENDENT-GATE-G-001",
+    "candidate_commit": "a2b5053771ce510fb35ce09f3e99f545c21ac20e",
+    "candidate_tree": "b8e31ec4786a2fd1aca976a6ff047deeee63ef15",
+    "canonical_linux": {
+        "passed": 1720,
+        "failed": 0,
+        "errors": 0,
+        "skipped": 1,
+        "declared_skip": "tests/contract/test_canada_acquisition_preflight.py:574",
+        "coverage_percent": 93.5,
+    },
+    "demo_sha256": "0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a",
+    "promotion": {
+        "pull_request": 40,
+        "pull_request_url": "https://github.com/veraxis-protocol/Institutional-Compiler/pull/40",
+        "base_before_merge": "9ad37fc80d8f34318c6212ed702de5eab3551cf5",
+        "merge_commit": "c4a325c551ce8904dfcc5b9fe81b05109726a334",
+        "merge_first_parent": "9ad37fc80d8f34318c6212ed702de5eab3551cf5",
+        "merge_second_parent": "a2b5053771ce510fb35ce09f3e99f545c21ac20e",
+        "merge_tree": "b8e31ec4786a2fd1aca976a6ff047deeee63ef15",
+        "merge_method": "merge_commit",
+        "approved_by": "inventor1975",
+        "approved_at": "2026-09-06T08:12:51Z",
+        "merged_at": "2026-09-06T08:14:03Z",
+    },
+    "scope": (
+        "Scoped independent Gate G acceptance of this exact candidate: identity and "
+        "boundary, claims audit, adversarial fail-closed challenges, canonical Linux "
+        "execution, deterministic offline demo, packaging, and repository integrity. "
+        "Pull request 40 merged this exact tree into main without modification."
+    ),
+    "exclusions": [
+        "semantic correctness",
+        "model accuracy",
+        "institutional validity",
+        "legal effect",
+        "provider qualification",
+        "rights resolution",
+        "ontology execution",
+        "production compilation",
+        "runtime authorization",
+        "institutional-IR closure",
+        "enterprise readiness",
+        "benchmark superiority",
+    ],
+}
+
+
+def validate_gate_g_promotion_evidence(evidence: object) -> None:
+    """Accept only the exact owner-adjudicated Gate G promotion evidence record.
+
+    The merge second parent must be the Gate G candidate and the merge tree must be
+    the validated tree, so a forged, mutated or removed promotion record fails closed.
+    """
+    _require(evidence == GATE_G_PROMOTION_EVIDENCE, "gate g promotion evidence forged")
+
+
 ADMITTED_SRC_OIC_PATHS = frozenset(
     {
         "src/oic/__init__.py",
@@ -273,6 +332,7 @@ def validate_bounded_record(root: Path) -> None:
             "source_provenance",
             "ceilings",
             "independent_validation_evidence",
+            "gate_g_promotion_evidence",
             "capabilities",
         },
         "capability matrix fields expanded",
@@ -313,6 +373,7 @@ def validate_bounded_record(root: Path) -> None:
     _require(record.get("production_semantic_gate") == "BLOCKED", "production gate expanded")
     _require(record.get("ceilings") == CEILINGS, "evidence ceiling expanded")
     validate_independent_validation_evidence(record.get("independent_validation_evidence"))
+    validate_gate_g_promotion_evidence(record.get("gate_g_promotion_evidence"))
     provenance = record.get("source_provenance")
     _require(
         hashlib.sha256(