[scbrown]

Camayoc still publishes legacy pack identifiers while the Intigraph namespace is registered. Build additive stable candidates from the 1,254 measured IRI pairs and carry them in the existing immutable source release. Retain the original source paths and the 39 unmapped declarations.

Property bridges use owl:equivalentProperty alongside identity links. Preserve legacy onViolation annotations and grouped Turtle statements: the released parser reads policy before ontology reasoning, so an RDF-equivalent flat serialization can turn emit into reject. Ontology facts, rejecting core shapes and observation debt retain separate loading roles.

Validation: just check and all 1,304 tests pass; HOME guard clean (157 paths/five resources). The actual server control accepts emitting debt, refuses hard violations without committing them, and accepts the valid record in both legacy and stable packs. Release controls verify deterministic generated assets, every source/output hash, and exclusion of dirty checkout bytes.

Demo: actual isolated-server transcript below (not a recording). Frozen released server source 45b2333e; synthetic fixture, no production mutation. Each refusal was checked through conforms:false and zero stored triples, not HTTP status alone. The committed test_stable_namespace_admission.py repeats the accepted old/new behavior on an actual source pack through the normal integration binary guard.

legacy Turtle: invalid emit -> conforms:true, stored:1
mapped flat triples: invalid emit -> conforms:false, stored:0
mapped grouped Turtle + retained policy: invalid emit -> conforms:true, stored:1
mapped Turtle without legacy policy: invalid emit -> conforms:false, stored:0
all four arms: invalid hard constraint -> conforms:false, stored:0
all four arms: valid record -> conforms:true, stored:1

This is a source candidate with automatic_load:false. It changes no installed shape set, consumer default, alias graph, pin, inference setting or stored data. Consumer admission timing, complete old/new data validation and installer adoption remain separate acceptance work.

Bead: aegis-m5s.1

Overlap preflight: f3902144fd06463989d75cf1c593980cc00471f3ad4ec43a7657178746008fc4

Demo source identity: base 5659337393289862009cc9d4cb447f10961f9726, candidate afc6988fef9cf65c2ff9d74b9190c1f6b1a24205. This is a readable real-response transcript fallback; asciinema is not installed. Repeat the actual old/new admission check with a released server using:

QUIPU_SERVER_BIN=/path/to/pinned/quipu-server python3 -m unittest discover -s tests -p test_stable_namespace_admission.py -v

[scbrown]

APPROVE — source-only review of afc6988fef9cf65c2ff9d74b9190c1f6b1a24205 against 5659337393289862009cc9d4cb447f10961f9726.

Reviewed all seven changed paths after the exact head completed 7/7 checks. The additive bundle preserves legacy source, the 39 unmapped identifiers, separate ontology/reject/observation-debt loading roles, and legacy engine policy annotations. Property bridges and grouped Turtle address the demonstrated admission constraints. Release generation uses immutable archived source and retains automatic_load:false.

Independent validation: 17 focused tests pass, including actual private-server old/new emit/reject admission, inverse graphs, release determinism, hashes and dirty-checkout exclusion. The frozen publication sample's eleven document hashes and all 1,254 mapping pairs match exactly. All three successful suites have clean HOME guards. Fresh HTTP revalidation timed out and remains UNKNOWN; the frozen-sample result is not a fresh-site claim.

Normal native review af372df2c9a12d584acf06d84d7eb1be54787ad40f3bc2045cd2c3593ce83c64 is accepted by Ian for risk record 0497358c; current consumer reports CONTENT accepted and PREFLIGHT PASS. This approves the additive source proposal only. Consumer installation, full old/new data validation, shape/alias activation and broader migration acceptance remain separate.