[scbrown]

Chaski can now construct the scheduled receiver from an exclusive opt-in scheduled sink mapping. The ordinary consumer owns the resulting workers: it drains every constructed sink before closing its database and releasing its lease, including partial startup failures.

The factory validates fixed execution policy, binds the literal versioned recipe to the signed scope manifest digest, checks pinned Shuttle configuration and ledger custody before opening state, then builds the bounded async receiver and fixed subprocess executor. Publication retries use the retained result and do not execute the child twice. Conflicting emitter protocols and changed recipes refuse before execution. Recipe hashing does not prove executable artifact bytes; approved immutable artifact custody, exact declaration/profile/query, catalogue transport and runtime activation remain separate gates.

This draft is stacked on #29 at f4a755d, with #28/#26 retained as ancestors. No parent source/review is duplicated. Parent landing, retargeting/current CI, risk classification and one independent post-green review remain required. No deployment, production configuration, key creation, graph/profile load or cron change is included.

Validation: full 407 tests plus 25 subtests pass; watched HOME/resources unchanged, without a general hermeticity claim. Real temporary subprocess/outbox tests cover delayed acknowledgement, publication-only retry, copied command policy, changed recipe/config refusal, malformed policy, startup cleanup and lease ownership during drain. Ruff, isolated wheel import, committed HEAD/source/wheel bytes and recording replay pass. Initial fixture failures (invalid duration; runner-class patch before subclass import) were corrected and retained in the work-item evidence.

Demo: base f4a755d has no configured factory, while its existing sink constructor remains a positive control. Head 305c541 routes one actual temporary child through an outbox and four phase receipts: submit acknowledges zero, terminal publication acknowledges one, and the explicit hold remains distinct. Run python scripts/demo-scheduled-sink-factory.py with development dependencies. Recording, timing, contract. Download the small sanitized artifacts for scriptreplay; playback verified. Signing/admission are explicit process fixtures, not live crypto or runtime acceptance. Artifacts retained in established docs/demos directory.

Tracks aegis-6vf.

Bead: aegis-6vf

Overlap preflight: 563c0749f3d3f65bbe53560df690fe7bb5c6876d103e95f628c888e9fb1f52c5

• PR feat: package Chaski with releases, docs and event verification #14 @ 3cb9699: independent — Inspected exact14 core patch: imports/version/verification CLI dispatch only. This factory changes load_emitters/make_sink/owned consumer cleanup, without absorbing that historical packaging/verification proposal. Its pyproject overlap only adds one module under the existing build contract.
• PR chore(main): release 0.2.0 #25 @ 456df27: independent — Release proposal25 changes version/changelog. This receiver delta does not change version or release workflows, tags or publication; the release proposal remains separate.
• PR feat(receiver): bridge signed phases through the fixed Shuttle CLI #26 @ 88edbde: independent — Parent26 is an ancestor of the explicit base29; its entire proposal is excluded from this delta. Existing parent admission/review remains separate, with no competing patch or duplicate reviewer.
• PR Deliver signed scheduled work asynchronously with pinned emitter envelopes #28 @ 0b4a0eb: independent — Parent28 is an ancestor of the explicit base29; its entire proposal is excluded from this delta. Existing parent admission/review remains separate, with no competing patch or duplicate reviewer.
• PR Project pinned schedule slots and validate fixed child outcomes #29 @ f4a755d: independent — Explicit base is exactly draft29, so projection/executor content is excluded. This child only wires opt-in scheduled sinks and drains owned workers; parent admission and retarget/current CI remain required.

[scbrown]

Folded into #31 (aegis-6vf, operator ruling: no stacked drafts). #31's head bfd3d44 contains this branch's commits plus main; review and merge happen there.