deploy(hf): sync szl-holdings/a11oy@194f59416698777d2eec9562f0065113d7576519 derived COPY set

Reusable Dockerfile-COPY-derived deploy from szl-holdings/a11oy 194f59416698777d2eec9562f0065113d7576519.
Files: 1168 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

model_release/receipt-agent/README.md

@@ -31,6 +31,17 @@ turn retrieved text into a mathematical proof.
 | Formula admission | 146 formula crosswalk records + 2 SZL-Lake evidence records = 148 holdout tranche rows | All 148 are holdout; zero are admitted to train. Formula IDs are namespace-scoped. |
 | Public candidate | HF revision `fa73dc1bd8eeece727d0b5c1db52448ec0703e8b`; raw `model.safetensors` SHA-256 `a797592fb35c32cc6ebf5739c0a1d9312123300acaf09987d207d86196bc6e7d` | `MEASURED` only by the bounded CPU contract qualification below; not promoted or deployed by this repository. |
 
+The artifact reconciliation in `reconciliation/` distinguishes signed-receipt
+validity, raw artifact SHA-256, the original signer's
+`SHA256(UTF8(basename) || raw bytes)` domain, and public-head equivalence. At
+the frozen observed head, raw Git commit objects reproduce both declared
+revision IDs, serialized root/subtree objects reproduce their commit-bound
+tree IDs, and the complete tree delta is the one non-inference estate marker.
+ReceiptAgent is
+`ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED`. This state does not expand
+the bounded CPU evaluation or establish hosted serving, general quality,
+promotion, deployment, or independent owner identity.
+
 ## Exact-revision CPU qualification (2026-07-21)
 
 `qualification/heldout-contract-v1.json` freezes the public artifact, public

model_release/receipt-agent/qualification/README.md

@@ -43,6 +43,25 @@ The receipt retains every exact system prompt, user prompt, raw output, input
 and output token count, output digest, generation duration, artifact/source
 binding, runtime version, and memory observation.
 
+## Artifact digest-domain reconciliation (2026-07-28)
+
+The apparent conflict between the receipt-declared weight hashes and the public
+LFS raw SHA-256 values came from comparing different digest domains. The
+original training signer used
+`SHA256(UTF8(basename) || raw safetensors bytes)`, while Hugging Face LFS and the
+qualification contract expose raw file-byte SHA-256. This qualification
+already computed and checked both domains while reading the exact 3.09 GB model
+and 147.8 MB adapter.
+
+The network-free reconciliation under `../reconciliation/` verifies this
+receipt's self-digest, freezes both digest domains, and records that all 12
+inference-bearing Git blobs at public head
+`2e62cb5f8e6a17052da532305a467861094a2109` equal revision
+`fa73dc1bd8eeece727d0b5c1db52448ec0703e8b`. The only public-head delta is the
+non-inference `SZL_ESTATE_MANAGED.json` marker. The resulting state is
+`ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED`; the evaluation limits below
+and every promotion gate remain in force.
+
 ## Limits
 
 This is a structural-contract evaluation, not an evidence-grounding benchmark.

model_release/receipt-agent/reconciliation/README.md

@@ -0,0 +1,46 @@
+# ReceiptAgent artifact-binding reconciliation
+
+This directory preserves one narrow, offline reconciliation of the public
+`SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent` candidate. It does not rerun model
+inference and does not train, upload, promote, or deploy anything.
+
+The evidence deliberately separates three claims:
+
+1. **Receipt signature validity.** The qualification run verified both
+   repository-declared Ed25519 wrappers and their training-to-evaluation chain.
+   The key remains repository-declared rather than independently pinned.
+2. **Exact qualified artifact binding.** The measured qualification loaded
+   revision `fa73dc1bd8eeece727d0b5c1db52448ec0703e8b`, checked raw SHA-256 for
+   `model.safetensors` and `adapter/adapter_model.safetensors`, and separately
+   checked the original signer's
+   `SHA256(UTF8(basename) || raw file bytes)` digest. Those digest domains are
+   different by design. The reconciler reconstructs each canonical Git LFS
+   pointer from the measured raw SHA-256 and byte count, then verifies its Git
+   blob SHA-1 against the frozen qualified/public trees. The frozen raw commit
+   objects are hashed back to both declared revisions, and every serialized
+   root/subtree is hashed back to the tree identity named by its commit.
+3. **Current public-head equivalence.** At observed public head
+   `2e62cb5f8e6a17052da532305a467861094a2109`, all 12 inference-bearing Git
+   blobs equal the qualified revision. A complete walk of both hash-bound trees
+   proves that the only repository blob delta is the additive, non-inference
+   `SZL_ESTATE_MANAGED.json` marker.
+
+The resulting state is
+`ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED`. It does not establish hosted
+serving, general quality, autonomous safety, independent owner identity, or
+promotion readiness. A later public-head revision is not automatically trusted;
+the runtime fails closed until a new frozen reconciliation is reviewed.
+
+## Offline check
+
+```powershell
+python model_release/receipt-agent/reconciliation/reconcile_artifact_binding.py `
+  --fixture model_release/receipt-agent/reconciliation/observed-hf-tree-fixture.v1.json `
+  --qualification-receipt model_release/receipt-agent/qualification/fa73dc1-cpu-qualification-receipt.json `
+  --check model_release/receipt-agent/reconciliation/receipt-agent-artifact-reconciliation.v1.json
+```
+
+The check performs no network access. Negative tests mutate the qualification
+self-digest, digest-domain vectors, raw artifact identity, signature evidence,
+revision commit objects, serialized trees, and inference-bearing Git blobs;
+every mutation must refuse.

model_release/receipt-agent/reconciliation/artifact-reconciliation.schema.json

@@ -0,0 +1,164 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://a-11-oy.com/schemas/receipt-agent-artifact-reconciliation.v1.json",
+  "title": "ReceiptAgent exact-artifact and current-head reconciliation",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "state",
+    "maturity",
+    "observed_at",
+    "repository",
+    "qualified_revision",
+    "public_head_revision",
+    "receipt_signature_validity",
+    "exact_qualified_artifact_binding",
+    "current_public_head_equivalence",
+    "authorization",
+    "non_claims",
+    "fixture_sha256",
+    "reconciliation_sha256"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "szl.receiptagent-artifact-reconciliation.v1"
+    },
+    "state": {
+      "const": "ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED"
+    },
+    "maturity": {
+      "const": "MEASURED"
+    },
+    "observed_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "repository": {
+      "const": "SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent"
+    },
+    "qualified_revision": {
+      "const": "fa73dc1bd8eeece727d0b5c1db52448ec0703e8b"
+    },
+    "public_head_revision": {
+      "const": "2e62cb5f8e6a17052da532305a467861094a2109"
+    },
+    "receipt_signature_validity": {
+      "type": "object",
+      "required": ["training", "evaluation", "key_id", "trust_boundary"],
+      "properties": {
+        "training": {"const": true},
+        "evaluation": {"const": true},
+        "key_id": {"const": "e7f01810aaa97394"},
+        "trust_boundary": {
+          "const": "REPOSITORY_DECLARED_KEY_NOT_INDEPENDENTLY_PINNED"
+        }
+      },
+      "additionalProperties": false
+    },
+    "exact_qualified_artifact_binding": {
+      "type": "object",
+      "required": [
+        "verified",
+        "qualification_receipt_sha256",
+        "model_raw_sha256",
+        "model_receipt_directory_sha256",
+        "adapter_raw_sha256",
+        "adapter_receipt_directory_sha256",
+        "model_lfs_pointer_git_blob_sha1",
+        "adapter_lfs_pointer_git_blob_sha1",
+        "digest_domain"
+      ],
+      "properties": {
+        "verified": {"const": true},
+        "qualification_receipt_sha256": {
+          "const": "5abc85af639477f32951784c372beef33a608375586c111e517692207074ba7b"
+        },
+        "model_raw_sha256": {
+          "const": "a797592fb35c32cc6ebf5739c0a1d9312123300acaf09987d207d86196bc6e7d"
+        },
+        "model_receipt_directory_sha256": {
+          "const": "851af12990cc2077bb610ebe3e4511a077f1fc59f8e7ebe21d40c73a7da64c69"
+        },
+        "adapter_raw_sha256": {
+          "const": "706aff139489d62cb1ac221c0f92a1a8595cd6a42032c542efe8028684e57cf2"
+        },
+        "adapter_receipt_directory_sha256": {
+          "const": "5eb426c1a4cd17faa4c46590d3aff22671023f64a179e7b47b5bcab4c59e47cd"
+        },
+        "model_lfs_pointer_git_blob_sha1": {
+          "const": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764"
+        },
+        "adapter_lfs_pointer_git_blob_sha1": {
+          "const": "0cb49f48902ad765f489fd45b21cc186afca93ad"
+        },
+        "digest_domain": {
+          "const": "SHA256_UTF8_BASENAME_CONCAT_RAW_FILE_BYTES"
+        }
+      },
+      "additionalProperties": false
+    },
+    "current_public_head_equivalence": {
+      "type": "object",
+      "required": [
+        "verified",
+        "qualified_commit_git_object_verified",
+        "public_head_commit_git_object_verified",
+        "complete_revision_tree_delta_verified",
+        "inference_bearing_blob_count",
+        "all_inference_bearing_git_blobs_equal",
+        "non_inference_delta"
+      ],
+      "properties": {
+        "verified": {"const": true},
+        "qualified_commit_git_object_verified": {"const": true},
+        "public_head_commit_git_object_verified": {"const": true},
+        "complete_revision_tree_delta_verified": {"const": true},
+        "inference_bearing_blob_count": {"const": 12},
+        "all_inference_bearing_git_blobs_equal": {"const": true},
+        "non_inference_delta": {
+          "type": "array",
+          "prefixItems": [
+            {
+              "type": "object",
+              "required": ["path", "change", "inference_bearing"],
+              "properties": {
+                "path": {"const": "SZL_ESTATE_MANAGED.json"},
+                "change": {"const": "ADDED"},
+                "inference_bearing": {"const": false}
+              },
+              "additionalProperties": false
+            }
+          ],
+          "minItems": 1,
+          "maxItems": 1
+        }
+      },
+      "additionalProperties": false
+    },
+    "authorization": {
+      "type": "object",
+      "required": ["trained", "uploaded", "promoted", "deployed"],
+      "properties": {
+        "trained": {"const": false},
+        "uploaded": {"const": false},
+        "promoted": {"const": false},
+        "deployed": {"const": false}
+      },
+      "additionalProperties": false
+    },
+    "non_claims": {
+      "type": "array",
+      "minItems": 1,
+      "items": {"type": "string"}
+    },
+    "fixture_sha256": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "reconciliation_sha256": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    }
+  },
+  "additionalProperties": false
+}

model_release/receipt-agent/reconciliation/observed-hf-tree-fixture.v1.json

@@ -0,0 +1,223 @@
+{
+  "schema_version": "szl.receiptagent-artifact-reconciliation-fixture.v1",
+  "repository": "SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent",
+  "observed_at": "2026-07-28T18:10:16.424425Z",
+  "qualified_revision": "fa73dc1bd8eeece727d0b5c1db52448ec0703e8b",
+  "public_head_revision": "2e62cb5f8e6a17052da532305a467861094a2109",
+  "qualification_receipt": {
+    "path": "model_release/receipt-agent/qualification/fa73dc1-cpu-qualification-receipt.json",
+    "receipt_sha256": "5abc85af639477f32951784c372beef33a608375586c111e517692207074ba7b",
+    "artifact_binding": {
+      "digest_domain": "SHA256_UTF8_BASENAME_CONCAT_RAW_FILE_BYTES",
+      "model_file": {
+        "path": "model.safetensors",
+        "bytes": 3087467144,
+        "raw_sha256": "a797592fb35c32cc6ebf5739c0a1d9312123300acaf09987d207d86196bc6e7d",
+        "receipt_directory_sha256": "851af12990cc2077bb610ebe3e4511a077f1fc59f8e7ebe21d40c73a7da64c69"
+      },
+      "adapter_file": {
+        "path": "adapter/adapter_model.safetensors",
+        "bytes": 147770496,
+        "raw_sha256": "706aff139489d62cb1ac221c0f92a1a8595cd6a42032c542efe8028684e57cf2",
+        "receipt_directory_sha256": "5eb426c1a4cd17faa4c46590d3aff22671023f64a179e7b47b5bcab4c59e47cd"
+      }
+    }
+  },
+  "signature_evidence": {
+    "training": {
+      "verified": true,
+      "key_id": "e7f01810aaa97394",
+      "canonical_sha256": "9f342f33f295888f95490359bc87c2425ce80866dce8d4f1aa38ed5dcb54d93e"
+    },
+    "evaluation": {
+      "verified": true,
+      "key_id": "e7f01810aaa97394",
+      "canonical_sha256": "45fe059812d791400650e3171b72e5bd9846d6ce5d5c9ee1351a195ceba81fcd"
+    },
+    "trust_boundary": "REPOSITORY_DECLARED_KEY_NOT_INDEPENDENTLY_PINNED"
+  },
+  "digest_test_vectors": [
+    {
+      "basename": "model.safetensors",
+      "content_base64": "c3psLXJlY2VpcHRhZ2VudC1kaWdlc3QtZG9tYWluLXYxCg==",
+      "bytes": 34,
+      "raw_sha256": "d081995f74ba2a83fb15c242844cfdabf332ad0b0fd2cc6ddb08566ed2c4b96a",
+      "receipt_directory_sha256": "6c4719c5ea6daade6e9d6bed79c85cfc7fe583f5742ad5f235947c25424203bf"
+    },
+    {
+      "basename": "adapter_model.safetensors",
+      "content_base64": "c3psLXJlY2VpcHRhZ2VudC1kaWdlc3QtZG9tYWluLXYxCg==",
+      "bytes": 34,
+      "raw_sha256": "d081995f74ba2a83fb15c242844cfdabf332ad0b0fd2cc6ddb08566ed2c4b96a",
+      "receipt_directory_sha256": "0448ef08a8fcde60dd78675bd404f70c38f34e1ed94746ad4e1b5df8f590d09d"
+    }
+  ],
+  "git_object_evidence": {
+    "qualified": {
+      "revision": "fa73dc1bd8eeece727d0b5c1db52448ec0703e8b",
+      "commit_object_base64": "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",
+      "trees": [
+        {
+          "path": "",
+          "tree_sha1": "d0fa7e17a02c751b8078e740d3e5d5586f19f0bd",
+          "entries": [
+            {"mode": "100644", "type": "blob", "object_sha1": "52373fe24473b1aa44333d318f578ae6bf04b49b", "name": ".gitattributes"},
+            {"mode": "100644", "type": "blob", "object_sha1": "d645695673349e3947e8e5ae42332d0ac3164cd7", "name": "LICENSE"},
+            {"mode": "100644", "type": "blob", "object_sha1": "4a0d6eefab177fc13f4c2d6f8701259b21a5802c", "name": "README.md"},
+            {"mode": "040000", "type": "tree", "object_sha1": "9cdbf3706cf26fd51c50b848e7ee5a819cf0488b", "name": "adapter"},
+            {"mode": "100644", "type": "blob", "object_sha1": "9840d40f49842423ad9d3c92bbedac488564c088", "name": "chat_template.jinja"},
+            {"mode": "100644", "type": "blob", "object_sha1": "8e6225ec48fb9ae0169b89eac1d42f2a5b5474b6", "name": "config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "380df800183f7f15fad4e90c333569d3dece04dc", "name": "eval_receipt.signed.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "82ca3814da7e7349d09c77d93eafe37b77105da5", "name": "generation_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764", "name": "model.safetensors"},
+            {"mode": "100644", "type": "blob", "object_sha1": "2f555637d88534305ec846a4102f65ce35fea78d", "name": "owner_pubkey.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "00db5a7f765e8dca49c4ffad0f0725ca4c26f120", "name": "receiptagent.schema.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "d73428d91463b495bc017fb6a2fb3a656646482b", "name": "tokenizer.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "5ed51702c01bac3f955bb72cafeba92a7427e829", "name": "tokenizer_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "0c03f078d9c829c108e48e35e6df1f31ca72866c", "name": "training_receipt.signed.json"}
+          ]
+        },
+        {
+          "path": "adapter",
+          "tree_sha1": "9cdbf3706cf26fd51c50b848e7ee5a819cf0488b",
+          "entries": [
+            {"mode": "100644", "type": "blob", "object_sha1": "51eed4427294f266f7e5960ae82b1eb27aaba74d", "name": "README.md"},
+            {"mode": "100644", "type": "blob", "object_sha1": "cc95e3ab87a880ca9b1c72f440c0e4b5440e5b49", "name": "adapter_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "0cb49f48902ad765f489fd45b21cc186afca93ad", "name": "adapter_model.safetensors"}
+          ]
+        }
+      ]
+    },
+    "public_head": {
+      "revision": "2e62cb5f8e6a17052da532305a467861094a2109",
+      "commit_object_base64": "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",
+      "trees": [
+        {
+          "path": "",
+          "tree_sha1": "d6394d4b6013e55a5277a540d284a7be3513e88d",
+          "entries": [
+            {"mode": "100644", "type": "blob", "object_sha1": "52373fe24473b1aa44333d318f578ae6bf04b49b", "name": ".gitattributes"},
+            {"mode": "100644", "type": "blob", "object_sha1": "d645695673349e3947e8e5ae42332d0ac3164cd7", "name": "LICENSE"},
+            {"mode": "100644", "type": "blob", "object_sha1": "4a0d6eefab177fc13f4c2d6f8701259b21a5802c", "name": "README.md"},
+            {"mode": "100644", "type": "blob", "object_sha1": "422df3133b04fb05cb2e039d58ed37feca833605", "name": "SZL_ESTATE_MANAGED.json"},
+            {"mode": "040000", "type": "tree", "object_sha1": "9cdbf3706cf26fd51c50b848e7ee5a819cf0488b", "name": "adapter"},
+            {"mode": "100644", "type": "blob", "object_sha1": "9840d40f49842423ad9d3c92bbedac488564c088", "name": "chat_template.jinja"},
+            {"mode": "100644", "type": "blob", "object_sha1": "8e6225ec48fb9ae0169b89eac1d42f2a5b5474b6", "name": "config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "380df800183f7f15fad4e90c333569d3dece04dc", "name": "eval_receipt.signed.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "82ca3814da7e7349d09c77d93eafe37b77105da5", "name": "generation_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764", "name": "model.safetensors"},
+            {"mode": "100644", "type": "blob", "object_sha1": "2f555637d88534305ec846a4102f65ce35fea78d", "name": "owner_pubkey.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "00db5a7f765e8dca49c4ffad0f0725ca4c26f120", "name": "receiptagent.schema.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "d73428d91463b495bc017fb6a2fb3a656646482b", "name": "tokenizer.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "5ed51702c01bac3f955bb72cafeba92a7427e829", "name": "tokenizer_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "0c03f078d9c829c108e48e35e6df1f31ca72866c", "name": "training_receipt.signed.json"}
+          ]
+        },
+        {
+          "path": "adapter",
+          "tree_sha1": "9cdbf3706cf26fd51c50b848e7ee5a819cf0488b",
+          "entries": [
+            {"mode": "100644", "type": "blob", "object_sha1": "51eed4427294f266f7e5960ae82b1eb27aaba74d", "name": "README.md"},
+            {"mode": "100644", "type": "blob", "object_sha1": "cc95e3ab87a880ca9b1c72f440c0e4b5440e5b49", "name": "adapter_config.json"},
+            {"mode": "100644", "type": "blob", "object_sha1": "0cb49f48902ad765f489fd45b21cc186afca93ad", "name": "adapter_model.safetensors"}
+          ]
+        }
+      ]
+    }
+  },
+  "inference_bearing_blobs": [
+    {
+      "path": "adapter/adapter_config.json",
+      "qualified_git_blob_sha1": "cc95e3ab87a880ca9b1c72f440c0e4b5440e5b49",
+      "public_head_git_blob_sha1": "cc95e3ab87a880ca9b1c72f440c0e4b5440e5b49",
+      "inference_bearing": true
+    },
+    {
+      "path": "adapter/adapter_model.safetensors",
+      "qualified_git_blob_sha1": "0cb49f48902ad765f489fd45b21cc186afca93ad",
+      "public_head_git_blob_sha1": "0cb49f48902ad765f489fd45b21cc186afca93ad",
+      "inference_bearing": true
+    },
+    {
+      "path": "chat_template.jinja",
+      "qualified_git_blob_sha1": "9840d40f49842423ad9d3c92bbedac488564c088",
+      "public_head_git_blob_sha1": "9840d40f49842423ad9d3c92bbedac488564c088",
+      "inference_bearing": true
+    },
+    {
+      "path": "config.json",
+      "qualified_git_blob_sha1": "8e6225ec48fb9ae0169b89eac1d42f2a5b5474b6",
+      "public_head_git_blob_sha1": "8e6225ec48fb9ae0169b89eac1d42f2a5b5474b6",
+      "inference_bearing": true
+    },
+    {
+      "path": "eval_receipt.signed.json",
+      "qualified_git_blob_sha1": "380df800183f7f15fad4e90c333569d3dece04dc",
+      "public_head_git_blob_sha1": "380df800183f7f15fad4e90c333569d3dece04dc",
+      "inference_bearing": true
+    },
+    {
+      "path": "generation_config.json",
+      "qualified_git_blob_sha1": "82ca3814da7e7349d09c77d93eafe37b77105da5",
+      "public_head_git_blob_sha1": "82ca3814da7e7349d09c77d93eafe37b77105da5",
+      "inference_bearing": true
+    },
+    {
+      "path": "model.safetensors",
+      "qualified_git_blob_sha1": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764",
+      "public_head_git_blob_sha1": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764",
+      "inference_bearing": true
+    },
+    {
+      "path": "owner_pubkey.json",
+      "qualified_git_blob_sha1": "2f555637d88534305ec846a4102f65ce35fea78d",
+      "public_head_git_blob_sha1": "2f555637d88534305ec846a4102f65ce35fea78d",
+      "inference_bearing": true
+    },
+    {
+      "path": "receiptagent.schema.json",
+      "qualified_git_blob_sha1": "00db5a7f765e8dca49c4ffad0f0725ca4c26f120",
+      "public_head_git_blob_sha1": "00db5a7f765e8dca49c4ffad0f0725ca4c26f120",
+      "inference_bearing": true
+    },
+    {
+      "path": "tokenizer.json",
+      "qualified_git_blob_sha1": "d73428d91463b495bc017fb6a2fb3a656646482b",
+      "public_head_git_blob_sha1": "d73428d91463b495bc017fb6a2fb3a656646482b",
+      "inference_bearing": true
+    },
+    {
+      "path": "tokenizer_config.json",
+      "qualified_git_blob_sha1": "5ed51702c01bac3f955bb72cafeba92a7427e829",
+      "public_head_git_blob_sha1": "5ed51702c01bac3f955bb72cafeba92a7427e829",
+      "inference_bearing": true
+    },
+    {
+      "path": "training_receipt.signed.json",
+      "qualified_git_blob_sha1": "0c03f078d9c829c108e48e35e6df1f31ca72866c",
+      "public_head_git_blob_sha1": "0c03f078d9c829c108e48e35e6df1f31ca72866c",
+      "inference_bearing": true
+    }
+  ],
+  "public_head_delta": [
+    {
+      "path": "SZL_ESTATE_MANAGED.json",
+      "change": "ADDED",
+      "inference_bearing": false
+    }
+  ],
+  "authorization": {
+    "trained": false,
+    "uploaded": false,
+    "promoted": false,
+    "deployed": false
+  },
+  "non_claims": [
+    "NOT_A_NEW_QUALIFICATION_RUN",
+    "NOT_A_TRAINING_RUN",
+    "NOT_A_PROMOTION",
+    "NOT_A_DEPLOYMENT",
+    "NOT_INDEPENDENT_OWNER_IDENTITY_ASSURANCE",
+    "NOT_GENERAL_CAPABILITY_EVIDENCE"
+  ]
+}

model_release/receipt-agent/reconciliation/receipt-agent-artifact-reconciliation.v1.json

@@ -0,0 +1,57 @@
+{
+  "schema_version": "szl.receiptagent-artifact-reconciliation.v1",
+  "state": "ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED",
+  "maturity": "MEASURED",
+  "observed_at": "2026-07-28T18:10:16.424425Z",
+  "repository": "SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent",
+  "qualified_revision": "fa73dc1bd8eeece727d0b5c1db52448ec0703e8b",
+  "public_head_revision": "2e62cb5f8e6a17052da532305a467861094a2109",
+  "receipt_signature_validity": {
+    "training": true,
+    "evaluation": true,
+    "key_id": "e7f01810aaa97394",
+    "trust_boundary": "REPOSITORY_DECLARED_KEY_NOT_INDEPENDENTLY_PINNED"
+  },
+  "exact_qualified_artifact_binding": {
+    "verified": true,
+    "qualification_receipt_sha256": "5abc85af639477f32951784c372beef33a608375586c111e517692207074ba7b",
+    "model_raw_sha256": "a797592fb35c32cc6ebf5739c0a1d9312123300acaf09987d207d86196bc6e7d",
+    "model_receipt_directory_sha256": "851af12990cc2077bb610ebe3e4511a077f1fc59f8e7ebe21d40c73a7da64c69",
+    "adapter_raw_sha256": "706aff139489d62cb1ac221c0f92a1a8595cd6a42032c542efe8028684e57cf2",
+    "adapter_receipt_directory_sha256": "5eb426c1a4cd17faa4c46590d3aff22671023f64a179e7b47b5bcab4c59e47cd",
+    "model_lfs_pointer_git_blob_sha1": "1a6ef2a0a8e2281b4d543060f9df5f766d6ee764",
+    "adapter_lfs_pointer_git_blob_sha1": "0cb49f48902ad765f489fd45b21cc186afca93ad",
+    "digest_domain": "SHA256_UTF8_BASENAME_CONCAT_RAW_FILE_BYTES"
+  },
+  "current_public_head_equivalence": {
+    "verified": true,
+    "qualified_commit_git_object_verified": true,
+    "public_head_commit_git_object_verified": true,
+    "complete_revision_tree_delta_verified": true,
+    "inference_bearing_blob_count": 12,
+    "all_inference_bearing_git_blobs_equal": true,
+    "non_inference_delta": [
+      {
+        "path": "SZL_ESTATE_MANAGED.json",
+        "change": "ADDED",
+        "inference_bearing": false
+      }
+    ]
+  },
+  "authorization": {
+    "trained": false,
+    "uploaded": false,
+    "promoted": false,
+    "deployed": false
+  },
+  "non_claims": [
+    "NOT_A_NEW_QUALIFICATION_RUN",
+    "NOT_A_TRAINING_RUN",
+    "NOT_A_PROMOTION",
+    "NOT_A_DEPLOYMENT",
+    "NOT_INDEPENDENT_OWNER_IDENTITY_ASSURANCE",
+    "NOT_GENERAL_CAPABILITY_EVIDENCE"
+  ],
+  "fixture_sha256": "9a79520905ef04e4417b5accf3aa582a5020c37c52d25b31c9c8bcd95868d0ff",
+  "reconciliation_sha256": "8361880787feb8bc2d3307bcc5d4e2c673b0fabe62694760df967eb39815f799"
+}

model_release/szl-ayllu-binding.json

@@ -6,6 +6,20 @@
   "personas_are": "PROMPT_AND_RUNTIME_ROLES_USING_PROFILE_SPECIFIC_EXACT_TAG_ROUTING_WITH_THREE_DECLARED_SHARED_FALLBACKS",
   "ayllu_specific_weights_present": false,
   "actual_model_authority": "PER_TURN_ROUTER_AND_RECEIPT_EVIDENCE",
+  "profile_states": {
+    "ReceiptAgent-v1": "ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED",
+    "BrainNavigator-v1": "SIGNED_RECEIPTS_VALID_ARTIFACT_BINDING_CONFLICT",
+    "Operator-v1": "PLANNED_TOOL_CONTRACT_REQUIRED",
+    "Sentinel-v1": "PLANNED_SECURITY_ADMISSION_REQUIRED",
+    "Anatomy-v1": "PLANNED_ONTOLOGY_ADMISSION_REQUIRED"
+  },
+  "receipt_agent_artifact_reconciliation": {
+    "state": "ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED",
+    "qualified_revision": "fa73dc1bd8eeece727d0b5c1db52448ec0703e8b",
+    "reconciled_public_head_revision": "2e62cb5f8e6a17052da532305a467861094a2109",
+    "artifact": "model_release/receipt-agent/reconciliation/receipt-agent-artifact-reconciliation.v1.json",
+    "runtime_rule": "A later public head fails closed until every inference-bearing Git blob is reconciled again."
+  },
   "profile_pin_evidence_required": [
     "base_revision",
     "adapter_sha256",

model_release/szl-forge-family.json

@@ -18,12 +18,13 @@
       "model_id": "SZL-Forge-1.5B-ReceiptAgent-v1",
       "hf_target": "SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent",
       "weight_artifact_required": true,
-      "state": "SIGNED_RECEIPTS_VALID_ARTIFACT_BINDING_CONFLICT",
+      "state": "ARTIFACT_BYTES_RECONCILED_MEASURED_NOT_PROMOTED",
       "role": "Evidence-bound drafts in independently signed runtime receipt envelopes, abstention, formula references, and proposal-only tools; the model is never the signer.",
       "runtime": "model_release/receipt-agent/receipt_runtime.py",
       "training_contract": "model_release/szl-forge/training-contract.json",
       "runtime_tag": "receiptagent:latest",
-      "artifact_honesty": "Remote weights and signed receipts exist, but the receipt-declared adapter/full-weight hashes do not match the published LFS artifacts; promotion remains blocked."
+      "artifact_reconciliation": "model_release/receipt-agent/reconciliation/receipt-agent-artifact-reconciliation.v1.json",
+      "artifact_honesty": "The exact qualified revision binds raw model/adapter SHA-256 values separately from the original signer's SHA256(UTF8 basename || raw bytes) digest domain. At frozen public head 2e62cb5f8e6a17052da532305a467861094a2109, all 12 inference-bearing Git blobs equal the qualified revision; only a non-inference estate marker was added. This is MEASURED artifact reconciliation, not promotion, deployment, hosted serving, general quality, or independent owner-identity assurance."
     },
     {
       "profile_id": "BrainNavigator-v1",