R5_POST_PROMOTION_RECEIPT.md

RUMBO Continuity Relay — R5 Post-Promotion Receipt

Effective UTC: 2026-08-29T02:47Z Promoted target: main Promotion commit/version: main 49 Implementation: R5-PAIRING-RECOVERY Production: NO_GO

Promotion receipt

Branch r5-pairing-recovery was forked from main version 48 and merged only after main was re-read at the same version 48. Merge result: SUCCESS, target main version 49.

Post-merge verification on main

Health:

  • HTTP 200
  • implementation_revision: R5-PAIRING-RECOVERY
  • pairing-expiry-recovery capability: present
  • pairing-constant-time-code-check capability: present
  • merge_authorization_enabled: false
  • production_go: false

Synthetic pairing regression:

  • evaluation id: 01a04b6a-643a-748c-b502-207898cf4510
  • result: PASS
  • pure state cases: 6
  • SQLite expiry reissue: PASS
  • SQLite atomic confirm: PASS
  • production_pairing_touched: false

Acceptance regression:

  • evaluation id: 01a04b6a-7069-716e-9477-7ef12f256275
  • result: PASS
  • implementation_revision: R5-PAIRING-RECOVERY
  • unauthenticated acceptance: HTTP 401
  • state: PENDING_CODEX_ACK
  • lane revision: 1
  • checkpoint SHA-256: d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962
  • audit_chain_ok: true
  • audit event count: 33
  • production_go: false
  • challenge id: f7ca12d8-226a-43b9-9fc0-bd9ede8548af
  • challenge message SHA-256: 70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979

Database after regressions:

  • codex-v4 rows: 0
  • r5-selftest-expired rows: 0

Post-promotion static audit:

  • all checked invariants: PASS
  • R4 acceptance route preserved
  • no self-test HTTP route
  • pairing code constant-time comparison present
  • expired reissue atomic condition present
  • confirm-before-expiry atomic condition present
  • production_go=false retained
  • merge-enabling environment variable absent
  • no literal OpenAI/GitHub token pattern in source

Remote execution surface:

  • connected Remote Desktop Commander devices: 0
  • actual user Codex process: NOT_OBSERVED

Activation-package reconciliation

The latest indexed sidecar for RUMBO_CODEX_REAL_RUNTIME_ACTIVATION_CURRENT.zip reports SHA-256: 8db386dfe56569916da7a62c59499fcb2d7e6c8d82f7da647511a9a8c8d50943

The ZIP bytes and a regeneration receipt are not available through the current File Library index. Therefore:

  • ACTIVATION_CURRENT_SIDECAR = OBSERVED
  • ACTIVATION_CURRENT_BYTES = NOT_PROVEN
  • ACTIVATION_CURRENT_EXECUTION = NOT_PROVEN

R5 does not depend on that opaque package.

Truth boundary

R5_MAIN = PASS_LIVE PAIRING_RECOVERY = PASS_LIVE ACCEPTANCE_VERIFIER = PASS_LIVE AUDIT_CHAIN = PASS REAL_CODEX_PAIRING_V4 = NOT_PROVEN REAL_CODEX_ACK = NOT_PROVEN REAL_CODEX_RESPONSE = NOT_PROVEN FINAL_CHATGPT_ACK = NOT_PROVEN FULL_FEDERATED_RUNTIME = NO_GO PRODUCTION = NO_GO

The next valid promotion requires evidence from the user's actual Codex runtime. No synthetic test, release ZIP, plugin listing, prepared launcher, TEST_ONLY PR binding, or activation sidecar can substitute for that receipt.