R9 R2 Boundary Autopilot Reconciliation

Status: PASS / LIVE_FAIL_CLOSED / PRODUCTION_NO_GO

Runtime remains R9-ISOLATED-AUTH-PROVENANCE with active lane CODEX_REAL_RUNTIME_ACCEPTANCE_V4.

This release reconciles the relay documentation to the current R2 control-plane chain:

  • broker: R2_GITHUB_APP_CUSTODY_BROKER_V1_2_POST_INSTALL_AUTOPILOT
  • observer: R2_GITHUB_OBSERVER_V1_5_BROKER_AUTOPILOT
  • authorizer: DEDICATED_R2_AUTHORIZER_V3_5_OBSERVER_V1_5_PINNED
  • deployer: R2_DEPLOYER_CONTROLLER_V3_6_BROKER_AUTOPILOT

The broker's post-install automation is bounded to DRAFT JIT preparation plus signed external observation. It does not authorize merge, deploy, billing, repository visibility changes or product production.

The relay bootstrap remains R9/V4 with Python launcher 5.1 and an exact-hash-bound Windows PowerShell launcher. No synthetic Codex ACK is created.

Branch evaluation 01a04c56-1fbc-72fd-8dc4-484cdb539ac1 — PASS.

production_go=false.