Status: PASS / MERGE_DISABLED / PRODUCTION_NO_GO

Implementation: DEDICATED_R2_AUTHORIZER_V3_2_OBSERVER_BROKER_PINNED

Required observer: R2_GITHUB_OBSERVER_V1_2_BROKER_JIT.

V3.2 pins the broker-wired observer implementation, retains exact repository/PR/base/head/package binding, ES256 verification, native-enforcement proof, freshness windows, evidence binding, replay prevention, and production_go=false. Older observer implementations fail with OBSERVER_IMPLEMENTATION_MISMATCH.

Signed schemas move to v3.2 for issuance, consumption, and ledger.

Validation evaluation: 01a04bde-6403-70fa-b459-8be0457b4910 — PASS.

Test receipt SHA-256: 45e70523adf8f3375dda21bf00d3a5a49244d56e667e286fa525421b02507eee.

Static audit: PASS. Merge authorization remains disabled; no product-production authority is created.