Status: PASS / MERGE_DISABLED / PRODUCTION_NO_GO

Implementation: DEDICATED_R2_AUTHORIZER_V3_3_BROKER_CHAIN_PINNED.

Required observer: R2_GITHUB_OBSERVER_V1_3_BROKER_IMPLEMENTATION_PINNED. Required broker provenance inside the signed observer receipt: R2_GITHUB_APP_CUSTODY_BROKER_V1_1_EXACT_SCOPE.

The authorizer now rejects both observer implementation downgrade and broker implementation downgrade before any merge authority can be issued. Signed authorizer schemas advance to v3.3.

A temporary branch-only verifier was used to test the real observer ES256 chain and was removed before release. Evaluation 01a04be8-8d45-733a-b286-050e167baa16 passed: valid signed observer receipt accepted; broker downgrade rejected with BROKER_IMPLEMENTATION_MISMATCH; observer downgrade rejected; binding mismatch rejected; signature tamper rejected.

The permanent selftest evaluation 01a04be8-d8d1-7758-bbd8-1aef1d73ddbc also passed after the diagnostic route was removed.

TEST_ONLY receipt SHA-256: 28e52c4f9c6607f2bb4a5326e5be70b0bd757eabf0fe9495408f00e38504bcea.

Static audit: PASS. Merge authorization remains disabled and production_go=false.