Status: PASS / MERGE_DISABLED / PRODUCTION_NO_GO

Implementation: DEDICATED_R2_AUTHORIZER_V3_6_OBSERVER_JOURNAL_PINNED.

V3.6 advances the trust root to observer R2_GITHUB_OBSERVER_V1_6_DURABLE_REOBSERVATION_JOURNAL and broker R2_GITHUB_APP_CUSTODY_BROKER_V1_3_OBSERVER_JOURNAL_PINNED. Signed authorizer issuance, consumption and ledger schemas advance to v3.6.

Positive observer-chain evaluation 01a04c6f-68a9-74f8-9cb7-eec9f75dcf97 — PASS. It proved that a valid V1.6 receipt is accepted; V1.5 observer downgrade and V1.2 broker downgrade are rejected; changing a signed invocation mode from BROKER_AUTOPILOT to the other otherwise-allowed mode ROOT fails receipt-hash verification; invalid invocation mode, binding mismatch and signature tamper are rejected.

Permanent branch selftest after removing diagnostic surfaces: 01a04c6f-b7a2-7509-a7cd-d67b6dfb804c — PASS.

Static audit: 13/13 PASS.

MERGE_PR remains disabled, native enforcement remains mandatory and production_go=false.