Preserve selected weights and publish qualified PROCEDURE reliability repair

EVALUATION_SUMMARY.json

@@ -1,4 +1,8 @@
 {
+  "current_repair_accuracy_evaluated": false,
+  "current_repair_note": "Historical counts are preserved exactly; native reliability qualification does not establish a new score.",
+  "current_repaired_image_config_digest": "sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576",
+  "evaluated_image_config_digest": "sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5",
   "evaluation_gold_or_rows_included": false,
   "fresh_native_protocol": {
     "all_primary_outcomes_retained": 2174,

IMAGE_IDENTITY.json

@@ -10,7 +10,7 @@
     "LD_LIBRARY_PATH": "/usr/local/nvidia/lib:/usr/local/nvidia/lib64",
     "NVIDIA_DRIVER_CAPABILITIES": "compute,utility",
     "NVIDIA_VISIBLE_DEVICES": "all",
-    "ORENA_VEHICLE_MANIFEST_SHA256": "1f473c96f16b92dcd46baa90d392adfdc823ee2860f7848b39bc30e422bbd5ed",
+    "ORENA_VEHICLE_MANIFEST_SHA256": "5950b563eb85bf7d9726dac150086407b8f52dcbd0d7c7a9331c510b97ef451e",
     "OWLV2_REVISION": "95e26936e865f87db1742128404b3c035d47d89d",
     "PATH": "/usr/local/nvidia/bin:/usr/local/cuda/bin:/opt/conda/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
     "PIP_NO_CACHE_DIR": "1",
@@ -82,52 +82,44 @@
     "TRANSFORMERS_OFFLINE": "1"
   },
   "cloud_archive": {
-    "accepted_receipt": {
-      "bytes": 238489,
-      "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/build/cloud_archive_export_20260910/actual_complete_c/independent_actual_a/ACCEPTANCE.json",
-      "sha256": "049d7c371c33e352cf23bdc699a493f6bc7ce7b5a27a3156c1cd2ae26f57d207"
-    },
-    "bytes": 52710560644,
-    "generation": "1789038565073769",
-    "sha256": "d633c21f620c4e4afbdd6dadb181dfc4d41a4fc446a6dbede1718cd949ac6acc",
-    "uri": "gs://heydonto-surgfield-research/finals/procedure/candidates/20260910/cloudbuild-normalized-8d3bbd92c7ef-c/procedure-q38-normalized-cache-8d3bbd92c7ef.tar.gz"
+    "bytes": 52775393310,
+    "generation": "1789119563478283",
+    "sha256": "b63dcf1bbee6554942a78edc823dfc4b38a89dba54f029acdd28a8c91bfa4a2d",
+    "uri": "gs://heydonto-surgfield-research/finals/procedure/candidates/20260911/procedure-diagnostic-repair-20260911-0846-b/procedure-diagnostic-repair-20260911-0846-b.tar.gz"
   },
-  "config_digest": "sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5",
+  "config_digest": "sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576",
   "contact": "Reza Nehzati, Ph.D.",
-  "exact_local_archive": {
-    "bytes": 52772022248,
-    "compression_bytes_differ_from_cloud": true,
-    "config_and_layer_identity_same": true,
-    "sha256": "c5557475c46f61c83440d8245a72d280c45440093c0624c0613e464a2c15e284"
-  },
+  "downloaded_hf_assets_gpu_qualified": false,
   "extracting_files_does_not_reconstruct_qualified_OCI_environment": true,
   "gid": 1000,
-  "image_metadata": {
-    "bytes": 19474,
-    "path": "/private/tmp/orena-exact615-platform-compatibility-20260910-decode/source/IMAGE_INSPECT.json",
-    "sha256": "59eaf9428e043dfc583b89e4be551a2932b227cdd088d094dd0d4bc1a0aa325f"
-  },
-  "modal_image_id": "im-4LrYWcw7qaFZTa56rBmSvI",
+  "layer_count": 81,
+  "model_assets_modified": false,
   "native_command": [
     "/opt/conda/bin/python",
     "-B",
     "/app/runtime_zoom_entry.py",
     "--submission"
   ],
-  "owner_selection_not_new_platform_result": true,
+  "original_asset_revision": "6a7fc05f196b98d751e3a14775d60f1161166d2a",
+  "original_image": {
+    "bytes": 5975,
+    "path": "IMAGE_IDENTITY.json",
+    "repository_revision": "b2176cf6d0f77e58e34a90583041b1a929417fb3",
+    "sha256": "913403bda9aea20157c859fa92566e20185a45a18a82ec83ebfb67f4e36dabf7"
+  },
   "private_required": true,
-  "registry_reference": "us-central1-docker.pkg.dev/heydonto-425716/surgfield/surgfield-proc-q38-validation@sha256:32d4f04c32fc304888b0571ce76a332c8d2fe8d2e4aac262de9709dca07f4291",
-  "repository": "HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL",
-  "schema": "selected615-hf-image-identity/1",
-  "source_asset_plan": {
-    "bytes": 118107,
-    "path": "/private/tmp/orena-pfull-best-native-comparison-20260910-decode-b/compiled/smoke_PLAN_PENDING.json",
-    "sha256": "a5db23c989c2877cdf1715db3a22ddf7887025ee8393c13988b8eaae7467401c"
+  "qualified_inputs": {
+    "bytes": 6555,
+    "path": "/Users/rezanehzati/Projects/orena-finals/packages/procedure/review/submission_failure_20260911/root_engineering_signoff_b/HF_QUALIFIED_INPUTS.json",
+    "sha256": "ae35644a58555c21ceb6e3c0685d3dcf126bf8b870df2c237a28cfea3327ef2d"
   },
-  "source_evidence": {
-    "bytes": 12568,
-    "path": "/private/tmp/orena-exact615-platform-compatibility-20260910-decode/SOURCE_PINS.json",
-    "sha256": "b0d2ea0fb73720381168e02dfc6fe6efd517a1fbb98127316736a8cc637ccf8a"
+  "registry_reference": "us-central1-docker.pkg.dev/heydonto-425716/surgfield/surgfield-proc-q38-validation@sha256:f0590e6d79097a37f502260cf665624bd4ca87e9cbda66d240d6d4db7d0bb63d",
+  "repository": "HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL",
+  "schema": "procedure-hf-repaired-image-identity/1",
+  "source_manifest": {
+    "bytes": 52533,
+    "repo_path": "SOURCE_MANIFEST.json",
+    "sha256": "f0324e066f21fe9d5c9377a8ff60526503eebd05d90219397563a47e02cc6775"
   },
   "uid": 1000,
   "workdir": "/app"

LICENSE_PROVENANCE.md

@@ -8,7 +8,7 @@ This document reports component terms and their evidence. It does not grant a ne
 | Prequantized Qwen base | Quantized derivative of the recorded Qwen base | Exact selected tensor/config hashes and quantization configuration are in ASSET_MANIFEST.json and LINEAGE.json. Retain the Qwen notices; no new aggregate-package license is declared here. |
 | Dense48 and Point320 LoRA adapters | Team-selected adaptations with upstream and data provenance | Exact terminal checkpoint ancestry is in LINEAGE.json. The existence of an upstream Apache license does not establish unrestricted rights to all data-derived material. |
 | google/owlv2-large-patch14-ensemble auxiliary cache | Apache License 2.0 as recorded by the model card | Pinned revision `95e26936e865f87db1742128404b3c035d47d89d`; [Google's original card](https://huggingface.co/google/owlv2-large-patch14-ensemble/blob/95e26936e865f87db1742128404b3c035d47d89d/README.md), matching cached SHA-256 `a2e10c3916166f08eaf2ab43ca1eb63c6116df228dea655c56e4c8e1607ecfe9`. |
-| Team inference source | Preserved exact source; no additional blanket grant recorded by this document | All 84 selected file hashes are in SOURCE_MANIFEST.json. Existing notices remain intact. |
+| Team inference source | Preserved exact source; no additional blanket grant recorded by this document | All 85 repaired source file hashes are in SOURCE_MANIFEST.json. Existing notices remain intact. |
 | Third-party Python/CUDA runtime | Per-package terms | Installed versions are observed in EXACT_DEPENDENCIES.json; the complete runtime is retained in the original OCI image rather than repackaged here. |
 | Organizer/private data, annotations and six derived runtime priors | Source-specific access and usage terms | DATA_PROVENANCE.md and LINEAGE.json preserve the recorded sources, restrictions and remaining evidence limits. Private media and evaluation-bank payloads are excluded. |
 

LINEAGE.json

@@ -113,11 +113,10 @@
     "sha256": "e9345708c455fd7b275781736f6aac2f23621e0251bab8484a8840dacf2bf5ca"
   },
   "hf_asset_revision": "6a7fc05f196b98d751e3a14775d60f1161166d2a",
-  "image_config_digest": "sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5",
+  "image_config_digest": "sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576",
   "image_identity": {
-    "bytes": 5975,
-    "path": "/private/tmp/orena-selected615-hf-inventory-20260911-decode-a/IMAGE_IDENTITY.json",
-    "sha256": "913403bda9aea20157c859fa92566e20185a45a18a82ec83ebfb67f4e36dabf7"
+    "current_repaired_image_config_digest": "sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576",
+    "repo_path": "IMAGE_IDENTITY.json"
   },
   "metadata_derivation": {
     "asset_commit_creation_claimed": true,
@@ -141,6 +140,7 @@
       "sha256": "4861d771843d543f75cd7a9d0440670f784f615522528b1504f17a6a3823367c"
     }
   },
+  "original_asset_revision": "6a7fc05f196b98d751e3a14775d60f1161166d2a",
   "point_specialist": {
     "acceptance_summary": {
       "bytes": 1071,
@@ -399,8 +399,64 @@
   },
   "schema": "selected615-hf-lineage/1",
   "source_manifest": {
-    "bytes": 52053,
-    "path": "/private/tmp/orena-selected615-hf-inventory-20260911-decode-a/SOURCE_MANIFEST.json",
-    "sha256": "df1cf7f38c87eae4719b721a7f4a6e7c1d19d9c59d33d065808f9976d937afd5"
+    "bytes": 52533,
+    "repo_path": "SOURCE_MANIFEST.json",
+    "sha256": "f0324e066f21fe9d5c9377a8ff60526503eebd05d90219397563a47e02cc6775"
+  },
+  "wrapper_repair": {
+    "downloaded_hf_assets_gpu_qualified": false,
+    "evaluation_score_repeated": false,
+    "model_assets_changed": false,
+    "net_changed_source_files": [
+      "VEHICLE_INPUTS.json",
+      "solution/entrypoint/lazy_video_staging.py",
+      "solution/entrypoint/probe_entrypoint.py",
+      "solution/shape_mode_diagnostic.py",
+      "solution/shape_mode_diagnostic_policy.json"
+    ],
+    "original_image_config_digest": "sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5",
+    "predecessor_revision": "b2176cf6d0f77e58e34a90583041b1a929417fb3",
+    "qualified_inputs": {
+      "archive_verification": {
+        "bytes": 2954,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/procedure/review/submission_failure_20260911/root_archive_acceptance_b/ACCEPTANCE.json",
+        "sha256": "b43fafffde783df8b7826e13bd300919acf056b3d857f920bd1307cc1f2c34b9"
+      },
+      "build_result": {
+        "bytes": 1056,
+        "path": "/private/tmp/orena-procedure-diagnostic-repair-monitor-20260911-training-b/poll0023/early_build/GET.stdout",
+        "sha256": "359476be5370228758c142f14d14b9e5145bbd69c92ed3ef43728a9b5c374c4e"
+      },
+      "image_inspect": {
+        "bytes": 25604,
+        "path": "/private/tmp/orena-procedure-diagnostic-repair-monitor-20260911-training-b/poll0023/early_inspect/GET.stdout",
+        "sha256": "15b5eadfb3c71425c27c9aa9b5eeba37058003bc78fd6afad4edcc2f8cd10e4b"
+      },
+      "image_source_verification": {
+        "bytes": 58697,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/procedure/review/submission_failure_20260911/intake_diagnostic_source_b/REVIEW.json",
+        "sha256": "396e5b957b0f05f2176eb4e1b1c16c526462385c5e777c4baf15d655dbeb2e3d"
+      },
+      "native_verification": {
+        "bytes": 4319,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_500_root_acceptance_a/ACCEPTANCE.json",
+        "sha256": "9a062ba1f9681a46c2b38cdeca12a5344ad795efb56a9c148b86b73dc226d53c"
+      },
+      "root_release_direction": {
+        "bytes": 7096,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/procedure/review/submission_failure_20260911/root_engineering_signoff_b/SIGNOFF.json",
+        "sha256": "2ea5b6a7bb07593e485d6a31aa9c439f441275c0fe030b64a221802c84f84fc0"
+      },
+      "storage_verification": {
+        "bytes": 1346,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_cloud_storage_root_review_b/REVIEW.json",
+        "sha256": "596e4f845d29338d1a661037b9da511c7a926d8fc5b095c1ebda8d31a69a9c01"
+      }
+    },
+    "source_preparation": {
+      "bytes": 65314,
+      "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/PREPARATION.json",
+      "sha256": "94052eff5746e9001c839a2287fffda16ceaf90c7522a92fbb349332d5ead895"
+    }
   }
 }

LOAD.md

@@ -2,48 +2,40 @@
 
 Repository: `HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL`.
 
-## Pin the asset revision
+## Pin the repaired source release
 
-The private asset commit is pinned below. A fresh Hugging Face download verified all 136 uploaded files (33,969,040,571 bytes) against their full SHA-256 values at 2026-09-10 22:20 UTC. The readback receipt SHA-256 is `14810b6e1436b868c130d8d0e150cb3afceb35685e8b5cbdf0b63e65f04730fb`. A subsequent CPU qualification on that downloaded snapshot passed: all 130 asset/source files and 11 aliases reverified, Qwen3_5Config/Qwen3VLProcessor and Owlv2Config/Owlv2Processor loaded locally, and all 640 adapter tensor headers checked. Its result SHA-256 is `c8440ff025d0ea7135066db41d681b2acba5c8c72e849ffd9bf6a4a303b89f45`. These checks did not load the whole model or perform GPU generation.
+The original model-asset custody revision remains `6a7fc05f196b98d751e3a14775d60f1161166d2a`. Its prior full download and CPU checks concern the original asset/source snapshot and are preserved as history; they do not qualify this repaired source as an HF GPU load. Download the current repaired source and unchanged assets together at the immutable source release below. Do not combine the new verifier with an old 84-source snapshot.
 
 ```text
-ASSET_REVISION=6a7fc05f196b98d751e3a14775d60f1161166d2a
+ORIGINAL_ASSET_PROVENANCE_REVISION=6a7fc05f196b98d751e3a14775d60f1161166d2a
+SOURCE_REVISION=REPAIRED_SOURCE_COMMIT_PENDING_BINDING
 ```
 
-A later metadata/documentation commit may contain this guide while referring back to this asset commit. Record both commits when reproducing an experiment; do not substitute `main` or a movable tag. The initial empty repository commit is not the asset release.
-
-For an account granted read access to the private repository, use locally configured Hugging Face authentication. Do not paste a token into this guide or into a command that is stored in logs.
-
 ```python
 import re
 from huggingface_hub import snapshot_download
-
-ASSET_REVISION = "6a7fc05f196b98d751e3a14775d60f1161166d2a"
-if not re.fullmatch(r"[0-9a-f]{40}", ASSET_REVISION):
-    raise SystemExit("Set a full immutable asset commit before downloading")
-
+SOURCE_REVISION = "REPAIRED_SOURCE_COMMIT_PENDING_BINDING"
+if not re.fullmatch(r"[0-9a-f]{40}", SOURCE_REVISION):
+    raise SystemExit("Bind the immutable repaired-source commit before downloading")
 snapshot = snapshot_download(
-    repo_id="HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL",
-    repo_type="model",
-    revision=ASSET_REVISION,
-    local_dir="procedure-final-assets",
+    repo_id="HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL", repo_type="model",
+    revision=SOURCE_REVISION, local_dir="procedure-final-repaired",
 )
-print(snapshot)
 ```
 
-The official [Hugging Face download guide](https://huggingface.co/docs/huggingface_hub/guides/download) documents downloading a snapshot at a specific revision. No network access is required during the retained image's inference; repository download is a separate acquisition step.
+Use locally configured private-repository authentication; never put a token in recorded source or commands. The publisher binds SOURCE_REVISION in a second small metadata commit after the source commit exists. No model weights are uploaded again.
 
 ## Preserve the image paths
 
-Most files are stored under `image_root/` with their original absolute image path made relative: `/app/artifacts/...` becomes `image_root/app/artifacts/...`, and `/app/runtime_zoom_entry.py` becomes `image_root/app/runtime_zoom_entry.py`. The [ASSET_MANIFEST.json](ASSET_MANIFEST.json) lists 46 physical asset files totaling 33,967,875,210 bytes and 11 relative OWLv2 snapshot aliases. [SOURCE_MANIFEST.json](SOURCE_MANIFEST.json) lists the 84 exact selected source files. [IMAGE_IDENTITY.json](IMAGE_IDENTITY.json) binds the native environment and original archive. Both OWLv2 weight formats are retained by the asset inventory; this is a conservative complete cache set, not a minimum-file claim. Hugging Face disallows a `.cache` repository path segment, so the OWLv2 cache alone is stored under `image_root/app/hf_cache/` instead of its original `/app/.cache/`. The manifests preserve both `image_path` and `repo_path`, and aliases explicitly record `resolved_repo_path`. These manifests supply every selected path, byte size and SHA-256. Verify those values before using any component; directory names and adapter configuration alone do not establish tensor identity. Download canonical physical files once, then recreate the eleven relative aliases exactly from their repository mappings when reconstructing the cache. To restore the original image filesystem semantics in a separately assembled root, map the contents of `image_root/app/hf_cache/` back to `/app/.cache/`, preserving the relative links. Do not edit the baked `HF_HOME=/app/.cache/huggingface` configuration and call that an unchanged native run; this package does not overwrite a running container automatically. Never turn an alias into an unrelated model download.
+Most files are stored under `image_root/` with their original absolute image path made relative: `/app/artifacts/...` becomes `image_root/app/artifacts/...`, and `/app/runtime_zoom_entry.py` becomes `image_root/app/runtime_zoom_entry.py`. The [ASSET_MANIFEST.json](ASSET_MANIFEST.json) lists 46 physical asset files totaling 33,967,875,210 bytes and 11 relative OWLv2 snapshot aliases. [SOURCE_MANIFEST.json](SOURCE_MANIFEST.json) lists the 85 exact repaired source files. [IMAGE_IDENTITY.json](IMAGE_IDENTITY.json) binds the current repaired image and archive, with original 8d3 ancestry. Both OWLv2 weight formats are retained by the asset inventory; this is a conservative complete cache set, not a minimum-file claim. Hugging Face disallows a `.cache` repository path segment, so the OWLv2 cache alone is stored under `image_root/app/hf_cache/` instead of its original `/app/.cache/`. The manifests preserve both `image_path` and `repo_path`, and aliases explicitly record `resolved_repo_path`. These manifests supply every selected path, byte size and SHA-256. Verify those values before using any component; directory names and adapter configuration alone do not establish tensor identity. Download canonical physical files once, then recreate the eleven relative aliases exactly from their repository mappings when reconstructing the cache. To restore the original image filesystem semantics in a separately assembled root, map the contents of `image_root/app/hf_cache/` back to `/app/.cache/`, preserving the relative links. Do not edit the baked `HF_HOME=/app/.cache/huggingface` configuration and call that an unchanged native run; this package does not overwrite a running container automatically. Never turn an alias into an unrelated model download.
 
 Run the bundled verifier from the trusted documentation checkout against the downloaded snapshot:
 
 ```bash
-python3 -B verify_files.py procedure-final-assets --restore-aliases
+python3 -B verify_files.py procedure-final-repaired --restore-aliases
 ```
 
-It authenticates both manifests, streams the SHA-256 of all 130 selected physical asset/source files, and verifies or creates the eleven prescribed relative aliases. It refuses a mismatched existing alias rather than overwriting it. Without `--restore-aliases` it performs read-only verification. The pass result is file verification, not a model-load or GPU-runtime result.
+It authenticates both manifests, streams the SHA-256 of all 131 selected physical asset/source files, and verifies or creates the eleven prescribed relative aliases. It refuses a mismatched existing alias rather than overwriting it. Without `--restore-aliases` it performs read-only verification. The pass result is file verification, not a model-load or GPU-runtime result.
 
 The Dense48 and Point320 adapters are distinct 247,513,400-byte files even though their 1,135-byte configuration files match. Both use the selected checkpoint 12,910. Do not merge, rename or exchange them, substitute another base revision, regenerate int8 weights, or install a later research adapter when reproducing this candidate.
 
@@ -56,7 +48,7 @@ The exact image reports Python **3.11.11** and the following installed versions:
 ```python
 from load_components import load
 
-processor, model = load("procedure-final-assets")
+processor, model = load("procedure-final-repaired")
 # Dense48 is active initially. For a custom component-level experiment:
 try:
     model.set_adapter("point_object", inference_mode=True)
@@ -74,7 +66,7 @@ from pathlib import Path
 from transformers import Owlv2Processor, Owlv2ForObjectDetection
 
 owl_path = (
-    Path("procedure-final-assets").resolve()
+    Path("procedure-final-repaired").resolve()
     / "image_root/app/hf_cache/huggingface/hub"
     / "models--google--owlv2-large-patch14-ensemble/snapshots"
     / "95e26936e865f87db1742128404b3c035d47d89d"
@@ -88,18 +80,18 @@ owl_model.eval()
 
 This optional snippet follows the original detector's processor/model API and assumes the manifest verifier has restored the cache aliases. It is not a second whole-pipeline qualification.
 
-The example checks exact package versions and CUDA availability. Its API sequence was checked with explicit CPU doubles and source-call comparison. Actual downloaded-asset CPU configuration, processor and header checks passed separately; the CUDA component-loading function itself has not been executed as a new GPU load. It intentionally does not recreate the native question router, warmups, per-request controller witnesses, input shell or temporal budget policy. Use the unchanged image below for the demonstrated end-to-end behavior.
+The example checks exact package versions and CUDA availability. Its API sequence was checked with explicit CPU doubles and source-call comparison. Actual downloaded-asset CPU configuration, processor and header checks passed separately; the CUDA component-loading function itself has not been executed as a new GPU load. It intentionally does not recreate the native question router, warmups, per-request controller witnesses, input shell or temporal budget policy. Use the repaired image below for its separately recorded native qualification; the HF component example itself has no new GPU qualification.
 
 ## Reproduce the demonstrated runtime
 
-The extracted files are not a standalone operating-system or Python environment. Loading them with an arbitrary current Transformers/PEFT installation is not the qualified native runtime. The reference is the retained OCI image:
+The extracted files are not a standalone operating-system or Python environment. Loading them with an arbitrary current Transformers/PEFT installation is not the qualified native runtime. The current repaired OCI image is:
 
 ```text
-us-central1-docker.pkg.dev/heydonto-425716/surgfield/surgfield-proc-q38-validation@sha256:32d4f04c32fc304888b0571ce76a332c8d2fe8d2e4aac262de9709dca07f4291
+us-central1-docker.pkg.dev/heydonto-425716/surgfield/surgfield-proc-q38-validation@sha256:f0590e6d79097a37f502260cf665624bd4ca87e9cbda66d240d6d4db7d0bb63d
 ```
 
-Its image configuration is `sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5`. The retained archive has SHA-256 `d633c21f620c4e4afbdd6dadb181dfc4d41a4fc446a6dbede1718cd949ac6acc` and size 52,710,560,644 bytes. Registry/GCS access is managed separately from private Hugging Face access; the full archive is not duplicated in this asset repository.
+Its image configuration is `sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576`. The archive has SHA-256 `b63dcf1bbee6554942a78edc823dfc4b38a89dba54f029acdd28a8c91bfa4a2d` and size 52,775,393,310 bytes, at generation `1789119563478283` of `gs://heydonto-surgfield-research/finals/procedure/candidates/20260911/procedure-diagnostic-repair-20260911-0846-b/procedure-diagnostic-repair-20260911-0846-b.tar.gz`. Original 8d3 remains immutable ancestry at revision `b2176cf6d0f77e58e34a90583041b1a929417fb3`. Registry/GCS access is separate from HF access; the archive is not duplicated here.
 
 The original default command is `/opt/conda/bin/python -B /app/runtime_zoom_entry.py --submission`, working directory `/app`, UID/GID 1000. The shell reads `/input/request.json`, organizer `/input/FO_definitions.json` and the supplied video layout, and writes `/output/answer.json` containing `{qID, content, latency}` records. Preserve the original input contract and use only data you are authorized to process. Private evaluation fixtures and reference answers are not supplied here.
 
-The published native checks used an H100 and, for the fresh full-board comparison, 16 CPUs with 196,608 MiB host memory. Those resources describe that experiment; they are not a proven minimum or a claim that every deployment meets the original process budget. Preserve the image's default entrypoint, flags and environment for an exact comparison.
+Historical8d3 native score checks used H100 with 16 CPUs and 196,608 MiB; current repaired-image execution checks are separately scoped in RELEASE_VERIFICATION.json. These resources describe those experiments; they are not a proven minimum or a claim that every deployment meets the original process budget. Preserve the image's default entrypoint, flags and environment for an exact comparison.

MODEL_FILES.json

@@ -1,12 +1,12 @@
 {
   "aliases_file": "MODEL_ALIASES.json",
-  "file_count": 130,
+  "file_count": 131,
   "files": {
     "image_root/app/VEHICLE_INPUTS.json": {
-      "bytes": 76975,
+      "bytes": 77541,
       "image_path": "/app/VEHICLE_INPUTS.json",
       "role": "serving_source",
-      "sha256": "1f473c96f16b92dcd46baa90d392adfdc823ee2860f7848b39bc30e422bbd5ed"
+      "sha256": "5950b563eb85bf7d9726dac150086407b8f52dcbd0d7c7a9331c510b97ef451e"
     },
     "image_root/app/artifacts/cholec_priors_v39_organizer.json": {
       "bytes": 3920,
@@ -380,6 +380,12 @@
       "role": "serving_source",
       "sha256": "78b13b81ad457d8930d0bc013d101ce62e4e7a2bce4712b1cf3f5a1320d8ecc6"
     },
+    "image_root/app/solution/entrypoint/lazy_video_staging.py": {
+      "bytes": 16076,
+      "image_path": "/app/solution/entrypoint/lazy_video_staging.py",
+      "role": "serving_source",
+      "sha256": "faa24dfcfef510629ccc522b563461fe3454c8d0ea32f6228674e5fdbe36523e"
+    },
     "image_root/app/solution/entrypoint/native_video_input.py": {
       "bytes": 9923,
       "image_path": "/app/solution/entrypoint/native_video_input.py",
@@ -393,10 +399,10 @@
       "sha256": "a55143dfdbeca52503e225a8a1d2529ef359d3f905ee00ae4d919c6c885c065f"
     },
     "image_root/app/solution/entrypoint/probe_entrypoint.py": {
-      "bytes": 66570,
+      "bytes": 70789,
       "image_path": "/app/solution/entrypoint/probe_entrypoint.py",
       "role": "serving_source",
-      "sha256": "ca5c763c03faf2ff9fc08b4a785ad3f1083ce045731f5be9d445df9ff4e13584"
+      "sha256": "b648bb96cc0efcd8321fa73e17660e2b2490064ea8c33146d49e6f46bafb91fa"
     },
     "image_root/app/solution/entrypoint/segment_temporal_seam.py": {
       "bytes": 11930,
@@ -699,16 +705,16 @@
       "sha256": "aaba4f369949295fe156a7862d91c5bbf13a9f9954077e302a7b918f0fac703b"
     },
     "image_root/app/solution/shape_mode_diagnostic.py": {
-      "bytes": 12646,
+      "bytes": 16464,
       "image_path": "/app/solution/shape_mode_diagnostic.py",
       "role": "serving_source",
-      "sha256": "60d95fa27a15260333d0030738a164ded53a68bed04e6f9541d9164491703277"
+      "sha256": "47d8d6161e2df496d60b4a151cba9b118fcf28a5d2bf1561495b56b6ff67c080"
     },
     "image_root/app/solution/shape_mode_diagnostic_policy.json": {
-      "bytes": 552,
+      "bytes": 554,
       "image_path": "/app/solution/shape_mode_diagnostic_policy.json",
       "role": "serving_source",
-      "sha256": "bc663f3f2ef23f7a32b537e3eed772f23ace4ad19b5d38f8321bcf65d894a710"
+      "sha256": "b4dcbfd21bc34635269f665cb7f29798cb6b91abd88d3651b3102d628346c3ef"
     },
     "image_root/app/solution/smoke_observation.py": {
       "bytes": 4655,
@@ -783,9 +789,9 @@
       "sha256": "225f06c54f4fbff02cfa88391aefe04a6449c35c9a43bcb86d33a5969175d9d0"
     }
   },
-  "generation": "Independent actual image reads using Python hashlib and GNU sha256sum; mapped by unchanged absolute image_path after HF cache path restriction. UploadInfo SHA is checked again before commit.",
-  "image_config_sha256": "8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5",
+  "generation": "Original 46 model-asset entries preserved at 6a7 immutable custody; current 85 serving source bytepins match the qualified repaired image. No model payload re-upload.",
+  "image_config_sha256": "94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576",
   "repository": "HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL",
   "schema": "procedure-hf-model-files/1",
-  "total_bytes": 33968859724
+  "total_bytes": 33968884405
 }

MODIFICATIONS.md

@@ -2,7 +2,15 @@
 
 Prepared by **HeyDonto Labs** for `HeyDonto/SURGFIELD-ORena-2026-PROCEDURE-FINAL`. Contact: **Reza Nehzati, Ph.D.**
 
-The handoff extracts selected files from image configuration `8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5`. Extraction preserves file bytes. It does not merge adapters, quantize a new base, edit the inference source, or turn a later research branch into the retained candidate.
+The current source is copied byte-for-byte from the qualified repaired image `sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576`. Original 8d3 is retained as ancestry at immutable revision `b2176cf6d0f77e58e34a90583041b1a929417fb3`. No model weights, adapter configuration, router, prompt, frame sampler, temporal window or inference clock is changed by this repair.
+
+## Reliability maintenance
+
+The five net changes are `VEHICLE_INPUTS.json`, `solution/entrypoint/probe_entrypoint.py`, new `solution/entrypoint/lazy_video_staging.py`, `solution/shape_mode_diagnostic.py` and its policy. ZIP metadata is catalogued before serving; requested clips are materialized one at a time, released after request/loader cleanup, and the owned staging directory is removed. Input-root aliases remain allowed; unsafe descendant links and archive paths are refused.
+
+Diagnostics are bounded to 16,384 events/16 MiB. Recording stops after its event/byte quota or narrow ENOSPC/EDQUOT exhaustion while inference and policy/model/identity checks continue. A normal-exit saturation receipt is best effort and may be absent after forced termination. A cleanup failure may leave one bounded partial record. The separate runtime_media 512-file/128 MiB limit is unchanged and may retain a coarse temporal answer when refinement metadata fills it.
+
+This maintenance is an execution-reliability change, not a new score experiment.
 
 ## Model adaptation
 

README.md

@@ -13,20 +13,22 @@ tags:
 
 **HeyDonto Labs** · Corresponding contact: **Reza Nehzati, Ph.D.**
 
-This private repository records the retained PROCEDURE candidate from the ORena–SAVE FOCUS challenge campaign. It contains selected model assets and inference source extracted from the exact image identified below, with component provenance and loading instructions. It does not distribute private surgical media or evaluation banks. The exact inference source may retain its original unit-test fixtures; those fixtures are distinct from private evaluation-bank payloads.
+This private repository contains a reliability repair of the retained PROCEDURE8d3 candidate. The int8 base, Dense48, Point320, auxiliary assets and six runtime-prior JSON files are unchanged. Five net serving files implement bounded per-clip staging and diagnostic saturation handling; [MODIFICATIONS.md](MODIFICATIONS.md) describes them. No private media or evaluation banks are distributed. Original source unit-test fixtures may remain.
 
-The final candidate is the retained `8d3` image. The repository is a component and source handoff; the original image remains the reference environment for the demonstrated end-to-end behavior. The private asset commit is `6a7fc05f196b98d751e3a14775d60f1161166d2a`, as pinned in [LOAD.md](LOAD.md). A fresh Hugging Face download verified all 136 uploaded files against their full SHA-256 values. A separate CPU check also reverified all 130 asset/source files and 11 aliases, loaded the actual processor/configuration objects, and checked all 640 adapter tensor headers. It did not load the whole model or perform GPU generation. A later documentation commit does not change the asset revision.
+The current source tree has 85 files at `image_root/app/`. Model assets retain immutable custody at `6a7fc05f196b98d751e3a14775d60f1161166d2a`; [LOAD.md](LOAD.md) binds the repaired source release. The historical downloaded-asset CPU checks did not perform GPU generation. This update does not claim an HF GPU component qualification or a new accuracy score.
 
-## Exact candidate
+## Current repaired image
 
 | Identity | Value |
 |---|---|
-| OCI image configuration | `sha256:8d3bbd92c7ef8f73ff058382bef1b8523ec55961b831422c1fb04226b31b35d5` |
-| Registry manifest | `sha256:32d4f04c32fc304888b0571ce76a332c8d2fe8d2e4aac262de9709dca07f4291` |
-| Retained Docker archive SHA-256 | `d633c21f620c4e4afbdd6dadb181dfc4d41a4fc446a6dbede1718cd949ac6acc` |
-| Retained archive size | 52,710,560,644 bytes |
+| Configuration | `sha256:94d0791cb96f3ac9248e9ec7c918e3bbdc5960646b48d201cb478d488fcda576` |
+| Registry | `us-central1-docker.pkg.dev/heydonto-425716/surgfield/surgfield-proc-q38-validation@sha256:f0590e6d79097a37f502260cf665624bd4ca87e9cbda66d240d6d4db7d0bb63d` |
+| Archive SHA-256 | `b63dcf1bbee6554942a78edc823dfc4b38a89dba54f029acdd28a8c91bfa4a2d` |
+| Archive bytes | 52,775,393,310 |
 | Native entrypoint | `/opt/conda/bin/python -B /app/runtime_zoom_entry.py --submission` |
-| Native identity | UID/GID 1000; Python 3.11.11 |
+| Identity | UID/GID 1000; Python 3.11.11 |
+
+Current native/storage qualification is recorded separately in [RELEASE_VERIFICATION.json](RELEASE_VERIFICATION.json). The current 81-layer image consists of 79 selected 8d3 layers, one staging repair layer and one diagnostic repair layer.
 
 ## Method
 
@@ -34,9 +36,9 @@ The serving path combines an int8 vision-language base with separate Dense48 and
 
 The recorded upstream base is `Qwen/Qwen3.8-27B`; the shipped configuration architecture is `Qwen3_5ForConditionalGeneration`. Point320 denotes its 320-tensor adapter payload, not 320 optimizer steps. Exact configuration, adapter hyperparameters, auxiliary assets and upstream revisions are disclosed in the asset inventory and [MODIFICATIONS.md](MODIFICATIONS.md). Older weights retained inside the original image are listed separately from the active selected payload. They are not silently substituted into this handoff.
 
-## Evaluation and limits
+## Historical evaluation of original 8d3
 
-These are local research results, not official challenge standings. [EVALUATION_SUMMARY.json](EVALUATION_SUMMARY.json) provides aggregate counts and the independent review hash without releasing per-question data.
+The following numbers belong to original 8d3 and were not rerun on this repair. These are local research results, not official challenge standings. [EVALUATION_SUMMARY.json](EVALUATION_SUMMARY.json) provides aggregate counts and the independent review hash without releasing per-question data.
 
 | Evaluation protocol | Selected candidate | Comparator | Processing failures retained |
 |---|---:|---:|---|
@@ -48,7 +50,7 @@ The fresh comparison used the unchanged images on H100 with 16 CPUs and 196,608
 
 The 1,087-question development population contains no challenge OOD rows and only one clinical-flagged row. It was used during development and selection; repeated use, correlated questions within videos and selection bias limit transfer claims. The results establish neither a clinical accuracy estimate nor a finals Copeland rank, and do not establish official platform superiority.
 
-The exact archive also completed the organizer's ten-question canonical compatibility fixture in two local input layouts. Owner-supplied platform try-out output matched those ten answer strings. Each layout showed nine question-bound VLM answers and one rule answer for the original invalid clip. This is an execution-compatibility observation, not an accuracy benchmark or independent organizer approval of this repository.
+The original 8d3 archive also completed the organizer's ten-question canonical compatibility fixture in two local input layouts. Owner-supplied platform try-out output matched those ten answer strings. Each layout showed nine question-bound VLM answers and one rule answer for the original invalid clip. This is an execution-compatibility observation, not an accuracy benchmark or independent organizer approval of this repository.
 
 A separate private, one-surgery, six-predicate diagnostic retained all 12 selected-image observations as processing/observation failures; it yielded no qualified matched accuracy comparison. Its media, labels and derivatives remain evaluation-only and are not included here.
 

SOURCE_MANIFEST.json

@@ -1,16 +1,17 @@
 {
-  "all_exact_selected_source_bytes": true,
-  "file_count": 84,
+  "all_exact_repaired_source_bytes": true,
+  "all_exact_selected_source_bytes": false,
+  "file_count": 85,
   "files": {
     "/app/VEHICLE_INPUTS.json": {
-      "bytes": 76975,
+      "bytes": 77541,
       "image_path": "/app/VEHICLE_INPUTS.json",
       "repo_path": "image_root/app/VEHICLE_INPUTS.json",
-      "sha256": "1f473c96f16b92dcd46baa90d392adfdc823ee2860f7848b39bc30e422bbd5ed",
+      "sha256": "5950b563eb85bf7d9726dac150086407b8f52dcbd0d7c7a9331c510b97ef451e",
       "source_evidence": {
-        "bytes": 76975,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/VEHICLE_INPUTS.json",
-        "sha256": "1f473c96f16b92dcd46baa90d392adfdc823ee2860f7848b39bc30e422bbd5ed"
+        "bytes": 77541,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/VEHICLE_INPUTS.json",
+        "sha256": "5950b563eb85bf7d9726dac150086407b8f52dcbd0d7c7a9331c510b97ef451e"
       }
     },
     "/app/run_as_app.py": {
@@ -20,7 +21,7 @@
       "sha256": "db56fbfd1d53fd9be943efe138ece5aa1b15d69067b4c8c800e2291f68401bc4",
       "source_evidence": {
         "bytes": 1933,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/run_as_app.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/run_as_app.py",
         "sha256": "db56fbfd1d53fd9be943efe138ece5aa1b15d69067b4c8c800e2291f68401bc4"
       }
     },
@@ -31,7 +32,7 @@
       "sha256": "2e321dc21f2ad6870be04f5e451ce292501e6d25e2b1fec3dfeef7138017136d",
       "source_evidence": {
         "bytes": 3442,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/runtime_witness_approved.json",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/runtime_witness_approved.json",
         "sha256": "2e321dc21f2ad6870be04f5e451ce292501e6d25e2b1fec3dfeef7138017136d"
       }
     },
@@ -42,7 +43,7 @@
       "sha256": "ac44daa78b946456a755b44c40c06ea07ea8708206d64b98fd2bcb25039f43e5",
       "source_evidence": {
         "bytes": 4645,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/runtime_zoom_entry.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/runtime_zoom_entry.py",
         "sha256": "ac44daa78b946456a755b44c40c06ea07ea8708206d64b98fd2bcb25039f43e5"
       }
     },
@@ -53,7 +54,7 @@
       "sha256": "2f2f3872a9253680b1f55d19e528fd63d3eb26979a914312336e5766e0ce2063",
       "source_evidence": {
         "bytes": 523,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/runtime_zoom_policy.json",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/runtime_zoom_policy.json",
         "sha256": "2f2f3872a9253680b1f55d19e528fd63d3eb26979a914312336e5766e0ce2063"
       }
     },
@@ -64,7 +65,7 @@
       "sha256": "a5ba6d860c5f8b5287f3f5371a35e89441b3c2f3a05e2ae65a6f6af47568d4d6",
       "source_evidence": {
         "bytes": 1890,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/README.md",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/README.md",
         "sha256": "a5ba6d860c5f8b5287f3f5371a35e89441b3c2f3a05e2ae65a6f6af47568d4d6"
       }
     },
@@ -75,7 +76,7 @@
       "sha256": "1db83ecfa981c5aced597886d8f9bfb2b75e6718db2076de0d62626248330707",
       "source_evidence": {
         "bytes": 370,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/__init__.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/__init__.py",
         "sha256": "1db83ecfa981c5aced597886d8f9bfb2b75e6718db2076de0d62626248330707"
       }
     },
@@ -86,7 +87,7 @@
       "sha256": "d536c76ad2ba29d83301e7db25c7c38fb8cca0c008f01ce4bd6bb103e8c7271a",
       "source_evidence": {
         "bytes": 11710,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/adapter_controller.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/adapter_controller.py",
         "sha256": "d536c76ad2ba29d83301e7db25c7c38fb8cca0c008f01ce4bd6bb103e8c7271a"
       }
     },
@@ -97,7 +98,7 @@
       "sha256": "acb44b6e8f9bf41416f8c1876ea29ec5afb534ada099c848bb007e7cb1810648",
       "source_evidence": {
         "bytes": 29850,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/answer_validator.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/answer_validator.py",
         "sha256": "acb44b6e8f9bf41416f8c1876ea29ec5afb534ada099c848bb007e7cb1810648"
       }
     },
@@ -108,7 +109,7 @@
       "sha256": "f021a33e82bcfe50e5ca2d2035db30bff6a2fc806f422529ad870ce4427ccf97",
       "source_evidence": {
         "bytes": 15765,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/candidate_contract.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/candidate_contract.py",
         "sha256": "f021a33e82bcfe50e5ca2d2035db30bff6a2fc806f422529ad870ce4427ccf97"
       }
     },
@@ -119,7 +120,7 @@
       "sha256": "10c104934923d16c1f16001784543b1835b79e0f9e18e12f0290743fa16d12ba",
       "source_evidence": {
         "bytes": 18665,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/cap_fmt_inferrer.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/cap_fmt_inferrer.py",
         "sha256": "10c104934923d16c1f16001784543b1835b79e0f9e18e12f0290743fa16d12ba"
       }
     },
@@ -130,7 +131,7 @@
       "sha256": "df39335c4843e814b354b2e587bf48a77aebbe88325be99a6f7e2f9e136474c7",
       "source_evidence": {
         "bytes": 21477,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/container.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/container.py",
         "sha256": "df39335c4843e814b354b2e587bf48a77aebbe88325be99a6f7e2f9e136474c7"
       }
     },
@@ -141,7 +142,7 @@
       "sha256": "9c8bfec8df2effb3b642c2bbd092dcecf837b851e81c45008c531e5dcc0a1a58",
       "source_evidence": {
         "bytes": 8568,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/detection.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/detection.py",
         "sha256": "9c8bfec8df2effb3b642c2bbd092dcecf837b851e81c45008c531e5dcc0a1a58"
       }
     },
@@ -152,7 +153,7 @@
       "sha256": "77e456a223eecea09a4d60c0a48d9527c21a1c6c5a94e894066ef682d1a8a1ea",
       "source_evidence": {
         "bytes": 233,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/__init__.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/__init__.py",
         "sha256": "77e456a223eecea09a4d60c0a48d9527c21a1c6c5a94e894066ef682d1a8a1ea"
       }
     },
@@ -163,7 +164,7 @@
       "sha256": "c8ec558c4c933c3ba17029996124b42e21e6558b0635ece6cd01f4c3e290d5dd",
       "source_evidence": {
         "bytes": 6483,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/agg_route_dispatch.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/agg_route_dispatch.py",
         "sha256": "c8ec558c4c933c3ba17029996124b42e21e6558b0635ece6cd01f4c3e290d5dd"
       }
     },
@@ -174,7 +175,7 @@
       "sha256": "57f9cf61438193b0aa4ccbbf8564c6eb1338301f8ae6f6e9507b38edef1fc70c",
       "source_evidence": {
         "bytes": 5906,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/complex_route_dispatch.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/complex_route_dispatch.py",
         "sha256": "57f9cf61438193b0aa4ccbbf8564c6eb1338301f8ae6f6e9507b38edef1fc70c"
       }
     },
@@ -185,10 +186,21 @@
       "sha256": "78b13b81ad457d8930d0bc013d101ce62e4e7a2bce4712b1cf3f5a1320d8ecc6",
       "source_evidence": {
         "bytes": 2525,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/foclass_fullset.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/foclass_fullset.py",
         "sha256": "78b13b81ad457d8930d0bc013d101ce62e4e7a2bce4712b1cf3f5a1320d8ecc6"
       }
     },
+    "/app/solution/entrypoint/lazy_video_staging.py": {
+      "bytes": 16076,
+      "image_path": "/app/solution/entrypoint/lazy_video_staging.py",
+      "repo_path": "image_root/app/solution/entrypoint/lazy_video_staging.py",
+      "sha256": "faa24dfcfef510629ccc522b563461fe3454c8d0ea32f6228674e5fdbe36523e",
+      "source_evidence": {
+        "bytes": 16076,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/lazy_video_staging.py",
+        "sha256": "faa24dfcfef510629ccc522b563461fe3454c8d0ea32f6228674e5fdbe36523e"
+      }
+    },
     "/app/solution/entrypoint/native_video_input.py": {
       "bytes": 9923,
       "image_path": "/app/solution/entrypoint/native_video_input.py",
@@ -196,7 +208,7 @@
       "sha256": "8269a3f520d5dc78e25ca847aae438b7697f3f3e165e1e28d50a0b48e45ab067",
       "source_evidence": {
         "bytes": 9923,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/native_video_input.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/native_video_input.py",
         "sha256": "8269a3f520d5dc78e25ca847aae438b7697f3f3e165e1e28d50a0b48e45ab067"
       }
     },
@@ -207,19 +219,19 @@
       "sha256": "a55143dfdbeca52503e225a8a1d2529ef359d3f905ee00ae4d919c6c885c065f",
       "source_evidence": {
         "bytes": 16203,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/output_hygiene_preflight.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/output_hygiene_preflight.py",
         "sha256": "a55143dfdbeca52503e225a8a1d2529ef359d3f905ee00ae4d919c6c885c065f"
       }
     },
     "/app/solution/entrypoint/probe_entrypoint.py": {
-      "bytes": 66570,
+      "bytes": 70789,
       "image_path": "/app/solution/entrypoint/probe_entrypoint.py",
       "repo_path": "image_root/app/solution/entrypoint/probe_entrypoint.py",
-      "sha256": "ca5c763c03faf2ff9fc08b4a785ad3f1083ce045731f5be9d445df9ff4e13584",
+      "sha256": "b648bb96cc0efcd8321fa73e17660e2b2490064ea8c33146d49e6f46bafb91fa",
       "source_evidence": {
-        "bytes": 66570,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/probe_entrypoint.py",
-        "sha256": "ca5c763c03faf2ff9fc08b4a785ad3f1083ce045731f5be9d445df9ff4e13584"
+        "bytes": 70789,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/probe_entrypoint.py",
+        "sha256": "b648bb96cc0efcd8321fa73e17660e2b2490064ea8c33146d49e6f46bafb91fa"
       }
     },
     "/app/solution/entrypoint/segment_temporal_seam.py": {
@@ -229,7 +241,7 @@
       "sha256": "d6068a4b344d195d25b432fc86ccf155a296df5d862289ed3e9de78694e78fef",
       "source_evidence": {
         "bytes": 11930,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/segment_temporal_seam.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/segment_temporal_seam.py",
         "sha256": "d6068a4b344d195d25b432fc86ccf155a296df5d862289ed3e9de78694e78fef"
       }
     },
@@ -240,7 +252,7 @@
       "sha256": "1bf7f9be1006fe6af80967c4f3964fb500937b7d8c16e760d27393b2f17d9d92",
       "source_evidence": {
         "bytes": 34488,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/test_procedure_byte_identity.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/test_procedure_byte_identity.py",
         "sha256": "1bf7f9be1006fe6af80967c4f3964fb500937b7d8c16e760d27393b2f17d9d92"
       }
     },
@@ -251,7 +263,7 @@
       "sha256": "8dfe1a316ae31841484b7e886191e82b69a7a77357f83cec9b257707f61e05ba",
       "source_evidence": {
         "bytes": 8998,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/test_resolver_rungs.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/test_resolver_rungs.py",
         "sha256": "8dfe1a316ae31841484b7e886191e82b69a7a77357f83cec9b257707f61e05ba"
       }
     },
@@ -262,7 +274,7 @@
       "sha256": "db5b4ebdf04f6803723168bfee39e3bd6e0344df1d5dfa57248311435fbeb37a",
       "source_evidence": {
         "bytes": 5842,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/test_track_resolvers.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/test_track_resolvers.py",
         "sha256": "db5b4ebdf04f6803723168bfee39e3bd6e0344df1d5dfa57248311435fbeb37a"
       }
     },
@@ -273,7 +285,7 @@
       "sha256": "60a20a1efdd7909629cabd578e3c11ed399b8bbe111507518609c3a8d62aeec5",
       "source_evidence": {
         "bytes": 10900,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/track_inputs.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/track_inputs.py",
         "sha256": "60a20a1efdd7909629cabd578e3c11ed399b8bbe111507518609c3a8d62aeec5"
       }
     },
@@ -284,7 +296,7 @@
       "sha256": "36f174fc7cd91c855fff25bad30030c041ef8123283aada615cd9e60c1f63b61",
       "source_evidence": {
         "bytes": 7531,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/entrypoint/vote_batched.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/entrypoint/vote_batched.py",
         "sha256": "36f174fc7cd91c855fff25bad30030c041ef8123283aada615cd9e60c1f63b61"
       }
     },
@@ -295,7 +307,7 @@
       "sha256": "24c6b12be909ac2857095e85ddab91f302119b58630ab49ef6a8239d9ef53832",
       "source_evidence": {
         "bytes": 42431,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/flags.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/flags.py",
         "sha256": "24c6b12be909ac2857095e85ddab91f302119b58630ab49ef6a8239d9ef53832"
       }
     },
@@ -306,7 +318,7 @@
       "sha256": "136a8530b7213a7ee2ee95c64a512894512e737b057fcc6faeb4763595189892",
       "source_evidence": {
         "bytes": 11285,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/flags_frame.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/flags_frame.py",
         "sha256": "136a8530b7213a7ee2ee95c64a512894512e737b057fcc6faeb4763595189892"
       }
     },
@@ -317,7 +329,7 @@
       "sha256": "3066034d610ee1713959e00ab82281690adae458e8826e1888c6478f20f7b990",
       "source_evidence": {
         "bytes": 9712,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/flags_proc.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/flags_proc.py",
         "sha256": "3066034d610ee1713959e00ab82281690adae458e8826e1888c6478f20f7b990"
       }
     },
@@ -328,7 +340,7 @@
       "sha256": "f3022b1cceaac237ac05397847301728da749ccf60d491465505b0a8b66b952f",
       "source_evidence": {
         "bytes": 6329,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/flags_seg.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/flags_seg.py",
         "sha256": "f3022b1cceaac237ac05397847301728da749ccf60d491465505b0a8b66b952f"
       }
     },
@@ -339,7 +351,7 @@
       "sha256": "9cf5a0aee79e4bbc1936e64a13aef564481f1ca179a9f6ed988514e7fcff2e62",
       "source_evidence": {
         "bytes": 6428,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/fo_taxonomy.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/fo_taxonomy.py",
         "sha256": "9cf5a0aee79e4bbc1936e64a13aef564481f1ca179a9f6ed988514e7fcff2e62"
       }
     },
@@ -350,7 +362,7 @@
       "sha256": "3f2b93fab6b2003bf326a5e433f5c4eeb4f570de72c998823070c483d9d40211",
       "source_evidence": {
         "bytes": 24165,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/frame_sampler.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/frame_sampler.py",
         "sha256": "3f2b93fab6b2003bf326a5e433f5c4eeb4f570de72c998823070c483d9d40211"
       }
     },
@@ -361,7 +373,7 @@
       "sha256": "5b17dd66cb014a39790a40f232b7f40c6563893d4e8c6af5f80bda42add7a783",
       "source_evidence": {
         "bytes": 12979,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/helpers.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/helpers.py",
         "sha256": "5b17dd66cb014a39790a40f232b7f40c6563893d4e8c6af5f80bda42add7a783"
       }
     },
@@ -372,7 +384,7 @@
       "sha256": "c26a5238347df23c2795659e67de468be9d5fdd40907dbae32ccbd33be5d7f56",
       "source_evidence": {
         "bytes": 716,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/__init__.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/__init__.py",
         "sha256": "c26a5238347df23c2795659e67de468be9d5fdd40907dbae32ccbd33be5d7f56"
       }
     },
@@ -383,7 +395,7 @@
       "sha256": "0d8a0fd5ff93af113bed5730f8fa094703700662b8b31499b2d532fd411777d4",
       "source_evidence": {
         "bytes": 2239,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/base.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/base.py",
         "sha256": "0d8a0fd5ff93af113bed5730f8fa094703700662b8b31499b2d532fd411777d4"
       }
     },
@@ -394,7 +406,7 @@
       "sha256": "2a553265e3ad5f77be9d87103358d2689b7c573e3683298652dafed8f3a84879",
       "source_evidence": {
         "bytes": 6250,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/baseline.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/baseline.py",
         "sha256": "2a553265e3ad5f77be9d87103358d2689b7c573e3683298652dafed8f3a84879"
       }
     },
@@ -405,7 +417,7 @@
       "sha256": "a2fd244e529e53da6db148db69660eead87d31a242313055248dd0d81fc03db7",
       "source_evidence": {
         "bytes": 11230,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/clinical_two_feature.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/clinical_two_feature.py",
         "sha256": "a2fd244e529e53da6db148db69660eead87d31a242313055248dd0d81fc03db7"
       }
     },
@@ -416,7 +428,7 @@
       "sha256": "8c9bdd828635b87fd56e54b5afffd616d0deff3ea284336e36328c209ae4293f",
       "source_evidence": {
         "bytes": 3862,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/duration_constant.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/duration_constant.py",
         "sha256": "8c9bdd828635b87fd56e54b5afffd616d0deff3ea284336e36328c209ae4293f"
       }
     },
@@ -427,7 +439,7 @@
       "sha256": "3fc334ed7651254deae0d974bfc85c476e0633e0726eabd990c7779526dfcae5",
       "source_evidence": {
         "bytes": 5746,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/format_defaults.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/format_defaults.py",
         "sha256": "3fc334ed7651254deae0d974bfc85c476e0633e0726eabd990c7779526dfcae5"
       }
     },
@@ -438,7 +450,7 @@
       "sha256": "644b45358f880b9b8b27f03b1bb8551418c8cc82cae19da4457ee96f09021b9c",
       "source_evidence": {
         "bytes": 11264,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/format_rules.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/format_rules.py",
         "sha256": "644b45358f880b9b8b27f03b1bb8551418c8cc82cae19da4457ee96f09021b9c"
       }
     },
@@ -449,7 +461,7 @@
       "sha256": "42f3ce5ce83ad15dbecba736bc489146a5337b097c415f461e6e67487c43cf0c",
       "source_evidence": {
         "bytes": 7179,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/interleave_serve.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/interleave_serve.py",
         "sha256": "42f3ce5ce83ad15dbecba736bc489146a5337b097c415f461e6e67487c43cf0c"
       }
     },
@@ -460,7 +472,7 @@
       "sha256": "9aaeac8af82bff9646dcad9b4dc1af3c836af642d92f6b176ae5c58d242c64ea",
       "source_evidence": {
         "bytes": 27716,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/laparoscopic_graph.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/laparoscopic_graph.py",
         "sha256": "9aaeac8af82bff9646dcad9b4dc1af3c836af642d92f6b176ae5c58d242c64ea"
       }
     },
@@ -471,7 +483,7 @@
       "sha256": "49d5fd390e759132714f01e24568dff0412597e5ba27505967a3c587ef041071",
       "source_evidence": {
         "bytes": 10209,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/owlv2_agg_count.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/owlv2_agg_count.py",
         "sha256": "49d5fd390e759132714f01e24568dff0412597e5ba27505967a3c587ef041071"
       }
     },
@@ -482,7 +494,7 @@
       "sha256": "b750b29855aaa42045e15b2c1d06aa07a1e7ab7a8c31aebe991355b07be40c49",
       "source_evidence": {
         "bytes": 6297,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/owlv2_quadrant.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/owlv2_quadrant.py",
         "sha256": "b750b29855aaa42045e15b2c1d06aa07a1e7ab7a8c31aebe991355b07be40c49"
       }
     },
@@ -493,7 +505,7 @@
       "sha256": "b8e16688217426ed958a70d9dcf0d1f276410c5c45986dcf33257ff8c5799aa0",
       "source_evidence": {
         "bytes": 12323,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/proc_stem_overrides.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/proc_stem_overrides.py",
         "sha256": "b8e16688217426ed958a70d9dcf0d1f276410c5c45986dcf33257ff8c5799aa0"
       }
     },
@@ -504,7 +516,7 @@
       "sha256": "fbaf804222b6381ddebe63fe73fbd3a05450c63767a4b1e8e3aff68d0e03ec6f",
       "source_evidence": {
         "bytes": 4414,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/quadrant_defaults.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/quadrant_defaults.py",
         "sha256": "fbaf804222b6381ddebe63fe73fbd3a05450c63767a4b1e8e3aff68d0e03ec6f"
       }
     },
@@ -515,7 +527,7 @@
       "sha256": "611119ab2d05b5ba115bdd7644021ab0fc91c0eb4025ab11cd8b75ae7233acb9",
       "source_evidence": {
         "bytes": 4271,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/stem_modal_overrides.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/stem_modal_overrides.py",
         "sha256": "611119ab2d05b5ba115bdd7644021ab0fc91c0eb4025ab11cd8b75ae7233acb9"
       }
     },
@@ -526,7 +538,7 @@
       "sha256": "441adb5819fdbc3cdd9581cd44942c2e0d3757b132f71765df65a37be7d3076d",
       "source_evidence": {
         "bytes": 9861,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/temporal_prior.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/temporal_prior.py",
         "sha256": "441adb5819fdbc3cdd9581cd44942c2e0d3757b132f71765df65a37be7d3076d"
       }
     },
@@ -537,7 +549,7 @@
       "sha256": "44df3d7ca03f6e96460334ef59ffb988538b6be0d926cfe359e67728c79a9f7f",
       "source_evidence": {
         "bytes": 64217,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/vlm_cholec.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/vlm_cholec.py",
         "sha256": "44df3d7ca03f6e96460334ef59ffb988538b6be0d926cfe359e67728c79a9f7f"
       }
     },
@@ -548,7 +560,7 @@
       "sha256": "2f4f9d542bebd14c4f24220c5e133fcc79da3d1699f8af5628b98b2775593a33",
       "source_evidence": {
         "bytes": 7558,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/vlm_clinical_tight.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/vlm_clinical_tight.py",
         "sha256": "2f4f9d542bebd14c4f24220c5e133fcc79da3d1699f8af5628b98b2775593a33"
       }
     },
@@ -559,7 +571,7 @@
       "sha256": "c9cb1e1650fc62464c51cf0a7a089e6b02df082b9285752d86f67ada0af9b595",
       "source_evidence": {
         "bytes": 8113,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/vlm_hybrid.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/vlm_hybrid.py",
         "sha256": "c9cb1e1650fc62464c51cf0a7a089e6b02df082b9285752d86f67ada0af9b595"
       }
     },
@@ -570,7 +582,7 @@
       "sha256": "a7986d858aa0f5d70defececfe74deef549e4d642634c09edc1a58df8832700e",
       "source_evidence": {
         "bytes": 5500,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/layers/window_endpoint_time.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/layers/window_endpoint_time.py",
         "sha256": "a7986d858aa0f5d70defececfe74deef549e4d642634c09edc1a58df8832700e"
       }
     },
@@ -581,7 +593,7 @@
       "sha256": "158d28753d8f67e33131ba2aac835f29a3195c91f3024322b158faa0119754c0",
       "source_evidence": {
         "bytes": 28397,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/measured_window_decode.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/measured_window_decode.py",
         "sha256": "158d28753d8f67e33131ba2aac835f29a3195c91f3024322b158faa0119754c0"
       }
     },
@@ -592,7 +604,7 @@
       "sha256": "e67297e6b84f6c533ce89fae5df7835a997865bc3c094288f34ef1105cc7b14a",
       "source_evidence": {
         "bytes": 13077,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/measured_window_runtime.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/measured_window_runtime.py",
         "sha256": "e67297e6b84f6c533ce89fae5df7835a997865bc3c094288f34ef1105cc7b14a"
       }
     },
@@ -603,7 +615,7 @@
       "sha256": "3b684cbf7e3581bf63b559cb393294a6c088d84e851d783f676d419d0be196ad",
       "source_evidence": {
         "bytes": 10032,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/object_specialist.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/object_specialist.py",
         "sha256": "3b684cbf7e3581bf63b559cb393294a6c088d84e851d783f676d419d0be196ad"
       }
     },
@@ -614,7 +626,7 @@
       "sha256": "8f296824dd6a545dde5434ecdbb93c040aeeb20f8ec305dbe77c07955b282eec",
       "source_evidence": {
         "bytes": 3670,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/object_specialist_policy.json",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/object_specialist_policy.json",
         "sha256": "8f296824dd6a545dde5434ecdbb93c040aeeb20f8ec305dbe77c07955b282eec"
       }
     },
@@ -625,7 +637,7 @@
       "sha256": "b236d2c9e7e587db71675f4281c151f7738aeb10780109d1272a3f31ef7d6c56",
       "source_evidence": {
         "bytes": 8254,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/observability.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/observability.py",
         "sha256": "b236d2c9e7e587db71675f4281c151f7738aeb10780109d1272a3f31ef7d6c56"
       }
     },
@@ -636,7 +648,7 @@
       "sha256": "4c57c4f0cd637287753c530353dddd2358c366d997b9f28c04413a2788e4f160",
       "source_evidence": {
         "bytes": 8334,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/phrasing_robust_router.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/phrasing_robust_router.py",
         "sha256": "4c57c4f0cd637287753c530353dddd2358c366d997b9f28c04413a2788e4f160"
       }
     },
@@ -647,7 +659,7 @@
       "sha256": "b35cb57c886bfdb033b92f3ab51f9c07952e60ff5682c9b0eaea9f95859c29a1",
       "source_evidence": {
         "bytes": 9607,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/priors.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/priors.py",
         "sha256": "b35cb57c886bfdb033b92f3ab51f9c07952e60ff5682c9b0eaea9f95859c29a1"
       }
     },
@@ -658,7 +670,7 @@
       "sha256": "443d0dee720193c002f15096fe87190238d0104c67b410eaf6ecbf73c7b970b7",
       "source_evidence": {
         "bytes": 8013,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/proc_temporal_zoom.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/proc_temporal_zoom.py",
         "sha256": "443d0dee720193c002f15096fe87190238d0104c67b410eaf6ecbf73c7b970b7"
       }
     },
@@ -669,7 +681,7 @@
       "sha256": "12066d42383960302f383e62a72389d792dd4a48efa65771705d495cd7e6beff",
       "source_evidence": {
         "bytes": 1740,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/pyproject.toml",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/pyproject.toml",
         "sha256": "12066d42383960302f383e62a72389d792dd4a48efa65771705d495cd7e6beff"
       }
     },
@@ -680,7 +692,7 @@
       "sha256": "c4ba7b6c188fe60402de2ad19a289fdf5a7f5d71f814d6c2271dabfff5d0e165",
       "source_evidence": {
         "bytes": 3081,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/question_context.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/question_context.py",
         "sha256": "c4ba7b6c188fe60402de2ad19a289fdf5a7f5d71f814d6c2271dabfff5d0e165"
       }
     },
@@ -691,7 +703,7 @@
       "sha256": "5cc59e998b0aac3e9f2d97423cb6d58e4f5fe7cc34514e1902b43ac40ecda22f",
       "source_evidence": {
         "bytes": 14519,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/raw_bgr_reuse.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/raw_bgr_reuse.py",
         "sha256": "5cc59e998b0aac3e9f2d97423cb6d58e4f5fe7cc34514e1902b43ac40ecda22f"
       }
     },
@@ -702,7 +714,7 @@
       "sha256": "806839139300a340b2487225b26ce10bb6b05ef1d19e50b0426f5a0554dfd79f",
       "source_evidence": {
         "bytes": 12423,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/readiness_battery.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/readiness_battery.py",
         "sha256": "806839139300a340b2487225b26ce10bb6b05ef1d19e50b0426f5a0554dfd79f"
       }
     },
@@ -713,7 +725,7 @@
       "sha256": "c3dea15ffe4dc71adb1becdddc1ff6d3c200bb839546a2ac0b756f0e35f50b4a",
       "source_evidence": {
         "bytes": 6025,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/representative_warmup.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/representative_warmup.py",
         "sha256": "c3dea15ffe4dc71adb1becdddc1ff6d3c200bb839546a2ac0b756f0e35f50b4a"
       }
     },
@@ -724,7 +736,7 @@
       "sha256": "4843a57360fa419391198ac45e006f61705a0df76c222d290ede5ecbf5fba7a9",
       "source_evidence": {
         "bytes": 6749,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/request_eligibility.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/request_eligibility.py",
         "sha256": "4843a57360fa419391198ac45e006f61705a0df76c222d290ede5ecbf5fba7a9"
       }
     },
@@ -735,7 +747,7 @@
       "sha256": "7643fca394cb1babb463df9349f5eba5f5ba7b5ec16798348d31b751a0ec102b",
       "source_evidence": {
         "bytes": 3482,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/requirements.txt",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/requirements.txt",
         "sha256": "7643fca394cb1babb463df9349f5eba5f5ba7b5ec16798348d31b751a0ec102b"
       }
     },
@@ -746,7 +758,7 @@
       "sha256": "ed50f54977111df24126a0eda3bdbea14c6de38526ae2b8007135b70b433a8c1",
       "source_evidence": {
         "bytes": 16379,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/runtime_adapter_witness.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/runtime_adapter_witness.py",
         "sha256": "ed50f54977111df24126a0eda3bdbea14c6de38526ae2b8007135b70b433a8c1"
       }
     },
@@ -757,7 +769,7 @@
       "sha256": "aed1c00adf652d4537d26eb8c3f8f9c6a78fe45f10f7e4fe06b71d3b4676d221",
       "source_evidence": {
         "bytes": 17465,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/runtime_media.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/runtime_media.py",
         "sha256": "aed1c00adf652d4537d26eb8c3f8f9c6a78fe45f10f7e4fe06b71d3b4676d221"
       }
     },
@@ -768,30 +780,30 @@
       "sha256": "aaba4f369949295fe156a7862d91c5bbf13a9f9954077e302a7b918f0fac703b",
       "source_evidence": {
         "bytes": 5401,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/runtime_zoom_context.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/runtime_zoom_context.py",
         "sha256": "aaba4f369949295fe156a7862d91c5bbf13a9f9954077e302a7b918f0fac703b"
       }
     },
     "/app/solution/shape_mode_diagnostic.py": {
-      "bytes": 12646,
+      "bytes": 16464,
       "image_path": "/app/solution/shape_mode_diagnostic.py",
       "repo_path": "image_root/app/solution/shape_mode_diagnostic.py",
-      "sha256": "60d95fa27a15260333d0030738a164ded53a68bed04e6f9541d9164491703277",
+      "sha256": "47d8d6161e2df496d60b4a151cba9b118fcf28a5d2bf1561495b56b6ff67c080",
       "source_evidence": {
-        "bytes": 12646,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/shape_mode_diagnostic.py",
-        "sha256": "60d95fa27a15260333d0030738a164ded53a68bed04e6f9541d9164491703277"
+        "bytes": 16464,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/shape_mode_diagnostic.py",
+        "sha256": "47d8d6161e2df496d60b4a151cba9b118fcf28a5d2bf1561495b56b6ff67c080"
       }
     },
     "/app/solution/shape_mode_diagnostic_policy.json": {
-      "bytes": 552,
+      "bytes": 554,
       "image_path": "/app/solution/shape_mode_diagnostic_policy.json",
       "repo_path": "image_root/app/solution/shape_mode_diagnostic_policy.json",
-      "sha256": "bc663f3f2ef23f7a32b537e3eed772f23ace4ad19b5d38f8321bcf65d894a710",
+      "sha256": "b4dcbfd21bc34635269f665cb7f29798cb6b91abd88d3651b3102d628346c3ef",
       "source_evidence": {
-        "bytes": 552,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/shape_mode_diagnostic_policy.json",
-        "sha256": "bc663f3f2ef23f7a32b537e3eed772f23ace4ad19b5d38f8321bcf65d894a710"
+        "bytes": 554,
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/shape_mode_diagnostic_policy.json",
+        "sha256": "b4dcbfd21bc34635269f665cb7f29798cb6b91abd88d3651b3102d628346c3ef"
       }
     },
     "/app/solution/smoke_observation.py": {
@@ -801,7 +813,7 @@
       "sha256": "87b065d4d59c7d8669bc21a1715f7204ec59d8972e1f475162d53b5d328549db",
       "source_evidence": {
         "bytes": 4655,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/smoke_observation.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/smoke_observation.py",
         "sha256": "87b065d4d59c7d8669bc21a1715f7204ec59d8972e1f475162d53b5d328549db"
       }
     },
@@ -812,7 +824,7 @@
       "sha256": "200f86e2fa5c151798161768942a6b1e1d2cda256754866e83d9ed804e525d2a",
       "source_evidence": {
         "bytes": 9683,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/strict_frame_decode.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/strict_frame_decode.py",
         "sha256": "200f86e2fa5c151798161768942a6b1e1d2cda256754866e83d9ed804e525d2a"
       }
     },
@@ -823,7 +835,7 @@
       "sha256": "2d8d1c60b054a4126b73fbcb4537620f909c47024b691be1c3f540af72f0e229",
       "source_evidence": {
         "bytes": 5115,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/temporal_refinement_hook.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/temporal_refinement_hook.py",
         "sha256": "2d8d1c60b054a4126b73fbcb4537620f909c47024b691be1c3f540af72f0e229"
       }
     },
@@ -834,7 +846,7 @@
       "sha256": "6123b198a32d51cc4694e85dc9079a8a6f0a2eb2f1ed9d905be0f79b15bd2172",
       "source_evidence": {
         "bytes": 8516,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/temporal_refinement_integration.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/temporal_refinement_integration.py",
         "sha256": "6123b198a32d51cc4694e85dc9079a8a6f0a2eb2f1ed9d905be0f79b15bd2172"
       }
     },
@@ -845,7 +857,7 @@
       "sha256": "3484d5a1cb82c295fa69c7a05b921184cb2b9309b71b23859d456ddbed7ecbcb",
       "source_evidence": {
         "bytes": 5996,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/temporal_refinement_observation.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/temporal_refinement_observation.py",
         "sha256": "3484d5a1cb82c295fa69c7a05b921184cb2b9309b71b23859d456ddbed7ecbcb"
       }
     },
@@ -856,7 +868,7 @@
       "sha256": "d1e929c55660ba5b0037388c76d4eee43d43a635e7d5c648442e9b21274f9387",
       "source_evidence": {
         "bytes": 15005,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/temporal_refinement_policy.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/temporal_refinement_policy.py",
         "sha256": "d1e929c55660ba5b0037388c76d4eee43d43a635e7d5c648442e9b21274f9387"
       }
     },
@@ -867,7 +879,7 @@
       "sha256": "3234af3b6e89ad01ea2544a8ff759769268eae6e2f5b50a49e8faf649322076f",
       "source_evidence": {
         "bytes": 5539,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/video_loader.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/video_loader.py",
         "sha256": "3234af3b6e89ad01ea2544a8ff759769268eae6e2f5b50a49e8faf649322076f"
       }
     },
@@ -878,7 +890,7 @@
       "sha256": "767da69483ad0200f214c358887ac0903d12d577d18328125fcf11a82fb8e435",
       "source_evidence": {
         "bytes": 4719,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/solution/volume_binding.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/solution/volume_binding.py",
         "sha256": "767da69483ad0200f214c358887ac0903d12d577d18328125fcf11a82fb8e435"
       }
     },
@@ -889,7 +901,7 @@
       "sha256": "1424ea830b6c881f79d618c9e61b69b5ed1c05fdd04bd9b9287fa09398bbdb06",
       "source_evidence": {
         "bytes": 507,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/surgfield_shell/__init__.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/surgfield_shell/__init__.py",
         "sha256": "1424ea830b6c881f79d618c9e61b69b5ed1c05fdd04bd9b9287fa09398bbdb06"
       }
     },
@@ -900,7 +912,7 @@
       "sha256": "eaec36f8a642dde768e548fb0c010a2a0e169cdb3c70a2ffe643e051a9985743",
       "source_evidence": {
         "bytes": 13155,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/surgfield_shell/launch.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/surgfield_shell/launch.py",
         "sha256": "eaec36f8a642dde768e548fb0c010a2a0e169cdb3c70a2ffe643e051a9985743"
       }
     },
@@ -911,7 +923,7 @@
       "sha256": "07dbccc7722b677455bfc4d04bef0a86996a9b009b33b2e22fbe2d7d8a14ddaa",
       "source_evidence": {
         "bytes": 2343,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/vehicle_entry.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/vehicle_entry.py",
         "sha256": "07dbccc7722b677455bfc4d04bef0a86996a9b009b33b2e22fbe2d7d8a14ddaa"
       }
     },
@@ -922,12 +934,25 @@
       "sha256": "225f06c54f4fbff02cfa88391aefe04a6449c35c9a43bcb86d33a5969175d9d0",
       "source_evidence": {
         "bytes": 13796,
-        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/exact615_platform_compatibility_20260910/cpu_source_a/source/app/verify_vehicle.py",
+        "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/app/verify_vehicle.py",
         "sha256": "225f06c54f4fbff02cfa88391aefe04a6449c35c9a43bcb86d33a5969175d9d0"
       }
     }
   },
   "modifications_for_HF": false,
+  "predecessor_repository_revision": "b2176cf6d0f77e58e34a90583041b1a929417fb3",
+  "predecessor_source_manifest_sha256": "df1cf7f38c87eae4719b721a7f4a6e7c1d19d9c59d33d065808f9976d937afd5",
   "schema": "selected615-hf-source-manifest/1",
-  "total_bytes": 984514
+  "scope": "Exact diagnostic-safe wrapper repair source; source only, with current actual image bound separately by IMAGE_IDENTITY.json. Original selected weights and their immutable asset provenance are preserved.",
+  "source_preparation": {
+    "bytes": 65314,
+    "path": "/Users/rezanehzati/Projects/orena-finals/packages/foundation-q38/review/submission_repair_20260911/diagnostic_source_b/PREPARATION.json",
+    "sha256": "94052eff5746e9001c839a2287fffda16ceaf90c7522a92fbb349332d5ead895"
+  },
+  "source_review": {
+    "bytes": 58697,
+    "path": "/Users/rezanehzati/Projects/orena-finals/packages/procedure/review/submission_failure_20260911/intake_diagnostic_source_b/REVIEW.json",
+    "sha256": "396e5b957b0f05f2176eb4e1b1c16c526462385c5e777c4baf15d655dbeb2e3d"
+  },
+  "total_bytes": 1009195
 }

image_root/app/VEHICLE_INPUTS.json

@@ -1522,6 +1522,10 @@
       "bytes": 2525,
       "sha256": "78b13b81ad457d8930d0bc013d101ce62e4e7a2bce4712b1cf3f5a1320d8ecc6"
     },
+    "solution/entrypoint/lazy_video_staging.py": {
+      "bytes": 16076,
+      "sha256": "faa24dfcfef510629ccc522b563461fe3454c8d0ea32f6228674e5fdbe36523e"
+    },
     "solution/entrypoint/native_video_input.py": {
       "bytes": 9923,
       "sha256": "8269a3f520d5dc78e25ca847aae438b7697f3f3e165e1e28d50a0b48e45ab067"
@@ -1531,8 +1535,8 @@
       "sha256": "a55143dfdbeca52503e225a8a1d2529ef359d3f905ee00ae4d919c6c885c065f"
     },
     "solution/entrypoint/probe_entrypoint.py": {
-      "bytes": 66570,
-      "sha256": "ca5c763c03faf2ff9fc08b4a785ad3f1083ce045731f5be9d445df9ff4e13584"
+      "bytes": 70789,
+      "sha256": "b648bb96cc0efcd8321fa73e17660e2b2490064ea8c33146d49e6f46bafb91fa"
     },
     "solution/entrypoint/segment_temporal_seam.py": {
       "bytes": 11930,
@@ -1735,12 +1739,12 @@
       "sha256": "aaba4f369949295fe156a7862d91c5bbf13a9f9954077e302a7b918f0fac703b"
     },
     "solution/shape_mode_diagnostic.py": {
-      "bytes": 12646,
-      "sha256": "60d95fa27a15260333d0030738a164ded53a68bed04e6f9541d9164491703277"
+      "bytes": 16464,
+      "sha256": "47d8d6161e2df496d60b4a151cba9b118fcf28a5d2bf1561495b56b6ff67c080"
     },
     "solution/shape_mode_diagnostic_policy.json": {
-      "bytes": 552,
-      "sha256": "bc663f3f2ef23f7a32b537e3eed772f23ace4ad19b5d38f8321bcf65d894a710"
+      "bytes": 554,
+      "sha256": "b4dcbfd21bc34635269f665cb7f29798cb6b91abd88d3651b3102d628346c3ef"
     },
     "solution/smoke_observation.py": {
       "bytes": 4655,
@@ -1788,15 +1792,24 @@
     "original_warmups_retained": true,
     "original_wrapper_and_request_clocks": true,
     "policy_pin": {
-      "bytes": 552,
-      "sha256": "bc663f3f2ef23f7a32b537e3eed772f23ace4ad19b5d38f8321bcf65d894a710"
+      "bytes": 554,
+      "sha256": "b4dcbfd21bc34635269f665cb7f29798cb6b91abd88d3651b3102d628346c3ef"
     },
+    "predecessor_source_plan_sha256": "a44c5217fc08c3b202c2a1e71b07be140f45d645e07a39b8336b4b72268d419b",
     "runtime_measured": false,
+    "saturation_policy": {
+      "actual_repaired_image_runtime_measured": false,
+      "max_events_per_process": 16384,
+      "max_metadata_bytes_per_process": 16777216,
+      "model_and_controller_checks_unchanged": true,
+      "recording_exhaustion_preserves_inference": true,
+      "schema": "shape-mode-diagnostic-saturation-source/1",
+      "terminal_receipt_best_effort": true
+    },
     "schema": "shape-mode-diagnostic-source-binding/1",
     "source_pin": {
-      "bytes": 12646,
-      "sha256": "60d95fa27a15260333d0030738a164ded53a68bed04e6f9541d9164491703277"
-    },
-    "source_plan_sha256": "a44c5217fc08c3b202c2a1e71b07be140f45d645e07a39b8336b4b72268d419b"
+      "bytes": 16464,
+      "sha256": "47d8d6161e2df496d60b4a151cba9b118fcf28a5d2bf1561495b56b6ff67c080"
+    }
   }
 }

image_root/app/solution/entrypoint/lazy_video_staging.py

@@ -0,0 +1,338 @@
+"""PROCEDURE archive staging: metadata catalog and one active extracted clip.
+
+The catalog contains empty regular files, never ZIP payload. Resolution uses the
+original shell resolver before any clip is extracted. Archive order, duplicate
+member overwrite order, loose-file priority, and native normalized paths remain
+unchanged. A failed/partial extraction never becomes a model input.
+"""
+from __future__ import annotations
+import json
+import hashlib
+import os
+from pathlib import Path
+import stat
+import tempfile
+import time
+import zipfile
+
+_CHUNK = 1024 * 1024
+_MAX_ENTRIES = 100000
+_MAX_NAME_BYTES = 16 * 1024 * 1024
+def _safe_qid(qid):
+    # Contract IDs are strings, not the temporal observer's narrower identifier
+    # grammar. They must fit one normalized filename including its .mp4 suffix.
+    return (bool(qid) and qid not in ('.', '..') and
+            not any(c in qid for c in ('/', '\\', '\x00')) and
+            len(os.fsencode(qid)) + len('.mp4') <= 255)
+
+
+def _source_under_input(path, root):
+    path = Path(path)
+    rel = path.relative_to(root)
+    current = root
+    for index, part in enumerate(rel.parts):
+        current = current / part
+        mode = current.lstat().st_mode
+        if stat.S_ISLNK(mode):
+            raise ValueError('descendant input symlink refused')
+        if index < len(rel.parts)-1 and not stat.S_ISDIR(mode):
+            raise ValueError('input ancestor is not a directory')
+    if not stat.S_ISREG(path.lstat().st_mode):
+        raise ValueError('input source is not a regular file')
+    if path.resolve(strict=True) != path:
+        raise ValueError('input source resolves outside canonical input')
+    return path
+
+
+def _stamp(path):
+    s = Path(path).stat()
+    return (s.st_dev, s.st_ino, s.st_mode, s.st_size, s.st_mtime_ns, s.st_ctime_ns)
+
+
+def _member_path(name):
+    # Same POSIX normalization as zipfile.extract, preceded by the original
+    # absolute/parent guard. ZIP symlink attributes are never followed.
+    if name.startswith(("/", "\\")) or ".." in Path(name).parts:
+        return None
+    parts = [p for p in name.split("/") if p not in ("", ".")]
+    return Path(*parts) if parts else None
+
+
+class LazyVideos:
+    def __init__(self, input_dir, workdir, rows, *, resolver, resolve_video,
+                 is_zip, video_exts, log):
+        self.input_alias = Path(os.path.abspath(input_dir))
+        self.input_dir = self.input_alias.resolve(strict=True)
+        self.alias_stamp = self.input_alias.lstat()
+        self.alias_identity = (self.alias_stamp.st_dev, self.alias_stamp.st_ino,
+                               self.alias_stamp.st_mode, self.alias_stamp.st_mtime_ns,
+                               self.alias_stamp.st_ctime_ns)
+        self.input_identity = _stamp(self.input_dir)
+        self.workdir = Path(workdir)
+        self.root = self.workdir / "videos"
+        self.norm_root = self.workdir / "norm"
+        self.catalog = self.workdir / "video_catalog"
+        self.root.mkdir()
+        (self.norm_root / "plain").mkdir(parents=True)
+        self.catalog.mkdir()
+        self.log = log
+        self.entries = {}
+        self.selected = {}
+        self.active = None
+        self.active_link = None
+        self.pending = None
+        self.blocked = False
+        self.fenced = set()
+        self.peak_extracted_bytes = 0
+        self.extractions = 0
+        files = sorted((p for p in self.input_dir.rglob("*") if p.is_file()), key=str)
+        archives, loose = [], []
+        for path in files:
+            try:
+                _source_under_input(path, self.input_dir)
+            except (OSError, ValueError) as exc:
+                log(f'PROBESHELL: input source refused {path}: {type(exc).__name__}')
+                continue
+            if path.suffix.lower() in video_exts:
+                loose.append(path)
+            elif is_zip(path):
+                archives.append(path)
+        count = name_bytes = 0
+        for archive in archives:
+            stamp = _stamp(archive)
+            with zipfile.ZipFile(archive) as zf:
+                for index, info in enumerate(zf.infolist()):
+                    count += 1
+                    name_bytes += len(info.filename.encode("utf-8"))
+                    if count > _MAX_ENTRIES or name_bytes > _MAX_NAME_BYTES:
+                        raise ValueError("archive metadata catalog limit exceeded")
+                    rel = _member_path(info.filename)
+                    if rel is None:
+                        log(f"PROBESHELL: skipping unsafe zip member {info.filename!r}")
+                        continue
+                    target = self.catalog / rel
+                    try:
+                        if info.is_dir():
+                            target.mkdir(parents=True, exist_ok=True)
+                            continue
+                        target.parent.mkdir(parents=True, exist_ok=True)
+                        # Truncate an earlier member's metadata placeholder,
+                        # just as the original extractor overwrites that path.
+                        with target.open("wb"):
+                            pass
+                        self.entries[rel] = ("zip", archive, stamp, index,
+                            info.filename, info.CRC, info.file_size, info.compress_size)
+                    except OSError as exc:
+                        log(f"PROBESHELL: catalog member refused {info.filename!r}: {type(exc).__name__}")
+            if _stamp(archive) != stamp:
+                raise ValueError("archive changed while indexing")
+        for path in loose:
+            rel = path.relative_to(self.input_dir)
+            target = self.catalog / rel
+            target.parent.mkdir(parents=True, exist_ok=True)
+            if not target.exists():
+                with target.open("xb"):
+                    pass
+                source = path.resolve(strict=True)
+                self.entries[rel] = ("loose", source, _stamp(source))
+        for row in rows:
+            qid = str(row.get("qID", ""))
+            if not qid or qid in self.selected:
+                continue
+            if not _safe_qid(qid):
+                log(f"PROBESHELL: RESOLVE-BLIND unsafe qID={qid!r}")
+                self.selected[qid] = (None, "UNRESOLVED")
+                continue
+            source, rung = resolver(self.catalog, qid, row.get("videoID"), resolve_video)
+            # Original tolerant videoID may contain separators. Only catalog
+            # descendants can resolve; never use its path to escape staging.
+            if source is None:
+                self.selected[qid] = (None, rung)
+            else:
+                try:
+                    rel = Path(source).relative_to(self.catalog)
+                    if ".." in rel.parts or rel not in self.entries:
+                        raise ValueError("source outside indexed catalog")
+                except ValueError:
+                    self.selected[qid] = (None, "UNRESOLVED")
+                    continue
+                self.selected[qid] = (rel, rung)
+        videoids = sorted(q for q, (rel, rung) in self.selected.items()
+                          if rel is not None and rung == "videoID")
+        # Immutable for the whole run: the engine caches this marker by path.
+        (self.norm_root / "videoid_rung.json").write_text(json.dumps(videoids))
+        log(f"PROBESHELL: LAZY-CATALOG {len(self.entries)} files, {len(archives)} archives, "
+            f"{len(loose)} loose clips; one extracted clip at a time")
+
+    def target_key(self, qid):
+        rel, _ = self.selected.get(qid, (None, "UNRESOLVED"))
+        if rel is None:
+            return None
+        entry = self.entries[rel]
+        return str(entry[1] if entry[0] == "loose" else self.root / rel)
+
+    def _check_input(self):
+        current = self.input_alias.lstat()
+        identity = (current.st_dev, current.st_ino, current.st_mode,
+                    current.st_mtime_ns, current.st_ctime_ns)
+        if identity != self.alias_identity or self.input_alias.resolve(strict=True) != self.input_dir:
+            raise ValueError('input root alias changed')
+        if _stamp(self.input_dir) != self.input_identity:
+            raise ValueError('canonical input directory changed')
+
+    def release(self):
+        failures = []
+        for field in ('active_link', 'active'):
+            path = getattr(self, field)
+            if path is not None:
+                try:
+                    path.unlink(missing_ok=True)
+                    setattr(self, field, None)
+                except OSError as exc:
+                    failures.append(type(exc).__name__)
+        if failures:
+            self.blocked = True
+            self.log('PROBESHELL: LAZY-RELEASE-FAILED ' + ','.join(failures) +
+                     '; further extraction disabled to retain the one-clip bound')
+        if self.pending is not None:
+            remaining = 0
+            if self.active is not None and self.active.exists() and not self.active.is_symlink():
+                remaining = self.active.stat().st_size
+            self.pending.update(released=not failures, managed_clip_bytes_after=remaining,
+                peak_extracted_clip_bytes=self.peak_extracted_bytes)
+            if self.pending['phase'] == 'request':
+                self.log('LAZY-CLIP-JSON ' + json.dumps(self.pending, sort_keys=True))
+            self.pending = None
+        return not failures
+
+    def materialize(self, qid, *, deadline=None, phase="request"):
+        self.release()
+        rel, rung = self.selected.get(qid, (None, "UNRESOLVED"))
+        self.pending = dict(schema='procedure-lazy-clip/1', qid=qid, phase=phase,
+            staged=None if rel is None else str(self.root/rel), rung=rung,
+            member=None, archive=None, source_kind=None, copied_bytes=0,
+            sha256=None, complete=False, failure=None, released=False)
+        if self.blocked:
+            self.pending['failure'] = 'prior_cleanup_failed'
+            return None, rung
+        if rel is None or qid in self.fenced:
+            self.pending['failure'] = 'unresolved' if rel is None else 'decode_fenced' 
+            return None, rung
+        target = self.root / rel
+        entry = self.entries[rel]
+        self.pending.update(source_kind=entry[0],
+            archive=str(entry[1]) if entry[0]=='zip' else None,
+            member=entry[4] if entry[0]=='zip' else str(entry[1]))
+        tmp = None
+        try:
+            self._check_input()
+            _source_under_input(entry[1], self.input_dir)
+            target.parent.mkdir(parents=True, exist_ok=True)
+            if _stamp(entry[1]) != entry[2]:
+                raise ValueError("source changed since catalog")
+            if deadline is not None and time.perf_counter() >= deadline:
+                raise TimeoutError("decode-proof staging budget exhausted")
+            if entry[0] == "loose":
+                target.symlink_to(entry[1])
+            else:
+                with zipfile.ZipFile(entry[1]) as zf:
+                    info = zf.infolist()[entry[3]]
+                    if (info.filename, info.CRC, info.file_size, info.compress_size) != entry[4:]:
+                        raise ValueError("indexed archive member changed")
+                    fd, name = tempfile.mkstemp(prefix=".clip-partial-", dir=target.parent)
+                    tmp = Path(name)
+                    copied = 0
+                    digest = hashlib.sha256()
+                    with os.fdopen(fd, "wb") as out, zf.open(info) as stream:
+                        while True:
+                            if deadline is not None and time.perf_counter() >= deadline:
+                                raise TimeoutError("decode-proof staging budget exhausted")
+                            chunk = stream.read(_CHUNK)
+                            if not chunk:
+                                break
+                            written = out.write(chunk)
+                            if written != len(chunk):
+                                raise OSError('short archive staging write')
+                            digest.update(chunk)
+                            copied += written
+                            self.peak_extracted_bytes = max(self.peak_extracted_bytes, copied)
+                        if copied != info.file_size:
+                            raise ValueError("incomplete archive member")
+                    self._check_input()
+                    _source_under_input(entry[1], self.input_dir)
+                    if _stamp(entry[1]) != entry[2]:
+                        raise ValueError("archive changed while extracting")
+                    if deadline is not None and time.perf_counter() >= deadline:
+                        raise TimeoutError("decode-proof staging budget exhausted")
+                    os.replace(tmp, target)
+                    tmp = None
+                    self.extractions += 1
+                    self.pending.update(copied_bytes=copied, sha256=digest.hexdigest())
+            self.pending['complete'] = True
+            self.active = target
+            return target, rung
+        except Exception as exc:
+            self.pending['failure'] = type(exc).__name__
+            if tmp is not None:
+                if tmp.exists():
+                    partial = tmp.stat().st_size
+                    self.pending['copied_bytes'] = partial
+                    self.peak_extracted_bytes = max(self.peak_extracted_bytes, partial)
+                try:
+                    tmp.unlink(missing_ok=True)
+                except OSError:
+                    self.active = tmp
+                    self.blocked = True
+            if target.is_file() or target.is_symlink():
+                try:
+                    target.unlink(missing_ok=True)
+                except OSError:
+                    self.active = target
+                    self.blocked = True
+            self.log(f"PROBESHELL: LAZY-STAGE-FAILED qID={qid} {type(exc).__name__}: {exc}; "
+                     "no partial clip published; this row retains normal fallback containment")
+            return None, rung
+
+    def prepare_probe(self, row, deadline):
+        qid = str(row.get("qID", ""))
+        try:
+            source, _ = self.materialize(qid, deadline=deadline, phase="probe")
+            if source is not None:
+                link = self.norm_root / "plain" / f"{qid}.mp4"
+                self.active_link = link
+                link.symlink_to(source.resolve(strict=True))
+        except Exception as exc:
+            self.log(f'PROBESHELL: LAZY-PROBE-STAGE-FAILED qID={qid} {type(exc).__name__}')
+            self.release()
+        # No runtime temporal binding during pre-probe: its file is temporary.
+
+    def prepare_request(self, row, normalize):
+        qid = str(row.get("qID", ""))
+        try:
+            source, rung = self.materialize(qid)
+            if not _safe_qid(qid):
+                return False
+            if self.pending.get('failure') not in (None, 'unresolved', 'decode_fenced'):
+                return False
+            # Set the cleanup path before normalization, so a partial link
+            # publication followed by an exception is still reclaimed.
+            link = self.norm_root / "plain" / f"{qid}.mp4"
+            self.active_link = link
+            normalize([row], self.root, self.workdir,
+                      resolutions={qid: (source, rung)}, write_marker=False)
+            return True
+        except Exception as exc:
+            if self.pending is not None:
+                self.pending['failure'] = type(exc).__name__
+            self.log(f'PROBESHELL: LAZY-NORMALIZE-FAILED qID={qid} {type(exc).__name__}')
+            self.release()
+            return False
+
+    def close(self):
+        self.release()
+        self.log("PROBESHELL: LAZY-STORAGE " + json.dumps({
+            "peak_extracted_clip_bytes": self.peak_extracted_bytes,
+            "completed_extractions": self.extractions,
+            "active_extracted_clips": int(self.active is not None),
+            "further_extraction_disabled": self.blocked,
+            "scope": "archive payload only; private runtime evidence/caches retained"}, sort_keys=True))

image_root/app/solution/entrypoint/probe_entrypoint.py

@@ -77,6 +77,7 @@ import re
 import subprocess
 import sys
 import tempfile
+import shutil
 import time
 import zipfile
 from pathlib import Path
@@ -376,7 +377,8 @@ def _resolve_qid(root: Path, qid: str, video_id, resolve_video):
     return None, _RUNG_UNRESOLVED
 
 
-def normalize_clips(rows: list[dict], root: Path | None, workdir: Path) -> Path:
+def normalize_clips(rows: list[dict], root: Path | None, workdir: Path,
+                    *, resolutions=None, write_marker: bool = True) -> Path:
     """Build `<work>/norm/plain/<qID>.mp4` links so the engine's clip-mode
     lookup is deterministic regardless of the delivered tree, resolving each
     qID through the labeled ladder in `_resolve_qid`.
@@ -407,7 +409,8 @@ def normalize_clips(rows: list[dict], root: Path | None, workdir: Path) -> Path:
         qid = str(row.get("qID", ""))
         if not qid:
             continue
-        src, rung = _resolve_qid(root, qid, row.get("videoID"), resolve_video)
+        src, rung = (resolutions[qid] if resolutions is not None else
+                     _resolve_qid(root, qid, row.get("videoID"), resolve_video))
         rung_counts[rung] = rung_counts.get(rung, 0) + 1
         if src is None:
             unresolved.append(qid)
@@ -438,7 +441,8 @@ def normalize_clips(rows: list[dict], root: Path | None, workdir: Path) -> Path:
     # clip-mode engine can pick SEEK-with-window for exactly these qIDs.
     marker = norm.parent / "videoid_rung.json"
     try:
-        marker.write_text(json.dumps(sorted(videoid_qids)))
+        if write_marker:
+            marker.write_text(json.dumps(sorted(videoid_qids)))
     except OSError as e:
         _log(f"PROBESHELL: could not write videoid_rung marker ({e})")
     if videoid_qids:
@@ -593,8 +597,8 @@ def _hash_frame_image(src: Path) -> tuple[str, int, str]:
 
 
 def emit_decode_records(rows: list[dict], norm_root: Path,
-                        probe_budget_sec: float | None = None
-                        ) -> tuple[dict[str, str], int]:
+                        probe_budget_sec: float | None = None,
+                        staging=None) -> tuple[dict[str, str], int]:
     """One G1DECODE stderr line per UNIQUE qID — the decode-proof channel.
 
     Hash convention (a parse contract with the external rehearsal harness —
@@ -641,10 +645,16 @@ def emit_decode_records(rows: list[dict], norm_root: Path,
         if not qid or qid in seen_q:
             continue
         seen_q.add(qid)
+        if staging is not None:
+            from solution.entrypoint.lazy_video_staging import _safe_qid
+            if not _safe_qid(qid):
+                _log(f"G1DECODE qID={qid!r} frames=0 first_frame_sha256=none res=0x0")
+                continue
         clip = norm_root / "plain" / f"{qid}.mp4"
         sha, frames, res, danger = ("none", 0, "0x0", None)
-        if clip.is_file():
-            key = os.path.realpath(clip)
+        staged_key = staging.target_key(qid) if staging is not None else None
+        if staged_key is not None or clip.is_file():
+            key = staged_key if staging is not None else os.path.realpath(clip)
             if key in by_target:                       # shared clip: decode once
                 sha, frames, res, danger = by_target[key]
             elif (probe_budget_sec is not None
@@ -655,9 +665,17 @@ def emit_decode_records(rows: list[dict], norm_root: Path,
                          f"exhausted; skipping probe for remaining clips (the "
                          f"in-process decode is SIGALRM-bounded, so still safe)")
             else:
-                sha, frames, res, danger = _probe_first_frame(clip)
-                by_target[key] = (sha, frames, res, danger)
-                n_probed += 1
+                if staging is not None:
+                    deadline = None if probe_budget_sec is None else t0 + probe_budget_sec
+                    staging.prepare_probe(row, deadline)
+                try:
+                    if clip.is_file():
+                        sha, frames, res, danger = _probe_first_frame(clip)
+                        by_target[key] = (sha, frames, res, danger)
+                        n_probed += 1
+                finally:
+                    if staging is not None:
+                        staging.release()
         else:
             # R1-47: FRAME image ladder (mirrors the resolver rung order; file-
             # bytes hash, decode-free — see docstring). Budget-charged like the
@@ -796,7 +814,7 @@ def fallback_answers(rows: list[dict]) -> list[dict]:
 
 def answer_all(rows: list[dict], videos_root: Path, device: str,
                answers: list[dict], output_dir: Path,
-               proc_t0: float | None = None) -> list[dict]:
+               proc_t0: float | None = None, staging=None) -> list[dict]:
     """Upgrade the pre-seeded `answers` in place — one engine answer per unique
     qID — flushing atomically after every question.
 
@@ -820,187 +838,211 @@ def answer_all(rows: list[dict], videos_root: Path, device: str,
     # cold-start init overrun is visible and attributable, not silent.
     _init_t0 = time.perf_counter()
     container = SubmissionContainer(videos_dir=videos_root, device=device)
-    _init_wall = time.perf_counter() - _init_t0
-    _log(f"PROBESHELL: CONTAINER-INIT {_init_wall:.1f}s (eager model/detector load)"
-         + (f"; total setup {time.perf_counter() - proc_t0:.1f}s from process start"
-            if proc_t0 is not None else ""))
-    # ── F1 WARM-UP (round-3, checklist C2; SURGFIELD_SHELL_WARMUP=1, default
-    # OFF == this block is dead == byte-identical shipped path). One dummy
-    # generate BEFORE the row loop so the first case's clock never carries the
-    # first-generate lazy costs (R1: row-0 = 49.1s incl. warm-up > the 30s
-    # per-case budget by itself). FAIL-LOUD, NEVER FAIL-CLOSED: a warm-up
-    # error is visible (stderr marker + status file) but must not kill the
-    # serve — exiting would fail ALL cases when only the warm-up broke;
-    # degraded (row-0 re-charged) beats dead. ──
-    if os.environ.get("SURGFIELD_SHELL_WARMUP") == "1":
-        _wu_t0 = time.perf_counter()
-        _wu = {"ok": False}
-        try:
-            _wu_ok = False
-            for _l in container.layers:
-                if _l.name == "L17_cholec_vlm" and hasattr(_l, "warmup_generate"):
-                    _wu_ok = bool(_l.warmup_generate())
-                    break
-            _wu = {"ok": _wu_ok, "s": round(time.perf_counter() - _wu_t0, 1)}
-            _wu_lbl = ("OK" if _wu_ok else
-                       "FAILED (serve continues, row-0 will carry the charge)")
-            print(f"F1-WARMUP {_wu_lbl} {_wu['s']}s", file=sys.stderr, flush=True)
-        except Exception as _wu_e:
-            _wu = {"ok": False, "error": repr(_wu_e)[:300]}
-            print(f"F1-WARMUP FAILED (serve continues, row-0 will carry the "
-                  f"charge): {_wu_e!r}", file=sys.stderr, flush=True)
-        try:
-            (output_dir / "warmup_status.json").write_text(json.dumps(_wu))
-        except Exception:
-            pass  # stderr already carries it; /output quirks never kill serve
-    slot = {a["qID"]: i for i, a in enumerate(answers)}
-
-    # R4/X-2 CURE (2026-08-18 W1): the pooled monitor derives from the BAKED
-    # track's budget (helpers.TRACK_BUDGET_SEC), not a flat 30 s/q — the X-2
-    # caveat ("PROBESHELL pooled lines are 30s/q-basis, never quotable as
-    # track-budget evidence") is RETIRED by this change. Still monitoring-only:
-    # the shell NEVER self-kills (guarantee 4 unchanged).
-    # V7 CURE (W2), inline form: unknown SURGFIELD_TRACK degrades LOUDLY to
-    # 'procedure' — select_track()'s no-silent-misroute contract, delivered
-    # WITHOUT importing track_inputs (guard check (8): the FRAME/SEG module is
-    # imported ONLY under the frame/segment gate; a PROC run must never import it).
-    _track = os.environ.get("SURGFIELD_TRACK", "procedure").strip().lower()
-    if _track not in ("frame", "segment", "procedure"):
-        print(f"TRACK: unknown SURGFIELD_TRACK={_track!r}; defaulting to 'procedure' "
-              f"(no-silent-misroute)", file=sys.stderr, flush=True)
-        _track = "procedure"
-    per_q_budget = float(TRACK_BUDGET_SEC.get(_track, POOLED_SEC_PER_QUESTION))
-    budget = per_q_budget * len(answers)
-    _RUN_COUNTERS.clear()
-    _RUN_COUNTERS.update({"track": _track, "per_q_budget_s": per_q_budget,
-                          "n_rows": len(answers), "n_engine_answered": 0,
-                          "n_fallback_kept": 0, "n_validate_demoted": 0,
-                          "n_latency_cliff": 0})
-    job_t0 = time.perf_counter()
-    budget_breached = False
-    done: set[str] = set()
-    for row in rows:
-        qid = str(row.get("qID", ""))
-        if not qid or qid in done or qid not in slot:
-            if qid and qid in done:
-                _log(f"PROBESHELL: skipping duplicate qID row ({qid!r})")
-            continue
-        done.add(qid)
-        elapsed = time.perf_counter() - job_t0
-        if elapsed > budget and not budget_breached:
-            budget_breached = True
-            _log(f"PROBESHELL: POOLED BUDGET EXCEEDED ({elapsed:.0f}s > "
-                 f"{budget:.0f}s for {len(answers)} questions) — continuing; "
-                 f"the platform owns enforcement and the answer file is "
-                 f"already complete at every instant")
-        t0 = time.perf_counter()
-        if os.environ.get("SURGFIELD_PROC_SINGLE_REFINE") == "1":
-            _q38_temporal_scratch = None
-        question = str(row.get("question", ""))
-        # Same B2-19-1 class, sibling site: these run OUTSIDE the per-question
-        # try — a raising coercion here would degrade the WHOLE run via the
-        # outer net instead of costing one row. Never-raise by construction.
-        start = _safe_float(row.get("start_time", 0.0) or 0.0)
-        end = _safe_float(row.get("end_time", 0.0) or 0.0)
-        try:
-            scratch = infer_all(question, start_time=start, end_time=end)
-            # H5: prefer an answer_format EXPOSED on the request over the inferred
-            # one. The observed live contract does NOT carry this field (the
-            # Request schema is qID/videoID/start/end/procedure_type/question),
-            # so on real inputs this is byte-identical to inference — a defensive
-            # guard that honors a true format if a future contract exposes it,
-            # avoiding the misroute the H5 validator policy otherwise absorbs.
-            exposed_fmt = row.get("answer_format")
-            fmt = exposed_fmt if isinstance(exposed_fmt, str) and exposed_fmt \
-                else scratch.get("answer_format", "open_ended")
-            req = Request(
-                qID=qid,
-                videoID=str(row.get("videoID", "")),
-                start_time=start,
-                end_time=end,
-                procedure_type=str(row.get("procedure_type", "")),
-                question=question,
-            )
-            # PROPOSED trusted refinement binding: the original t0 precedes infer_all.
-            # No helper import or media-map I/O when the new flag is disabled.
+    try:
+        _init_wall = time.perf_counter() - _init_t0
+        _log(f"PROBESHELL: CONTAINER-INIT {_init_wall:.1f}s (eager model/detector load)"
+             + (f"; total setup {time.perf_counter() - proc_t0:.1f}s from process start"
+                if proc_t0 is not None else ""))
+        # ── F1 WARM-UP (round-3, checklist C2; SURGFIELD_SHELL_WARMUP=1, default
+        # OFF == this block is dead == byte-identical shipped path). One dummy
+        # generate BEFORE the row loop so the first case's clock never carries the
+        # first-generate lazy costs (R1: row-0 = 49.1s incl. warm-up > the 30s
+        # per-case budget by itself). FAIL-LOUD, NEVER FAIL-CLOSED: a warm-up
+        # error is visible (stderr marker + status file) but must not kill the
+        # serve — exiting would fail ALL cases when only the warm-up broke;
+        # degraded (row-0 re-charged) beats dead. ──
+        if os.environ.get("SURGFIELD_SHELL_WARMUP") == "1":
+            _wu_t0 = time.perf_counter()
+            _wu = {"ok": False}
+            try:
+                _wu_ok = False
+                for _l in container.layers:
+                    if _l.name == "L17_cholec_vlm" and hasattr(_l, "warmup_generate"):
+                        _wu_ok = bool(_l.warmup_generate())
+                        break
+                _wu = {"ok": _wu_ok, "s": round(time.perf_counter() - _wu_t0, 1)}
+                _wu_lbl = ("OK" if _wu_ok else
+                           "FAILED (serve continues, row-0 will carry the charge)")
+                print(f"F1-WARMUP {_wu_lbl} {_wu['s']}s", file=sys.stderr, flush=True)
+            except Exception as _wu_e:
+                _wu = {"ok": False, "error": repr(_wu_e)[:300]}
+                print(f"F1-WARMUP FAILED (serve continues, row-0 will carry the "
+                      f"charge): {_wu_e!r}", file=sys.stderr, flush=True)
+            try:
+                (output_dir / "warmup_status.json").write_text(json.dumps(_wu))
+            except Exception:
+                pass  # stderr already carries it; /output quirks never kill serve
+        slot = {a["qID"]: i for i, a in enumerate(answers)}
+
+        # R4/X-2 CURE (2026-08-18 W1): the pooled monitor derives from the BAKED
+        # track's budget (helpers.TRACK_BUDGET_SEC), not a flat 30 s/q — the X-2
+        # caveat ("PROBESHELL pooled lines are 30s/q-basis, never quotable as
+        # track-budget evidence") is RETIRED by this change. Still monitoring-only:
+        # the shell NEVER self-kills (guarantee 4 unchanged).
+        # V7 CURE (W2), inline form: unknown SURGFIELD_TRACK degrades LOUDLY to
+        # 'procedure' — select_track()'s no-silent-misroute contract, delivered
+        # WITHOUT importing track_inputs (guard check (8): the FRAME/SEG module is
+        # imported ONLY under the frame/segment gate; a PROC run must never import it).
+        _track = os.environ.get("SURGFIELD_TRACK", "procedure").strip().lower()
+        if _track not in ("frame", "segment", "procedure"):
+            print(f"TRACK: unknown SURGFIELD_TRACK={_track!r}; defaulting to 'procedure' "
+                  f"(no-silent-misroute)", file=sys.stderr, flush=True)
+            _track = "procedure"
+        per_q_budget = float(TRACK_BUDGET_SEC.get(_track, POOLED_SEC_PER_QUESTION))
+        budget = per_q_budget * len(answers)
+        _RUN_COUNTERS.clear()
+        _RUN_COUNTERS.update({"track": _track, "per_q_budget_s": per_q_budget,
+                              "n_rows": len(answers), "n_engine_answered": 0,
+                              "n_fallback_kept": 0, "n_validate_demoted": 0,
+                              "n_latency_cliff": 0})
+        job_t0 = time.perf_counter()
+        budget_breached = False
+        done: set[str] = set()
+        for row in rows:
+            qid = str(row.get("qID", ""))
+            if not qid or qid in done or qid not in slot:
+                if qid and qid in done:
+                    _log(f"PROBESHELL: skipping duplicate qID row ({qid!r})")
+                continue
+            done.add(qid)
+            elapsed = time.perf_counter() - job_t0
+            if elapsed > budget and not budget_breached:
+                budget_breached = True
+                _log(f"PROBESHELL: POOLED BUDGET EXCEEDED ({elapsed:.0f}s > "
+                     f"{budget:.0f}s for {len(answers)} questions) — continuing; "
+                     f"the platform owns enforcement and the answer file is "
+                     f"already complete at every instant")
+            # Extraction belongs to the original process/job clock, before the
+            # unchanged per-question infer/answer timer and its runtime binding.
+            stage_ok = staging.prepare_request(row, normalize_clips) if staging is not None else True
+            t0 = time.perf_counter()
             if os.environ.get("SURGFIELD_PROC_SINGLE_REFINE") == "1":
-                _q38_temporal_scratch = scratch
-                try:
-                    from solution.temporal_refinement_observation import begin_request
-                    _q38_sink = begin_request(req=req, scratch=scratch, output_dir=output_dir,
-                        request_started_perf_counter=t0, per_q_budget_s=per_q_budget)
-                    from solution.temporal_refinement_hook import install_request_context
-                    install_request_context(
-                        req=req, scratch=scratch, videos_root=videos_root, track=_track,
-                        answer_format=fmt, request_started_perf_counter=t0,
-                        per_q_budget_s=per_q_budget)
-                    _q38_sink.update(hook_observation=scratch.get("q38_refinement_hook_observation"))
-                except Exception as _q38_hook_error:
-                    scratch.pop("q38_refinement_context", None)
-                    scratch["q38_refinement_hook_observation"] = {
-                        "status": "refused", "reason": "request_hook_import_or_execution_failed",
-                        "exception_type": type(_q38_hook_error).__name__}
-            if os.environ.get("ORENA_SMOKE_OBSERVE") == "1":
-                from solution.smoke_observation import request_scope
-                with request_scope(req.qID):
+                _q38_temporal_scratch = None
+            question = str(row.get("question", ""))
+            # Same B2-19-1 class, sibling site: these run OUTSIDE the per-question
+            # try — a raising coercion here would degrade the WHOLE run via the
+            # outer net instead of costing one row. Never-raise by construction.
+            start = _safe_float(row.get("start_time", 0.0) or 0.0)
+            end = _safe_float(row.get("end_time", 0.0) or 0.0)
+            try:
+                if not stage_ok:
+                    raise RuntimeError('request staging refused; retained fallback')
+                scratch = infer_all(question, start_time=start, end_time=end)
+                # H5: prefer an answer_format EXPOSED on the request over the inferred
+                # one. The observed live contract does NOT carry this field (the
+                # Request schema is qID/videoID/start/end/procedure_type/question),
+                # so on real inputs this is byte-identical to inference — a defensive
+                # guard that honors a true format if a future contract exposes it,
+                # avoiding the misroute the H5 validator policy otherwise absorbs.
+                exposed_fmt = row.get("answer_format")
+                fmt = exposed_fmt if isinstance(exposed_fmt, str) and exposed_fmt \
+                    else scratch.get("answer_format", "open_ended")
+                req = Request(
+                    qID=qid,
+                    videoID=str(row.get("videoID", "")),
+                    start_time=start,
+                    end_time=end,
+                    procedure_type=str(row.get("procedure_type", "")),
+                    question=question,
+                )
+                # PROPOSED trusted refinement binding: the original t0 precedes infer_all.
+                # No helper import or media-map I/O when the new flag is disabled.
+                if os.environ.get("SURGFIELD_PROC_SINGLE_REFINE") == "1":
+                    _q38_temporal_scratch = scratch
+                    try:
+                        from solution.temporal_refinement_observation import begin_request
+                        _q38_sink = begin_request(req=req, scratch=scratch, output_dir=output_dir,
+                            request_started_perf_counter=t0, per_q_budget_s=per_q_budget)
+                        from solution.temporal_refinement_hook import install_request_context
+                        install_request_context(
+                            req=req, scratch=scratch, videos_root=videos_root, track=_track,
+                            answer_format=fmt, request_started_perf_counter=t0,
+                            per_q_budget_s=per_q_budget)
+                        _q38_sink.update(hook_observation=scratch.get("q38_refinement_hook_observation"))
+                    except Exception as _q38_hook_error:
+                        scratch.pop("q38_refinement_context", None)
+                        scratch["q38_refinement_hook_observation"] = {
+                            "status": "refused", "reason": "request_hook_import_or_execution_failed",
+                            "exception_type": type(_q38_hook_error).__name__}
+                if os.environ.get("ORENA_SMOKE_OBSERVE") == "1":
+                    from solution.smoke_observation import request_scope
+                    with request_scope(req.qID):
+                        resp = container.answer(req, scratch_init=scratch)
+                else:
                     resp = container.answer(req, scratch_init=scratch)
-            else:
-                resp = container.answer(req, scratch_init=scratch)
-            content = validate(resp.content, fmt)
-            # R1 (F76): a demotion-to-fallback was silent — one line per event
-            # + a run counter. Detection: the validated content IS the format's
-            # SAFE_FALLBACK while the raw engine answer was something else
-            # non-empty. Zero answer-path change (log-only).
-            _raw = "" if resp.content is None else str(resp.content).strip()
-            _fb = SAFE_FALLBACK.get(normalize_answer_format(fmt))
-            if _raw and content == _fb and _raw != _fb:
-                _RUN_COUNTERS["n_validate_demoted"] += 1
-                _log(f"VALIDATE-DEMOTE qID={qid} fmt={fmt} raw_len={len(_raw)}")
-            answers[slot[qid]] = {"qID": qid, "content": content,
-                                  "latency": time.perf_counter() - t0}
-            _RUN_COUNTERS["n_engine_answered"] += 1
+                content = validate(resp.content, fmt)
+                # R1 (F76): a demotion-to-fallback was silent — one line per event
+                # + a run counter. Detection: the validated content IS the format's
+                # SAFE_FALLBACK while the raw engine answer was something else
+                # non-empty. Zero answer-path change (log-only).
+                _raw = "" if resp.content is None else str(resp.content).strip()
+                _fb = SAFE_FALLBACK.get(normalize_answer_format(fmt))
+                if _raw and content == _fb and _raw != _fb:
+                    _RUN_COUNTERS["n_validate_demoted"] += 1
+                    _log(f"VALIDATE-DEMOTE qID={qid} fmt={fmt} raw_len={len(_raw)}")
+                answers[slot[qid]] = {"qID": qid, "content": content,
+                                      "latency": time.perf_counter() - t0}
+                _RUN_COUNTERS["n_engine_answered"] += 1
+            except Exception as e:
+                _log(f"PROBESHELL: qID={qid} failed ({type(e).__name__}: {e}); "
+                     f"keeping the pre-seeded fallback")
+                answers[slot[qid]]["latency"] = time.perf_counter() - t0
+                _RUN_COUNTERS["n_fallback_kept"] += 1
+            if os.environ.get("SURGFIELD_PROC_SINGLE_REFINE") == "1":
+                try:
+                    from solution.temporal_refinement_observation import finish_request
+                    finish_request(_q38_temporal_scratch, answers[slot[qid]])
+                except Exception as _q38_export_error:
+                    _log("Q38-TEMPORAL-EXPORT-INCOMPLETE qID="+qid+" "+type(_q38_export_error).__name__)
+                # Include observation publication in the reported request latency.
+                answers[slot[qid]]["latency"] = time.perf_counter() - t0
+            if staging is not None:
+                # Finish all temporal/raw-BGR consumers before closing decoder
+                # handles, unlinking the norm link and reclaiming the only clip.
+                try:
+                    container.video_loader.close_all()
+                except Exception as close_error:
+                    staging.blocked = True
+                    _log('PROBESHELL: VIDEO-HANDLE-CLOSE-FAILED ' + type(close_error).__name__ +
+                         '; further extraction disabled')
+                staging.release()
+            # R4 (F16): per-row latency-cliff line vs the TRACK budget (log-only).
+            _row_lat = answers[slot[qid]].get("latency", 0.0)
+            if _row_lat > per_q_budget:
+                _RUN_COUNTERS["n_latency_cliff"] += 1
+                _log(f"PROBESHELL: LATENCY-CLIFF qID={qid} latency={_row_lat:.2f}s "
+                     f"> {per_q_budget:.0f}s ({_track} budget)")
+            write_answers(output_dir, answers)
+        _log(f"PROBESHELL: job wall={time.perf_counter() - job_t0:.1f}s "
+             f"pooled-budget={budget:.0f}s n={len(answers)}")
+        # P2-06: emit the per-layer latency/attribution summary at end of run (it was
+        # accumulated every question but never reported — the only instrument for
+        # diagnosing which layer won and where budget was burned). Never fatal.
+        try:
+            container.metrics.report()
         except Exception as e:
-            _log(f"PROBESHELL: qID={qid} failed ({type(e).__name__}: {e}); "
-                 f"keeping the pre-seeded fallback")
-            answers[slot[qid]]["latency"] = time.perf_counter() - t0
-            _RUN_COUNTERS["n_fallback_kept"] += 1
-        if os.environ.get("SURGFIELD_PROC_SINGLE_REFINE") == "1":
-            try:
-                from solution.temporal_refinement_observation import finish_request
-                finish_request(_q38_temporal_scratch, answers[slot[qid]])
-            except Exception as _q38_export_error:
-                _log("Q38-TEMPORAL-EXPORT-INCOMPLETE qID="+qid+" "+type(_q38_export_error).__name__)
-            # Include observation publication in the reported request latency.
-            answers[slot[qid]]["latency"] = time.perf_counter() - t0
-        # R4 (F16): per-row latency-cliff line vs the TRACK budget (log-only).
-        _row_lat = answers[slot[qid]].get("latency", 0.0)
-        if _row_lat > per_q_budget:
-            _RUN_COUNTERS["n_latency_cliff"] += 1
-            _log(f"PROBESHELL: LATENCY-CLIFF qID={qid} latency={_row_lat:.2f}s "
-                 f"> {per_q_budget:.0f}s ({_track} budget)")
-        write_answers(output_dir, answers)
-    _log(f"PROBESHELL: job wall={time.perf_counter() - job_t0:.1f}s "
-         f"pooled-budget={budget:.0f}s n={len(answers)}")
-    # P2-06: emit the per-layer latency/attribution summary at end of run (it was
-    # accumulated every question but never reported — the only instrument for
-    # diagnosing which layer won and where budget was burned). Never fatal.
-    try:
-        container.metrics.report()
-    except Exception as e:
-        _log(f"PROBESHELL: metrics report skipped (non-fatal {type(e).__name__}: {e})")
-    # R3 (F86): per-layer attribution as ONE machine-parseable stderr line, so a
-    # platform log capture reconstructs wins/fires/exceptions. Never fatal.
-    try:
-        m = container.metrics
-        _log("METRICS-JSON " + json.dumps({
-            "n_questions": getattr(m, "n_questions", None),
-            "total_latency_s": round(getattr(m, "total_latency", 0.0), 2),
-            "per_layer": {name: vars(st) for name, st in
-                          getattr(m, "per_layer", {}).items()},
-        }, default=str))
-    except Exception as e:
-        _log(f"METRICS-JSON skipped (non-fatal {type(e).__name__}: {e})")
-    return answers
+            _log(f"PROBESHELL: metrics report skipped (non-fatal {type(e).__name__}: {e})")
+        # R3 (F86): per-layer attribution as ONE machine-parseable stderr line, so a
+        # platform log capture reconstructs wins/fires/exceptions. Never fatal.
+        try:
+            m = container.metrics
+            _log("METRICS-JSON " + json.dumps({
+                "n_questions": getattr(m, "n_questions", None),
+                "total_latency_s": round(getattr(m, "total_latency", 0.0), 2),
+                "per_layer": {name: vars(st) for name, st in
+                              getattr(m, "per_layer", {}).items()},
+            }, default=str))
+        except Exception as e:
+            _log(f"METRICS-JSON skipped (non-fatal {type(e).__name__}: {e})")
+        return answers
+
+    finally:
+        try:
+            container.video_loader.close_all()
+        except Exception as close_error:
+            if staging is not None:
+                staging.blocked = True
+            _log('PROBESHELL: VIDEO-HANDLE-FINAL-CLOSE-FAILED ' + type(close_error).__name__)
 
 
 # ── entry ────────────────────────────────────────────────────────────────
@@ -1084,6 +1126,8 @@ def main(argv: list[str] | None = None) -> int:
     # file-path invocation — may leave /output without a full-coverage
     # answer.json. Everything between here and the final write is contained;
     # degradation is loud, never silent.
+    workdir = None
+    staging = None
     try:
         # P9: video-staging workdir, created HERE (inside the coverage net, AFTER the
         # format-aware pre-seed). A read-only/absent /tmp now degrades to the pre-seeded
@@ -1152,15 +1196,19 @@ def main(argv: list[str] | None = None) -> int:
                     _log("RUNTIME_ZOOM_INIT " + json.dumps(_runtime_zoom_initialize(rows=rows, input_root=input_dir.resolve(strict=True), workdir=workdir), sort_keys=True))
                 except Exception as _runtime_init_error:
                     _log("RUNTIME_ZOOM_INIT_REFUSED " + type(_runtime_init_error).__name__)
-            root = stage_videos_root(input_dir, workdir)
-            norm_root = normalize_clips(rows, root, workdir)
+            from solution.entrypoint.lazy_video_staging import LazyVideos
+            from solution.frame_sampler import resolve_video
+            staging = LazyVideos(input_dir, workdir, rows,
+                resolver=_resolve_qid, resolve_video=resolve_video, is_zip=_is_zip,
+                video_exts=_VIDEO_EXTS, log=_log)
+            root, norm_root = staging.root, staging.norm_root
         # Both env writes (SURGFIELD_FO_DEFINITIONS_FILE above, CLIP_INPUT here)
         # are RUN-SCOPED: reset at the top of this block, set for this run's
         # duration, read per-call by the engine. In the container nothing
         # survives the exit; in-process reuse is isolated by the reset.
         os.environ["SURGFIELD_CLIP_INPUT"] = "1"  # per-qID clip semantics engine-side
         to_fence, n_probed = emit_decode_records(
-            rows, norm_root, probe_budget_sec=PROBE_PHASE_BUDGET_SEC)
+            rows, norm_root, probe_budget_sec=PROBE_PHASE_BUDGET_SEC, staging=staging)
         # H6 fence: a clip whose killable prober hit a WEDGE/CRASH is removed from
         # the normalized tree so the in-process sampler never touches it; that qID
         # defers to text/rule like an absent clip. (The in-process decode is ALSO
@@ -1184,6 +1232,8 @@ def main(argv: list[str] | None = None) -> int:
                         link.unlink()
                 except Exception:
                     pass
+        if staging is not None:
+            staging.fenced = set() if systemic else set(dangers)
         _setup_wall = time.perf_counter() - _proc_t0
         _log(f"PROBESHELL: SETUP-WALL {_setup_wall:.1f}s (arm→staging→decode-proof, "
              f"before model load); platform setup window ~120s")
@@ -1191,12 +1241,29 @@ def main(argv: list[str] | None = None) -> int:
             _log(f"PROBESHELL: WARN setup wall {_setup_wall:.0f}s is within 30s of "
                  f"the ~120s platform setup window — cold-start overrun risk")
         answers = answer_all(rows, norm_root, args.device, answers, output_dir,
-                             proc_t0=_proc_t0)
+                             proc_t0=_proc_t0, staging=staging)
     except Exception as e:
         _log(f"PROBESHELL DEGRADED: shell/engine failure after arming "
              f"({type(e).__name__}: {e}); the pre-seeded full-coverage "
              f"answers stand for {len(rows)} rows")
         _RUN_COUNTERS["degraded"] = f"{type(e).__name__}: {e}"
+    finally:
+        # Only this invocation's freshly created tree is owned here. This never
+        # follows input symlinks or removes the separately retained runtime
+        # observation/kernel-cache tree. Also runs on BaseException unwinding.
+        try:
+            if staging is not None:
+                staging.close()
+        except Exception as cleanup_error:
+            _RUN_COUNTERS['staging_cleanup_failed'] = type(cleanup_error).__name__
+            _log('PROBESHELL: STAGING-CLEANUP-FAILED ' + type(cleanup_error).__name__)
+        try:
+            if workdir is not None:
+                shutil.rmtree(workdir)
+        except Exception as cleanup_error:
+            _RUN_COUNTERS['workdir_cleanup_failed'] = type(cleanup_error).__name__
+            _log('PROBESHELL: WORKDIR-CLEANUP-FAILED ' + type(cleanup_error).__name__)
+
 
     _c1_hits = 0
     try:

image_root/app/solution/shape_mode_diagnostic.py

@@ -3,7 +3,7 @@
 No request/answer is used to construct warmup inputs. Forward clocks are host
 intervals, not CUDA-synchronized kernels, visual encoding or isolated prefill.
 """
-import functools, hashlib, json, os, stat, time
+import errno, functools, hashlib, json, os, stat, time
 from pathlib import Path
 
 SCHEMA='shape-mode-diagnostic/1'
@@ -13,11 +13,13 @@ FIXED={'schema':SCHEMA,'frames':48,'image_size':[576,324],'patch_shape':[34560,1
        'max_new_tokens':9,'do_sample':False,'seed':0,'request_budget_s':30,
        'original_pooled_s':540,'finish_margin_s':1,'generation_reserve_s':10,
        'decode_reserve_s':5,'max_forward_calls_per_generate':128,
-       'max_events_per_process':4096,'max_metadata_bytes_per_process':8*1024*1024}
+       'max_events_per_process':16384,'max_metadata_bytes_per_process':16*1024*1024}
 _LABELS={'coarse_legacy_decode','coarse_interleave_decode','coarse_chat_template',
          'coarse_processor','coarse_device_transfer','refine_chat_template',
          'refine_processor','refine_device_transfer'}
 _POLICY=None;_POLICY_RAW=None;_SEQ=0;_BYTES=0;_SPAN=0;_WRAPPED={}
+_WRITTEN=0;_DROPPED=0;_SATURATION=None;_SATURATION_REPORTED=False
+_WRITE_EXHAUSTION=frozenset((errno.ENOSPC,errno.EDQUOT))
 
 def need(ok,message):
     if not ok:raise RuntimeError(message)
@@ -48,23 +50,114 @@ def _qid():
     from solution.smoke_observation import CURRENT
     return CURRENT.get()
 
+def _saturation_report():
+    """One bounded best-effort terminal receipt; no claim of a successful write."""
+    global _SATURATION_REPORTED
+    if _SATURATION is None or _SATURATION_REPORTED:
+        return
+    _SATURATION_REPORTED=True
+    row = {'schema':'shape-mode-diagnostic-saturation/1',
+           'pid':os.getpid(), 'first_saturation':dict(_SATURATION),
+           'attempted_events':_SEQ, 'written_events':_WRITTEN,
+           'written_metadata_bytes':_BYTES, 'dropped_events':_DROPPED,
+           'event_limit':FIXED['max_events_per_process'],
+           'metadata_byte_limit':FIXED['max_metadata_bytes_per_process'],
+           'event_byte_limit':128*1024,
+           'scope':'Diagnostic recording stopped; model/controller and policy checks remain active.',
+           'normal_exit_hook':True, 'publication_best_effort':True}
+    try:
+        raw = ('SHAPE-DIAGNOSTIC-SATURATED '+json.dumps(
+            row,sort_keys=True,allow_nan=False,separators=(',',':'))+'\n').encode()
+        if len(raw) <= 4096:
+            # One write attempt only. Do not retry a full/closed stderr stream.
+            import sys
+            sys.stderr.write(raw.decode());sys.stderr.flush()
+    except Exception:
+        pass
+
+
+def _saturate(reason, *, error_number=None, partial_cleanup=None):
+    global _SATURATION, _DROPPED
+    _DROPPED += 1
+    if _SATURATION is None:
+        _SATURATION = {'reason':reason, 'attempted_event':_SEQ,
+                       'error_number':error_number,
+                       'partial_cleanup':partial_cleanup}
+        # Register in the model process after exec; report complete drop counters
+        # at ordinary interpreter exit. Forced termination may omit the receipt.
+        import atexit
+        atexit.register(_saturation_report)
+
+
+def _discard_partial(path, created):
+    if created is None:
+        return {'created':False, 'removed':False, 'error':None}
+    try:
+        current = path.lstat()
+        need(stat.S_ISREG(current.st_mode) and not path.is_symlink()
+             and (current.st_dev,current.st_ino)==created,
+             'diagnostic partial output identity changed')
+        path.unlink()
+        return {'created':True, 'removed':True, 'error':None}
+    except FileNotFoundError:
+        return {'created':True, 'removed':True, 'error':None}
+    except OSError as exc:
+        return {'created':True, 'removed':False, 'error':exc.errno}
+
+
 def emit(event):
-    global _SEQ,_BYTES
+    global _SEQ,_BYTES,_WRITTEN,_DROPPED
+    # Policy/source and path checks still run on every attempt after saturation.
     p=policy();_SEQ+=1
-    need(_SEQ<=p['max_events_per_process'],'diagnostic event cap')
     from solution.volume_binding import bound_path
     parent=Path(os.environ['ORENA_SMOKE_OBSERVATIONS']).parent
     with bound_path(parent,directory=True) as (physical,_):
         root=physical/'shape_mode_diagnostic'
-        try:root.mkdir(mode=0o700)
-        except FileExistsError:pass
-        need(root.resolve(strict=True)==root and root.is_dir() and not root.is_symlink(),'diagnostic output directory')
+        if root.exists() or root.is_symlink():
+            need(root.resolve(strict=True)==root and root.is_dir() and not root.is_symlink(),
+                 'diagnostic output directory')
+        if _SATURATION is not None:
+            _DROPPED+=1
+            return
+        if _SEQ>p['max_events_per_process']:
+            _saturate('event_count')
+            return
+        try:
+            try:root.mkdir(mode=0o700)
+            except FileExistsError:pass
+        except OSError as exc:
+            if exc.errno not in _WRITE_EXHAUSTION:raise
+            _saturate('directory_write_exhaustion',error_number=exc.errno)
+            return
+        need(root.resolve(strict=True)==root and root.is_dir() and not root.is_symlink(),
+             'diagnostic output directory')
         row={'schema':SCHEMA,'seq':_SEQ,'pid':os.getpid(),'qid':_qid(),
              'recorded_perf_counter':time.perf_counter(),'policy_pin':pin(_POLICY_RAW),**event}
         raw=(json.dumps(row,sort_keys=True,allow_nan=False,separators=(',',':'))+'\n').encode()
-        _BYTES+=len(raw);need(len(raw)<=128*1024 and _BYTES<=p['max_metadata_bytes_per_process'],'diagnostic bytes cap')
-        fd=os.open(root/(str(_SEQ).zfill(6)+'.json'),os.O_WRONLY|os.O_CREAT|os.O_EXCL|os.O_NOFOLLOW,0o600)
-        with os.fdopen(fd,'wb') as f:need(f.write(raw)==len(raw),'diagnostic short write');f.flush();os.fsync(f.fileno())
+        if len(raw)>128*1024:
+            _saturate('event_bytes')
+            return
+        if _BYTES+len(raw)>p['max_metadata_bytes_per_process']:
+            _saturate('process_bytes')
+            return
+        path=root/(str(_SEQ).zfill(6)+'.json');created=None
+        try:
+            fd=os.open(path,os.O_WRONLY|os.O_CREAT|os.O_EXCL|os.O_NOFOLLOW,0o600)
+            with os.fdopen(fd,'wb') as f:
+                st=os.fstat(f.fileno());created=(st.st_dev,st.st_ino)
+                wrote=f.write(raw)
+                f.flush();os.fsync(f.fileno())
+            if wrote!=len(raw):
+                cleanup=_discard_partial(path,created)
+                _saturate('short_write',partial_cleanup=cleanup)
+                return
+        except OSError as exc:
+            if exc.errno not in _WRITE_EXHAUSTION:raise
+            cleanup=_discard_partial(path,created)
+            _saturate('file_write_exhaustion',error_number=exc.errno,partial_cleanup=cleanup)
+            return
+        _BYTES+=len(raw);_WRITTEN+=1
+
 
 def shapes(value):
     return {str(k):list(v.shape) for k,v in value.items() if hasattr(v,'shape')}

image_root/app/solution/shape_mode_diagnostic_policy.json

@@ -9,9 +9,9 @@
     576,
     324
   ],
-  "max_events_per_process": 4096,
+  "max_events_per_process": 16384,
   "max_forward_calls_per_generate": 128,
-  "max_metadata_bytes_per_process": 8388608,
+  "max_metadata_bytes_per_process": 16777216,
   "max_new_tokens": 9,
   "original_pooled_s": 540,
   "patch_shape": [

verify_files.py

@@ -11,7 +11,7 @@ import stat
 
 MANIFEST_SHA256 = {
     'ASSET_MANIFEST.json': 'bf9706c9c565dae44f5c3285c565490c89c84c44194d48130d39cfcbd238824d',
-    'SOURCE_MANIFEST.json': 'df1cf7f38c87eae4719b721a7f4a6e7c1d19d9c59d33d065808f9976d937afd5',
+    'SOURCE_MANIFEST.json': 'f0324e066f21fe9d5c9377a8ff60526503eebd05d90219397563a47e02cc6775',
 }