Bind exact SEGMENT immutable asset and metadata loading revisions

LOAD.md

@@ -3,7 +3,7 @@
 The model assets and the loading tools have separate immutable commits:
 
 - Asset revision **`35fc28af1d55a5a9ae8096ff2e2cd2c961aa7119`** contains the50 exact model/prior files.
-- Metadata revision **`__METADATA_REVISION__`** contains `MODEL_FILES.json`, verifiers, component-loading code, notices and source copies. Its parent is the asset revision, but only the small metadata files are downloaded from it below.
+- Metadata revision **`bc9e092422beac9ae51005694824cdc70205e0d5`** contains `MODEL_FILES.json`, verifiers, component-loading code, notices and source copies. Its parent is the asset revision, but only the small metadata files are downloaded from it below.
 
 The upload coordinator fills both IDs in the final handoff instructions after each commit and readback. Neither commit embeds its own ID: a later documentation-only presentation commit or the separately supplied `REVISION_PAIR.json` identifies this pair. Unsubstituted placeholders are not valid revisions; do not substitute a floating branch.
 
@@ -14,7 +14,7 @@ python3 - <<'PYLOAD'
 from huggingface_hub import snapshot_download
 repo = 'HeyDonto/SURGFIELD-ORena-2026-SEGMENT-FINAL'
 asset_revision = '35fc28af1d55a5a9ae8096ff2e2cd2c961aa7119'
-metadata_revision = '__METADATA_REVISION__'
+metadata_revision = 'bc9e092422beac9ae51005694824cdc70205e0d5'
 assert len(asset_revision) == len(metadata_revision) == 40
 assert all(c in '0123456789abcdef' for c in asset_revision + metadata_revision)
 assert asset_revision != metadata_revision

ORGANIZER_ACCESS.md

@@ -6,6 +6,6 @@ Attribution: HeyDonto Labs. Responsible contact: Reza Nehzati, Ph.D., via [rezan
 
 ROOT reports the repository is private in the dedicated SEGMENT resource group, with automatic joining disabled. Organizer access status: **deferred_by_owner**. The verified organizer account is `orena-dkfz`; invitation and access are intentionally deferred. No organizer membership or repository-read claim is made. The repository remains on private hold. A private repository's creation does not itself prove organizer access.
 
-Asset commit: `35fc28af1d55a5a9ae8096ff2e2cd2c961aa7119`. Metadata/tools commit: `__METADATA_REVISION__`. The upload coordinator supplies the completed revision pair in final instructions or a separate receipt; no commit self-pin is required. No asset-copy, upload or access operation was performed by this draft author. FRAME membership and permissions are unchanged and outside this handoff.
+Asset commit: `35fc28af1d55a5a9ae8096ff2e2cd2c961aa7119`. Metadata/tools commit: `bc9e092422beac9ae51005694824cdc70205e0d5`. The upload coordinator supplies the completed revision pair in final instructions or a separate receipt; no commit self-pin is required. No asset-copy, upload or access operation was performed by this draft author. FRAME membership and permissions are unchanged and outside this handoff.
 
 The separate 13,177-row derived annotation packet requires its own private dataset URL, recipient-condition acceptance and delivery receipt. It is not a model-file attachment and does not contain the full46,758-row ancestor corpus or video pixels. No public annotation release or broader dataset permission is inferred here.

REVISION_PAIR.json

@@ -0,0 +1,11 @@
+{
+  "asset_count": 50,
+  "asset_revision": "35fc28af1d55a5a9ae8096ff2e2cd2c961aa7119",
+  "metadata_revision": "bc9e092422beac9ae51005694824cdc70205e0d5",
+  "model_manifest_sha256": "24ee03260281cc1cbea9555b8d6ae695941bde55ac9fdad77682205615c9cb5d",
+  "organizer_access": "deferred_by_owner",
+  "private_hold": true,
+  "repository": "HeyDonto/SURGFIELD-ORena-2026-SEGMENT-FINAL",
+  "schema": "segment-hf-immutable-revision-pair/1",
+  "scope": "Local proposed commit inputs; caller must bind these IDs to actual successful private HF commits/readbacks. This tool makes no API observation or mutation."
+}