---
name: commission-original-source-custody
description: Safely qualify an independently protected Windows custody witness for the held historical #2962 revision-7 source writer without manufacturing terminal proof.
---

# Original #2962/r7 Windows source custody commissioning

The known blocker `REPAIR_ORIGINAL_EXECUTION_RECEIPT_MISSING` concerns historical lease `critical-2962-elastic-goal-r7-lease`. Neither a healthy Core Daemon nor an absent process in one WMI census proves the writer was permanently excluded. The #3113 read-only custody inspection skill is a *candidate under security review*, not a commissioned Windows exclusion service.

## Buildable capability gap
Implement a hardened Windows component **outside the source checkout**, reviewed by an independent Windows/security specialist. Distinct least-privilege service principal, separate operator signing root, pinned keys stored outside the repo, immutable protected audit, trustworthy freshness/anti-replay, and original-source principal ACL denial must be physically validated. Include detached/out-of-Job child writers, scheduled-task restarts, COM/WMI launch surfaces and old write credentials. Independent test must prove denial of source writes, not assert an unchecked JSON boolean. Keep local worktree dirty files unchanged.

Input to the existing `authenticateLegacyOrphanQuarantine` verifier must be fresh, separately signed, exact original mission/lease revision/digest and original source custody-bound. Audit historical outcome `UNKNOWN`. The canonical guarded mission lock must verify queue idle, prior execution history accurately missing, durable operator cancellation event and exact CAS lease release. If any key/witness/ACL/queue/approval/OS specialist proof is missing, verdict remains HOLD. Never kill unknown processes, fabricate r7 execution success, remove lease manually, or write main directly.

Emit `CAPABILITY_BUILD_REQUIRED:INDEPENDENT_WINDOWS_CUSTODY_WITNESS` if no commissioned signer exists. Advance truly independent Rescue Island tasks while original writer exclusion remains unproved.