# Dependency snapshot repair in release preparation

PR #1376 originally tested source `e0d046503939883330eb37f998a2e0e8fc5154e5`.
Its native release readiness passed. Canonical run `37743398162` subsequently
failed unit and race tests because callback projection fixtures copied `go.mod`
and internal packages without `go.sum`. The new graph witness's SDK dependency
exposed that missing checksum snapshot. Semantic conformance also exited during
its projected test phase; its job log did not expose a separate detailed failure.

The two callback execution tests reproduced the checksum failure locally with
`CI=true`, before any change. `callback-before-fix.log` retains the output.
Commit `5902212afa09edb6a1d4ebff70959cf2f9245825` copies `go.sum` alongside `go.mod`
and executes the temporary module with `-mod=readonly`. Both existing tests,
including original and generated callback forms, then passed with race checking
in 30.034 seconds. `callback-after-fix.log` retains that result.

```sh
CI=true GOWORK=off GOTOOLCHAIN=go1.27.1 go test -race \
  ./internal/meta/repositoryprojection/extractor \
  -run 'TestPaginationCallback(PreviewCI|FactoryOriginalAndGeneratedCI)$' -count=1
```

Fresh canonical run `37745177166` checks the repaired source. At this publication
it remains active. This is a source repair followed by a new run; the failed
source's observations remain historical.

The repaired source's four native platforms, aggregate and eligibility all
passed in readiness run `37745177171`. Artifact `11535886012` matched ZIP SHA256
`d84ed3b12a2b3a9e02968609fa96f526f1bec4e765b0fef5bd08a0ca27ca30dc`.
`pr-eligibility-5902212a.json` binds seven closed cells, 26/26 release cases and
39/39 indicators to this source. It is PR readiness, not publication authority;
merging and the exact push-to-dev readiness are still required.