Revenue verifies the bounded ADR-0050 composed local rehearsal

Revenue independently verified the successful four-case resume against source 689e8b96f415d0beb1d00e6003595b4d0fbca8c2, local database adr0050_final_f99eb066f8cfa183f53fc76696f4442d, schema revenue_test, and runtime http://127.0.0.1:3591. Sales evidence at source 2652c11 has SHA256 901c48fe5ae2db30cf74a57d2b265a26ec767062e1edd93cb5b0438aa7de26fc. The stopped first attempt, its failure, and the same fixtures were preserved.

Verified effects

• Exactly three new Revenue v1.1 reservation releases completed. Each receipt matches its persisted operation, resources, original invoice IDs, and one durable credit.released v2 outbox event. Each reservation moved from RESERVED revision 0 to RELEASED revision 1 and retained PENDING_FUNDING.
• The three original never-admitted release keys remain reserved and absent from admitted operations. Their immutable settlement records and target bindings match the original proofs. Each reserved slot now names exactly its admitted successor. These successors are Revenue generation-0 roots with predecessor.kind=none and explicit prior-release settlements, not generation-1 children of admitted Revenue roots.
• Exactly three original invoice operations and their three order.updated events are unchanged. Total outbox rows are six. Credit ledger entries remain zero; all four account rows and balances are unchanged.
• The no-Order reservation is byte-for-byte unchanged, RESERVED/PENDING_FUNDING at revision 0. It has no release operation. The Sales evidence proves unchanged Revenue and Delivery tables around both no-Order attempts, and all 158 observed tables unchanged around wrong-Person 404 denial.
• Provider and external-network-denial logs contain zero calls during the armed run. Setup previously made six local double calls, including three simulated invoice cancellations. The resumed run made no further provider cancellation.

Independent SELECT-only, repeatable-read observation covered all 53 Revenue tables. Forty-three tables are unchanged from the stopped baseline. Ten changed as expected for release operations, keys, lineage, reserved-slot successor claims, reservations, fences, associations, outbox, and the writer clock. payment_handoff_clock advanced from 62 to 106. This is a statement-level clock, including real release writes and redundant inspection binding upserts; the 44 increments were not traced individually. Protocol control is unchanged at writer epoch 1 with admissions enabled. This audit made no business calls or control changes. Runtime disarm remains the coordinator's next explicit action.

Evidence

Local evidence directory: C:/Users/jallr/.codex/worktrees/revenue-adr0050-lineage/revenue/.tmp/final002/postrun-resume-001/.

verification.json SHA256: 7df5384fa9c0b1326517723109b86259d51aa7ca95fd2710f41f1d28e7adbac8. It records per-case operation, receipt/outbox, head, and prior-key assertions, complete table deltas, and hashes for state.json and snapshot.json. The provider/network logs remain available under ../armed-001/.

Live ledger discovery found no pending or working Revenue ADR-0050 implementation commitment requiring a status flip. Historical reply entries remain for owner reconciliation. This draft is supplied to the coordinator for publication and indexing; Revenue has not edited parsed coordination artifacts in this step.

Limits and remaining gates

This is isolated local integration proof with a synthetic issuer and a scoped in-process provider double. It is not production deployment, real Square sandbox cancellation, live financial validation, or evidence that production workload token exchange is configured.

Production activation still requires the coordinator's reviewed release plan, exact deployed source and migration/role/writer-barrier evidence, production authentication and provider configuration validation, and explicit activation authorization. No financial provenance is invented for the unsupported no-Order flow; it remains blocked pending separately accepted owner design. This memo clears no production activation gate and authorizes no live cancellation.