Sales held-original joined proof
Assignment ADR-0055/sales/002 passed the actual local joined consumer proof after coordinator authorization and the genuine Revenue producer handoff. Root remains the sole canonical publisher and indexer. This draft reports Sales-owned evidence; root separately reconciles Platform issuance and Revenue/Delivery zero-effect evidence before closing the cross-domain gate.
The unchanged exported recovery action at source 5d8cb4d9ad8c064f45bf5dca51b80bf51e3b59a1 obtained fresh actual Platform50387 exchanges, observational Delivery50251 D1 and a fresh native Revenue51654 six-member response. Full independent proof/source/descriptor joins and current checks passed. The exact same-original retirement and Task CAS committed in 4204ms. The subsequent exported action replay returned retired with zero additional owner request or local effect.
On held Sales database sales_adr0054_owner_30a42dbc17554aeb968cc472f9bde6dd, schema sales, only admission 43a97f2f-391c-4cc7-9086-8ac620ad9290 gained one append-only retired_compensation row, and only its exact Task changed from open/version0 to completed/version1. All original bytes, other Tasks, Lead rows, other 13-journal history and booking/outbox/success-completion counts are unchanged. No original terminal response was stored, success projector called, replacement admission created or production configuration changed.
Reviewed additive migration SHA256 c40ba5a0bc6685915752bc59548c5104fd0defc7c47768b9da754a74834406ec and the fresh minimum role were installed under exact preconditions. Effective ACL/flag/membership/ownership checks and 186 real permission denials passed. Lead UPDATE(id) is an actual column capability required for PostgreSQL row locking; no lock-only/RLS claim is made and no Lead update occurred. Login credentials stayed in memory only.
Evidence is under docs/evidence/adr0055-sales/joined-retirement-fbd1fb9f-c30b-4e1b-b395-0573ed465385 in the isolated Sales checkout. Report SHA256 09d494e95a2758af953072511be3cdc33e2954afc2395fa72e6b91c17dd215eb; exact native owner audit SHA256 bfcb32df3fa0e4305aab8c49a4b641e1c3e207706e076b209842706b8c4779dd; before snapshot SHA256 6e052f59153cdb23be33733f09fbdd37dc1553102f69e36d1b477aa199aed6cc; after snapshot SHA256 124625e9199d72a426944c3c8847ded62a1b5172f44337bcf453ca6730a14064. Executed helper SHA256 f58081e7b5eaf54f23565584abbf38b02952169c1ef6beedeea2cc17218ec026. Generated Sales schema SHA256 6ddb30e60d20937d7f0ebb6a0b08281fc3200f428abce75ecb63baaf369e93d4 remains unchanged.
Revenue runtime SHA256 fdf4254fb62ee691ff9cf5194853c177ba80219038a696ea5f96fc2184e1eabb maps source 127d59b59ab745fb777ee20f3e04237c287cbd21 to the same genuine Revenue database. All 884 declared working source hashes matched. Fresh response SHA256 13dbbd143384d476577c3a4b1e50c2204fae8a2c722cec450bd89a8831bb72ba has exactly one native observation2.0 echo and no original_response member.
Independent issuer audit identifiers: Delivery exchange b63999f0-a098-48d9-8a3a-3c19e4169bda, JTI b94b5315-435d-4e77-918d-e71bbd7d5851; Revenue exchange c4509170-5267-4e8c-a0e4-642b879bd73e, JTI 9a8a8c3e-a3f2-4b62-8a7f-58119e85acce.
Previously retained isolated validation covers negotiation denial, rollback, races, monotonic deadlines and legacy behavior. This actual joined local proof does not close deployed ingress, permanent sender inventory, compatible deployment or production activation gates. Existing ADR0052/0053 deprecation deadlines are unchanged. ADR0048 activation remains separate.