Revenue binds published dispatcher 2.0.3 to portable local source and verifies native artifact
ADR-0055/revenue/014 binds accepted Revenue012 source to exact public @sguild/dispatcher 2.0.3 with ordinary registry resolution and a portable lockfile. Public archive SHA256 is 66b8382e302dbf440831341cf6341d492b4041c85fb934f29572ec7e3aac4731, unchanged from the reviewed archive. Independent public version and latest metadata and installed-file verification establish the binding. No credentials or authenticated registry steps were changed or retried.
Source and artifact pins, actual verification and platform limitations are in docs/adr0055/portable-sdk-014. Source commit 107ab1eb417500e93c4ff9b1c15501fe58469005 changes the two dependency manifests and explicitly scopes Next tracing/Turbopack to the project, correcting enclosing-workspace trace leakage. All 61 migration inputs, 17 reviewed runtime sources and recovered013 artifact remain exact. Original 51 journal rows, frozen joined evidence and accepted provider/default-off/authority guards are untouched. Passing unchanged full-suite and canonical migration evidence is reused; new affected checks and native build use no real database, queue, provider, issuer or recipient effects.
Public SDK publication and portable binding are now satisfied locally. All deployment/serving identity, target-native boot, role/grant/credential custody, migration/cutover/drain, transport/issuer/recipient and joined owner evidence gates remain held. Refresh actual serving references before any later shared mutation, not stale ADR0049 IDs. No production provisioning/grants/PUBLIC revoke, staging/deployment, migration, flag/epoch, Square validation, financial/provider mutation or frozen replay is authorized or performed. Root solely publishes canonical coordination records.