What changed

This authority-only PR binds the exact CK-QG1 maintainability baseline transition caused by the already-accepted writer provenance implementation on exact main 479cc58a887ab49e1bf6fae90ed87cd1cf389fd5.

• predecessor baseline: c490d954a5e9d09c61f884d51e3b9d3196af5615887f409c36f8469d1b2b6cf9
• successor baseline: fda777e28db7a0696f29b55c9d694f99d987413b206d8e323f217b4fa6a73ad5
• exact transition: publication/writer.py:PublicationWriter._validate_turn_provenance, score 35, count 1
• accepted source: writer SHA 13da341fc2a3c50d8d7de7fd6a6fc2b0aca0dbc832a9b56597cd96ab67d17488, introduced by accepted PR CK-08R3A: bound evidence lifecycle queries by session #417 commit 38537f6cee42ad4ba2fb6e45354e410053c7a7cd

The machine-readable authority artifact includes byte-serializable predecessor/successor documents, exact metadata/tool/normalization identity, C/B/B thresholds, fail-closed new/worsened/improvement behavior, no text exemptions, privacy and spike invariants, and explicit negative mutations. It records current active package ceilings of 1,000,000/2,000,000 bytes while preserving CK-08R0’s historical 383,000/820,000 ratchet and the accepted package-budget supersession authority.

Scope

Only authority JSON/schema, roadmap links and readiness wording, the repository scope helper, and focused authority/documentation/scope tests are included. No production source, maintainability checker, baseline file, candidate support bytes, or retained PR #392 witness is changed. CK-QG1 implementation acceptance is not granted.

Validation

• held candidate’s actual maintainability_failures entry point: predecessor mismatch, exact successor match, byte mismatch, improvement without rebaseline, exact shrink, new finding, worsened finding, text exemption, and production-scope mutation matrix all passed as recorded
• git diff --check
• focused Ruff
• focused authority/documentation/scope tests: 35 passed
• full tests/kernel: 506 passed, 1 skipped
• just vp: passed
• just v: 1,406 passed, 1 skipped; performance invariants passed; Pyright and release safety passed
• just vc: package build and distribution release checks passed
• exactly one bounded independent reviewer; final correction review reported no material findings

Handoff and acceptance boundary

After this PR is squash-merged and fresh exact-main identities are verified, coordinator may instruct the existing CK-QG1 worker to resume in a new latest-exact-main worktree and reuse PR #392. The held candidate remains read-only until then. No new authority task, implementation acceptance, CK-08RG/CK-09 dispatch, or live operation is authorized by this PR.