Question
Confirm the production acceptance gates after residual classification, adversarial goldens, and performance evidence. The intended gate is evidence-based rather than a hard aggregate error rate: materially closer July 9-12 UTC totals, no material ordinary-day regression, classified large residuals, correct bounded discovery, cancellation, atomicity, and reversible rollback.
Locked fallback model
Fallback is permanent and family-scoped. Complete families use primary ledger accounting; malformed or genuinely ambiguous families may use explicit conservative containment indefinitely. Missing ancestry alone does not force containment when available descendants reconcile deterministically. No family contributes through both paths. The legacy scanner remains a whole-scan emergency rollback until its dedicated removal ticket.
Question
Confirm the production acceptance gates after residual classification, adversarial goldens, and performance evidence. The intended gate is evidence-based rather than a hard aggregate error rate: materially closer July 9-12 UTC totals, no material ordinary-day regression, classified large residuals, correct bounded discovery, cancellation, atomicity, and reversible rollback.
Locked fallback model
Fallback is permanent and family-scoped. Complete families use primary ledger accounting; malformed or genuinely ambiguous families may use explicit conservative containment indefinitely. Missing ancestry alone does not force containment when available descendants reconcile deterministically. No family contributes through both paths. The legacy scanner remains a whole-scan emergency rollback until its dedicated removal ticket.