ASSEMBLY HAND-BACK — all requested Windows gates GREEN

Branch: asm/304-v3
Worktree: .worktrees/asm-304-v3
Final SHA: 4caea32205127959edee68648cf21f66331eb679
Working tree clean. Private target pool RELEASED, retained for the same source tree; POOL-OWNER.json has no lane claim. Final census: zero builders/native test binaries, only the pre-existing rust-analyzer pair. Final free space: 53.14 GiB. No release build, push, full suite, or field action performed. The tree is back to doyle.

GATES ON THE FINAL SOURCE
- cargo check --workspace --all-targets: PASS (final confirmation 48.99s).
- cargo clippy --workspace --all-targets -- -D warnings: PASS (final confirmation 57.98s).
- traceable-reqs 0.4.1 check --json: exit 0, 918/918 complete, zero findings.
- cargo run -p xtask -- check: PASS, including generated docs/internal codes/operator text and BRAIN_READ_AUDIT_OK (508 crate Rust files).
- Retained named native-unit inventory: 195/195 PASSED, 2366 skipped, zero retries, test wall 12.275s. 122 spt + 39 daemon + 33 store + 1 xtask. Includes the isolated real-git seed regression and all seven changed Windows spec/diagnostic cells. Jobs=2, test threads=2; announced before inventory and execution. No integration or two-node acceptance claim.

FINAL FIREWALL BLOBS
- crates/spt-daemon/src/bootstrap_firewall.rs: c30d6b5466408b05d2dbd3032ca38043fbe0e5bb — UNCHANGED.
- crates/spt-daemon/src/bootstrap_firewall/windows.rs: 31ef24c8b203581eb6579c253dcfdc65c362f596 — two explicitly authorized changes only.
- crates/spt-daemon/src/bootstrap_firewall/linux.rs: 08f615c4b0985a86ed8c42e96cfc3083857c4aff — UNCHANGED.
Initial admission matched all three originals before any compilation. Windows original 848a23fe18e5ca819774f9881ef13504221992f3 became 8d407ea0f11c83cac474c51e816ddc8d52f60e58 after ZA5LJYCW's nine test-only borrow removals, then the final blob after ZTPTCFUY's five interior-space runs in three production literals. Per-commit scope proofs retained; no exemption or logic change.

TOML MECHANISM AND REQUIREMENT DELTA
The header restored was [[requirements]] immediately before REQ-INPUT-PROVENANCE-ACCEPTANCE-REPORT, after REQ-WEB-PROXY-LOCATION-NAMESPACE. Without that boundary, its id/title/stages are assigned inside the preceding table; TOML rejects the duplicate id at original line 7718. Original a23fca1f bytes are preserved, unchanged, in requirements-before.toml.
Baseline: 917 literal array headers but 918 IDs; invalid TOML. Repairing that one header gives 918 valid rows. Remove REQ-USER-INPUT-PATH-PROPOSAL and REQ-USER-INPUT-PATH-AUTHORIZATION (-2); add REQ-REFRESH-WAIT-ATTRIBUTION and REQ-RC-HITCH-DISCRIMINATOR (+2). Final: 918 unique rows. Activate the pre-existing REQ-INPUT-PROVENANCE-ACCEPTANCE-REPORT from [] to [doc, impl, unit]. Update its title and the titles of REQ-NOW-SIGNAL-FILE-ACCESS-HELPER and REQ-UNLISTED-PRESENCE-PROBE (2.5-second ceiling). No proposal/authorize/grant-nothing path or requirement evidence remains; shared quoted-path scanning remains part of the accepted receipt path.

INTEGRATION COMMITS (oldest first)
ed0f965e — accepted #300/#299 merge, obsolete proposal cutover, missing header repair.
aab450a8 — diag/49-267-obs merge.
04d5444c — diag/302-rc-hitch merge.
f213ed78 — requested git_stdout seed scrub + one isolated unit, own commit.
1017a07c — stale port argument removed from the #300 serving regression at the merged six-argument handler seam.
f6ca93cc — nine authorized Windows test borrows, own commit.
4caea322 — five authorized diagnostic space runs, own commit.
All seven first-parent commit bodies carry the exact Co-authored by: todlando trailer.

PROOF DIRECTORY
.spt/preserved/asm-304-v3-todlando/
Key files: final-check-clippy.txt, trace-version.txt, trace.json, xtask-pass.txt, selected-cells.txt/json, inventory.json, run-pass.txt, blob-admission.json, blob-final.json, windows-authorized-scope.json, windows-whitespace-scope.json, requirement-delta.json, requirement-changes.json, base-registry-parse-note.txt, pool-release.txt, final-census.json, final-status.txt.
Failed first gates are preserved beside their passing successors. Accepted feature docs remain merged and drift-checked; mechanical gate fixes add no public contract or changelog entry. No throwaway source/scaffold remains in the worktree; preparation snippets are retained only as ignored proof artifacts.