[Knapp-Kevin]

Scope

• Complete 220/220 distinct Git blob static review of microsoft-foundry root (1,299,560 bytes), exact candidate tree 2311f81bfa096aaefd50068b61443cb92ba70bfe at Microsoft candidate 61fe0305ea70389ed8705eec6026a786f57865cf.
• Distinguish 169 parent-owned file exposures from 51 nested exposures already governed under five independently frontmattered candidate companions. No double counting.
• Individual provenance, full path/blob inventory, structured verification REJECT unchanged 11/20, authority/privacy/dependency/freshness/taxonomy and explicit security/behavioral not-run states.
• Macro hard fails: mandatory extension install before authorization, noninteractive install bypass, cloud/RBAC/service principal changes, OAuth client-secret CLI arguments, production-trace harvesting and persistent routines/deletions without uniform scope gates.

Atomic public accounting

• Candidate changed-existing 75/76 → 76/76, new 26/26, current-version fresh static review 102/102; admitted July pin 186/186 unchanged.
• Third-party verification 825 → 826, total YAML 869 → 870 (44 first-party + 826 third-party). Candidate denominator 208 unchanged. Five public surfaces plus canonical denominator ledger reconciled.
• 9 files (3 created, 6 refreshed). No new source admission, pin movement, scanner, behavioral execution, Azure operation, repository-owned runtime, script, test, CI or generator.

Lifecycle

PRs #412/#413 remain blocked by full external exact-package security reports and independent acceptance. #416 also requires current-main conflict reconciliation and final-version security/independent acceptance. Issues #400/#402/#415 remain open for source-pin and external acceptance gates. This PR does not authorize candidate source-pin promotion or unchanged use. Expected head 98aa570b6dffc39fba7be4109ff898c6661d3490. [skip ci]