fix(reddog): harden governed Holo and Git context

ModLog.md

@@ -11,6 +11,49 @@
 - Validated Windows Git-root command routing, real WSP_00 hook execution, all
   four wire protocols, 34 focused tests, and 96% branch-aware coverage.
 
+## [2026-08-16] RedDog R4 verifier correction
+
+- Closed the governed Git snapshot TOCTOU release window with matching start
+  and forced final receipts and adversarial three-phase mutation coverage.
+- Preserved that fail-closed boundary while batching the four FoundUp authority
+  reads under one start/final receipt pair. Repeated target extraction improved
+  from 5.07-5.30 seconds to 1.73-1.93 seconds; the clean exhaustive contract
+  passed in 289.65 seconds under the unchanged 420-second ceiling.
+- Removed the HoloIndex Tier-0 WSP 62 self-exemption by extracting bounded
+  collection-search orchestration; engine 1,368 lines, wrapper 9 lines.
+- Preserved version 0.4.101 and the no-build/no-publish/no-execution boundary.
+
+## [2026-08-16] Tier-0 / Governed Git R2 Falsification
+
+**WSP Protocol**: WSP 00, 05, 06, 15, 22, 34, 50, 60, 62, 76, 77, 84, 87, 97, 108
+
+- Reproduced all fresh verifier RED findings before repair; the earlier green
+  suites lacked the duplicate-vector, cache-hardlink, Git-control, zero-limit,
+  exact-size, and immutable-ownership adversaries.
+- Closed those contracts with exact Tier-0 replacement, bounded extraction,
+  zero-limit/case/warning fixes, metadata-bound Git storage/control validation,
+  conditional exact ownership admission, and one-session Git projections.
+- Regenerated the authenticated 1,334-file runtime closure without changing
+  the unpublished 0.4.101 package identity or exercising commit, push, reindex,
+  service restart, VSIX publication, or merge authority.
+
+## [2026-08-16] HoloIndex Tier-0 / RedDog Grounding Reconciliation
+
+**WSP Protocol**: WSP 00, 05, 06, 15, 22, 34, 50, 60, 62, 76, 77, 84, 87, 97, 108
+
+- Added bounded, exact module-root README/INTERFACE retrieval with explicit
+  non-vector provenance, strict pair completeness, and truthful non-strict
+  warning behavior across HoloIndex and its owner response.
+- Regenerated the authenticated RedDog backend closure at extension 0.4.101
+  and hardened governed Git ownership admission to one canonical,
+  command-scoped `safe.directory` with explicit readiness evidence.
+- Preserved required WSP_97 audit evidence ahead of ordinary bounded evidence,
+  split the Git readiness boundary to satisfy WSP_62, and added adversarial
+  confinement, schema, resource-bound, and regression coverage.
+- No index publication, service restart, worker dispatch, repository-write,
+  merge, commit, push, or release authority was exercised.
+>>>>>>> 8a77f0574 (fix(reddog): harden governed Holo and Git context)
+
 ## [2026-07-25] Deterministic Codex Tooling Projection
 
 **WSP Protocol**: WSP 00, 15, 22, 50, 62, 97

WSP_knowledge/WSP_Test_Registry.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "wsp_test_registry.v2",
   "generation_policy": "git-tracked-python-tests.v1",
-  "total_tests": 1516,
+  "total_tests": 1519,
   "quarantined_tests": 263,
   "tests": [
     {
@@ -782,6 +782,21 @@
       "quarantine_reasons": [],
       "description": "Tests for deterministic HoloIndex CLI collection selection."
     },
+    {
+      "id": "test::holo_index::tests::test_cli_maintenance_output",
+      "path": "holo_index/tests/test_cli_maintenance_output.py",
+      "owner": "holo_index",
+      "suite_class": "unit",
+      "shard_id": "holo-index-unit-part-01",
+      "capabilities": [
+        "process"
+      ],
+      "execution_type": "unit",
+      "collectable": true,
+      "timeout_s": 180,
+      "quarantine_reasons": [],
+      "description": "Trusted maintenance child output isolation regressions."
+    },
     {
       "id": "test::holo_index::tests::test_codeindex_monitor",
       "path": "holo_index/tests/test_codeindex_monitor.py",
@@ -880,7 +895,7 @@
       "path": "holo_index/tests/test_confidence_scoring.py",
       "owner": "holo_index",
       "suite_class": "unit",
-      "shard_id": "holo-index-unit-part-01",
+      "shard_id": "holo-index-unit-part-02",
       "capabilities": [],
       "execution_type": "unit",
       "collectable": true,
@@ -1361,7 +1376,7 @@
       "path": "holo_index/tests/test_holoindex_query_admission.py",
       "owner": "holo_index",
       "suite_class": "unit",
-      "shard_id": "holo-index-unit-part-02",
+      "shard_id": "holo-index-unit-part-03",
       "capabilities": [],
       "execution_type": "unit",
       "collectable": true,
@@ -1846,7 +1861,7 @@
       "path": "holo_index/tests/test_simple.py",
       "owner": "holo_index",
       "suite_class": "unit",
-      "shard_id": "holo-index-unit-part-03",
+      "shard_id": "holo-index-unit-part-04",
       "capabilities": [
         "import_path_mutation"
       ],
@@ -1869,6 +1884,19 @@
       "quarantine_reasons": [],
       "description": "Slice-ID metadata precedence \u2014 search-time ranking quality tests.\n\nSlice: HOLOINDEX_T1_RANKING_QUALITY_PHASE1\nWorker: W7\n\nThe rule under test is generic:\n\n    When a query carries a literal slice-ID token AND a document's\n    ``meta_slice_id`` is exactly that token, the document outranks any\n    other document on the same query \u2014 including a sibling that benefits\n    from the Trade module path / alias boosts \u2014 purely by composition of\n    keyword-score boosts (no reindex, no Chroma writes).\n\nThe"
     },
+    {
+      "id": "test::holo_index::tests::test_tier0_retrieval_hardening",
+      "path": "holo_index/tests/test_tier0_retrieval_hardening.py",
+      "owner": "holo_index",
+      "suite_class": "unit",
+      "shard_id": "holo-index-unit-part-04",
+      "capabilities": [],
+      "execution_type": "unit",
+      "collectable": true,
+      "timeout_s": 180,
+      "quarantine_reasons": [],
+      "description": "Generic module Tier-0 retrieval hardening regressions.\n\nSlice: HOLOINDEX_TIER0_RETRIEVAL_HARDENING_PHASE1\n\nAll collection behavior is deterministic and in-memory. No persistent store,\nmodel, network, reindex, or filesystem mutation is used."
+    },
     {
       "id": "test::holo_index::tests::test_tq_corpus_freeze",
       "path": "holo_index/tests/test_tq_corpus_freeze.py",
@@ -15580,6 +15608,21 @@
       "quarantine_reasons": [],
       "description": "Main-preflight integration tests for RedDog's private HoloIndex owner."
     },
+    {
+      "id": "test::modules::infrastructure::foundups_mcp_bridge::tests::test_reddog_holoindex_maintenance_diagnostics",
+      "path": "modules/infrastructure/foundups_mcp_bridge/tests/test_reddog_holoindex_maintenance_diagnostics.py",
+      "owner": "modules/infrastructure/foundups_mcp_bridge",
+      "suite_class": "unit",
+      "shard_id": "modules-infrastructure-foundups-mcp-bridge-unit",
+      "capabilities": [
+        "process"
+      ],
+      "execution_type": "unit",
+      "collectable": true,
+      "timeout_s": 180,
+      "quarantine_reasons": [],
+      "description": "Adversarial tests for bounded RedDog maintenance child diagnostics."
+    },
     {
       "id": "test::modules::infrastructure::foundups_mcp_bridge::tests::test_reddog_holoindex_maintenance_handshake",
       "path": "modules/infrastructure/foundups_mcp_bridge/tests/test_reddog_holoindex_maintenance_handshake.py",
@@ -20959,7 +21002,9 @@
       "owner": "scripts",
       "suite_class": "unit",
       "shard_id": "scripts-unit",
-      "capabilities": [],
+      "capabilities": [
+        "process"
+      ],
       "execution_type": "unit",
       "collectable": true,
       "timeout_s": 180,