cpp_module_map.md

Rust to C++ module and acceptance map

Pinned commit: 62940ae2b88e7acc32763853b8b4685a01c7e90a.

Generated from the manually maintained responsibilities in cpp_modules.json; planned paths may not exist. All declarations, public items, and tests in each source inherit its row's contract. The public-item index locates methods, functions, constants, exports, and modules; it cannot replace trait-default or serialization review. Partial implementation is not stage acceptance. Stage 6 tests may accompany their implementations early.

Rust source	C++ target	Stage / status	Acceptance contract	Existing evidence (not complete parity proof)
teaql-core/src/value.rs teaql-core/src/time.rs	teaql_core/include/teaql/core/value.hpp; teaql_core/include/teaql/core/decimal.hpp; teaql_core/include/teaql/core/json.hpp; teaql_core/include/teaql/core/time.hpp	2 / Accepted module contract (not stage completion)	All Value variants, conversions, JSON projection, and recursive explicit-domain copies have implementations and fixed Rust comparisons. Timestamp transparent integer serialization is present; Value has no derived serde protocol. Decimal provides five checked arithmetic operations, saturation, ordering, truncation/integral operations/normalization, and all rounding modes, with 963 comparisons. Scale/significant-digit operations, binary encoding, and errors have 1,148. Exact/radix parsing adds 8,576 original-call comparisons including error variants and panic boundaries. Primitive numeric conversions add 6,058 comparisons, including IEEE32/64 retained precision, portable signed/unsigned 128-bit values and structured conversion errors. Scientific construction, active constants, Signed/unpack/Hash inputs and ordered Sum/Product add 3,495 original-call comparisons; extended alignment failures preserve original panic boundaries rather than substituting saturation results. Default Decimal serde JSON and Display/Debug/Exp formatting add 3,008 original-call comparisons, with scoped outputs and diagnostics. Complete serialization/API/reexport audits, extended-scale arithmetic combinations, and provider codecs need acceptance. SQLite decoding adds structured Decimal errors, JSON reasons/locations, Unicode timestamp offset signs, and boundary leap seconds. Audit comparisons include Rust Debug text for every Value variant, Unicode escaping, float exponent boundaries, and JSON Debug. Timestamp now preserves signed millisecond total ordering and standard hashing, with 67 original public-call inputs and 16698 pairwise comparisons. See the Core API acceptance contract; complete core acceptance remains separate. The complete rebuilt native suite passes 191/191; the Core API/model selections pass 3/3 under ASan/UBSan with leak detection and 3/3 under OpenWrt MIPS/QEMU. All 259 observations match live original Rust on native and MIPS; original core unit tests pass 65/65. This does not establish complete core acceptance. Extended binary arithmetic now has 8,056 unchanged original public-call observations after rescale, preserving raw result scale, signed zero, division power-table/constructor failures and staged remainder window behavior. Native old Decimal checks pass 7/7. Rebuilt ASan/UBSan with leak detection and OpenWrt MIPS/QEMU each pass all eight Decimal checks; all 8,056 MIPS observations match live original Rust. The full native consumer rebuild remains pending at this checkpoint. See decimal_extended_acceptance.md; this matrix is not complete Decimal API or stage acceptance. Native UTC conversion is now provided through chrono_value.hpp: value_from_utc maps standard signed integral system-clock seconds/milliseconds/microseconds/nanoseconds to the existing Timestamp Value. It preserves negative fractional floor and rejects seconds overflow before multiplication; native milliseconds beyond source calendar range are a documented input extension. All 64 actual original Value::from(DateTime) observations match native and MIPS; standalone native/ASan/UBSan/MIPS ownership checks pass with null default PMR and Global retention after actual User deletion. The core.hpp facade and named UTC tests are now registered. Final rebuilt native regression passes 215/215; the fourteen selected checks pass on ASan/UBSan with leak detection and MIPS/QEMU. Named native/MIPS UTC probes match all 64 live original observations. Complete surrounding Value/Decimal/API/source-test acceptance remains separate. Standalone DataType Debug now preserves every original unit variant; TypedNull delegates without an intermediate wrapped diagnostic. Ten direct original inputs compare 180 formatter outputs and 100 pairwise equality results on native/MIPS. Final full native regression passes 217/217; seven selected ASan/UBSan with leak detection and MIPS/QEMU checks each pass 7/7, including complete row/list and Entity Debug corpora. DataType introduces no source serde protocol and its ordinary C++ enum copy/equality remain value capabilities. See datatype_debug_acceptance.md; complete surrounding Value/Decimal/API/source-test acceptance is still separate. Owning String/List/Object constructors now transfer same-domain payload storage; foreign retention deep-copies before publication without consuming source data, matching the existing C++ Value domain adaptation. 171 original owning constructor calls compare full Debug/JSON, Clone equality and transferred payload addresses. Native contracts check long character/vector/map-node identity, capacity, payload failure after metadata precharge, all nested destination allocators, actual User destruction and all Global block reclamation. The Expr IN-list path uses the formal constructor. Named checks are registered; the new full native consumer and sanitizer builds remain running. Fresh MIPS/QEMU passes all ten selected checks and all 171 live original observations; Fresh ASan/UBSan with leak detection also completed all ten selected checks successfully; full native terminal acceptance remains pending. This does not establish complete surrounding model/API/privacy/source-test acceptance. The complete Value enum API mapping now observes all sixteen From responsibilities through the combined new scalar, owning and UTC audits. The new 115-input matrix calls all eight extractors and compares 13225 pairwise equalities, preserving Some(NaN) separately from missing output. Timestamp adds 99 original public/derive observations including chrono fallback and raw transparent JSON acceptance; both unchanged source time tests and latest native/ASan/UBSan/MIPS ownership ports pass. Standalone native Value and native/MIPS Timestamp probes match; Value MIPS rerun and formal named registration remain pending. See value_api_acceptance.md and timestamp_api_acceptance.md; surrounding Decimal/serialization diagnostics and all-stage acceptance remain separate. The owning constructor full native build has now completed successfully with 219/219 checks and 171/171 live original observations; prior running statements are historical. The new Value scalar probe matches 115/115 on native and MIPS, applying only documented width-changing NaN classification. Five metadata/scalar checks are registered; native full regression and ten selected sanitizer/MIPS checks are running. Final integrated checkpoint: full native build and regression completed successfully with 224/224 checks; the ten selected ASan/UBSan with leak detection and MIPS/QEMU checks each pass 10/10. Fresh named native/MIPS probes match all 160 metadata, 99 Timestamp and 115 Value live original inputs. Prior running statements are historical checkpoints. Full surrounding stage acceptance remains separate. Decimal now exposes the original allocation-free array_string capability through a 33-byte inline scalar carrier. Its unsigned characters, retained scale and fixed 32-character capacity are distinct from signed Display; source buffer panics map to length_error. Copies own bytes without extending a Context. All 484 original calls, including 50 original buffer failures, match native production; all ten native Decimal checks pass. Native contracts instrument ordinary heap allocation, disable default PMR, verify independent inline-copy addresses and actual source User deletion. Named inline contracts/parity and cross emulation are registered. Full native 238-check and twelve selected sanitizer/MIPS acceptance remain running. This does not establish complete supported Decimal APIs or all stages. The grouped standalone core diagnostic repair supplies the original BusinessId/search/Decimal-helper Debug capabilities through three focused headers. Native and MIPS each match all 94 actual original inputs and 34216 string observations. Native and ASan/UBSan ownership contracts pass with null default PMR, nested Global allocator checks and complete output after actual User deletion. Public core facade exposure and named CMake integration remain pending until the active 238-check consumer checkpoint completes; standalone evidence is not that integration or full API/privacy acceptance. Final grouped diagnostic integration: core.hpp exposes all eighteen new overloads, including qualified core::write_debug for dynamic-search models. Full native consumer rebuild and CTest pass 240/240; nine selected ASan/UBSan with leak detection and nine MIPS/QEMU checks pass. Named native/MIPS probes match all 94 live original inputs. The correctly mapped presence probe sees all 79 core/dependency diagnostic declarations. Presence remains weaker than semantic acceptance. The per-source-test ledger still has 427 applicable entries awaiting individual review; these are audit gaps rather than proven implementation defects. Complete time.rs review reproduces missing writable public Timestamp storage. The public signed millis field restores tuple-field mutation and mutable borrowing without extra storage. Nine original mutable-field observations extend the earlier 99 Timestamp inputs to 108; current-source standalone native contracts and all 108 live comparisons pass. Native consumer and selected sanitizer/MIPS rebuilds remain pending. Enabled Decimal Inv was reproduced missing and is now implemented through the existing ONE/divisor kernel. Ninety actual locked-trait reciprocal observations and ninety inherited Zero/One default sequences extend 3,495 unchanged foundation cases to 3,675, including sixteen reciprocal source failures. Native scalar/default contracts and all 3,675 live observations pass. Entity/Timestamp selected ASan/UBSan (leak scanning disabled) and MIPS checks pass 12/12, predating the final identity-header refresh. Current platform and final consumer integration remain pending; the complete Value/time group remains partial. A later enabled Decimal review adds actual pointer-width source evidence: 238 inputs execute original ToPrimitive/TryFrom/FromPrimitive/From at native 64-bit and ARMv7 musl 32-bit Rust widths. Native C++ and MIPS match their respective live source widths exactly, retaining raw state, optional results, full error Display/Debug and primitive input rejection. The isolated oracle uses existing locked dependency versions/checksums only. A compile fixture also reproduces missing constexpr construction/raw scalar observations/bounds/serialization; allocation-free source const-fn responsibilities are restored without runtime/representation/ownership changes. Source word-width constant assertions compile. Scoped Result/Error factories retain their explicit-domain adaptation. Fresh sanitizer/MIPS and full native 644-task consumers are running; the Value/time/Decimal group and complete stages stay partial. Fresh final Decimal/auxiliary selections pass 13/13 under ASan/UBSan with leak scanning disabled (64.18 seconds) and 13/13 on MIPS/QEMU (35.42 seconds). Final selected build refreshes report no work; all 147 sanitizer and 324 MIPS compiled dependency records are nonempty. A full-byte static assertion is added to the Decimal native contract and its affected unit is refreshed separately. The complete native 644-task consumer build remains live; full Value/time/Decimal and stage acceptance remain open. Complete inherited standard Ord default review identifies omitted min/max/clamp responsibilities. C++ ord_min/ord_max/clamp now remain separate from inherent min/max, preserving second-argument Ord max ties and first-argument inherent max ties, full representation selection and reversed-bound failure with unchanged inputs. Six hundred five direct original calls extend 3675 unchanged observations to 4280, all matching live native/MIPS Rust. Named Decimal selections pass 13/13 on ASan/UBSan with leak scanning disabled and13/13 on MIPS. Time now() also switches from truncating duration_cast to chrono::floor, matching source negative-epoch submillisecond semantics; its clock-bracket fixture observes the same floor. Fresh Value/time/Decimal consumers and final whole-native refresh remain running; full group/stage acceptance is open. Complete pre-test Value/time bodies are additionally traced through all 16 From conversions, eight distinct extractors, recursive projection, mutable Timestamp field and every source derive. Enabled Decimal factories, arithmetic/reference/assignment/fold/error/default-serde bodies and inherited standard/num-traits responsibilities are reviewed separately. Fresh Ord selections pass 13/13 on sanitizer (76.28 seconds) and MIPS (45.67 seconds), and all 4,280 observations match live MIPS original Rust. Combined latest Value/time consumers and final complete native refresh/regression remain required; status stays partial. Combined final Value/time/Decimal consumers subsequently pass 21/21 under ASan/UBSan with leak scanning disabled (78.13 seconds) and 21/21 on MIPS/QEMU (59.04 seconds). This includes the linked clock-floor correction, original Value source tests, owning/scalar and Timestamp/UTC contracts, all enabled Decimal matrices/defaults and actual pointer widths. Full final native header refresh and complete CTest remain live; group status remains partial. Additional fresh scalar/DataType/memory consumers pass 13/13 under ASan/UBSan with leak scanning disabled (2.63 seconds) and 13/13 on MIPS/QEMU (4.24 seconds), including all original Value extraction/format, DataType diagnostics, bounded reference/arena/native-resource/async teardown and the lifetime example. The first native 644-task build finishes, followed by a live 452-task final refresh for later header/clock changes. The explicit Stage 2 completion audit is added to migration_plan.md; full current native and last source-group acceptance remain required. Complete grouped source acceptance now follows the full Value/time and enabled Decimal public/default/trait/protocol/ownership reviews. Final native no-work integration passes 303/303 in 74.81 seconds with all 375 dependency records nonempty. Combined 21/21 and separate scalar/DataType/memory 13/13 selections pass on sanitizer and MIPS. This accepts the last Stage 2 source group; stages 3–6 and SQL projection-state gaps remain open.	teaql_core/include/teaql/core/value.hpp teaql_core/src/value.cpp teaql_core/tests/core_tests.cpp teaql_core/tests/core_collection_tests.cpp teaql_core/include/teaql/core/decimal.hpp teaql_core/include/teaql/core/json.hpp teaql_core/include/teaql/core/time.hpp teaql_core/src/decimal.cpp teaql_core/src/json.cpp teaql_core/src/time.cpp teaql_core/tests/value_model_tests.cpp tests/parity/value_cases.json tests/parity/compare_values.py tests/parity/rust_values/src/main.rs teaql_core/src/number_text.cpp tests/parity/format_cases.json tests/parity/compare_formats.py teaql_core/src/decimal_arithmetic.cpp teaql_core/tests/decimal_tests.cpp tests/parity/decimal_cases.json tests/parity/compare_decimal.py tests/parity/rust_values/src/bin/decimal_oracle.rs teaql_core/include/teaql/core/decimal_error.hpp tests/parity/decimal_scale_cases.json tests/parity/compare_decimal_scale.py teaql_provider_sqlite/tests/provider_sqlite_decoding_tests.cpp tests/parity/sqlite_decoding_cases.json teaql_core/include/teaql/core/detail/debug.hpp teaql_core/src/debug.cpp tests/parity/audit_event_cases.json tests/parity/decimal_parsing_cases.json tests/parity/compare_decimal_parsing.py tests/parity/generate_decimal_parsing.py teaql_core/include/teaql/core/integer128.hpp tests/parity/decimal_numeric_cases.json tests/parity/compare_decimal_numeric.py tests/parity/generate_decimal_numeric.py tests/parity/decimal_foundation_cases.json tests/parity/compare_decimal_foundations.py tests/parity/generate_decimal_foundations.py teaql_core/include/teaql/core/decimal_format.hpp teaql_core/include/teaql/core/decimal_json_error.hpp teaql_core/src/decimal_format.cpp teaql_core/src/decimal_json.cpp tests/parity/decimal_wire_format_cases.json tests/parity/compare_decimal_wire_format.py tests/parity/generate_decimal_wire_format.py teaql_core/tests/core_api_tests.cpp tests/parity/core_api_probe.cpp tests/parity/core_api_cases.json tests/parity/rust_values/src/bin/core_api_oracle.rs docs/core_api_acceptance.md docs/decimal_extended_acceptance.md tests/parity/decimal_extended_cases.json.gz tests/parity/generate_decimal_extended.py tests/parity/compare_decimal_extended.py teaql_core/include/teaql/core/chrono_value.hpp docs/chrono_value_acceptance.md teaql_core/tests/chrono_value_tests.cpp tests/parity/chrono_value_probe.cpp tests/parity/chrono_value_cases.json tests/parity/rust_values/src/bin/chrono_value_oracle.rs docs/datatype_debug_acceptance.md teaql_core/tests/datatype_debug_tests.cpp tests/parity/datatype_debug_probe.cpp tests/parity/datatype_debug_cases.json tests/parity/rust_values/src/bin/datatype_debug_oracle.rs docs/value_owned_api_acceptance.md teaql_core/tests/value_owned_api_tests.cpp tests/parity/value_owned_api_probe.cpp tests/parity/value_owned_api_cases.json tests/parity/rust_values/src/bin/value_owned_api_oracle.rs docs/value_api_acceptance.md docs/timestamp_api_acceptance.md tests/parity/value_api_probe.cpp tests/parity/value_api_cases.json.gz tests/parity/generate_value_api.py tests/parity/compare_value_api.py tests/parity/rust_values/src/bin/value_api_oracle.rs teaql_core/tests/timestamp_api_tests.cpp tests/parity/timestamp_api_probe.cpp tests/parity/timestamp_api_cases.json tests/parity/generate_timestamp_api.py tests/parity/compare_timestamp_api.py tests/parity/rust_values/src/bin/timestamp_api_oracle.rs teaql_core/include/teaql/core/decimal_inline_string.hpp teaql_core/tests/decimal_inline_tests.cpp tests/parity/decimal_inline_probe.cpp tests/parity/decimal_inline_cases.json.gz tests/parity/generate_decimal_inline.py tests/parity/compare_decimal_inline.py tests/parity/rust_values/src/bin/decimal_inline_oracle.rs teaql_core/include/teaql/core/decimal_debug.hpp teaql_core/tests/core_aux_debug_tests.cpp tests/parity/core_aux_debug_probe.cpp tests/parity/core_aux_debug_cases.json.gz tests/parity/generate_core_aux_debug.py tests/parity/compare_core_aux_debug.py tests/parity/rust_values/src/bin/core_aux_debug_oracle.rs tests/parity/teaql_core/value_contracts.cpp docs/decimal_api_contract.md tests/parity/rust_decimal_pointer/Cargo.toml tests/parity/rust_decimal_pointer/Cargo.lock tests/parity/rust_decimal_pointer/src/main.rs tests/parity/generate_decimal_pointer_scope.py tests/parity/compare_decimal_pointer_scope.py tests/parity/decimal_pointer_scope_cases.json.gz
teaql-core/src/meta.rs teaql-core/src/naming.rs	teaql_core/include/teaql/core/meta.hpp	2 / Accepted module contract (not stage completion)	The complete pinned production bodies of meta.rs and naming.rs have an explicit field/constructor/builder/lookup/iterator/derive/ownership review. All nine property, seven relation and eight entity fields retain source defaults and responsibilities. Scoped Clone, structural Eq and raw Debug preserve complete metadata; there is no source serde or Default requirement. Optional first-match lookups and writable filtering remain borrowed. The refreshed 344-input corpus includes 32 isolated equality changes and 152 direct ASCII/Unicode/NUL naming calls, retaining the earlier 160 full model/Debug inputs. Native and MIPS match a freshly rebuilt repository-local live Rust oracle; three unchanged original builder tests pass. The two named checks each pass native, ASan/UBSan with leak detection and OpenWrt MIPS/QEMU. Native ownership checks retain long complete metadata through explicit User-to-Global copying and actual User deletion, verify every nested allocator and self-aliased mask replacement. This accepts only the core metadata/naming group; runtime registration/schema/SQL/privacy and full stage acceptance remain separate.	teaql_core/include/teaql/core/meta.hpp teaql_core/tests/core_model_tests.cpp teaql_core/tests/core_api_tests.cpp tests/parity/core_api_cases.json docs/core_api_acceptance.md teaql_core/include/teaql/core/meta_debug.hpp docs/meta_api_acceptance.md teaql_core/tests/meta_api_tests.cpp tests/parity/meta_api_probe.cpp tests/parity/meta_api_cases.json.gz tests/parity/rust_values/src/bin/meta_api_oracle.rs
teaql-core/src/expr.rs teaql-core/src/safe_expression.rs	teaql_core/include/teaql/core/expr.hpp; teaql_core/include/teaql/core/safe_expression.hpp	2 / Accepted module contract (not stage completion)	The complete pinned Expr/SafeExpression responsibility group is accepted after full source, method, variant/default/trait, raw Debug and ownership review. Preserve all 50 Expr methods, twelve binary operators, fourteen functions, eleven AST variants and exact threshold/null-guard/logical composition rules; preserve all 24 SafeExpression methods, source Clone blocks and six TeaqlEmpty implementations plus application predicate extension. Incremental logical ranges, generic BETWEEN and explicit Clone-bound repairs retain source semantics under Context budgets. All 1022 query/Expr, 448 SafeExpression and 120 query/Trace Debug inputs match live original Rust on native and MIPS/QEMU. Native, ASan/UBSan without leak scanning and MIPS selected checks pass 12/12; final native consumer refresh is clean and full regression passes 281/281. The fixture teardown UAF is corrected and verified by current sanitizer checks. Global/User borrows and explicit destination copies replace implicit Arc lifetime extension; native borrows retain explicit lifetime obligations. This accepts expressions only, not SelectQuery/row, SQL/runtime/governance/privacy, cross-thread raw-borrow access, complete stages or physical-device execution.	teaql_core/include/teaql/core/expr.hpp teaql_core/tests/core_tests.cpp teaql_core/src/expr.cpp teaql_core/tests/query_model_tests.cpp teaql_core/include/teaql/core/safe_expression.hpp teaql_memory/include/teaql/memory/function.hpp teaql_core/tests/entity_expression_tests.cpp teaql_core/tests/query_api_tests.cpp tests/parity/query_api_probe.cpp tests/parity/query_api_cases.json tests/parity/rust_values/src/bin/query_api_oracle.rs docs/query_api_acceptance.md teaql_core/tests/safe_expression_api_tests.cpp tests/parity/safe_expression_api_probe.cpp tests/parity/safe_expression_api_cases.json tests/parity/rust_values/src/bin/safe_expression_api_oracle.rs docs/safe_expression_api_acceptance.md teaql_core/include/teaql/core/query_debug.hpp teaql_core/src/query_debug.cpp docs/query_debug_acceptance.md teaql_core/tests/query_debug_tests.cpp tests/parity/query_debug_probe.cpp tests/parity/query_debug_cases.json.gz tests/parity/generate_query_debug.py tests/parity/compare_query_debug.py tests/parity/rust_values/src/bin/query_debug_oracle.rs tests/parity/teaql_core/functional_contracts.cpp docs/expression_source_acceptance.md tests/support/safe_expression_empty_fixture.hpp
teaql-core/src/query.rs	teaql_core/include/teaql/core/query.hpp; teaql_core/include/teaql/core/row.hpp	2 / Accepted module contract (not stage completion)	The complete pinned query.rs group is accepted: fourteen structs, both enums, all 105 public methods, Record/CompactRow boundaries, all 26 SelectQuery fields, helper defaults/constants, owned map conversion and both JSON projections. Direct original builder/helper/validation observations preserve source comparison/default/ordering/recursive-list rules; Context-owned immutable layouts retain Arc identity/COW without extending owner lifetime. All 1089 query/Expr, 401 row, 169 row/list Debug and 120 query/Trace Debug inputs match live Rust on native and MIPS/QEMU. Ten selected checks pass on native, ASan/UBSan without leak scanning and MIPS; final clean native regression passes 281/281. Typed failure messages and precedence are retained through the documented exception/copy builder adaptation. Global retention, nested allocators, actual User teardown and injected allocation-failure recovery have native contracts. This accepts query/row models only; SQL execution/runtime caching/pagination/graph/governance/privacy, stages and physical-device gates remain separate.	teaql_core/include/teaql/core/query.hpp teaql_core/include/teaql/core/row.hpp teaql_core/tests/core_collection_tests.cpp teaql_core/src/query.cpp teaql_core/tests/query_model_tests.cpp tests/parity/entity_stream_cases.json tests/parity/rust_values/src/bin/entity_stream_oracle.rs teaql_core/tests/compact_row_api_tests.cpp tests/parity/compact_row_api_probe.cpp tests/parity/compact_row_api_cases.json.gz tests/parity/rust_values/src/bin/compact_row_api_oracle.rs docs/compact_row_api_acceptance.md teaql_core/tests/query_api_tests.cpp tests/parity/query_api_probe.cpp tests/parity/query_api_cases.json tests/parity/rust_values/src/bin/query_api_oracle.rs docs/query_api_acceptance.md teaql_core/include/teaql/core/query_debug.hpp teaql_core/src/query_debug.cpp docs/query_debug_acceptance.md teaql_core/tests/query_debug_tests.cpp tests/parity/query_debug_probe.cpp tests/parity/query_debug_cases.json.gz tests/parity/generate_query_debug.py tests/parity/compare_query_debug.py tests/parity/rust_values/src/bin/query_debug_oracle.rs tests/parity/query_keys_cases_32.json.gz tests/parity/generate_query_keys_width.py tests/parity/rust_values/src/bin/query_keys_32_oracle.rs tests/parity/teaql_core/composition_contracts.cpp tests/parity/teaql_core/entity_mapping_fixture.hpp docs/query_source_acceptance.md
teaql-core/src/list.rs	teaql_core/include/teaql/core/list.hpp	2 / Accepted module contract (not stage completion)	The complete pinned list.rs production responsibilities are reviewed: six distinct fields,44 public methods, three derived and12 explicit traits, plus every public-observable private ID key case. Explicit scoped default/owned construction, borrowed/consuming iteration, optional replacement, stable retention, maps/groups/merges/facets, entity projections and ID/version adapters preserve original semantics and bounds. Conditional Clone/equality declarations are repaired; owned outputs/keys need no extra Clone and replacement needs no entity assignment. Scoped Boolean storage restores actual pointer/slice semantics. Owned mapper/entity failure releases unvisited objects before unwind; f32 Debug preserves binary32 width. All1291 original API inputs match native/MIPS; prior3042 raw model outputs remain. Current native/MIPS selections and ASan/UBSan pass; current LeakSanitizer cannot run under tracing and is explicitly not counted as passing. Native ownership counters prove all arena blocks return and exactly-once cleanup. Complete fresh native consumer/probe refresh and regression pass281/281 in69.60s with no pending build work. This accepts only the list group, not surrounding query/entity/runtime/privacy or all stages.	teaql_core/include/teaql/core/list.hpp teaql_core/tests/core_collection_tests.cpp teaql_core/src/list.cpp teaql_core/tests/entity_expression_tests.cpp teaql_provider_sqlite/tests/entity_service_tests.cpp teaql_core/tests/smart_list_api_tests.cpp tests/parity/smart_list_api_probe.cpp tests/parity/smart_list_api_cases.json.gz tests/parity/rust_values/src/bin/smart_list_api_oracle.rs docs/smart_list_api_acceptance.md teaql_core/include/teaql/core/debug.hpp teaql_core/tests/model_debug_tests.cpp tests/parity/model_debug_cases.json tests/parity/rust_values/src/bin/model_debug_oracle.rs docs/model_debug_acceptance.md tests/parity/teaql_core/functional_contracts.cpp teaql_core/include/teaql/core/detail/bool_vector.hpp tests/support/smart_list_drop_fixture.hpp
teaql-core/src/mutation.rs teaql-core/src/trace.rs	teaql_core/include/teaql/core/mutation.hpp; teaql_core/include/teaql/core/trace.hpp	2 / Accepted module contract (not stage completion)	The complete pinned mutation.rs/trace.rs model group is accepted: three distinct ordered-map roles, every field/default/constructor/builder of all six commands, four MutationKinds, nine TraceKinds and both TraceNode constructors. Scoped Clone, variant-sensitive PartialEq, enum/trace Eq, complete raw Debug, map conversions and owned/borrowed iteration preserve source responsibilities; no source serde protocol is invented. In-place C++ builders and explicit destination allocation are documented ownership adaptations. All 1688 API inputs, 120 mutation Debug inputs and 120 query/Trace Debug inputs match live original Rust on native and MIPS/QEMU. Eight selected checks pass on native, ASan/UBSan without leak scanning and MIPS/QEMU; full native regression passes 281/281. Default-PMR-disabled contracts include actual User deletion, Global rebinding, nested ownership, same-owner node/payload transfer and allocation-failure recovery. This accepts models only; executor/governance/audit/log and physical-device gates remain separate.	teaql_core/include/teaql/core/mutation.hpp teaql_core/include/teaql/core/trace.hpp teaql_core/tests/core_model_tests.cpp teaql_core/tests/mutation_model_api_tests.cpp tests/parity/mutation_model_api_probe.cpp tests/parity/mutation_model_api_cases.json tests/parity/rust_values/src/bin/mutation_model_api_oracle.rs docs/mutation_model_api_acceptance.md teaql_core/tests/mutation_model_api_tests.cpp tests/parity/mutation_model_api_cases.json docs/mutation_model_api_acceptance.md teaql_core/include/teaql/core/query_debug.hpp teaql_core/src/query_debug.cpp docs/query_debug_acceptance.md teaql_core/tests/query_debug_tests.cpp tests/parity/query_debug_probe.cpp tests/parity/query_debug_cases.json.gz tests/parity/generate_query_debug.py tests/parity/compare_query_debug.py tests/parity/rust_values/src/bin/query_debug_oracle.rs teaql_core/include/teaql/core/mutation_debug.hpp docs/mutation_debug_acceptance.md teaql_core/tests/mutation_debug_tests.cpp tests/parity/mutation_debug_probe.cpp tests/parity/mutation_debug_cases.json.gz tests/parity/generate_mutation_debug.py tests/parity/compare_mutation_debug.py tests/parity/rust_values/src/bin/mutation_debug_oracle.rs
teaql-core/src/entity.rs	teaql_core/include/teaql/core/entity.hpp	2 / Accepted module contract (not stage completion)	Entity concepts/defaults, BaseEntityData, EntityError, Audited, descriptor registration and boxed relations remain separate; loaded/dirty/snapshot interfaces retain their responsibilities. Registration now dispatches overridable register_into hooks, with a direct inherited default to prevent recursion. Its negative control matched 12/42 original inputs, while the repaired isolated header matched 42/42. BaseEntityData parsing preserves original Some(Value Debug) errors, not JSON projection; 1,481 unchanged original public calls match on native and MIPS, including every Value variant, all TypedNull types, role bounds, precedence, map/Clone results and complete EntityError Display. Structural EntityError/BaseEntityData Debug is exposed through core.hpp, with 289 original inputs and 5,202 exact formatting outputs matching native/MIPS. Scoped ownership checks for diagnostics/Debug pass native, ASan/UBSan and MIPS. Consuming wrapper/Result repairs remove extra Clone/assignment requirements; actual original Entity/Audited/boxed calls compile/run with non-Clone payloads, and the repaired native contract passes with default PMR disabled. Optional/vector copy capabilities follow their payloads; Optional explicitly retained into Global survives actual User deletion. All Entity/default/UTC checks are registered. Final rebuilt native regression passes 215/215; selected ASan/UBSan with leak detection and MIPS/QEMU each pass 14/14. Named live source probes retain registration 42, parsing 1,481, Debug 289 inputs/5,202 outputs and defaults 93 exact sequences. The per-method Entity contract accounts for every source responsibility and records remaining generic error/integration/downstream source-test boundaries. This is scoped acceptance, not proof that all stages are complete. Complete source-group acceptance is now recorded after full public/default/trait/protocol/ownership review and coherent final native 302/302 integration. Fresh Entity/locking/original-tail selections pass 11/11 under ASan/UBSan with leak scanning disabled and 11/11 on MIPS/QEMU. Explicit C++ ownership adaptations are documented; remaining source groups, runtime/save/privacy and complete stages remain open.	teaql_core/include/teaql/core/entity.hpp teaql_core/src/entity.cpp teaql_core/include/teaql/core/result.hpp teaql_core/tests/entity_expression_tests.cpp docs/entity_registration_api_acceptance.md tests/support/entity_registration_fixture.hpp teaql_core/tests/entity_registration_api_tests.cpp tests/parity/entity_registration_api_probe.cpp tests/parity/entity_registration_api_cases.json tests/parity/rust_values/src/bin/entity_registration_api_oracle.rs docs/base_entity_api_acceptance.md teaql_core/tests/base_entity_api_tests.cpp tests/parity/base_entity_api_probe.cpp tests/parity/base_entity_api_cases.json tests/parity/rust_values/src/bin/base_entity_api_oracle.rs teaql_core/include/teaql/core/entity_debug.hpp docs/entity_debug_acceptance.md teaql_core/tests/entity_debug_tests.cpp tests/parity/entity_debug_probe.cpp tests/parity/entity_debug_cases.json tests/parity/rust_values/src/bin/entity_debug_oracle.rs docs/entity_owned_api_acceptance.md teaql_core/tests/entity_owned_api_tests.cpp tests/parity/rust_values/src/bin/entity_owned_api_oracle.rs teaql_memory/include/teaql/memory/scoped.hpp teaql_core/include/teaql/core/result.hpp docs/entity_api_contract.md tests/parity/entity_defaults_api_probe.cpp tests/parity/entity_defaults_api_cases.json tests/parity/rust_values/src/bin/entity_defaults_api_oracle.rs
teaql-core/src/entity_graph.rs	teaql_core/include/teaql/core/entity_graph.hpp	2 / Accepted module contract (not stage completion)	The complete pinned entity_graph.rs model group is accepted after full body/field/default/method/trait/diagnostic/ownership review: Save/Delete, all five node fields, four consuming builder methods and new<T:Entity+TeaqlEntity>. Descriptor.name provenance, non-Clone/non-Debug input, ordered duplicate/empty child names and optional/reassigned comments remain unchanged. Scoped node Clone and raw node/operation Debug retain all recursive fields; wrapper deep copies are explicit C++ lifetime adaptations, not invented Rust derives. Fresh original unit test passes1/1; all240/12960 diagnostic outputs match live Rust on native/MIPS; four current native/ASan-UBSan-no-leakscan/MIPS checks each pass4/4. Native full281/281 at72.92s remains current with no intervening C++ changes and clean Ninja. Model construction is separate from runtime identity, persisted graph save, governance/privacy, stages and physical-device execution.	teaql_core/include/teaql/core/entity_graph.hpp teaql_core/tests/entity_expression_tests.cpp teaql_core/include/teaql/core/entity_graph_debug.hpp docs/core_graph_api_acceptance.md teaql_core/tests/core_graph_api_tests.cpp tests/parity/core_graph_api_probe.cpp tests/parity/core_graph_api_cases.json.gz tests/parity/generate_core_graph_api.py tests/parity/compare_core_graph_api.py tests/parity/rust_values/src/bin/core_graph_api_oracle.rs
teaql-core/src/request.rs teaql-core/src/dynamic_search.rs	teaql_core/include/teaql/core/request.hpp; teaql_core/include/teaql/core/dynamic_search.hpp	2 / Accepted module contract (not stage completion)	Complete pinned request.rs/dynamic_search.rs production responsibilities are reviewed: constants/18 operators/11 request structs/all43 fields/generic EntityReference and both builtins, constructors/conversions/every helper, seven search models and both normalize/merge entries. Builder/core models remain distinct; stored relation filters are retained without invented conversion behavior. Source Defaults/Clone/PartialEq/Eq/Debug/Error/sole warning Serialize protocol are accounted for. Receiver constraints now reflect actual invocation and missing Error source() is repaired. Strict UI decoding, permissive JSON helpers, warning ordering/default privacy/custom sinks and raw diagnostics remain separate. All174 request/509 search/872 helper inputs match live original Rust native/MIPS. Eight unchanged source search tests pass. Six final native/MIPS/ASanUBSan selections pass; current leak scanning is unavailable under tracing and not claimed passing, while explicit lifetime/block return checks remain active. Final full native consumer rebuild/regression passes281/28170.86s after last declaration change. This accepts only this two-file group, not downstream runtime/privacy or all stages.	teaql_core/include/teaql/core/request.hpp teaql_core/src/request.cpp teaql_core/include/teaql/core/dynamic_search.hpp teaql_core/src/dynamic_search.cpp teaql_core/tests/request_search_tests.cpp tests/parity/search_cases.json tests/parity/compare_search.py tests/parity/rust_values/src/bin/search_oracle.rs teaql_core/include/teaql/core/request_debug.hpp docs/request_api_acceptance.md teaql_core/tests/request_api_tests.cpp tests/parity/request_api_probe.cpp tests/parity/request_api_cases.json.gz tests/parity/generate_request_api.py tests/parity/compare_request_api.py tests/parity/rust_values/src/bin/request_api_oracle.rs teaql_core/tests/request_helpers_tests.cpp tests/parity/request_helpers_probe.cpp tests/parity/request_helpers_cases.json.gz tests/parity/generate_request_helpers.py tests/parity/compare_request_helpers.py tests/parity/rust_values/src/bin/request_helpers_oracle.rs teaql_core/include/teaql/core/dynamic_search_debug.hpp teaql_core/tests/core_aux_debug_tests.cpp tests/parity/core_aux_debug_probe.cpp tests/parity/core_aux_debug_cases.json.gz tests/parity/generate_core_aux_debug.py tests/parity/compare_core_aux_debug.py tests/parity/rust_values/src/bin/core_aux_debug_oracle.rs
teaql-core/src/business_id.rs	teaql_core/include/teaql/core/business_id.hpp	2 / Accepted module contract (not stage completion)	Complete pinned production source reviewed: four constants, seven error codes, seven models, every field/factory/sequence/key/range method, source Clone/equality/Debug, Display/default empty Error source and distinct Allocator/Profile/Slot interfaces. The missing source() API is repaired after a compiler reproduction. Native/MIPS match 1283 live-original inputs including every model-field difference and all 49 code pairs; 94 auxiliary original inputs preserve exact diagnostics. Explicit destination ownership, actual User deletion, nested Global relocation and failed-copy preservation are verified. Native/sanitizer/MIPS four-check selections each pass. Complete final native integration passes 281/281 in 73.07 seconds after the cross-launch/probe refresh. Requests explicitly snapshot immutable borrowed source definitions/strings into their owner. C++ reserved namespace names and explicit result allocators are documented adaptations. No source serde/Default/Hash protocol is invented. This accepts the core group, not runtime profiles/encoding/database allocation/save or complete stages.	teaql_core/include/teaql/core/business_id.hpp teaql_core/src/business_id.cpp teaql_core/tests/business_id_tests.cpp tests/parity/business_id_cases.json tests/parity/compare_business_id.py tests/parity/rust_values/src/bin/business_id_oracle.rs teaql_core/include/teaql/core/business_id_debug.hpp teaql_core/tests/core_aux_debug_tests.cpp tests/parity/core_aux_debug_probe.cpp tests/parity/core_aux_debug_cases.json.gz tests/parity/generate_core_aux_debug.py tests/parity/compare_core_aux_debug.py tests/parity/rust_values/src/bin/core_aux_debug_oracle.rs docs/business_id_api_acceptance.md tests/parity/generate_business_id.py
teaql-core/src/serde_utils.rs teaql-core/src/web.rs teaql-core/src/xls.rs	teaql_core/include/teaql/core/serde_utils.hpp; teaql_core/include/teaql/core/web.hpp; teaql_core/include/teaql/core/xls.hpp	2 / Accepted module contract (not stage completion)	Complete pinned three-file production surface reviewed: four trimming helpers, three constants, seven Web/Xls models, every factory/builder/binding/projection/navigation method, source defaults/Clone/equality/Debug and JSON-value protocol. Native and MIPS match 675 live-original API inputs and the separate 785 protocol inputs. Named owning move/value iterators preserve non-Clone entity projection; borrowed ranges retain explicit copy constraints. Style dispatches the entity override; Action preserves source base mutation. Native complete regression passes 279/279; five rebuilt sanitizer/MIPS checks pass. Explicit-owner construction, scoped copies, native structured decode errors and checked coordinate-overflow exceptions are documented adaptations. Generic serde diagnostic strings/non-JSON formats, arbitrary escaped native borrows, surrounding runtime/privacy composition and complete stage acceptance are separate scopes. No web server, spreadsheet engine, generator change or runtime dependency is added.	teaql_core/include/teaql/core/serde_utils.hpp teaql_core/tests/value_model_tests.cpp teaql_core/include/teaql/core/model_decode.hpp teaql_core/include/teaql/core/detail/model_json.hpp teaql_core/include/teaql/core/web.hpp teaql_core/include/teaql/core/xls.hpp teaql_core/src/web.cpp teaql_core/src/xls.cpp teaql_core/tests/presentation_tests.cpp teaql_core/tests/entity_expression_tests.cpp tests/parity/presentation_cases.json tests/parity/compare_presentation.py tests/parity/rust_values/src/bin/presentation_oracle.rs teaql_core/include/teaql/core/presentation_debug.hpp teaql_core/tests/presentation_api_tests.cpp tests/support/presentation_binding_fixture.hpp tests/parity/presentation_api_probe.cpp tests/parity/presentation_api_cases.json.gz tests/parity/generate_presentation_api.py tests/parity/compare_presentation_api.py tests/parity/rust_values/src/bin/presentation_api_oracle.rs docs/presentation_api_acceptance.md tests/parity/teaql_core/functional_contracts.cpp
teaql-core/src/eval.rs	teaql_core/include/teaql/core/eval.hpp	2 / Accepted module contract (not stage completion)	Complete pinned production surface reviewed: LoadState five variants/is_loaded/Default/Clone/Eq/Debug/JSON and EvalResult three variants/fields/conditional Clone/Debug/generic JSON/consuming map and and_then. 1136 live-original observations include the complete 23x23 equality matrix; native move-only callbacks, generic codecs and cross-domain nested payload/diagnostic retention complement String observations. Native/SAN/MIPS checks pass. PMR vectors replace smallvec inline storage; Context-owned layouts replace Arc, without changing variants or membership. Generic pointee lifetimes, third-party codec payload semantics, serde error text and non-JSON formats are not wrapper guarantees. Accepted module contract is separate from complete stage/core acceptance.	teaql_core/include/teaql/core/eval.hpp teaql_core/tests/eval_tests.cpp tests/parity/eval_cases.json.gz tests/parity/eval_probe.cpp tests/parity/rust_values/src/bin/eval_oracle.rs docs/core_api_acceptance.md tests/parity/generate_eval.py tests/parity/compare_eval.py
teaql-core/src/lib.rs	teaql_core/include/teaql/core.hpp; tests/parity/core	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete984-line root facade, all26 embedded tests/helpers and trailing eval module. Six public namespaces/69 reexports retain distinct core/runtime graph names and every imported model responsibility. Handwritten mappings and composition/presentation fixtures use explicit User allocation and default-PMR-disabled destination copies; actual source User deletion verifies independent nested Global ownership. No fixture replaces runtime saving, SQL or a model generator. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	teaql_core/include/teaql/core.hpp teaql_runtime/tests/data_store_tests.cpp teaql_runtime/tests/generated_support_tests.cpp docs/data_store.md scripts/verify_public_exports.py tests/parity/teaql_core/functional_contracts.cpp tests/parity/teaql_core/entity_mapping.cpp tests/parity/teaql_core/entity_mapping_fixture.hpp teaql_core/tests/presentation_api_tests.cpp tests/parity/teaql_core/composition_contracts.cpp docs/core_root_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-data-service/src/lib.rs	teaql_data_service/include/teaql/data_service/executor.hpp; teaql_data_service/include/teaql/data_service/types.hpp	3 / Accepted module contract (not stage completion)	Complete production-body review of lines 1–310 preserves every model, field, variant, method, inherited default and separate executor/schema/ID/descriptor/observer/stream responsibility. Direct original model and scoped Clone observations, 144 inherited observed-default inputs, complete Unix SystemTime integration, native 314/314 and current nine-check sanitizer/MIPS selections establish the API contract. Typed errors remain independent; allocator-aware Clone, Context-thread callbacks and consumed/pending transaction guards are explicit C++ ownership adaptations. Actual provider cancellation, SQL diagnostics and runtime privacy remain separate source-group responsibilities.	teaql_data_service/include/teaql/data_service/types.hpp teaql_data_service/tests/data_service_tests.cpp CMakeLists.txt teaql_data_service/include/teaql/data_service/executor.hpp teaql_async/include/teaql/async/operation.hpp teaql_async/include/teaql/async/stream.hpp teaql_data_service/tests/executor_tests.cpp teaql_async/tests/async_tests.cpp tests/parity/teaql_sql/default_contracts.cpp docs/data_service_api_contract.md teaql_data_service/include/teaql/data_service/model_debug.hpp teaql_data_service/tests/data_service_model_tests.cpp tests/parity/data_service_model_probe.cpp tests/parity/data_service_model_cases.json.gz tests/parity/rust_values/src/bin/data_service_model_oracle.rs docs/data_service_root_contract.md teaql_data_service/include/teaql/data_service.hpp teaql_data_service/tests/data_service_scope_tests.cpp tests/parity/data_service_model_scope_probe.cpp tests/parity/data_service_model_scope_cases.json.gz tests/parity/rust_values/src/bin/data_service_model_scope_oracle.rs tests/parity/execution_time_range_scope_observations.json tests/parity/execution_time_range_scope_probe.cpp tests/parity/rust_values/src/bin/execution_time_range_scope_oracle.rs docs/system_time_contract.md teaql_core/include/teaql/core/system_time.hpp teaql_data_service/tests/system_time_tests.cpp tests/parity/system_time_probe.cpp tests/parity/system_time_cases.json.gz tests/parity/rust_values/src/bin/system_time_oracle.rs docs/system_time_arithmetic_contract.md teaql_data_service/tests/system_time_arithmetic_scope_tests.cpp tests/parity/system_time_arithmetic_scope_probe.cpp tests/parity/system_time_arithmetic_scope_cases.json tests/parity/rust_values/src/bin/system_time_arithmetic_scope_oracle.rs teaql_core/include/teaql/core/system_time_debug.hpp tests/parity/system_time_error_scope_probe.cpp tests/parity/system_time_error_scope_cases.json.gz tests/parity/compare_system_time_error_scope.py tests/parity/rust_values/src/bin/system_time_error_scope_oracle.rs tests/parity/executor_defaults_scope_probe.cpp tests/parity/executor_defaults_scope_cases.json tests/parity/compare_executor_defaults_scope.py tests/parity/rust_values/src/bin/executor_defaults_scope_oracle.rs
teaql-data-service/src/sql_log.rs	teaql_data_service/include/teaql/data_service/sql_log.hpp	3 / Accepted module contract (not stage completion)	Parameter provenance policies, execution outcomes, Context-owned opaque projection state, intent redaction, credential classification, and no-I/O query-intent collection are restored, with 1,008 policy/nested-value comparisons. Runtime safe reprojection, sinks, and cancellation diagnostics require their execution-layer integration. Complete 318-production-line review traces all policy/outcome/private projection/intent/credential responsibilities. Eight new actual original opaque-state inputs use a non-Clone payload and preserve typed lookup, allocation identity, private Debug and first-wrapper-drop behavior. All 1,008 prior intent observations remain unchanged. The prepared native counterpart is unregistered and reproduces an extra allocator-aware payload-copy requirement at same-domain make/copy; a separate Global-copy fixture preserves value 7 but changes clone equality to false. These are explicit open capability/identity gates, not hidden by diagnostic tests. Production headers stay unchanged while final native integration runs; the source group and Stage 3 remain partial. Follow-up repair supports noncopyable same-domain state and preserves origin identity during explicit deep retention using bounded non-reused arena namespaces and object slots. Eight registered native observations and all 1,008 old intents match live Rust; the initial four-check native/sanitizer/MIPS selections pass. Direct ownership/address-reuse and quota-failure tests accompany a fresh whole-project consumer rebuild. Earlier unregistered-fixture failures describe the pre-repair checkpoint; complete log/module/Stage 3 acceptance remains open. Accepted source contract after complete public/default/helper/ownership review, final current native 314/314 in 74.66 seconds, stable post-test no-work build, and the named current sanitizer/MIPS selections. Historical partial/pending paragraphs describe earlier checkpoints. This acceptance does not close the remaining executor/provider or runtime/privacy stages.	teaql_data_service/include/teaql/data_service/sql_log.hpp teaql_data_service/src/sql_log.cpp teaql_data_service/tests/data_service_tests.cpp tests/parity/sql_log_cases.json tests/parity/compare_sql_log.py tests/parity/rust_values/src/bin/sql_log_oracle.rs tests/parity/teaql_sql/default_contracts.cpp docs/data_service_api_contract.md tests/parity/sql_projection_scope_cases.json tests/parity/sql_projection_scope_probe.cpp teaql_data_service/tests/sql_projection_scope_tests.cpp tests/parity/compare_sql_projection_scope.py teaql_memory/include/teaql/memory/arena.hpp teaql_memory/src/arena.cpp
teaql-sql/src/bindings.rs teaql-sql/src/types.rs	teaql_sql/include/teaql/sql/bindings.hpp; teaql_sql/include/teaql/sql/types.hpp	3 / Accepted module contract (not stage completion)	CompiledQuery, SqlBindings, and every SqlCompileError are separate. Parameter/provenance positions stay aligned on allocation failure. SQLite diagnostic rendering handles binding, quoting/comments, non-finite numbers, and independent comments, with 1,538 comparisons. Other dialect execution/rendering is out of scope. Complete 102-line binding and 332-line type bodies are reviewed, including private provenance, finiteness, quoting and SQLite lexer helpers. Positional-only counter accounting preserves source callback and missing/unused/error boundaries without a used-vector. Successful binding semantics preserve scope/trust/value/policy state; policy-first rollback is the explicit C++ recoverable-allocation adaptation. All twelve active error payloads, default cause, comments and complete CompiledQuery fields are mapped. Projection origin equality now survives explicit retention. Non-SQLite rendering/execution remains excluded by the authorized scope. Current complete consumer regression is the remaining integration gate; body reading alone does not accept the group. Current 23-task selected sanitizer/MIPS builds finish before all five model/renderer checks pass 5/5 (15.91/8.26 seconds), with sanitizer leak scanning disabled. Whole-project native refresh remains running with 311 registered checks after shared provider additions. Accepted source contract after complete public/default/helper/ownership review, final current native 314/314 in 74.66 seconds, stable post-test no-work build, and the named current sanitizer/MIPS selections. Historical partial/pending paragraphs describe earlier checkpoints. This acceptance does not close the remaining executor/provider or runtime/privacy stages.	teaql_sql/include/teaql/sql/types.hpp teaql_sql/include/teaql/sql/bindings.hpp teaql_sql/src/types.cpp teaql_sql/src/bindings.cpp teaql_provider_sqlite/tests/sql_model_tests.cpp tests/parity/sql_types_cases.json tests/parity/compare_sql_types.py tests/parity/rust_values/src/bin/sql_types_oracle.rs docs/sql_model_api_contract.md teaql_sql/include/teaql/sql/model_debug.hpp teaql_data_service/include/teaql/data_service/sql_log_debug.hpp teaql_sql/tests/sql_model_api_tests.cpp tests/parity/sql_model_api_probe.cpp tests/parity/sql_model_api_cases.json.gz tests/parity/rust_values/src/bin/sql_model_api_oracle.rs
teaql-sql/src/dialect.rs	teaql_sql/include/teaql/sql/dialect.hpp; teaql_sql/src/dialect.cpp	3 / Accepted module contract (not stage completion)	SqlDialect restores expressions/functions/subqueries, ordinary/aggregate projections, partition pagination, SELECT/basic schema compilation, and extension points. Preserve parameter order, subquery privacy scope, recovery after errors, and raw-SQL provenance, with 2,206 comparisons. Insert/update batches, guarded update/delete/recover, soft delete/restore have 2,505; typed nulls, field/version selection, and error order match. Real SQLite execution, virtual extensions, target-domain and nested-copy tests are present. Index specs, FK naming, physical identifier byte validation, and Unicode uppercase have 1,305 comparisons. All 43 source trait methods have corresponding entries. The opt-in legacy compatibility compiler remains a regression baseline; complete runtime execution integration is pending. Direct public-helper review reproduces the eight-bit delimiter API gap for Unicode Rust char values. The new char32_t overload preserves complete UTF-8 scalar escaping and existing ASCII/wrapped-identifier behavior. 262 direct original quote/storage observations are reproduced twice, preserving the initial 136 and all 1,305 schema outputs. The registered helper probe and User-proxied Global text retention contracts are undergoing native/sanitizer/MIPS builds; complete dialect/default/compiler-order and stage acceptance remains open. Fresh three-check native/sanitizer-with-leak-scanning-disabled/MIPS selections each pass 3/3; both native/MIPS match 262 helpers and 1,305 existing schema inputs against live original Rust. Complete consumer/dialect/default/override acceptance remains open. Every production line before the test module (1–1522) is reviewed, including trait defaults and private helpers. Direct mandatory provider hooks expose a 0/48 pre-repair mutation-order mismatch; the private builder now captures provenance before final SQL and preserves table-before-version rendering. Fresh two-check native/sanitizer-with-leak-scanning-disabled/MIPS selections pass with all 48 live original hook calls and 2,505 prior mutation outputs unchanged. Direct public compile_in calls further reproduce 120/216 pre-repair matches: non-IN operators silently became NOT IN. Validation after left evaluation now preserves early left errors and partial bindings while mapping the original panic precondition. Final combined selected builds and whole-project consumers remain running; no complete dialect or Stage 3 acceptance is inferred. Final combined six-check native/sanitizer-with-leak-scanning-disabled/MIPS selections pass 6/6 in 7.04/13.96/10.26 seconds. Both native/MIPS match the 216 direct-IN and 2,505 mutation inputs against live original Rust. Public/default/override composition and current whole-project acceptance still require completion. Accepted source contract after complete public/default/helper/ownership review, final current native 314/314 in 74.66 seconds, stable post-test no-work build, and the named current sanitizer/MIPS selections. Historical partial/pending paragraphs describe earlier checkpoints. This acceptance does not close the remaining executor/provider or runtime/privacy stages. Post-0.0.2 maintenance retires the extra early C++ SQLite adapter. Its historical observations above are unchanged; current locators use production-provider regression coverage and the explicit retirement review.	teaql_provider_sqlite/tests/sql_model_tests.cpp teaql_sql/include/teaql/sql/dialect.hpp teaql_sql/src/dialect.cpp teaql_sql/tests/sql_dialect_tests.cpp tests/parity/sql_dialect_probe.cpp tests/parity/sql_dialect_cases.json tests/parity/compare_sql_dialect.py tests/parity/rust_values/src/bin/sql_dialect_oracle.rs teaql_sql/src/mutation.cpp teaql_provider_sqlite/tests/sql_mutation_tests.cpp tests/parity/sql_mutation_probe.cpp tests/parity/sql_mutation_cases.json tests/parity/compare_sql_mutation.py tests/parity/rust_values/src/bin/sql_mutation_oracle.rs teaql_sql/src/schema.cpp tests/parity/sql_schema_probe.cpp tests/parity/sql_schema_cases.json tests/parity/compare_sql_schema.py tests/parity/rust_values/src/bin/sql_schema_oracle.rs teaql_core/include/teaql/core/detail/uppercase_tables.hpp tests/parity/rust_values/src/bin/unicode_uppercase_table.rs tests/parity/teaql_sql/default_contracts.cpp docs/sql_dialect_api_contract.md teaql_sql/include/teaql/sql/model_debug.hpp teaql_sql/tests/sql_model_api_tests.cpp tests/parity/sql_dialect_helper_cases.json tests/parity/sql_dialect_helper_probe.cpp tests/parity/compare_sql_dialect_helpers.py tests/parity/sql_dialect_hook_cases.json tests/parity/compare_sql_dialect_hooks.py tests/parity/sql_dialect_in_cases.json tests/parity/compare_sql_dialect_in.py docs/sqlite_compatibility.md teaql_provider_sqlite/tests/provider_sqlite_regression_tests.cpp
teaql-sql/src/executor.rs teaql-sql/src/mutation_execution.rs	teaql_sql/include/teaql/sql/executor.hpp; teaql_sql/include/teaql/sql/transport.hpp; teaql_sql/src/query_plan.cpp; teaql_sql/include/teaql/sql/detail/mutation_execution.hpp; teaql_sql/src/mutation_execution.cpp; teaql_sql/include/teaql/sql/transaction.hpp; teaql_sql/include/teaql/sql/detail/query_execution.hpp; teaql_sql/include/teaql/sql/detail/stream_execution.hpp	3 / Accepted module contract (not stage completion)	Complete production review of executor.rs lines 1–576 and 1197–1892 and all 317 mutation_execution.rs lines preserves independent transport/transaction/stream roles, conditional executor capabilities, typed error variants and Debug/Display/source, descriptor/256-entry FIFO shape caches, binding/provenance recollection, partition probes, ordinary/guarded/batch execution, readback, native/buffered streams, failure journals and consuming terminals. All original executor source tests retain reviewed direct ports. Current native 315/315, no-work consumer build, 15/15 sanitizer/MIPS checks and live original transport/query/mutation/transaction/stream/kind/error comparisons establish this source contract. Context-owned cache sharing, owner-thread dispatch, explicit pending/terminal guards and noncopyable completion transfer adapt C++ ownership without extending User lifetime. SQLite provider, runtime graph/governance/privacy and final stages remain independent.	teaql_sql/include/teaql/sql/transport.hpp teaql_sql/include/teaql/sql/error.hpp teaql_async/include/teaql/async/operation.hpp teaql_async/include/teaql/async/pending.hpp teaql_sql/tests/sql_transport_tests.cpp tests/parity/sql_transport_cases.json tests/parity/compare_sql_transport.py tests/parity/rust_values/src/bin/sql_transport_oracle.rs teaql_sql/include/teaql/sql/executor.hpp teaql_sql/include/teaql/sql/detail/query_plan.hpp teaql_sql/src/query_plan.cpp teaql_sql/tests/sql_query_tests.cpp tests/parity/sql_query_probe.cpp tests/parity/sql_query_cases.json tests/parity/compare_sql_query.py tests/parity/rust_values/src/bin/sql_query_oracle.rs teaql_sql/include/teaql/sql/detail/mutation_execution.hpp teaql_sql/src/mutation_execution.cpp teaql_provider_sqlite/tests/sql_execution_tests.cpp tests/parity/sql_execution_probe.cpp tests/parity/sql_execution_cases.json tests/parity/compare_sql_execution.py tests/parity/rust_values/src/bin/sql_execution_oracle.rs teaql_sql/include/teaql/sql/transaction.hpp teaql_sql/include/teaql/sql/detail/query_execution.hpp teaql_provider_sqlite/tests/sql_transaction_tests.cpp tests/support/sqlite_execution_fixture.hpp tests/parity/sql_transaction_cases.json tests/parity/compare_sql_transaction.py teaql_sql/include/teaql/sql/detail/stream_execution.hpp teaql_provider_sqlite/tests/sql_stream_tests.cpp tests/support/sql_transaction_fixture.hpp tests/parity/sql_stream_probe.cpp tests/parity/sql_stream_cases.json tests/parity/compare_sql_stream.py tests/parity/rust_values/src/bin/sql_stream_oracle.rs tests/parity/teaql_sql/executor_contracts.cpp teaql_runtime/tests/error_generic_tests.cpp teaql_runtime/tests/sql_move_only_tests.cpp tests/support/move_only_error_fixture.hpp teaql_async/include/teaql/async/operation.hpp teaql_async/include/teaql/async/stream.hpp docs/context_lifetime.md tests/parity/sql_executor_kind_cases.json tests/parity/compare_sql_executor_kind.py teaql_sql/include/teaql/sql/error_debug.hpp tests/parity/sql_executor_error_probe.cpp tests/parity/sql_executor_error_cases.json tests/parity/compare_sql_executor_error.py tests/parity/rust_values/src/bin/sql_executor_error_oracle.rs docs/sql_execution_source_test_acceptance.md
teaql-sql/src/diagnostic_execution.rs teaql-sql/src/diagnostic_stream.rs	teaql_sql/include/teaql/sql/detail/diagnostic.hpp; teaql_sql/src/diagnostic.cpp; teaql_sql/include/teaql/sql/detail/stream_execution.hpp	3 / Accepted module contract (not stage completion)	StatementDiagnostic and FailureJournal are independent. Success metadata accompanies results; failure/cancellation observers receive one notification; journals flush/disarm in order and sink failures do not replace execution errors. Quiescence stops native work before notification and destruction. Query/mutation/guard paths preserve prior successful writes and failed reread diagnostics, discarding fallback journals on success. DiagnosticStream counts delivered rows and releases cursors before one final notification at final chunk/EOF/error. Cancellation and exception outcomes remain distinct; provider errors survive sink failures and absent compiled SQL produces no invented diagnostics. 880 stream comparisons plus thread/Context tests are present; complete provider/runtime log integration requires acceptance. Complete diagnostic guard/journal and stream production bodies are reviewed: take-before-notify, returned success, execution-order drain/disarm, cursor release before sinks, delivered-only counts, terminal/end/pending and unwind/drop outcome selection. Arc/Mutex lifetime/locking becomes explicit Context-bound recorder and owner-thread execution, with native work joined before teardown. Current eight-task sanitizer/MIPS selected builds finish and all four query/mutation/stream/noncopyable checks pass 4/4 (0.39/0.77 seconds), with sanitizer leak scanning disabled. Current native integration and separate runtime privacy acceptance remain open. Accepted source contract after complete public/default/helper/ownership review, final current native 314/314 in 74.66 seconds, stable post-test no-work build, and the named current sanitizer/MIPS selections. Historical partial/pending paragraphs describe earlier checkpoints. This acceptance does not close the remaining executor/provider or runtime/privacy stages.	teaql_sql/include/teaql/sql/detail/diagnostic.hpp teaql_sql/src/diagnostic.cpp teaql_sql/tests/sql_query_tests.cpp tests/parity/sql_query_cases.json teaql_provider_sqlite/tests/sql_execution_tests.cpp tests/parity/sql_execution_cases.json teaql_sql/include/teaql/sql/detail/stream_execution.hpp teaql_provider_sqlite/tests/sql_stream_tests.cpp tests/parity/sql_stream_cases.json tests/parity/teaql_sql/diagnostic_stream.cpp docs/sql_execution_source_test_acceptance.md
teaql-sql/src/lib.rs	teaql_sql/include/teaql/sql.hpp	3 / Accepted module contract (not stage completion)	Complete root source review preserves all 22 SQL reexports as direct C++ namespace aliases with no ownership, allocation or dispatch layer. All 29 root tests have reviewed dispositions: 26 generic/SQLite compiler/renderer ports retain literal source SQL, bindings and log metadata, and three wholly PostgreSQL/MySQL renderer tests are explicitly outside SQLite scope. Root compiler contracts pass current native, ASan/UBSan with leak scanning disabled and MIPS/QEMU after selected builds. Underlying executor/provider and complete Stage 3 acceptance remain independent.	teaql_sql/include/teaql/sql.hpp teaql_runtime/tests/data_store_tests.cpp teaql_runtime/tests/generated_support_tests.cpp docs/data_store.md scripts/verify_public_exports.py tests/parity/teaql_sql/compiler.cpp docs/sql_execution_source_test_acceptance.md
teaql-provider-sqlite/src/lib.rs	teaql_provider_sqlite/include/teaql/provider_sqlite/{dialect,error,provider,id,business_id,schema}.hpp; teaql_provider_sqlite/include/teaql/provider_sqlite/detail/{bindings,decoding,schema}.hpp; teaql_provider_sqlite/src/	3 / Accepted module contract (not stage completion)	Complete 1753-line production-body/public/default/trait/protocol/ownership review preserves all provider/dialect/schema/ID/business-ID/registration/transport/stream/transaction/cache/error responsibilities. All 42 root source tests have reviewed direct ports. Six outer errors and every one of the 25 locked enabled driver tags retain typed payloads, conversions and actual cause/diagnostic semantics. Native 315/315, final 32/32 sanitizer and same-engine SQLite 3.53.2 MIPS 31/31 selections, unchanged source fingerprints and stable consumer builds establish acceptance. Live native transport/schema/error/binding/release-decoding comparisons match; MIPS matches transport/errors and four previously engine-sensitive cases. Explicit scoped connection/clone/terminal/cancellation adaptations preserve resource cleanup without extending User lifetime. Old SQLite 3.40.1 target numeric failures remain separately recorded; this accepts the matched-engine provider contract, not identical engine behavior on every SQLite version or physical-router execution. Runtime save/governance/privacy and stages4–6 remain independent. Post-0.0.2 maintenance retires the extra early C++ SQLite adapter. Its historical observations above are unchanged; current locators use production-provider regression coverage and the explicit retirement review.	teaql_provider_sqlite/include/teaql/provider_sqlite/dialect.hpp teaql_provider_sqlite/src/dialect.cpp teaql_provider_sqlite/tests/provider_sqlite_tests.cpp teaql_provider_sqlite/tests/sql_mutation_tests.cpp teaql_provider_sqlite/include/teaql/provider_sqlite/error.hpp teaql_provider_sqlite/src/bindings.cpp teaql_provider_sqlite/tests/provider_sqlite_bindings_tests.cpp tests/parity/sqlite_bindings_cases.json tests/parity/sqlite_bindings_engine_differences.json tests/parity/rust_values/src/bin/sqlite_bindings_oracle.rs teaql_provider_sqlite/include/teaql/provider_sqlite/detail/decoding.hpp teaql_provider_sqlite/src/decoding.cpp teaql_provider_sqlite/tests/provider_sqlite_decoding_tests.cpp tests/parity/sqlite_decoding_cases.json tests/parity/rust_values/src/bin/sqlite_decoding_oracle.rs teaql_provider_sqlite/include/teaql/provider_sqlite/provider.hpp teaql_provider_sqlite/src/provider.cpp teaql_provider_sqlite/tests/provider_sqlite_transport_tests.cpp tests/parity/sqlite_transport_cases.json tests/parity/compare_sqlite_transport.py tests/parity/rust_values/src/bin/sqlite_transport_oracle.rs tests/parity/sqlite_transaction_cases.json tests/parity/compare_sqlite_transaction.py teaql_provider_sqlite/include/teaql/provider_sqlite/id.hpp teaql_runtime/include/teaql/runtime/id_space.hpp teaql_provider_sqlite/tests/provider_sqlite_id_tests.cpp tests/parity/sqlite_id_cases.json tests/parity/sqlite_id_engine_differences.json tests/parity/compare_sqlite_id.py teaql_provider_sqlite/include/teaql/provider_sqlite/business_id.hpp teaql_provider_sqlite/tests/provider_sqlite_business_id_tests.cpp tests/parity/sqlite_business_id_cases.json tests/parity/compare_sqlite_business_id.py teaql_runtime/include/teaql/runtime/id.hpp teaql_provider_sqlite/tests/internal_id_tests.cpp teaql_provider_sqlite/include/teaql/provider_sqlite/schema.hpp teaql_provider_sqlite/include/teaql/provider_sqlite/detail/schema.hpp teaql_provider_sqlite/src/schema.cpp teaql_provider_sqlite/src/schema_model.cpp teaql_provider_sqlite/src/schema_unicode.cpp teaql_provider_sqlite/src/unicode_lower_data.inc teaql_provider_sqlite/tests/provider_sqlite_schema_tests.cpp teaql_provider_sqlite/tests/provider_sqlite_unicode_tests.cpp tests/parity/sqlite_schema_probe.cpp tests/parity/sqlite_schema_cases.json tests/parity/observe_sqlite_schema.py tests/parity/compare_sqlite_schema.py tests/parity/rust_values/src/bin/sqlite_schema_oracle.rs tests/parity/rust_unicode_lower.rs docs/sqlite_compatibility.md scripts/verify_layer_boundaries.py tests/parity/teaql_provider_sqlite/storage.cpp tests/parity/teaql_provider_sqlite/fixture.hpp docs/provider_sql_source_test_acceptance.md tests/parity/teaql_provider_sqlite/schema.cpp measurements/mips-wndr4300/2026-10-07-schema-concurrency/results.json tests/parity/teaql_provider_sqlite/query_rows.cpp tests/parity/teaql_provider_sqlite/feature_flag.hpp tests/parity/teaql_provider_sqlite/transactions.cpp tests/parity/teaql_provider_sqlite/save_models.hpp docs/provider_error_api_contract.md teaql_provider_sqlite/tests/provider_sqlite_error_tests.cpp tests/parity/sqlite_mips_engine_differences.json measurements/mips-wndr4300/2026-10-08-sqlite-numeric/README.md measurements/mips-wndr4300/2026-10-08-sqlite-numeric/isolated-corpus-controls.json scripts/toolchains/openwrt_wndr4300.cmake teaql_provider_sqlite/include/teaql/provider_sqlite/driver_error.hpp teaql_provider_sqlite/src/driver_error.cpp teaql_provider_sqlite/include/teaql/provider_sqlite/error_debug.hpp teaql_provider_sqlite/tests/provider_sqlite_driver_error_tests.cpp tests/parity/sqlite_error_model_probe.cpp tests/parity/sqlite_error_model_cases.json.gz tests/parity/rust_values/src/bin/sqlite_error_model_oracle.rs teaql_provider_sqlite/include/teaql/provider_sqlite/native_diagnostics.hpp teaql_provider_sqlite/src/native_diagnostics.cpp tests/parity/sqlite_native_diagnostics_probe.cpp tests/parity/sqlite_native_diagnostics_cases.json.gz tests/parity/rust_values/src/bin/sqlite_native_diagnostics_oracle.rs teaql_provider_sqlite/include/teaql/provider_sqlite/simple_error.hpp teaql_provider_sqlite/src/simple_error.cpp teaql_provider_sqlite/tests/provider_sqlite_simple_error_tests.cpp tests/parity/sqlite_simple_error_probe.cpp tests/parity/sqlite_simple_error_cases.json.gz tests/parity/rust_values/src/bin/sqlite_simple_error_oracle.rs teaql_provider_sqlite/include/teaql/provider_sqlite/boxed_error.hpp teaql_provider_sqlite/tests/provider_sqlite_boxed_error_tests.cpp tests/parity/sqlite_boxed_error_fixture.hpp teaql_provider_sqlite/include/teaql/provider_sqlite/from_sql_error.hpp teaql_provider_sqlite/src/from_sql_error.cpp teaql_provider_sqlite/tests/provider_sqlite_from_sql_error_tests.cpp tests/parity/sqlite_from_sql_error_probe.cpp tests/parity/sqlite_from_sql_error_cases.json.gz tests/parity/rust_values/src/bin/sqlite_from_sql_error_oracle.rs tests/parity/compare_sqlite_from_sql_raw_debug.py tests/parity/sqlite_from_sql_raw_debug_cases.json.gz tests/parity/generate_sqlite_from_sql_error.py tests/parity/generate_sqlite_error_model.py docs/sqlite_provider_api_contract.md tests/parity/observe_sqlite_provider_declarations.py measurements/parity/2026-10-08-sqlite-provider-declarations/README.md measurements/parity/2026-10-08-sqlite-provider-declarations/results.json teaql_provider_sqlite/include/teaql/provider_sqlite/model_debug.hpp teaql_provider_sqlite/tests/provider_sqlite_model_tests.cpp measurements/parity/2026-10-08-sqlite-provider-acceptance/README.md measurements/parity/2026-10-08-sqlite-provider-acceptance/results.json teaql_provider_sqlite/tests/provider_sqlite_regression_tests.cpp
teaql-runtime/src/context.rs	teaql_runtime/include/teaql/runtime/context.hpp; teaql_runtime/include/teaql/runtime/resources.hpp; teaql_runtime/include/teaql/runtime/schema.hpp; teaql_runtime/include/teaql/runtime/data_store.hpp	4 / Accepted module contract (not stage completion)	Complete pinned Context production ranges 1–83 and 103–1266 are accepted after full model/public/default/private schema/store/registry/ID/reference/checker/fix/event and ownership reconciliation. Default identity, timezone, microsecond trace and module facade, checked clock/registry/schema/metadata/checker/telemetry dispatch, returned-child cleanup and generated bootstrap active-root correction retain independent source responsibilities. The root helper permits its intended schema borrow while rejecting closed/closing access; ordinary pending resource/root mutation remains forbidden. Native 375/375 passes after the 262-task consumer rebuild with 418 nonempty dependency records and no-work before/after; fresh sanitizer/MIPS 64/64 and 2,384 live original observations per profile pass. The actual-source bootstrap pipeline succeeds and the new registered negative control fails before repair. Explicit Global/User owners replace source implicit/shared ownership and Send/Sync with documented owner-thread execution; no hidden cache owns User payload. Runtime services, graph/save, runtime root and whole-stage acceptance remain separate.	teaql_runtime/include/teaql/runtime/context.hpp teaql_runtime/tests/context_memory_tests.cpp teaql_runtime/include/teaql/runtime/resources.hpp teaql_runtime/tests/runtime_context_tests.cpp tests/parity/runtime_context_cases.json tests/parity/runtime_context_probe.cpp tests/parity/rust_values/src/bin/runtime_context_oracle.rs teaql_runtime/include/teaql/runtime/registry.hpp teaql_runtime/src/registry.cpp teaql_runtime/tests/runtime_registry_tests.cpp tests/parity/runtime_registry_cases.json tests/parity/runtime_registry_probe.cpp tests/parity/rust_values/src/bin/runtime_registry_oracle.rs teaql_runtime/include/teaql/runtime/business_clock.hpp teaql_runtime/src/business_clock.cpp teaql_runtime/src/business_service.cpp teaql_provider_sqlite/tests/business_service_tests.cpp tests/parity/business_service_cases.json tests/parity/business_service_probe.cpp tests/parity/rust_values/src/bin/business_service_oracle.rs teaql_runtime/include/teaql/runtime/id.hpp teaql_runtime/src/id.cpp teaql_provider_sqlite/tests/internal_id_tests.cpp tests/support/internal_id_fixture.hpp tests/parity/internal_id_cases.json tests/parity/internal_id_probe.cpp tests/parity/compare_internal_id.py tests/parity/rust_values/src/bin/internal_id_oracle.rs teaql_runtime/include/teaql/runtime/schema.hpp teaql_runtime/include/teaql/runtime/module.hpp teaql_runtime/src/schema.cpp teaql_runtime/tests/schema_runtime_tests.cpp tests/parity/schema_runtime_cases.json tests/parity/schema_runtime_probe.cpp tests/parity/compare_schema_runtime.py tests/parity/rust_values/src/bin/schema_runtime_oracle.rs teaql_runtime/src/context/logging.cpp teaql_runtime/include/teaql/runtime/detail/context/identity.hpp teaql_runtime/tests/context_logging_tests.cpp teaql_runtime/include/teaql/runtime/telemetry.hpp teaql_runtime/src/telemetry.cpp teaql_runtime/tests/telemetry_tests.cpp teaql_runtime/include/teaql/runtime/detail/governance_scope.hpp teaql_runtime/src/context/event.cpp teaql_runtime/tests/context_event_tests.cpp tests/parity/context_event_probe.cpp tests/parity/context_event_cases.json tests/parity/compare_context_event.py tests/parity/rust_values/build.rs tests/parity/rust_values/src/bin/context_event_oracle.rs teaql_runtime/src/context/graph.cpp teaql_runtime/tests/runtime_graph_tests.cpp teaql_runtime/src/context/entity.cpp teaql_runtime/include/teaql/runtime/detail/context/entity.hpp teaql_provider_sqlite/tests/entity_decoder_tests.cpp teaql_runtime/include/teaql/runtime/context_root.hpp teaql_runtime/src/context/root.cpp teaql_provider_sqlite/tests/id_set_page_tests.cpp tests/parity/id_set_page_cases.json teaql_runtime/include/teaql/runtime/fix_evidence.hpp teaql_runtime/include/teaql/runtime/detail/graph_fix_scope.hpp teaql_runtime/src/fix_evidence.cpp teaql_runtime/src/context/fix.cpp teaql_runtime/tests/graph_fix_tests.cpp tests/parity/graph_fix_cases.json tests/parity/graph_fix_probe.cpp tests/parity/graph_fix_oracle.rs tests/parity/build_graph_fix_oracle.py teaql_runtime/include/teaql/runtime/data_store.hpp teaql_runtime/src/data_store.cpp teaql_runtime/src/context/data_store.cpp teaql_runtime/tests/data_store_tests.cpp tests/parity/data_store_probe.cpp tests/parity/data_store_cases.json tests/parity/compare_data_store.py tests/parity/generate_data_store.py tests/parity/rust_values/src/bin/data_store_oracle.rs docs/data_store.md tests/parity/teaql_runtime/context.cpp docs/context_api_contract.md teaql_runtime/include/teaql/runtime/context_model_debug.hpp teaql_runtime/tests/context_model_tests.cpp tests/parity/context_model_probe.cpp tests/parity/context_model_cases.json.gz tests/parity/compare_context_model.py tests/parity/rust_values/src/bin/context_model_oracle.rs teaql_runtime/tests/context_defaults_tests.cpp tests/parity/context_defaults_probe.cpp tests/parity/context_defaults_cases.json tests/parity/compare_context_defaults.py tests/parity/generate_context_defaults.py tests/parity/rust_values/src/bin/context_defaults_oracle.rs measurements/parity/2026-10-08-context-defaults-review/results.json measurements/parity/2026-10-08-business-clock-borrow-review/README.md measurements/parity/2026-10-08-business-clock-borrow-review/results.json tests/parity/rust_values/src/bin/bootstrap_root_scope_oracle.rs measurements/parity/2026-10-09-bootstrap-root-context-review/README.md measurements/parity/2026-10-09-bootstrap-root-context-review/before.json measurements/parity/2026-10-09-bootstrap-root-context-review/results.json
teaql-runtime/src/registry.rs	teaql_runtime/include/teaql/runtime/registry.hpp; teaql_runtime/include/teaql/runtime/module.hpp; teaql_runtime/include/teaql/runtime/behavior.hpp; teaql_runtime/include/teaql/runtime/entity_graph_decoder.hpp	4 / Accepted module contract (not stage completion)	MetadataStore/EntityRegistry implementations preserve ordering/replacement/missing values, independent descriptor snapshots, and default observers, with 321 comparisons. Explicit copies and callback/result borrows pass close tests. RuntimeModule descriptor/generated-bootstrap/apply_to/into_context functionality explicitly copies metadata/registry/callbacks into the target Context, with 384 schema-order observations and close/replacement tests. Sink and initial/root graph registration/install preserve domain-checked borrows and complete GraphNode copies. Four decoder forms, behavior/registry and RequestPolicy interfaces, and entity/entity_with_behavior/behavior registration have 182 public comparisons for errors/replacement/partial installation/weak-root ledger grouping/order. Native tests cover domain rejection, installation atomicity, resource close, cyclic graph copies, and SQLite identity decoding. Language installation now has original public-call and Context-copy evidence. Checker registration and Context check/fix orchestration now have 1,362 original public-call comparisons. Complete automatic entity-service save invocation remains pending; this is not complete module/query acceptance. Complete590line source body is reviewed against independent native metadata/entity/behavior/policy/decoder/module boundaries, exact keys, snapshots, defaults and ownership adaptations. A public runtime-facade compile reproduces missing Debug for InMemoryMetadataStore and InMemoryEntityRegistry; ordered source map diagnostics remain an implementation gate, including native set-to-name-map adaptation. Shared implementation headers remain stable while isolated full native integration runs. Generic registration/default/graph-save ordering and complete source/stage acceptance remain open. Eighteen independently named original Default/Clone/Debug/order/replacement/schema-snapshot scripts are recorded in9formatter modes and revalidated against a second live original execution. This is source-only evidence; missing native writers/probe/parity remain pending, without header mutation during full integration. No group/stage acceptance is inferred. Both missing Debug writers are now implemented through narrow formatting friends; descriptor/name maps preserve source ordered diagnostics over actual private native storage. The prepared probe is registered and all18 original Default/Clone/Debug/snapshot scripts match live native in9modes. Default-PMR-disabled ownership contracts preserve Global metadata/entity registry diagnostics after actual source User deletion and an explicit Global diagnostic copy after formatting User deletion. Fresh sanitizer/MIPS and full native consumers are running; earlier301/301 does not accept this new header/target change. After repairing a sanitizer-detected local test-string lifetime error, rebuilt registry selections pass 3/3 under ASan/UBSan with leak scanning disabled and 3/3 on MIPS/QEMU. Sixteen additional observations invoke the actual original multi-entity module macro, including reversed/duplicate registration, mixed entity/behavior entries, trailing commas and independently installed Clone/into_context snapshots. The 182 prior observations remain unchanged; all 198 match live native Rust and are revalidated twice. A default-PMR-disabled contract retains a Global module after actual source User deletion, executes its typed decoder, preserves descriptor/type key separation and behavior snapshots, and verifies empty-module replacement across four separate roles. MIPS/QEMU passes both decoder/module checks; sanitizer and current full native integration remain pending. No source group or stage is accepted from this scoped result. The final module selection subsequently passes 2/2 under ASan/UBSan with leak scanning disabled (0.81 seconds) and 2/2 on MIPS/QEMU (1.26 seconds). Both final selected build refreshes report no work; all 119 sanitizer and 318 MIPS compiled dependency records are nonempty. The current complete native build remains live; the source group and stages stay open. Initial/root registration composition now calls all four original single/bulk registration entries and public graph slices. Thirty-two additional inputs preserve separate order, duplicates, empty extensions, nested payload/relations, optional comment/dirty/snapshot boundaries and Clone/apply_to/into_context independence across actual native source User deletion. All 432 prior graph observations remain unchanged; all 464 graph inputs match live original Rust and are revalidated twice. Named graph selections pass 2/2 under ASan/UBSan with leak scanning disabled (19.89 seconds) and 2/2 on MIPS/QEMU (11.25 seconds). Complete registry/checker/language/event/callback consumer refreshes and the full native regression remain running. No complete source or stage acceptance is inferred from these scoped results. Complete source-group acceptance follows the full 590-line body and every trait/default/derive/macro review, direct original observations, explicit scope adaptations, selected source-role composition and final complete native regression. Final native CTest passes 302/302 in 67.69 seconds. Twenty composition checks pass on sanitizer/MIPS; audit width recovery preserves all 1421 representable original outputs and checks six u32 count rejections. This accepts registry.rs only; remaining runtime/save/event/log and stage gates remain open.	teaql_runtime/include/teaql/runtime/registry.hpp teaql_runtime/src/registry.cpp teaql_runtime/tests/runtime_registry_tests.cpp tests/parity/runtime_registry_cases.json tests/parity/runtime_registry_probe.cpp tests/parity/rust_values/src/bin/runtime_registry_oracle.rs teaql_runtime/include/teaql/runtime/schema.hpp teaql_runtime/include/teaql/runtime/module.hpp teaql_runtime/src/schema.cpp teaql_runtime/tests/schema_runtime_tests.cpp tests/parity/schema_runtime_cases.json tests/parity/schema_runtime_probe.cpp tests/parity/compare_schema_runtime.py tests/parity/rust_values/src/bin/schema_runtime_oracle.rs teaql_runtime/tests/context_event_tests.cpp teaql_runtime/tests/runtime_graph_tests.cpp teaql_runtime/include/teaql/runtime/behavior.hpp teaql_runtime/include/teaql/runtime/entity_graph_decoder.hpp teaql_runtime/src/entity_graph_decoder.cpp teaql_runtime/src/context/entity.cpp teaql_runtime/include/teaql/runtime/detail/context/entity.hpp tests/support/entity_decoder_fixture.hpp teaql_provider_sqlite/tests/entity_decoder_tests.cpp tests/parity/entity_decoder_probe.cpp tests/parity/entity_decoder_cases.json tests/parity/compare_entity_decoder.py tests/parity/observe_entity_decoder.py tests/parity/rust_values/src/bin/entity_decoder_oracle.rs teaql_runtime/src/context/language.cpp teaql_runtime/tests/i18n_tests.cpp tests/parity/i18n_cases.json teaql_runtime/include/teaql/runtime/checker.hpp teaql_runtime/src/context/checker.cpp teaql_runtime/tests/checker_tests.cpp tests/parity/checker_cases.json docs/registry_api_contract.md tests/parity/rust_values/src/bin/registry_debug_scope_oracle.rs tests/parity/registry_debug_scope_cases.json.gz teaql_runtime/include/teaql/runtime/registry_debug.hpp tests/parity/registry_debug_scope_probe.cpp tests/parity/compare_registry_debug_scope.py tests/parity/generate_module_graph_scope.py tests/parity/runtime_graph_cases.json
teaql-runtime/src/data_service/base.rs teaql-runtime/src/data_service/context.rs teaql-runtime/src/data_service/mod.rs teaql-runtime/src/data_service/types.rs teaql-runtime/src/data_service/resolved.rs teaql-runtime/src/data_service/helpers.rs	teaql_runtime/include/teaql/runtime/data_service.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/data_service.hpp; teaql_runtime/src/data_service/mod.cpp; teaql_runtime/include/teaql/runtime/detail/query_keys.hpp; teaql_runtime/src/data_service/query_keys.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_service.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_query.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_stream.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/id_set_page.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/enhanced_entities.hpp; teaql_runtime/src/data_service/relation_graph.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/base_mutation.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/context_mutation.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_mutation.hpp	4 / Accepted module contract (not stage completion)	Complete six-file runtime service responsibilities are accepted after all public/private/default/trait/protocol/ownership and execution body reviews. Separate RuntimeDataService, ContextDataService, EntityDataService and live metadata interfaces preserve typed/row/stream/cache/pagination/relation/mutation roles. Cursor counters match checked Debug versus wrapping Release, and the formerly missing private typed-aggregate path preserves a fresh decoding root without enhanced ID paging. Native 378/378 after 338 consumer tasks, 420 nonempty dependencies and no-work before/after; current sanitizer/MIPS 56/56 plus independent base/stream 3/3 pass. Thirteen live original matrices match all recorded cases on both profiles, including 165 public entity-query, 48 actual private helper bodies and 1502 mutation observations. Checked origins, concrete non-Clone error/output completion, foreign-work cancellation, default-PMR-disabled actual User destruction and explicit Global nested retention remain mandatory. 32-bit key field adaptation and controlled private-helper rows are explicit; they do not claim native Rust/router execution. Complete graph/save/runtime-root and stages 5–6 remain separate.	teaql_runtime/include/teaql/runtime/data_service.hpp teaql_runtime/include/teaql/runtime/detail/data_service/data_service.hpp teaql_runtime/include/teaql/runtime/detail/data_service/base_query.hpp teaql_runtime/src/data_service/mod.cpp teaql_runtime/src/data_service/relation.cpp teaql_provider_sqlite/tests/entity_service_tests.cpp tests/parity/runtime_base_cases.json tests/parity/runtime_base_probe.cpp tests/parity/rust_values/src/bin/runtime_base_oracle.rs tests/parity/compare_runtime_base.py teaql_runtime/include/teaql/runtime/detail/data_service/context_query.hpp teaql_runtime/tests/context_query_tests.cpp tests/support/context_query_fixture.hpp tests/parity/context_query_probe.cpp tests/parity/context_query_cases.json tests/parity/rust_values/src/bin/context_query_oracle.rs teaql_runtime/src/data_service/relation_enhancement.cpp tests/parity/relation_enhancement_cases.json teaql_core/include/teaql/core/detail/query_debug.hpp teaql_core/src/query_debug.cpp teaql_runtime/include/teaql/runtime/detail/query_keys.hpp teaql_runtime/src/data_service/query_keys.cpp teaql_runtime/tests/query_keys_tests.cpp tests/parity/query_keys_probe.cpp tests/parity/query_keys_cases.json tests/parity/compare_query_keys.py tests/parity/observe_query_keys.py tests/parity/rust_values/src/bin/query_keys_oracle.rs teaql_runtime/include/teaql/runtime/detail/data_service/entity_service.hpp teaql_runtime/include/teaql/runtime/detail/data_service/entity_query.hpp teaql_runtime/include/teaql/runtime/purposed_query.hpp tests/parity/entity_query_cases.json tests/parity/entity_query_probe.cpp tests/parity/rust_values/src/bin/entity_query_oracle.rs tests/parity/generate_entity_query.py tests/parity/compare_entity_query.py teaql_runtime/include/teaql/runtime/detail/data_service/entity_stream.hpp teaql_provider_sqlite/tests/entity_stream_tests.cpp tests/parity/entity_stream_cases.json tests/parity/entity_stream_probe.cpp tests/parity/rust_values/src/bin/entity_stream_oracle.rs tests/parity/generate_entity_stream.py tests/parity/compare_entity_stream.py teaql_runtime/include/teaql/runtime/detail/data_service/id_set_page.hpp teaql_provider_sqlite/tests/id_set_page_tests.cpp tests/parity/id_set_page_probe.cpp tests/parity/id_set_page_cases.json tests/parity/id_set_page_oracle.rs tests/parity/build_id_set_oracle.py tests/parity/generate_id_set_page.py tests/parity/compare_id_set_page.py teaql_runtime/include/teaql/runtime/detail/data_service/enhanced_entities.hpp teaql_runtime/src/data_service/relation_graph.cpp teaql_provider_sqlite/tests/enhanced_entities_tests.cpp tests/parity/enhanced_entities_probe.cpp tests/parity/enhanced_entities_cases.json tests/parity/rust_values/src/bin/enhanced_entities_oracle.rs tests/parity/generate_enhanced_entities.py tests/parity/compare_enhanced_entities.py teaql_runtime/include/teaql/runtime/detail/data_service/base_mutation.hpp teaql_runtime/include/teaql/runtime/detail/data_service/context_mutation.hpp teaql_runtime/include/teaql/runtime/detail/data_service/entity_mutation.hpp tests/support/runtime_mutation_fixture.hpp teaql_provider_sqlite/tests/runtime_mutation_tests.cpp tests/parity/runtime_mutation_probe.cpp tests/parity/runtime_mutation_oracle.rs tests/parity/build_runtime_mutation_oracle.py tests/parity/runtime_mutation_cases.json tests/parity/compare_runtime_mutation.py tests/parity/generate_runtime_mutation.py tests/parity/teaql_runtime/cache_relation.cpp teaql_runtime/tests/runtime_move_only_tests.cpp tests/support/move_only_error_fixture.hpp docs/runtime_source_test_acceptance.md teaql_runtime/tests/runtime_completion_tests.cpp tests/support/runtime_completion_fixture.hpp docs/relation_api_contract.md tests/parity/generate_relation_models.py tests/parity/compare_relation_models.py tests/parity/relation_model_cases.json.gz measurements/parity/2026-10-08-relation-model-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/results.json docs/runtime_data_service_api_contract.md tests/parity/entity_query_boundary_cases.json tests/parity/compare_entity_query_boundaries.py measurements/parity/2026-10-09-runtime-service-cursor-boundaries/README.md measurements/parity/2026-10-09-runtime-service-cursor-boundaries/before.json teaql_runtime/include/teaql/runtime/detail/data_service/typed_aggregate.hpp teaql_runtime/tests/typed_aggregate_tests.cpp tests/parity/typed_aggregate_scope_probe.cpp tests/parity/typed_aggregate_scope_cases.json tests/parity/compare_typed_aggregate_scope.py tests/parity/rust_values/src/bin/typed_aggregate_scope_oracle.rs measurements/parity/2026-10-09-runtime-service-typed-aggregate/README.md measurements/parity/2026-10-09-runtime-service-typed-aggregate/original-result.json measurements/parity/2026-10-09-runtime-service-source-acceptance/README.md measurements/parity/2026-10-09-runtime-service-source-acceptance/results.json
teaql-runtime/src/data_service/relation.rs	teaql_runtime/include/teaql/runtime/relation.hpp; teaql_runtime/src/data_service/relation.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/relation_hydration.hpp; teaql_runtime/src/data_service/relation_installation.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/relation_enhancement.hpp; teaql_runtime/src/data_service/relation_enhancement.cpp	4 / Accepted module contract (not stage completion)	RelationLoadPlan, behavior-path/explicit-load planning, identity deduplication, ordinary/compact query construction, projection/partition/stable ID order, and decoder eligibility have 112 observations. Equal bucket identities do not impose an unspecified Rust unstable-sort representative order. Top-N strategy/telemetry and callback-composed window/per-parent probes have 432 observations and real SQLite pagination/order/close tests. Recursive embedded/ordinary/compact hydration and four registry installations have 356 original-method observations and native lifetime tests. Relation aggregates/object-group/child-query kernels have 266 comparisons and SQLite/thread tests. Complete fetch orchestration and attach/detach writes remain pending; examples must use the runtime rather than local assembly. The two indexed aggregation-key tests and two indexed relation-plan/telemetry tests have individually reviewed direct ports retaining original typed fixtures, default/explicit-zero behavior and complete safe telemetry. Explicit Global telemetry/key copies survive actual source User deletion. Other API/composition and full-stage gates remain separate. Noncopyable enhanced-query integration repairs thirteen error transfers across ID-page, fetch, relation hydration and enhancement. The registered twelve-scenario native executor fixture validates concrete errors, query short circuit, nested wake/cancel and actual User deletion; ASan/UBSan and MIPS/QEMU eight-check integrations each pass. Final full-native verification and the remaining Context/list/mutation/graph generic completion audit stay open; this is not complete module acceptance. Public RelationLoadPlan declaration/model review reproduces missing full Debug. Separately staged native, ASan/UBSan and MIPS/QEMU each match162/162 live original recursive plan/query/Clone/PartialEq/field-difference diagnostics in nine modes and pass default-PMR-disabled Global recursive query/value retention/stale-reference contracts. This shared model evidence does not accept complete execution-body, hydration, telemetry, query privacy or composition; production/CMake integration remains pending. Returned-work lifetime review reproduces uncancelled foreign Global children in installed base query/mutation adapters. Seven factory-return rejection sites have a separate staged cancellation-before-error repair; controlled native templates pass both cleanup cases. Cursor pointer paths already cancel through exception cleanup, and caller-supplied wrapper inputs remain a distinct contract. Installed native/cross-target/composition acceptance is pending outside active351 inputs. Complete source acceptance on2026-10-09 follows full body/public/default/trait/protocol/ownership or test-body/input/assertion review, current native369/369 with no-work/418 dependencies and both sanitizer/MIPS51/51 selections. Separate production/runtime/graph/privacy and whole-stage responsibilities remain independent; backend-specific test branches follow the explicit SQLite-only scope.	teaql_runtime/include/teaql/runtime/relation.hpp teaql_runtime/src/data_service/relation.cpp teaql_runtime/include/teaql/runtime/data_service.hpp teaql_provider_sqlite/tests/entity_service_tests.cpp tests/parity/entity_service_cases.json tests/parity/entity_service_probe.cpp tests/parity/rust_values/src/bin/entity_service_oracle.rs tests/parity/compare_entity_service.py teaql_runtime/include/teaql/runtime/detail/data_service/relation_execution.hpp teaql_provider_sqlite/tests/relation_execution_tests.cpp tests/parity/relation_execution_probe.cpp tests/parity/relation_execution_cases.json tests/parity/rust_values/src/bin/relation_execution_oracle.rs teaql_runtime/include/teaql/runtime/detail/data_service/relation_installation.hpp teaql_runtime/src/data_service/relation_installation.cpp teaql_runtime/include/teaql/runtime/detail/data_service/relation_hydration.hpp teaql_provider_sqlite/tests/relation_hydration_tests.cpp tests/support/relation_hydration_fixture.hpp tests/parity/relation_hydration_probe.cpp tests/parity/relation_hydration_cases.json tests/parity/rust_values/src/bin/relation_hydration_oracle.rs tests/parity/compare_relation_hydration.py teaql_runtime/include/teaql/runtime/detail/data_service/relation_enhancement.hpp teaql_runtime/src/data_service/relation_enhancement.cpp teaql_provider_sqlite/tests/relation_enhancement_tests.cpp tests/parity/relation_enhancement_probe.cpp tests/parity/relation_enhancement_cases.json tests/parity/rust_values/src/bin/relation_enhancement_oracle.rs tests/parity/compare_relation_enhancement.py tests/parity/teaql_runtime/cache_relation.cpp teaql_runtime/tests/runtime_move_only_tests.cpp tests/support/move_only_error_fixture.hpp docs/runtime_source_test_acceptance.md docs/relation_api_contract.md tests/parity/generate_relation_models.py tests/parity/compare_relation_models.py tests/parity/relation_model_cases.json.gz measurements/parity/2026-10-08-relation-model-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/results.json measurements/parity/2026-10-09-relation-source-acceptance/README.md
teaql-runtime/src/data_service/cache.rs teaql-runtime/src/context/pagination.rs	teaql_runtime/include/teaql/runtime/cache.hpp; teaql_runtime/include/teaql/runtime/pagination.hpp; teaql_runtime/include/teaql/runtime/system_time.hpp; teaql_runtime/src/data_service/query_stores.cpp; teaql_runtime/src/context/pagination.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/id_set_build_lock.hpp; teaql_runtime/src/data_service/id_set_build_lock.cpp	4 / Accepted module contract (not stage completion)	Independent aggregation-cache/cursor/ID-set interfaces, in-memory stores, complete cursor/retained-ID models, and Context registration/observation have 259 source comparisons and native asynchronous/domain tests for age/expiry/capacity/bytes/replacement/invalidation/cancellation. Data explicitly copies into store/result domains; SystemTime retains signed seconds/nanoseconds. Owner-thread rules do not establish Rust Mutex cross-thread/poisoning equivalence; equal-deadline HashMap ties remain unspecified. Explicit Global directories and User leases/guards provide same-key coordination, with 144 original-registry/actual-mutex comparisons for identity/waiting/wake/cancellation transfer/non-FIFO slot reuse; native close joins work before guard release. Pure canonical/pagination keys have separate differential evidence; connect these primitives to miss/recheck/build and complete entity cache/pagination execution. No external cache component is added. Registered cursor/ID-set stores now use checked Context borrows before virtual dispatch, including early destruction checks. The private page preparation kernel has connected miss/lock/recheck/build tests; its enhanced-entity public caller now has separate original public-entry/SQLite evidence. Complete 89/252-line production review reproduces three missing Debug derives. Staged complete model writers preserve cursor/retained IDs, private stored Instant and actual cache rows. Native, ASan/UBSan (leak scanning disabled) and MIPS/QEMU each match all74 live original model observations and pass default-PMR-disabled lifecycle/clock contracts. Actual monotonic put brackets validate populated-cache timestamps without substitution. Complete source/default/trait/protocol/ownership acceptance and production/CMake/native integration remain open; owner-thread cache Mutex diagnostic adaptation and Linux native/OpenWrt Instant protocol remain explicit. Complete cache/pagination source acceptance follows full public/default/trait/protocol/ownership review, native351/351 with no-work and415 valid dependencies, current corrected sanitizer/MIPS42 selections, independent complete store/build-lock8 selections and477 live original observations. Surrounding Context/service/query and complete Stage4 remain independent.	teaql_runtime/include/teaql/runtime/cache.hpp teaql_runtime/include/teaql/runtime/pagination.hpp teaql_runtime/include/teaql/runtime/system_time.hpp teaql_runtime/include/teaql/runtime/detail/context/pagination.hpp teaql_runtime/src/data_service/query_stores.cpp teaql_runtime/src/context/pagination.cpp teaql_runtime/tests/query_store_tests.cpp tests/support/query_store_fixture.hpp tests/parity/query_store_cases.json tests/parity/query_store_probe.cpp tests/parity/rust_values/src/bin/query_store_oracle.rs tests/parity/compare_query_store.py teaql_runtime/include/teaql/runtime/detail/data_service/id_set_build_lock.hpp teaql_runtime/src/data_service/id_set_build_lock.cpp tests/support/id_set_build_fixture.hpp teaql_runtime/tests/id_set_build_tests.cpp tests/parity/id_set_build_probe.cpp tests/parity/id_set_build_cases.json tests/parity/compare_id_set_build.py tests/parity/rust_values/src/bin/id_set_build_oracle.rs docs/query_store_api_contract.md tests/parity/generate_query_store_models.py tests/parity/compare_query_store_models.py tests/parity/query_store_model_cases.json.gz measurements/parity/2026-10-08-query-store-model-review/README.md
teaql-runtime/src/context/locking.rs	teaql_runtime/include/teaql/runtime/locking.hpp; teaql_runtime/src/context/locking.cpp	4 / Accepted module contract (not stage completion)	Local lock ownership, zero-timeout attempts, reentry/lease renewal, wrong-owner release, expiry takeover, and optional RemoteLockProvider delegation are implemented with 222 direct unchanged public Rust scripts. Remote owner tokens retain equality across provider replacement and identifier changes, differ across recreated Users, and pass timeout/expiry unchanged. Provider lookup occurs at first poll; checked resource access, key snapshots, wake forwarding and cancellation keep pending native work within User. Local entries own Global key copies and scalar owners; User teardown does not implicitly release leases or retain User blocks. u64 millisecond deadlines use wide monotonic seconds/nanoseconds and bounded condition-variable waits. C++ explicit Global application ownership replaces Rust process-static table; separate Globals are separate lock namespaces and Context calls remain owner-thread confined. Native tests exercise quota failure, release without allocation, Context reconstruction, expired resources, suspend/cancel/close and cross-thread rejection. No remote/cloud service is implemented. Full cross-application policy and runtime API acceptance remain documented rather than inferred from presence. Complete source-group acceptance is now recorded after full public/default/trait/protocol/ownership review and coherent final native 302/302 integration. Fresh Entity/locking/original-tail selections pass 11/11 under ASan/UBSan with leak scanning disabled and 11/11 on MIPS/QEMU. Explicit C++ ownership adaptations are documented; remaining source groups, runtime/save/privacy and complete stages remain open.	teaql_runtime/include/teaql/runtime/locking.hpp teaql_runtime/include/teaql/runtime/detail/context/locking.hpp teaql_runtime/src/context/locking.cpp tests/support/locking_fixture.hpp teaql_runtime/tests/locking_tests.cpp tests/parity/locking_probe.cpp tests/parity/rust_values/src/bin/locking_oracle.rs tests/parity/locking_cases.json tests/parity/generate_locking.py tests/parity/compare_locking.py docs/context_locking_api_contract.md
teaql-runtime/src/entity_runtime.rs	teaql_runtime/include/teaql/runtime/entity_runtime.hpp; teaql_runtime/include/teaql/runtime/entity_key.hpp	4 / Accepted module contract (not stage completion)	EntityKey cached identities, positive-integer normalization, float bit ordering, and JSON/list/object identity are present. Separate graph builder/frozen graph/reference, loaded relation/handle, change sets/stack, lazy ledger/original versions, runtime state, composition errors, and LedgerEntity defaults have 241 complete-source observations. Preserve original snapshots/versions, stack overlays/deletion, atomic conflict handling, same-domain sharing, weak publication authority, and null/unloaded/type-mismatch relations. Same-domain copies borrow one Context-owned slot; explicit cross-domain copies preserve graph cycles and ledger aliases without reference-counted Context lifetime extension. Tests cover PMR nesting, retained copies, native payload replacement/cleanup, and rejection of move-only cross-domain copies. Four decoder forms have separate registry acceptance. Entity service/ledger save call sites and thread-sharing semantics still need runtime acceptance; this module alone does not prove query/save completion. Thirteen indexed entity-runtime source tests now have individually reviewed direct ports preserving exact numeric key rules, optional public-ledger composition, complete version conflicts, all 512x32 randomized trials, lazy ledger allocation, typed graph adoption and every relation-handle state. The final two graph-reference source tests have explicit Context-lifetime adaptation acceptance: weak child publication rejects intact builders, actual child clone promotes publication authority on an unfrozen shared anchor, detached frozen clone preserves relation identity after root-view release, and explicit Global deep copying retains cyclic adjacency after source User deletion. Context teardown, rather than last-Arc-drop, is the authorized reclamation boundary; all graph/detached payloads are destroyed exactly once and User blocks/bytes disappear. This does not claim identical Rust reference-count destruction timing or complete generic API/default/composition acceptance. Complete production review through line 1035 records the graph/key/relation/change-stack/lazy-ledger/composition/snapshot/trait responsibilities in docs/entity_runtime_api_contract.md. Direct umbrella and relation-handle compiles reproduce missing derived/custom model Debug; compact EntityKey.debug is insufficient for inherited options. The empty LedgerCompositionError cause needs an explicit C++ naming adaptation because its conflict payload already uses source. A new actual original oracle records 252 twice-agreeing nine-mode model/state observations; the native counterpart and diagnostic repairs remain required, so this is not passing parity. No compiled input is changed during the current stable native pass. The isolated complete staged formatter matches all 252 original observations in nine modes and passes native/ASan-UBSan lifetime contracts with default PMR disabled. After terminal 322-check full integration, the repair is installed: read-only structural writers preserve private cached key identity, graph counts, stacks/deferred ledger/version/snapshot/trace fields and weak roles. Legacy key.debug delegates; error_source() preserves the public source version payload and empty Error cause. Current complete consumer and selected sanitizer/MIPS builds for the registered model checks are active; full324 regression and source acceptance remain pending. Fresh installed six-target selections pass sanitizer6/6 with leak scanning disabled and MIPS6/6, including original incremental-ledger/graph-reference tests. All252 live MIPS model outputs match original Rust after the fixture supplies identical NaN bits before both real constructors; no production identity or output is normalized. Complete native608 work and final corrected probe refresh/full324 regression remain pending. Complete source acceptance after final native324/324 in151.69s, corrected probe refresh and post-test no-work, all392 compiled dependency records valid/nonempty, current6/6 sanitizer/MIPS and live252/252 native/MIPS original model observations. Complete public/default/trait/protocol/ownership review accepts explicit Context deep-retention, owner-thread Mutex/OnceLock adaptation, weak/strong graph roles and error_source cause naming. Wider Context/services/graph save/governance/privacy and stages4–6 remain open.	teaql_runtime/include/teaql/runtime/entity_key.hpp teaql_runtime/src/entity_key.cpp teaql_runtime/tests/audit_event_tests.cpp tests/parity/audit_event_cases.json tests/parity/compare_audit_event.py tests/parity/rust_values/src/bin/audit_event_oracle.rs teaql_runtime/include/teaql/runtime/entity_runtime.hpp teaql_runtime/src/entity_runtime.cpp teaql_runtime/include/teaql/runtime/resources.hpp teaql_runtime/tests/entity_runtime_tests.cpp tests/parity/entity_runtime_probe.cpp tests/parity/entity_runtime_cases.json tests/parity/compare_entity_runtime.py tests/parity/observe_entity_runtime.py tests/parity/rust_values/src/bin/entity_runtime_oracle.rs tests/parity/teaql_runtime/entity_runtime_contracts.hpp tests/parity/teaql_runtime/graph_reference_lifetime.cpp docs/context_lifetime.md docs/runtime_source_test_acceptance.md docs/entity_runtime_api_contract.md tests/parity/rust_values/src/bin/entity_runtime_model_oracle.rs tests/parity/generate_entity_runtime_models.py tests/parity/entity_runtime_model_cases.json.gz measurements/parity/2026-10-08-entity-runtime-model-review/results.json teaql_runtime/include/teaql/runtime/entity_runtime_debug.hpp teaql_runtime/tests/entity_runtime_model_tests.cpp tests/parity/entity_runtime_model_probe.cpp tests/parity/compare_entity_runtime_models.py measurements/parity/2026-10-08-entity-runtime-model-review/README.md
teaql-runtime/src/entity_status.rs	teaql_runtime/include/teaql/runtime/entity_status.hpp	2 / Accepted module contract (not stage completion)	Complete production contract reviewed: seven statuses/four actions, eleven valid/seventeen invalid transitions with exact reasons, all five predicates, default New, native Copy/Clone/Eq/Hash, Display and four derived Debug modes. All 28 state/action pairs match actual Rust calls; sixteen source tests and native hash containers pass. No source serde protocol is invented. C++ std::invalid_argument adapts the String Result error; no identical cross-language hash bytes are promised. Runtime/save composition and complete stages remain separate.	teaql_runtime/include/teaql/runtime/entity_status.hpp teaql_core/tests/core_model_tests.cpp tests/parity/teaql_runtime/entity_status.cpp teaql_runtime/include/teaql/runtime/entity_status_debug.hpp tests/parity/runtime_error_debug_cases.json.gz tests/parity/runtime_check_probe.cpp tests/parity/rust_values/src/bin/runtime_check_oracle.rs docs/runtime_source_test_acceptance.md
teaql-runtime/src/error.rs	teaql_runtime/include/teaql/runtime/context_error.hpp; teaql_runtime/include/teaql/runtime/error.hpp	4 / Accepted module contract (not stage completion)	Complete pinned production surface reviewed: fourteen RuntimeError variants and concrete payloads, three ContextError variants, Runtime/Entity/Executor DataServiceError classification, every Display/derived Debug branch, owned SqlCompileError conversion and default empty Error source chains. No source Clone/Eq/Default/serde protocol is invented. Scoped conditional copies do not impose Clone on executor payloads. Native and MIPS match all 1174 live-original diagnostic inputs; explicit nested Global retention, noncopyable envelope/nesting/foreign-rejection tests, real SQL propagation, twelve enhanced-query scenarios and 78 whole-result runtime completion scenarios complement String observations. Complete native integration passes 281/281 in 67.65 seconds; eleven selected sanitizer/MIPS checks each pass. This accepts the source error module, not surrounding runtime/default/privacy/policy composition, arbitrary user formatters, external standard-library error ABI or complete stages.	teaql_runtime/include/teaql/runtime/context_error.hpp teaql_runtime/tests/runtime_context_tests.cpp tests/parity/runtime_context_cases.json teaql_runtime/include/teaql/runtime/check_result.hpp teaql_runtime/src/check_result.cpp teaql_runtime/include/teaql/runtime/error.hpp teaql_runtime/src/error.cpp teaql_runtime/tests/runtime_check_tests.cpp tests/parity/runtime_check_cases.json tests/parity/runtime_check_probe.cpp tests/parity/rust_values/src/bin/runtime_check_oracle.rs teaql_runtime/include/teaql/runtime/error_debug.hpp teaql_runtime/include/teaql/runtime/check_result_debug.hpp teaql_sql/include/teaql/sql/error_debug.hpp tests/parity/runtime_error_debug_cases.json.gz tests/parity/compare_runtime_error_debug.py docs/runtime_source_test_acceptance.md teaql_runtime/tests/error_generic_tests.cpp teaql_sql/include/teaql/sql/error.hpp tests/support/move_only_error_fixture.hpp teaql_runtime/tests/runtime_completion_tests.cpp tests/support/runtime_completion_fixture.hpp teaql_runtime/tests/sql_move_only_tests.cpp teaql_runtime/tests/runtime_move_only_tests.cpp
teaql-runtime/src/inmemory_engine.rs	teaql_runtime/include/teaql/runtime/inmemory_engine.hpp	4 / Accepted module contract (not stage completion)	The public InMemoryQueryEngine and ExprEvaluator preserve filter/aggregate/sort/paginate/project ordering, raw Value grouping, strict Null checks, Unicode LIKE and source metadata defaults. Aggregation short-circuits all later stages; function/subquery evaluation and unsupported aggregates retain their original false/Null behavior. 6,532 direct unchanged public-call observations and the original 19 source tests pass. PMR buffers and explicit destination copies preserve Context ownership. Pagination preserves executing-target usize casts; larger sorting comparisons require the source total-order contract. Complete runtime reexports and overall stage acceptance remain separate gates. All nineteen source tests now have individually reviewed direct ports with exact original row values, typed aggregate outputs, full sort vectors and unchanged expression inputs. Private LIKE tests enter the same production matcher through the public evaluator. Default PMR is disabled; actual User destruction returns all engine allocations. This remains source-contract acceptance rather than complete-stage acceptance. Complete production-body review through line 511 now maps both public abstractions, all expression/operator paths, metadata defaults, aggregation/group aliases and the architecture/sort preconditions in docs/inmemory_engine_contract.md. Final current native and refreshed cross-profile selections remain required; group stays partial. Complete source-group acceptance follows the full production/API/default/trait/protocol/ownership review, final native 318/318 after a no-work build, fresh 3/3 sanitizer and 3/3 MIPS selections, and live original comparisons. Later runtime/privacy/final stage gates stay open.	teaql_runtime/include/teaql/runtime/inmemory_engine.hpp teaql_runtime/src/inmemory_engine.cpp teaql_runtime/tests/inmemory_tests.cpp tests/parity/inmemory_probe.cpp tests/parity/inmemory_cases.json tests/parity/generate_inmemory.py tests/parity/compare_inmemory.py tests/parity/rust_values/src/bin/inmemory_oracle.rs tests/parity/teaql_runtime/inmemory_engine.cpp docs/inmemory_engine_contract.md measurements/parity/2026-10-08-stage4-runtime-review/results.json
teaql-runtime/src/generated_support.rs	teaql_runtime/include/teaql/runtime/purposed_query.hpp; teaql_runtime/include/teaql/runtime/generated_support.hpp	4 / Accepted module contract (not stage completion)	Handwritten models still use entity/query services and PurposedQuery/PurposedSelectQuery/AuditedSave. Preserve runtime support without developing the generator. PurposedQuery preserves arbitrary purpose text, including empty/whitespace text; PurposedSelectQuery validates nonempty Unicode-trimmed purpose and preserves its untrimmed provenance. Both use explicit allocator propagation and input snapshots. Public-query comparisons include invalid purposes. TeaqlQueryDataService, TeaqlEntityDataService, TeaqlDataServiceError, TeaqlRuntime and the distinct hidden AuditedSave concept are present. execute_facets and restrict_facet_to_outer_query now have native ordering, missing-entity/relation, last-wins, provenance, suspension, cancellation and early-runtime-expiry contracts. Facet inputs remain in operation state across suspension, including the entity name. Query-service concept acceptance preserves the streaming requirement. There are now 370 unchanged original public-call scripts, including 24 actual SQLite executions through EntityDataService, the SQL executor and provider. Complete query Debug, aggregate conversion, selective restriction clearing, separate traces/purpose, optional metadata, early errors, duplicate names, suspension/resumption and original future-drop cancellation match. Generic PurposedQuery supports move-only inputs without requiring Clone, and both purpose wrappers have allocator-aware moves. Native contracts additionally instantiate both service concepts for a handwritten model, retain complete nested facet results through actual User destruction, and reject foreign futures without cancelling peer-owned work. Full surrounding runtime/source-test/privacy acceptance remains open; the generator is unchanged. A public umbrella compile reproduces missing derived Debug on the private PurposedSelectQuery wrapper. The new structural writer delegates the complete nested SelectQuery and preserves inherited formatting. Forty-six optional-protocol scripts agree across two original executions, covering nine Debug modes, source Clone/as_query/into_query and validation edges. Native retention now tests complete private-query Global copying and extraction after actual source User deletion; fresh consumer verification remains pending. Complete source-group acceptance follows the full production/API/default/trait/protocol/ownership review, final native 318/318 after a no-work build, fresh 3/3 sanitizer and 3/3 MIPS selections, and live original comparisons. Later runtime/privacy/final stage gates stay open.	teaql_runtime/include/teaql/runtime/purposed_query.hpp teaql_provider_sqlite/tests/entity_service_tests.cpp tests/parity/entity_query_cases.json teaql_runtime/include/teaql/runtime/generated_support.hpp teaql_runtime/src/generated_support.cpp teaql_runtime/tests/generated_support_tests.cpp docs/generated_runtime_support.md tests/parity/generated_support_fixture.hpp tests/parity/generated_support_sqlite_fixture.hpp tests/parity/generated_support_probe.cpp tests/parity/generated_support_cases.json tests/parity/generate_generated_support.py tests/parity/compare_generated_support.py tests/parity/rust_values/src/bin/generated_support_oracle.rs teaql_runtime/include/teaql/runtime/purposed_query_debug.hpp tests/parity/purposed_query_debug_cases.json.gz tests/parity/compare_purposed_query_debug.py tests/parity/generate_purposed_query_debug.py measurements/parity/2026-10-08-stage4-runtime-review/results.json
teaql-runtime/src/business_id.rs teaql-runtime/src/id.rs	teaql_runtime/include/teaql/runtime/business_id.hpp; teaql_runtime/include/teaql/runtime/business_clock.hpp; teaql_runtime/include/teaql/runtime/id.hpp; teaql_runtime/include/teaql/runtime/id_space.hpp	4 / Accepted module contract (not stage completion)	Preserve time/scope/sequence/encoding/schema contribution/allocation; clocks are injectable and no hidden C++ global owns data. Canonical ID-space naming has SQLite observations. Legacy/V1 strategies, versioned 32-byte keys, key-provider/static implementation, and V1 HMAC-SHA256/eight-round permutation have 2,150 comparisons and close/copy tests. BusinessIdSchemaContributor and SQLite implementation exist. BusinessClock/nanosecond UTC/BusinessDate/in-memory allocation/service/passive Context installation have 859 time/allocation/order observations and explicit-borrow/retention/poisoning/SQLite tests. The in-memory allocator is owner-thread-bound, not proven cross-thread-equivalent. InternalIdGenerator/AtomicCounter/Snowflake/Context registration/generate_id/next_id/bootstrap have 171 observations; the Global fallback is shared by its Users. Tests cover pure-counter thread safety, clock rollback/sequence exhaustion, and SQLite error adaptation. Schema contribution has 384 order/mode comparisons; physical SQLite schema and transactional audit have 735. Business save/audit call sites remain pending. Context generator registrations are checked borrows; User-only Ref registration supports delegated Global generators. Early destruction rejects generation before virtual dispatch; synchronous generation and floor callbacks reject reentrant close. Complete production review in docs/runtime_id_api_contract.md maps clock/date/schema/strategy/key/provider/permutation/allocator/service and all internal generator/default/state/Context responsibilities. A public umbrella compile reproduces seven missing source Debug derives; secret encoding keys/provider/service do not derive Debug and are not given invented formatters. Eighty-two actual original model/transition inputs agree twice in nine modes. Native diagnostic implementation/counterpart and complete current integration remain required; this is not passing parity. No running build input is changed. Complete source review reproduces seven missing Debug derives. A separate staged native repair matches 82/82 live original Debug cases and passes lifetime contracts; standalone sanitizer and MIPS checks also match all 82 for their original build profiles. Actual original Debug/Release executions are recorded independently twice; nine counter-overflow cases differ by profile. The reviewable staged patch includes umbrella and CMake registrations, without changing production inputs during entity-runtime integration. Full production/CMake/native regression and source acceptance remain open. Subsequent lifetime review reproduces a managed clock destroyed after registration: installed raw pointer dispatch terminates instead of checked Dead rejection. The cumulative checked clock/registry/schema borrow repair and six future contracts are staged separately outside active343 inputs; installed full consumer rebuild and native/sanitizer/MIPS validation remain required before acceptance. Complete runtime ID source acceptance follows review of all business_id.rs1–563/id.rs1–187 production methods/defaults/traits/protocol/ownership, checked clock/provider dispatch and synchronous service callback repair. Final native361/361 with no-work/417 dependencies and both sanitizer/MIPS40/40 selections validate the installed snapshot; live original82 Debug/Release models,859 service and171 internal-ID observations match. Source Clock/Schema/Allocator/Key/Profile/Service/InternalIdGenerator responsibilities remain separate; Context metadata/telemetry, relation, graph/governance/privacy and complete Stage4 remain independent.	teaql_runtime/include/teaql/runtime/id_space.hpp teaql_provider_sqlite/tests/provider_sqlite_id_tests.cpp tests/parity/sqlite_id_cases.json teaql_runtime/include/teaql/runtime/business_id.hpp teaql_runtime/src/business_id.cpp teaql_runtime/tests/runtime_business_id_tests.cpp tests/parity/runtime_business_id_cases.json tests/parity/runtime_business_id_probe.cpp tests/parity/rust_values/src/bin/runtime_business_id_oracle.rs teaql_runtime/include/teaql/runtime/business_clock.hpp teaql_runtime/src/business_clock.cpp teaql_runtime/src/business_service.cpp teaql_provider_sqlite/tests/business_service_tests.cpp tests/parity/business_service_cases.json tests/parity/business_service_probe.cpp tests/parity/rust_values/src/bin/business_service_oracle.rs teaql_runtime/include/teaql/runtime/id.hpp teaql_runtime/src/id.cpp teaql_provider_sqlite/tests/internal_id_tests.cpp tests/support/internal_id_fixture.hpp tests/parity/internal_id_cases.json tests/parity/internal_id_probe.cpp tests/parity/compare_internal_id.py tests/parity/rust_values/src/bin/internal_id_oracle.rs teaql_runtime/src/schema.cpp tests/parity/schema_runtime_cases.json docs/runtime_id_api_contract.md tests/parity/rust_values/src/bin/runtime_id_model_oracle.rs tests/parity/runtime_id_model_cases.json.gz tests/parity/generate_runtime_id_models.py measurements/parity/2026-10-08-runtime-id-model-review/results.json tests/parity/compare_runtime_id_models.py measurements/parity/2026-10-08-runtime-id-model-review/README.md measurements/parity/2026-10-08-business-clock-borrow-review/README.md measurements/parity/2026-10-08-business-clock-borrow-review/results.json measurements/parity/2026-10-09-runtime-callback-scope-review/README.md
teaql-runtime/src/entity_reference.rs teaql-runtime/src/round_trip_reference.rs	teaql_runtime/include/teaql/runtime/entity_reference.hpp; teaql_runtime/include/teaql/runtime/round_trip_reference.hpp	4 / Accepted module contract (not stage completion)	Keep portable tokens distinct from Context memory IDs. EntityReference claims/errors/codec and UserContext delegation have 548 unchanged public observations and 750 NIST AES/GCM vectors. ContextBoundReferenceRuntime now preserves every model, key-provider/authorization SPI, static provider, Fn policy adapter, governed/raw wire and deployment/profile/startup boundary, HKDF/HMAC/AES framing, issue/consume ordering and all UserContext entries. 933 unchanged public-call observations record exact tokens, complete authorization arguments, key/clock/nonce ordering, rotation, malformed authenticated payloads, UTC option behavior and return authorization; all 17 original module tests pass in an isolated target. Context-scoped providers/callbacks and deep Global copies preserve ownership, with shorter-provider rejection and reentrant guards. No production dependency is added. Complete runtime reexports and stage-wide API/privacy/source-test acceptance remain separate gates; vectors do not establish certification. Both portable-codec source tests now have individually reviewed direct evidence: exact golden inputs/output, opacity, complete claims tuple, type/purpose rejection, exact final-character tampering and Context missing/installed codec behavior. Direct checks pass native, ASan/UBSan and MIPS/QEMU. All 17 round-trip roots now have reviewed direct evidence retaining the complete golden token/binding/key rotation, nonce/expiry and default-clock cases, Context boundary/error precedence, all nine raw-mode/startup contracts, current authorization and exact invalid wire/lifetime/token bounds. Original Rust passes 17/17; full native regression passes 265/265 and source/ownership selections pass 2/2 under ASan/UBSan and MIPS/QEMU. The actual Fn authorization adapter and production codec execute; no local protocol implementation or dependency change is introduced. Full API/default/privacy/lifecycle/composition/target acceptance remains open. Complete production review now maps both source modules through their pre-test bodies in docs/reference_api_contract.md. A public umbrella compile reproduces missing model Debug and both empty Error causes. Structural writers restore all model fields/variants, redacted key diagnostics and stateless wire Debug; 229 twice-agreeing original inputs cover nine formats, full-width IDs, raw public field mutation, optional UTC/leap/extended-year values and all error variants. Native Global retention checks actual User deletion, stale access and nested destination allocators. Whole-native and selected cross consumer verification remain pending; group remains partial. Fresh reference targets finish before 12/12 ASan/UBSan-with-leak-scanning-disabled and 12/12 MIPS selections. All 229 new model plus 548/933 unchanged original semantic observations match live MIPS Rust comparisons. Native ownership passes 1/1. The 599-task native build remains active and must be followed by the corrected probe refresh and 320-check full regression; group remains partial. Complete source acceptance follows both full production/default/trait/protocol/ownership reviews and native 322/322 after a stable no-work build, current Context-layout 21/21 sanitizer/MIPS selections, live 229/548/933 source observations and original source tests. Complete Context/privacy/stage/physical-router gates remain independent.	teaql_runtime/include/teaql/runtime/entity_reference.hpp teaql_runtime/src/entity_reference.cpp teaql_runtime/src/context/entity_reference.cpp teaql_runtime/include/teaql/runtime/detail/reference_crypto.hpp teaql_runtime/src/reference_crypto.cpp teaql_core/include/teaql/core/detail/aes_gcm.hpp teaql_core/src/aes_gcm.cpp teaql_runtime/tests/entity_reference_tests.cpp teaql_runtime/tests/reference_crypto_tests.cpp tests/parity/entity_reference_cases.json tests/parity/nist_gcm_cases.json tests/parity/entity_reference_probe.cpp tests/parity/generate_entity_reference.py tests/parity/compare_entity_reference.py tests/parity/extract_nist_gcm.py tests/parity/rust_values/src/bin/entity_reference_oracle.rs docs/entity_reference.md teaql_runtime/include/teaql/runtime/round_trip_reference_types.hpp teaql_runtime/include/teaql/runtime/round_trip_reference.hpp teaql_runtime/src/round_trip_reference_types.cpp teaql_runtime/src/round_trip_reference.cpp teaql_runtime/src/context/round_trip_reference.cpp teaql_core/include/teaql/core/detail/hmac_sha256.hpp teaql_runtime/tests/round_trip_reference_tests.cpp tests/parity/round_trip_reference_probe.cpp tests/parity/round_trip_reference_cases.json tests/parity/generate_round_trip_reference.py tests/parity/compare_round_trip_reference.py tests/parity/rust_values/src/bin/round_trip_reference_oracle.rs docs/round_trip_reference.md tests/parity/teaql_runtime/round_trip_reference.cpp tests/support/round_trip_reference_fixture.hpp docs/reference_api_contract.md teaql_runtime/include/teaql/runtime/reference_model_debug.hpp teaql_runtime/tests/reference_model_tests.cpp tests/parity/reference_model_probe.cpp tests/parity/reference_model_cases.json.gz tests/parity/compare_reference_models.py tests/parity/generate_reference_models.py tests/parity/rust_values/src/bin/reference_model_oracle.rs measurements/parity/2026-10-08-reference-api-review/results.json
teaql-runtime/src/i18n.rs teaql-runtime/src/language.rs	teaql_runtime/include/teaql/runtime/i18n.hpp; teaql_runtime/include/teaql/runtime/language.hpp	4 / Accepted module contract (not stage completion)	All 15 Language/Locale variants, aliases/canonical codes, Unicode location titles, MessageTranslator/BuiltinTranslator, immutable catalogs, strict schema/template validation, exact locale/default/builtin/key fallback ordering, and all CheckRule/Value translation arguments have 4,575 original public-method comparisons. UserContext language/code/catalog setters and missing-message-only translation plus RuntimeModule language installation are connected. Catalogs and returned strings propagate explicit destination allocators; checked borrows reject early destruction and cross-domain retention. Native tests cover null default PMR, complete User destruction, Global catalog/message/error copies, thread/close rejection, and module copy/creation. Immutable builtin facts replace process-static Arc ownership. Public Context checker/fix translation is connected. Graph-save call-site integration and complete runtime acceptance remain pending. Indexed checker/language/catalog source tests now have individually reviewed direct ports preserving exact paths, wire aliases/JSON, marker inference, every canonical/alias/unsupported locale fixture and full-catalog template rejection/fallback. Source JSON fixtures are byte-identical. Explicit Global wire/catalog copies survive actual source User deletion; complete API/composition and stage acceptance remain separate. Complete 215-line language and 342-line catalog source bodies are reviewed for every public/private parse/lookup/render/title/default/derive role. Public compile omission reproduces missing Language/BuiltinTranslator/I18nCatalog Debug; source-shaped writers restore full locale/private fallback diagnostics with explicit output allocator grouping over unchanged immutable facts. All sixty original Default/Clone/Debug inputs in nine modes match live Rust on native without normalization. The existing default-PMR-disabled ownership contract passes new diagnostics after actual User deletion and Global retention. Fresh named sanitizer/MIPS builds and isolated whole-native consumer refresh remain pending; graph-save/custom-translator/runtime composition and stage acceptance remain open. Fresh MIPS ownership/4575-translation/60-diagnostic selection passes3/3 in21.47s after40tasks and a final no-work refresh; all309 compiled dependency records are nonempty. Sanitizer and isolated full native refresh/regression remain pending. Fresh sanitizer40tasks/no-work refresh completes; all100 compiled dependency records nonempty and ownership/4575-translation/60-diagnostic selection passes3/3 in37.31s with leak scanning disabled. Both selected platforms now pass the repair; current isolated full native latest-source/header refresh and regression remain required before source-group/stage acceptance. Current Context-layout source review confirms the full language/catalog bodies and fresh four-target sanitizer/MIPS builds finish before 4/4 selections. All 4,575 translations and sixty diagnostics match live MIPS original Rust. Complete stable whole-native 322-check integration remains pending; the group stays partial. Complete source acceptance follows the full production/API/default/trait/protocol/ownership review, final native 322/322 stable integration, current 4/4 sanitizer/MIPS selections and live 4,575 translations plus sixty complete diagnostic observations. Later complete Context/graph-save/privacy/stage gates remain independent.	teaql_runtime/include/teaql/runtime/language.hpp teaql_runtime/include/teaql/runtime/i18n.hpp teaql_runtime/src/language.cpp teaql_runtime/src/i18n.cpp teaql_runtime/src/context/language.cpp teaql_runtime/include/teaql/runtime/context.hpp teaql_runtime/include/teaql/runtime/module.hpp scripts/extract_i18n_facts.py teaql_runtime/tests/i18n_tests.cpp tests/parity/i18n_cases.json tests/parity/i18n_probe.cpp tests/parity/rust_values/src/bin/i18n_oracle.rs tests/parity/teaql_runtime/checker_locale.cpp tests/parity/teaql_runtime/locale_cases_v1.json tests/parity/teaql_runtime/builtin_i18n_v1.json docs/i18n_api_contract.md teaql_runtime/include/teaql/runtime/i18n_debug.hpp teaql_runtime/src/i18n_debug.cpp tests/parity/i18n_debug_scope_probe.cpp tests/parity/i18n_debug_scope_cases.json.gz tests/parity/rust_values/src/bin/i18n_debug_scope_oracle.rs measurements/parity/2026-10-08-i18n-current-review/results.json
teaql-runtime/src/telemetry.rs	teaql_runtime/include/teaql/runtime/telemetry.hpp	4 / Accepted module contract (not stage completion)	RuntimeAttributeValue/Operation, exact attribute filtering/error classification, telemetry/scope/propagation/Noop/FailOpen exist. Context services borrow explicit domains; default Noop belongs to User. 1,032 actual API observations cover failures/callback timing/poisoned scopes/propagation/destruction order. Native tests cover Global copies, one destruction, domain rejection, thread wake/stop/reclamation. ContextBox payloads can be destroyed early while arena blocks remain until close. No exporter or hidden shared owner is introduced. Event delivery and Context query observation are connected; complete entity/save business call sites remain pending. Indexed formatter/telemetry source tests have individually reviewed direct ports retaining UTF-8 truncation/non-executable annotation, ordinary versus explicit sensitive audit formatting, exact level gates, error-type categories, forbidden ID filtering and failure-isolated start/context activation. The actual AsyncOperation result and poll count survive the throwing adapter; explicit Global safe output survives actual User deletion. Complete API/default/composition and stage acceptance remain separate. Public model Debug is reproduced missing and restored for RuntimeAttributeValue/RuntimeOperation. Actual MIPS std::size_t conversion is reproduced ambiguous, then repaired with a constrained native-width constructor that avoids uint64 alias duplication. All110 original conversion/Clone/PartialEq/Debug inputs in9modes match live native Rust/C++, including NaNs, infinities, signed zero, filtering and seeded-key overrides. Default-PMR-disabled native retained-operation diagnostics survive actual source User deletion. Selected sanitizer/MIPS builds and latest isolated full native refresh/regression remain pending; complete runtime/save composition and stages remain open. Selected fresh ownership/1032-activation/110-model consumers pass MIPS3/3 in2.53s and ASan/UBSan3/3 in3.57s with leak scanning disabled. Both12task builds complete and final refreshes report no work; all311 MIPS and103 sanitizer compiled dependency records are nonempty. Latest isolated full native refresh/regression and complete runtime/save call sites remain required; group/stages remain open. Complete production-body review reproduces discarded fresh foreign-box payloads and an extra completion Clone requirement. Available foreign factory boxes now release their payload before User input reclamation while claimed boxes retain their owner. TelemetryRun now copies or explicitly takes completed ownership, supporting noncopyable outputs without invalidating copyable result borrows. Eight actual original scope/propagation calls compile and return non-Clone outputs; native compile failure is reproduced before repair. Scope/propagation cleanup/noncopy tests accompany current cross-platform and full consumer builds; complete source/Stage 4 acceptance remains open. The final three-check selections pass ASan/UBSan with leak scanning disabled 3/3 in 3.77 seconds and MIPS/QEMU 3/3 in 2.88 seconds, including fresh/claimed foreign-box and move-only ownership assertions. All 1,032 activation and 110 model observations additionally match live original Rust on MIPS. The initial 552-task native pass is terminal-successful; a 294-task final schema/telemetry/template refresh is now active before whole-project 317-check regression and source acceptance. Complete production/API/default/trait/protocol/ownership review accepts this source group after final native 318/318, fresh six-check sanitizer/MIPS activation/source-test/query composition and the reviewed 1,032 activation plus 110 model comparisons. Complete Context/save/privacy and Stage 4 acceptance remain independent.	teaql_runtime/include/teaql/runtime/telemetry.hpp teaql_runtime/src/telemetry.cpp teaql_memory/include/teaql/memory/context_box.hpp teaql_runtime/tests/telemetry_tests.cpp tests/parity/telemetry_probe.cpp tests/parity/telemetry_cases.json tests/parity/compare_telemetry.py tests/parity/rust_values/src/bin/telemetry_oracle.rs teaql_runtime/include/teaql/runtime/detail/data_service/context_query.hpp teaql_runtime/tests/context_query_tests.cpp tests/parity/teaql_runtime/log_telemetry.cpp docs/telemetry_api_contract.md teaql_runtime/include/teaql/runtime/telemetry_debug.hpp tests/parity/telemetry_model_scope_probe.cpp tests/parity/telemetry_model_scope_cases.json.gz tests/parity/rust_values/src/bin/telemetry_model_scope_oracle.rs tests/support/move_only_error_fixture.hpp tests/parity/rust_values/src/bin/telemetry_owned_output_oracle.rs measurements/parity/2026-10-08-stage4-runtime-review/results.json
teaql-runtime/src/graph.rs teaql-runtime/src/data_service/graph.rs teaql-runtime/src/data_service/executor.rs teaql-runtime/src/entity_save.rs	teaql_runtime/include/teaql/runtime/graph.hpp; teaql_runtime/include/teaql/runtime/entity_save.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_graph_plan.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_graph_execution.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/ledger_plan.hpp; teaql_runtime/src/data_service/ledger_plan.cpp; teaql_runtime/include/teaql/runtime/detail/data_service/ledger_execution.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/graph_saver.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/audited_save.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/audited_auto_save.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/entity_save_adapters.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/graph_node_commands.hpp; teaql_runtime/include/teaql/runtime/detail/data_service/recursive_graph_write.hpp	5 / Accepted module contract (not stage completion)	Complete four-file graph/save production responsibility is accepted after full model/public/private/default/trait/protocol/ownership and composition review. EntityValues, snapshots/generated/mutation types, all graph operations/plans/batches/trace scopes remain distinct. Raw ten-model Debug, repository extraction, six retained save adapters, reference/remove/checker-update/scoped-delete and both recursive routes are restored; actual-source matrices128/141/541/1620/792 preserve complete outputs/order/failures. Existing plan/ledger/governance/saver/audited/fix/privacy source observations remain covered. Transaction-owned authoritative rereads precede commit, caller-owned scopes never implicitly commit/clear, events remain at source call sites and quiescence precedes reclamation. Real SQLite foreign-key/trigger/rollback and actual User/Global lifetimes are asserted. Final native387/387 at79.85s follows344 consumer tasks plus2 ownership-fixture refresh tasks, with426 nonempty dependency records and no-work pre/post. ASan/UBSan-no-leakscan and MIPS/QEMU each pass44/44 after61 selected build tasks plus2 fixture tasks, with post-test no-work. No graph serde/Hash/delete-missing behavior is invented; ordinary CRUD is not substituted for graph save. This accepts the complete source group and Stage5; runtime-root and final Stage6 requirements remain independent, and physical hardware is deferred.	teaql_runtime/include/teaql/runtime/graph.hpp teaql_runtime/src/graph.cpp teaql_runtime/src/context/graph.cpp teaql_runtime/tests/runtime_graph_tests.cpp tests/parity/runtime_graph_probe.cpp tests/parity/runtime_graph_cases.json tests/parity/compare_runtime_graph.py tests/parity/rust_values/src/bin/runtime_graph_oracle.rs teaql_runtime/include/teaql/runtime/fix_evidence.hpp teaql_runtime/include/teaql/runtime/detail/graph_fix_scope.hpp teaql_runtime/src/fix_evidence.cpp teaql_runtime/src/context/fix.cpp teaql_runtime/tests/graph_fix_tests.cpp tests/parity/graph_fix_cases.json tests/parity/graph_fix_probe.cpp tests/parity/graph_fix_oracle.rs tests/parity/build_graph_fix_oracle.py teaql_runtime/include/teaql/runtime/entity_save.hpp teaql_runtime/src/entity_save_preparation.cpp tests/support/save_preparation_fixture.hpp teaql_runtime/tests/save_preparation_tests.cpp tests/parity/save_preparation_cases.json tests/parity/save_preparation_probe.cpp tests/parity/save_preparation_oracle.rs tests/parity/build_save_preparation_oracle.py teaql_runtime/include/teaql/runtime/detail/data_service/entity_graph_plan.hpp tests/support/entity_graph_plan_fixture.hpp teaql_provider_sqlite/tests/entity_graph_plan_tests.cpp tests/parity/entity_graph_plan_probe.cpp tests/parity/entity_graph_plan_cases.json tests/parity/compare_entity_graph_plan.py tests/parity/generate_entity_graph_plan.py tests/parity/rust_values/src/bin/entity_graph_plan_oracle.rs teaql_runtime/include/teaql/runtime/detail/data_service/entity_graph_execution.hpp teaql_provider_sqlite/tests/entity_graph_execution_tests.cpp tests/parity/graph_execution_probe.cpp tests/parity/graph_execution_oracle.rs tests/parity/build_graph_execution_oracle.py tests/parity/graph_execution_cases.json tests/parity/compare_graph_execution.py tests/parity/generate_graph_execution.py teaql_runtime/include/teaql/runtime/detail/data_service/ledger_plan.hpp teaql_runtime/src/data_service/ledger_plan.cpp teaql_runtime/tests/ledger_plan_tests.cpp tests/parity/ledger_plan_probe.cpp tests/parity/ledger_plan_oracle.rs tests/parity/build_ledger_plan_oracle.py tests/parity/ledger_plan_cases.json tests/parity/generate_ledger_plan.py tests/parity/compare_ledger_plan.py teaql_runtime/include/teaql/runtime/detail/data_service/ledger_execution.hpp teaql_provider_sqlite/tests/ledger_execution_tests.cpp tests/parity/ledger_execution_probe.cpp tests/parity/ledger_execution_oracle.rs tests/parity/build_ledger_execution_oracle.py tests/parity/ledger_execution_cases.json tests/parity/generate_ledger_execution.py tests/parity/compare_ledger_execution.py teaql_runtime/include/teaql/runtime/detail/data_service/graph_saver.hpp tests/support/graph_saver_fixture.hpp teaql_provider_sqlite/tests/graph_saver_tests.cpp tests/parity/graph_saver_probe.cpp tests/parity/graph_saver_oracle.rs tests/parity/build_graph_saver_oracle.py tests/parity/generate_graph_saver.py tests/parity/graph_saver_cases.json tests/parity/compare_graph_saver.py teaql_runtime/include/teaql/runtime/detail/data_service/audited_save.hpp tests/support/audited_save_fixture.hpp teaql_provider_sqlite/tests/audited_save_tests.cpp tests/parity/audited_save_probe.cpp tests/parity/rust_values/src/bin/audited_save_oracle.rs tests/parity/audited_save_cases.json tests/parity/generate_audited_save.py tests/parity/compare_audited_save.py teaql_runtime/include/teaql/runtime/detail/data_service/audited_auto_save.hpp teaql_provider_sqlite/tests/audited_auto_save_tests.cpp tests/parity/audited_auto_save_probe.cpp tests/parity/rust_values/src/bin/audited_auto_save_oracle.rs tests/parity/audited_auto_save_cases.json tests/parity/generate_audited_auto_save.py tests/parity/compare_audited_auto_save.py examples/models.hpp examples/scenarios.hpp examples/sqlite_schema_crud.cpp examples/sqlite_relations_graph.cpp teaql_provider_sqlite/tests/runtime_examples_tests.cpp tests/parity/runtime_examples_cases.json tests/parity/runtime_examples_provenance.json tests/parity/rust_values/src/bin/runtime_examples_oracle.rs tests/parity/compare_runtime_examples.py tests/parity/teaql_runtime/policy_graph.cpp tests/parity/teaql_runtime/entity_save.cpp docs/runtime_source_test_acceptance.md teaql_runtime/tests/runtime_completion_tests.cpp tests/support/runtime_completion_fixture.hpp docs/runtime_graph_save_api_contract.md measurements/parity/2026-10-09-runtime-graph-model-review/README.md measurements/parity/2026-10-09-runtime-graph-model-review/before.json teaql_runtime/include/teaql/runtime/graph_debug.hpp teaql_runtime/tests/runtime_graph_model_tests.cpp tests/parity/runtime_graph_model_probe.cpp tests/parity/runtime_graph_model_cases.json.gz tests/parity/compare_runtime_graph_models.py tests/parity/rust_values/src/bin/runtime_graph_model_oracle.rs measurements/parity/2026-10-09-runtime-graph-model-review/results.json measurements/parity/2026-10-09-runtime-graph-repository-review/README.md teaql_runtime/include/teaql/runtime/detail/data_service/entity_service.hpp tests/parity/graph_repository_probe.cpp tests/parity/compare_graph_repository.py tests/parity/graph_repository_cases.json.gz tests/parity/rust_values/src/bin/graph_repository_oracle.rs measurements/parity/2026-10-09-runtime-graph-repository-review/results.json measurements/parity/2026-10-09-runtime-graph-repository-review/before.txt teaql_runtime/include/teaql/runtime/detail/data_service/entity_save_adapters.hpp tests/support/graph_save_adapter_fixture.hpp teaql_runtime/tests/graph_save_adapter_tests.cpp tests/parity/compare_graph_save_adapters.py tests/parity/graph_save_adapter_cases.json.gz tests/parity/generate_graph_save_adapters.py measurements/parity/2026-10-10-graph-save-adapter-review/results.json teaql_runtime/include/teaql/runtime/detail/data_service/graph_node_commands.hpp teaql_runtime/tests/graph_node_command_tests.cpp tests/parity/compare_graph_node_commands.py tests/parity/graph_node_command_cases.json.gz tests/parity/generate_graph_node_commands.py measurements/parity/2026-10-10-graph-node-command-review/results.json teaql_runtime/include/teaql/runtime/detail/data_service/recursive_graph_write.hpp teaql_provider_sqlite/tests/recursive_graph_write_tests.cpp tests/parity/compare_recursive_graph_write.py tests/parity/generate_recursive_graph_write.py tests/parity/recursive_graph_write_cases.json.gz measurements/parity/2026-10-10-recursive-graph-write-review/results.json measurements/parity/2026-10-10-runtime-graph-source-acceptance/results.json measurements/parity/2026-10-10-runtime-graph-source-acceptance/selection.json
teaql-runtime/src/checker.rs	teaql_runtime/include/teaql/runtime/check_result.hpp; teaql_runtime/include/teaql/runtime/checker.hpp; teaql_runtime/src/context/checker.cpp	5 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. All624 production lines: status markers/inference, eight rules, location/naming paths, factories/builders/wire projections, Checker defaults, registry registration/Clone/lookup, typed materialization/sparse merge and decode failure. All nested strings/Values/JSON/segments deep-copy into an explicit destination. Checked checker/registry borrows do not extend owners. Shared synchronous guards cover Context calls, registration name callbacks and direct typed calls; exceptions detach before actual User reclamation. Source Send/Sync adapts to owner-thread execution. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	teaql_runtime/include/teaql/runtime/check_result.hpp teaql_runtime/src/check_result.cpp teaql_runtime/include/teaql/runtime/error.hpp teaql_runtime/src/error.cpp teaql_runtime/tests/runtime_check_tests.cpp tests/parity/runtime_check_cases.json tests/parity/runtime_check_probe.cpp tests/parity/rust_values/src/bin/runtime_check_oracle.rs teaql_runtime/include/teaql/runtime/checker.hpp teaql_runtime/src/checker.cpp teaql_runtime/src/context/checker.cpp teaql_runtime/include/teaql/runtime/context.hpp teaql_runtime/include/teaql/runtime/module.hpp tests/support/checker_fixture.hpp teaql_runtime/tests/checker_tests.cpp tests/parity/checker_cases.json tests/parity/checker_probe.cpp tests/parity/rust_values/src/bin/checker_oracle.rs teaql_runtime/src/context/fix.cpp teaql_runtime/tests/graph_fix_tests.cpp tests/parity/graph_fix_cases.json tests/parity/teaql_runtime/checker_locale.cpp docs/checker_api_contract.md tests/parity/generate_check_models.py tests/parity/compare_check_models.py tests/parity/check_model_cases.json.gz measurements/parity/2026-10-08-check-model-review/README.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-runtime/src/mutation_policy.rs	teaql_runtime/include/teaql/runtime/mutation_policy.hpp; teaql_runtime/include/teaql/runtime/mutation_governance.hpp	5 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. All545 production lines: constants, identity/operation/plan/decision, policy/registry/callable/default adapters, approval/provider, governance models/sinks, Context setters/review/warnings, activation, execution sequence and graph/ledger projections. Models retain nested destination allocators and explicit Global copies after User deletion. Checked provider borrows, review quiescence and owner-thread activation preserve callback lifetime. Poll/exception/cancel restore nested governance; child work joins under its snapshot before reclamation. Scalar process sequence uses a mutex without Context payload ownership. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	teaql_runtime/include/teaql/runtime/mutation_governance.hpp teaql_runtime/tests/audit_event_tests.cpp tests/parity/audit_event_cases.json tests/parity/compare_audit_event.py tests/parity/rust_values/src/bin/audit_event_oracle.rs teaql_runtime/include/teaql/runtime/detail/governance_scope.hpp teaql_runtime/src/context/event.cpp teaql_runtime/tests/context_event_tests.cpp tests/parity/context_event_probe.cpp tests/parity/context_event_cases.json tests/parity/compare_context_event.py tests/parity/rust_values/build.rs tests/parity/rust_values/src/bin/context_event_oracle.rs teaql_runtime/include/teaql/runtime/mutation_policy.hpp teaql_runtime/src/mutation_policy.cpp teaql_runtime/src/context/mutation_policy.cpp teaql_runtime/src/mutation_policy_plan.cpp teaql_runtime/tests/mutation_policy_tests.cpp tests/parity/mutation_policy_probe.cpp tests/parity/mutation_policy_cases.json tests/parity/compare_mutation_policy.py tests/parity/generate_mutation_policy.py tests/parity/rust_values/src/bin/mutation_policy_oracle.rs tests/parity/policy_plan_probe.cpp tests/parity/policy_plan_oracle.rs tests/parity/build_policy_plan_oracle.py tests/parity/policy_plan_cases.json tests/parity/compare_policy_plan.py tests/parity/generate_policy_plan.py tests/parity/teaql_runtime/policy_graph.cpp docs/mutation_policy_api_contract.md tests/parity/generate_policy_models.py tests/parity/compare_policy_models.py tests/parity/policy_model_cases.json.gz measurements/parity/2026-10-08-policy-model-review/README.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-runtime/src/context/transaction.rs	teaql_runtime/include/teaql/runtime/transaction.hpp	5 / Accepted module contract (not stage completion)	Complete pinned 212-line TransactionScope source responsibility is accepted after full public/private completion, trait/protocol and ownership review. Typed executor lookup, transaction-bound service/query/mutation/audited save, FnOnce output without Clone, observed metadata, commit-only deduplicated ledger clearing and rollback error precedence preserve source semantics. Installed output/error/ledger capability repairs and foreign-child cancellation pass current native/ASan-UBSan/MIPS selections, each 11/11; native/MIPS match 1,288 transaction, 16 non-Clone callback and 356 non-Clone entity-save live original observations. Latest complete native regression is 369/369. Cancellation joins child work and cleans the native transaction before actual User reclamation; explicit destination copies preserve retained Global results. This accepts this source group, not complete graph/governance/privacy or Stage 5. Physical-router testing is deferred by the user; current target acceptance uses QEMU.	teaql_runtime/include/teaql/runtime/transaction.hpp teaql_memory/include/teaql/memory/once_function.hpp teaql_provider_sqlite/tests/transaction_scope_tests.cpp tests/parity/transaction_scope_probe.cpp tests/parity/rust_values/src/bin/transaction_scope_oracle.rs tests/parity/transaction_scope_cases.json tests/parity/generate_transaction_scope.py tests/parity/compare_transaction_scope.py docs/transaction_scope_api_contract.md tests/parity/generate_transaction_move_only.py tests/parity/compare_transaction_move_only.py tests/parity/transaction_move_only_cases.json measurements/parity/2026-10-08-transaction-move-review/README.md tests/parity/generate_ledger_move_only.py tests/parity/compare_ledger_move_only.py tests/parity/ledger_move_only_cases.json.gz measurements/parity/2026-10-08-ledger-move-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/README.md measurements/parity/2026-10-09-runtime-foreign-work-review/results.json measurements/parity/2026-10-09-transaction-source-acceptance/README.md measurements/parity/2026-10-09-transaction-source-acceptance/results.json teaql_runtime/tests/transaction_move_only_tests.cpp teaql_runtime/tests/transaction_provider_error_tests.cpp teaql_provider_sqlite/tests/ledger_move_only_tests.cpp
teaql-runtime/src/event.rs	teaql_runtime/include/teaql/runtime/event.hpp	5 / Accepted module contract (not stage completion)	Complete pinned572-line event production source responsibility is accepted after full public/private factory, model/default/trait/diagnostic, privacy helper and sink review. Current native375/375, sanitizer20/20 and MIPS20/20 pass with no-work before/after; native/MIPS match live original model/projection/Context observations and explicitly validate target-width rejection. Direct fan-out protects each distinct Context/owner/event/result arena with stack-only quiescence records; ordinary exceptions detach before actual User reclamation and first Result failure preserves source ordering. Raw/safe/bootstrap/governance/sink concepts remain independent. Complete Context/service/graph/log-privacy/runtime-root and stage acceptance remain separate.	teaql_runtime/include/teaql/runtime/event.hpp teaql_runtime/src/event.cpp teaql_runtime/src/audit_privacy.cpp teaql_runtime/tests/audit_event_tests.cpp tests/parity/audit_event_cases.json tests/parity/compare_audit_event.py tests/parity/rust_values/src/bin/audit_event_oracle.rs teaql_runtime/include/teaql/runtime/detail/governance_scope.hpp teaql_runtime/src/context/event.cpp teaql_runtime/tests/context_event_tests.cpp tests/parity/context_event_probe.cpp tests/parity/context_event_cases.json tests/parity/compare_context_event.py tests/parity/rust_values/build.rs tests/parity/rust_values/src/bin/context_event_oracle.rs docs/audit_event_api_contract.md tests/parity/generate_event_models.py tests/parity/compare_event_models.py tests/parity/event_model_cases.json.gz measurements/parity/2026-10-08-event-model-review/README.md measurements/parity/2026-10-09-event-direct-callback-review/README.md measurements/parity/2026-10-09-event-direct-callback-review/integration-results.json
teaql-runtime/src/context/logging.rs teaql-runtime/src/log_privacy.rs teaql-runtime/src/log_formatter.rs	teaql_runtime/include/teaql/runtime/logging.hpp; teaql_runtime/include/teaql/runtime/log_privacy.hpp; teaql_runtime/include/teaql/runtime/log_formatter.hpp; teaql_runtime/include/teaql/runtime/log_manager.hpp	5 / Accepted module contract (not stage completion)	Complete pinned logging production responsibilities (Context391/privacy410/formatter-manager566 lines) are accepted after full public/default/trait/diagnostic/provenance/ownership and call-site review. Current native375/375 and native/ASan-UBSan/MIPS logging16/16 pass with completed builds/no-work. Fresh original privacy39 and formatter4 tests pass; ignored privacy child executes through its isolated parent. Live native model/buffer/projection/Context/formatter/manager comparisons match172/1/425/327/927/94 and MIPS172/1/425/327/921/94; six target-width counts explicitly reject against actual Rust u32 parsing. Same-domain buffer Clone shares registered storage; cross-domain copies retain all nested values independently. Global-owned lazy services/endpoints have no hidden Context owners. Exact privacy fingerprints, acknowledgement, fallback cleanup and publication ordering remain independent. Only volatile Human timestamps and a documented informational header correction normalize. Complete Context/service/graph/runtime-root and stage acceptance remain separate. Post-0.0.2 maintenance retires the extra early C++ SQLite adapter. Its historical observations above are unchanged; current locators use production-provider regression coverage and the explicit retirement review.	teaql_runtime/include/teaql/runtime/detail/audit_privacy.hpp teaql_runtime/src/audit_privacy.cpp teaql_runtime/tests/audit_event_tests.cpp tests/parity/audit_event_cases.json tests/parity/compare_audit_event.py tests/parity/rust_values/src/bin/audit_event_oracle.rs teaql_runtime/include/teaql/runtime/logging.hpp teaql_runtime/src/logging.cpp teaql_core/include/teaql/core/detail/sha256.hpp teaql_runtime/tests/runtime_log_tests.cpp tests/parity/runtime_log_cases.json tests/parity/compare_runtime_log.py tests/parity/rust_values/src/bin/runtime_log_oracle.rs teaql_runtime/include/teaql/runtime/log_formatter.hpp teaql_runtime/src/log_formatter.cpp teaql_runtime/tests/log_formatter_tests.cpp tests/parity/log_formatter_cases.json tests/parity/compare_log_formatter.py tests/parity/rust_values/src/formatter_fixture.rs tests/parity/rust_values/src/bin/log_formatter_oracle.rs teaql_runtime/include/teaql/runtime/log_manager.hpp teaql_runtime/src/log_manager.cpp teaql_runtime/src/log_header.hpp teaql_runtime/tests/log_manager_tests.cpp tests/parity/log_manager_cases.json tests/parity/compare_log_manager.py tests/parity/log_manager_probe.cpp tests/parity/rust_values/src/bin/log_manager_oracle.rs teaql_runtime/src/context/logging.cpp teaql_runtime/include/teaql/runtime/detail/context/identity.hpp teaql_runtime/tests/context_logging_tests.cpp tests/parity/context_logging_probe.cpp tests/parity/context_logging_cases.json tests/parity/compare_context_logging.py tests/parity/rust_values/src/bin/context_logging_oracle.rs tests/parity/teaql_runtime/log_telemetry.cpp tests/parity/teaql_runtime/log_privacy.cpp tests/parity/teaql_runtime/file_log_privacy.py docs/runtime_log_api_contract.md tests/parity/generate_log_models.py tests/parity/compare_log_models.py tests/parity/log_model_cases.json.gz measurements/parity/2026-10-08-log-model-review/README.md teaql_runtime/tests/unified_buffer_clone_tests.cpp tests/parity/unified_buffer_clone_probe.cpp tests/parity/unified_buffer_clone_cases.json tests/parity/compare_unified_buffer_clone.py measurements/parity/2026-10-09-unified-buffer-clone-review/README.md measurements/parity/2026-10-09-log-source-acceptance/README.md measurements/parity/2026-10-09-log-source-acceptance/results.json docs/sqlite_compatibility.md teaql_provider_sqlite/tests/provider_sqlite_regression_tests.cpp
teaql-runtime/src/memory.rs	tests/parity/memory_data_service.hpp	6 / Reference oracle	cfg(test)-only oracle for differential testing/failure injection; not a production data-service replacement. Selected nine root-test fixture contracts have native, sanitizer and MIPS replay evidence; the helper is not a complete API port. Private U64/Decimal aggregates and Soundex do not alter published engine semantics.	tests/parity/memory_data_service.hpp tests/parity/teaql_runtime/memory_service.cpp docs/runtime_source_test_acceptance.md
teaql-runtime/src/telemetry_opentelemetry.rs	none (external adapter)	6 / External adapter excluded	Exclude only the concrete external OpenTelemetry adapter; preserve core telemetry interfaces.	—
teaql-runtime/src/lib.rs	teaql_runtime/include/teaql/runtime.hpp; tests/parity/runtime	6 / Accepted module contract (not stage completion)	Complete runtime-root production review covers lib.rs lines 1-117 and 4292-4297, all public/private reexports and the generated_support wildcard. All four published runtime module namespaces and their complete supported bindings are restored; negative compilation, exact type/function identity and actual formatter dispatch are recorded. All 75 root tests have individually reviewed complete fixture/assertion contracts and direct C++ checks, grouped into ten responsibility selections; unchanged Rust reports 224 passing runtime tests, including all 75 roots, with one ignored subprocess fixture invoked by its parent. Root declarations add no independent fields, trait defaults or wire implementations; implementing leaf contracts remain separate. Final same-source native 388/388, ASan/UBSan 388/388 and matched SQLite3.53.2 MIPS/QEMU 387/387 integrations pass, with 427 dependency records and no-work builds per profile. Actual handwritten examples match 2/2 live original scenarios on each profile, including original SQL provenance and separate C++ context provenance contracts. One raw FromSql Debug comparison remains native64-only under the documented CMake gate; structured target errors are covered. Explicit Global/User ownership, owner-thread dispatch, external exclusions, unchanged generator and physical-device deferral remain documented. Leak scanning is disabled in final sanitizer validation.	teaql_runtime/include/teaql/runtime.hpp teaql_runtime/tests/data_store_tests.cpp teaql_runtime/tests/generated_support_tests.cpp docs/data_store.md scripts/verify_public_exports.py tests/parity/teaql_runtime/registration.cpp docs/runtime_source_test_acceptance.md tests/parity/teaql_runtime/service_boundaries.cpp tests/parity/teaql_runtime/validation.cpp tests/parity/teaql_runtime/root_fixture.hpp tests/parity/teaql_runtime/events_relations.cpp tests/parity/teaql_runtime/typed_queries.cpp tests/parity/teaql_runtime/typed_models.hpp tests/parity/teaql_runtime/aggregates_cache.cpp tests/parity/teaql_runtime/queue_fixture.hpp tests/parity/teaql_runtime/pagination.cpp tests/parity/teaql_runtime/memory_service.cpp tests/parity/memory_data_service.hpp tests/parity/teaql_runtime/context_tail.cpp tests/parity/teaql_runtime/optimistic_conflict_output.py docs/runtime_root_source_acceptance.md teaql_runtime/tests/runtime_namespace_tests.cpp measurements/parity/2026-10-10-stage6-final-review/runtime-root-test-review.json measurements/parity/2026-10-10-stage6-final-review/runtime-modules-before.json measurements/parity/2026-10-10-stage6-final-review/README.md measurements/parity/2026-10-10-stage6-final-review/native-final-results.json measurements/parity/2026-10-10-stage6-final-review/sanitize-final-results.json measurements/parity/2026-10-10-stage6-final-review/mips-final-results.json
teaql-core/tests/dynamic_search.rs	tests/parity/teaql_core/dynamic_search.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete221-line test file: all eight original test bodies/helpers, seven-field/two-model metadata, full submitted inputs and subprocess parent/child assertions. Explicit arena and default-PMR-disabled containers preserve source data while the child process forwards the configured emulator. No hidden Context owner or replacement search implementation is introduced. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_core/dynamic_search.cpp tests/parity/check_search_warning_canary.py teaql_core/tests/request_search_tests.cpp tests/parity/search_cases.json docs/dynamic_search_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-provider-sqlite/tests/dynamic_search.rs	tests/parity/teaql_provider_sqlite/dynamic_search.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete142-line test and helpers: both descriptors/models, physical schema through Context, two platforms/six schools, trusted outer/related tenant predicates, provenance/limits and exact I64 result IDs3/2 plus four warnings. Descriptors/requests/results and connection wrappers belong to explicit User lifetimes; native cleanup precedes arena reclamation. Default PMR is disabled and real SQL executor/transport/provider layers execute. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_provider_sqlite/dynamic_search.cpp docs/provider_sql_source_test_acceptance.md tests/parity/teaql_provider_sqlite/fixture.hpp docs/dynamic_search_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-provider-sqlite/tests/guarded_mutation.rs	tests/parity/teaql_provider_sqlite/guarded_mutation.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete203-line test/helpers: exact Order descriptor/three rows, all nine ordered guarded update/delete/recover/hard-delete/transaction calls, rollback and final database assertions; supplementary write-boundary race retains atomic guard. Explicit User request/result allocation and native connection/transaction cleanup preserve current owner lifetime. The guard lives in the mutation statement and failed writes return no foreign persisted snapshot. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_provider_sqlite/guarded_mutation.cpp docs/provider_sql_source_test_acceptance.md tests/parity/teaql_provider_sqlite/fixture.hpp docs/dynamic_search_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-runtime/src/masking_contract_tests.rs	tests/parity/teaql_runtime/masking_contract_tests.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete634-line file/helpers/macro expansions: all34 SQLite-applicable original test contracts retain complete inputs/assertions; the single PostgreSQL ARRAY/ANY test remains explicitly backend-excluded. Each worker owns its arena and joins before immutable source reclamation. Current sanitizer/MIPS and complete native cover the assertion refinement; broader production projection-state ownership and privacy acceptance remain independent. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_runtime/masking_contract_tests.cpp tests/parity/teaql_runtime/data/masking_v1.tsv docs/runtime_source_test_acceptance.md measurements/parity/2026-10-09-masking-source-review/README.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-runtime/tests/business_clock.rs	tests/parity/teaql_runtime/business_clock.cpp	6 / Accepted module contract (not stage completion)	The complete source-only business_clock integration file is reviewed against its handwritten C++ port. Both exact source tests retain the 2032-02-29 10:15:30 UTC fixture and 2040-01-02 date-only resource override, every original assertion and independent time/date responsibilities. A fresh unchanged-source Rust run passes 2/2. The freshly compiled native port and named native CTest pass; rebuilt ASan/UBSan with leak detection and MIPS/QEMU named checks pass. Native clocks/resources are allocated in UserContext with default PMR disabled. This accepts only the complete integration-test file, not the separately partial production clock/business-service/runtime APIs, full stage acceptance or physical-device execution.	tests/parity/teaql_runtime/business_clock.cpp docs/provider_sql_source_test_acceptance.md
teaql-runtime/tests/business_id_permutation.rs	tests/parity/teaql_runtime/business_id_permutation.cpp	6 / Accepted module contract (not stage completion)	All four original permutation contracts are ported, including the unchanged ten-row CSV, full 20000-sequence determinism/reconstruction/canonicality/uniqueness range, exhaustion/version/blank-scope errors and invalid allocation range. Original Rust passes 4/4; the full C++ range passes ASan/UBSan with leak detection. The original fixture is copied byte for byte, not generated from C++ output; complete surrounding API acceptance remains separate. Complete source-test acceptance on 2026-10-09 follows direct comparison of every original test body/input/assertion, fresh unchanged Rust execution, native353/353 with post-test no-work and416 nonempty compiler dependencies, and fresh sanitizer/MIPS source/ID selections4/4. Production API/privacy/runtime source groups and complete Stage6 remain independent.	tests/parity/teaql_runtime/business_id_permutation.cpp docs/provider_sql_source_test_acceptance.md tests/parity/teaql_runtime/data/business_id_permutation_v1.csv measurements/parity/2026-10-09-business-permutation-source-review/README.md
teaql-runtime/tests/flat_identity_graph.rs	tests/parity/teaql_runtime/flat_identity_graph.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete113-line file and four bodies/helpers retain identical frozen entity addresses with independent ledgers, type-namespaced IDs, stable typed to-many views and loaded-null versus missing to-one views. Graph roots/payloads and independent ledgers use explicit User ownership. Sharing a frozen graph does not share mutable ledger state or extend Context lifetime. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_runtime/flat_identity_graph.cpp docs/runtime_source_test_acceptance.md docs/flat_ledger_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-runtime/tests/otlp_smoke.rs	none (external exporter test)	6 / External adapter excluded	Only the excluded external OTLP exporter is out of scope; retain core observation tests.	—
teaql-runtime/tests/test_incremental_ledger.rs	tests/parity/teaql_runtime/test_incremental_ledger.cpp	6 / Accepted module contract (not stage completion)	Complete pinned source responsibility is accepted after full body/helper/input/assertion or public/default/trait/protocol/ownership review, current native371/371 with418 nonempty compiled dependency records and no-work before/after, and the corresponding fresh sanitizer/MIPS consumer selections. Complete393-line file and four bodies/helpers: sequential source ID provider, full observability fixture, commit cleanup, eight seeds/three roots/2048 steps and nested4096/depth8 with each source operation/assertion. Runtime roots/change-set snapshots allocate explicitly in User; each seed uses independent ownership and standard-container expectations. Cleanup removes every replayable marker/version/comment; no iteration range or production responsibility is reduced. This accepts this source group, not full Context/service/graph/privacy/runtime-root or stages4–6. Physical-router execution is deferred by the user.	tests/parity/teaql_runtime/test_incremental_ledger.cpp docs/runtime_source_test_acceptance.md docs/flat_ledger_source_acceptance.md measurements/parity/2026-10-09-checker-direct-callback-review/integration-results.json
teaql-sql/src/binding_tests.rs	tests/parity/teaql_sql/binding_tests.cpp	6 / Accepted module contract (not stage completion)	All ten original binding-policy contracts are ported with source descriptors, expected parameter-policy sequences and 64 independent compiler threads. They cover declaration/credential precedence, logical versus physical names, scalar/BETWEEN/IN and subquery scopes, search literals, raw taint, guarded/batch compilation, exception restoration and concurrency. Original Rust passes 10/10; C++ sanitizer and MIPS/QEMU selections pass. Complete source-test acceptance on 2026-10-09 follows direct comparison of every original test body/input/assertion, fresh unchanged Rust execution, native353/353 with post-test no-work and416 nonempty compiler dependencies, and fresh sanitizer/MIPS source/ID selections4/4. Production API/privacy/runtime source groups and complete Stage6 remain independent.	tests/parity/teaql_sql/binding_tests.cpp docs/provider_sql_source_test_acceptance.md measurements/parity/2026-10-09-sql-binding-source-review/README.md
teaql-sql/src/execution_tests.rs	tests/parity/teaql_sql/execution_tests.cpp	6 / Accepted module contract (not stage completion)	All six original query diagnostic contracts are ported: unchanged masked Riverside/limit/comment/capture fixture, typed original driver error, observer exception isolation, pending cancellation with unknown counts, provider unwind, release-before-observer, returned success metadata without duplicate notification, and disabled failure capture. C++ uses the production executor and Context-owned native child; explicit cancel adapts Rust future drop. Original Rust registered diagnostic_tests passes these six; C++ native/sanitizer/MIPS selections pass. Full executor API/privacy/lifetime acceptance remains separate. Complete source acceptance on2026-10-09 follows full body/public/default/trait/protocol/ownership or test-body/input/assertion review, current native369/369 with no-work/418 dependencies and both sanitizer/MIPS51/51 selections. Separate production/runtime/graph/privacy and whole-stage responsibilities remain independent; backend-specific test branches follow the explicit SQLite-only scope.	tests/parity/teaql_sql/execution_tests.cpp tests/parity/teaql_sql/execution_fixture.hpp docs/sql_execution_source_test_acceptance.md measurements/parity/2026-10-09-sql-diagnostic-source-review/README.md
teaql-sql/src/log_rendering_tests.rs	tests/parity/teaql_sql/log_rendering_tests.cpp	6 / Accepted module contract (not stage completion)	Selected SQLite portions of the six original renderer contracts are ported: shared projection/debug rendering, quoted/Unicode/comment preservation, binding accounting and ambiguity rejection, callback errors, private SQL omission, null and nonfinite values. Original Rust passes 6/6 across its full backend set. PostgreSQL-only numbered/dollar-quote/array and MySQL-only lexical rules remain outside the agreed SQLite-only scope and are not counted as C++ positive parity; retained kinds explicitly fail closed. C++ sanitizer and MIPS/QEMU selections pass. Complete source acceptance on2026-10-09 follows full body/public/default/trait/protocol/ownership or test-body/input/assertion review, current native369/369 with no-work/418 dependencies and both sanitizer/MIPS51/51 selections. Separate production/runtime/graph/privacy and whole-stage responsibilities remain independent; backend-specific test branches follow the explicit SQLite-only scope.	tests/parity/teaql_sql/log_rendering_tests.cpp docs/provider_sql_source_test_acceptance.md docs/sql_execution_source_test_acceptance.md measurements/parity/2026-10-09-sql-renderer-source-review/README.md
teaql-sql/src/mutation_execution_tests.rs	tests/parity/teaql_sql/mutation_execution_tests.cpp	6 / Accepted module contract (not stage completion)	All fifteen original mutation diagnostic contracts are ported with original Customer descriptors, commands and fault transport. They retain target-ID intent/plain bindings across four kinds and both outcomes, single cached select shape/current values with zero IO, unknown transaction intent, exact driver errors, partial/nested batch order and sink exception isolation, unknown cancellation counts, successful write versus failed/empty/cancelled readback, successful three-leaf metadata without fallback observers, compile failures without invented statements, guards on write/reread and inherited intent, and typed erased guarded transaction access. Original Rust registered mutation_diagnostic_tests passes 15/15; C++ native/sanitizer/MIPS selections pass. Full saver/executor API/privacy acceptance remains separate. Complete source acceptance on2026-10-09 follows full body/public/default/trait/protocol/ownership or test-body/input/assertion review, current native369/369 with no-work/418 dependencies and both sanitizer/MIPS51/51 selections. Separate production/runtime/graph/privacy and whole-stage responsibilities remain independent; backend-specific test branches follow the explicit SQLite-only scope.	tests/parity/teaql_sql/mutation_execution_tests.cpp tests/parity/teaql_sql/execution_fixture.hpp docs/sql_execution_source_test_acceptance.md measurements/parity/2026-10-09-sql-diagnostic-source-review/README.md