[ticket-017] chore(governance): close integrated ticket-017

TODO.md

@@ -8,11 +8,12 @@ Ostatni przegląd: 2026-07-23.
 
 ## Aktywne
 
-- [ ] Dostarczyć [ticket-017](project/ticket-017/README.md): zachować logikę
+- [x] Dostarczyć [ticket-017](project/ticket-017/README.md): zachować logikę
   diagnostyczną przez stabilne aliasy ścieżek, adresów i identyfikatorów,
   utrzymując surową mapę wyłącznie lokalnie oraz weryfikując brak regresji na
-  granicy LLM. Stan: `IN_PROGRESS / PUBLICATION`; implementacja i lokalne
-  bramy przeszły, oczekuje na publikację dokładnego HEAD.
+  granicy LLM. Stan: `DONE / DONE`; chroniony Validator zatwierdził dokładny
+  HEAD `610bcb1...` w review `5084141876`, scalił PR #35 jako `31f3e6e...`
+  i usunął zdalną gałąź ticketu.
 
 - [x] Dostarczyć [ticket-016](project/ticket-016/README.md): zwiększyć limit
   pełnej tury HITL do 50 000, ustawić niski reasoning GLM 5.3, przełączać model

project/ticket-017/README.md

@@ -2,8 +2,8 @@
 
 - **ID**: ticket-017
 - **Owner**: unresolved:human
-- **Status**: IN_PROGRESS
-- **Workflow state**: PUBLICATION
+- **Status**: DONE
+- **Workflow state**: DONE
 - **Created**: 2026-09-01
 
 ## Goal and scope

project/ticket-017/ai-codex-logs.txt

@@ -81,3 +81,28 @@ ONEDEV ISOLATED-HOME REGRESSION / CORRECTION — 2026-09-01
   occurs in the static system prompt. It is not the OneDev failure and does not
   represent a raw home-path leak; root-account path boundaries remain covered
   by the explicit unit regression.
+
+PUBLICATION / TRUSTED REVIEW — 2026-09-02
+- Exact implementation head: `610bcb1db9bff2bb2021a47be2543cb747ce4b9b`.
+- PASS: Python 3.10/3.11/3.12, Fedora, Ubuntu, Debian, Arch, Alpine,
+  `test-summary`, governance remote lifecycle and `onedev/local-verify` all
+  completed successfully for that head.
+- Trusted review `5084141876`: APPROVED by
+  `ifuri-validator-agent[bot]`, bound to repository `semcod/fixos`, PR #35,
+  ticket-017 and the exact implementation head. Its deterministic verdict,
+  not the advisory model verdict, authorized the merge.
+- PR #35 merged at 2026-09-01T23:34:13Z as
+  `31f3e6ecb8cd1cc2483be4982a5241bd8748a13a`.
+- Remote branch `goal/ticket-017` was absent after fetch/prune, as required.
+
+GOVERNANCE-ONLY CLOSURE — 2026-09-02
+- The request to continue is treated as SESSION_EXECUTION_AUTHORIZATION for
+  this bounded closure and the subsequent separately ticketed investigation.
+- Base: integrated `origin/main` at
+  `31f3e6ecb8cd1cc2483be4982a5241bd8748a13a`.
+- No implementation, test, dependency or public-interface file is changed by
+  this closure.
+- `python -m pytest -q`: PASS — 577 passed, 5 skipped, 16 deselected.
+- Changed-Python Ruff gate: PASS — no Python files changed.
+- `git diff --check`: PASS.
+- `./project/governance-check.sh`: GOV-PASS — 0 errors, 0 warnings.

project/ticket-017/ai-codex.md

@@ -79,9 +79,12 @@ linkability.
   No Docker E2E result is claimed and no provider credential was used.
 - Moved the corrected implementation to `IN_PROGRESS / PUBLICATION`; trusted
   review and merge remain outside the local implementation step.
+- Published exact head `610bcb1d...` through PR #35. Protected Validator
+  review `5084141876` approved that head for ticket-017, the PR merged as
+  `31f3e6ec...`, and the remote ticket branch was deleted.
+- Closed the integrated ticket as `DONE / DONE` using governance-only changes
+  based on the resulting default branch.
 
 ## Blockers
 
-- None inside the recorded intent; proceed without a second confirmation.
-- New authority remains required for destructive action, secret access, new
-  external coordination, material objective expansion and trusted merge.
+- None. Implementation, trusted exact-head review and merge are complete.

project/ticket-017/changelog.md

@@ -26,3 +26,8 @@
   that merely share the same prefix.
 - Recognize serialized whitespace delimiters before an isolated home path, so
   dictionary-form diagnostics cannot retain a nested executor home.
+- Publish exact head `610bcb1d...` through PR #35 after all hosted and OneDev
+  checks passed.
+- Record protected Validator approval `5084141876`, merge `31f3e6ec...` and
+  deletion of the remote ticket branch.
+- Close the integrated ticket as `DONE / DONE` on the resulting default branch.