Derive lane source, lock, version, target, and profile evidence from the immutable build environment, and accept genuine rustc verbose commit hashes through the shared privacy validator. Reclaim owned proof and atomic-publish artifacts on failure, propagate lock-release errors with repair guidance, enforce canonical field-aware timestamps, and report rollback enumeration residue. Keep drift output coherent per run. Centralize proof, artifact, and native-tool authorities, and remove dead staging paths and tag-era naming.