review-wave-8 — the pre-release gate passes: one contract-observable divergence found and fixed (pg's negative-seed GREATEST clamp + offsets CHECK contradicted ADR-023 §2's stored-checkpoint annotation; raw seed now, window open until first publish); the close-out's registered suite-duty follow-up discharged (negative heartbeat(extend) leg in job_handle_validity_predicate, negative save_offset seed leg in receiver_close_and_save_arms — stamped, uniform, green on all three columns vs the live harness server); the class-1 termination of record landed in ADR-017 §2 (no undisposed candidate remains; the window closes permanently at the first cargo publish); release-facing spec set flipped stable with dated gate annotations (core-contract, overview, queues, deployment current, the architecture README — Current State through wave 8, engine-mem's table row corrected); implementation.md records updated; N-1/Findings 2–3/flake/publish-prep audits recorded; all gates re-run green incl. fuzz replay, wasm32, doc gate

docs/architecture/decisions/017-contract-versioning.md

@@ -128,7 +128,16 @@ duty — that is what makes them non-events).
    extensions*, fall in this class in fact — nothing was released
    when they were made, so their additions ship inside the initial
    contract v1 text (the initial release carries ADR-008 through
-   ADR-017 whole).
+   ADR-017 whole). *(Termination of record, 2026-10-11 — the wave-8
+   review gate: the pre-release class-1 close-out pass landed every
+   recorded disposition (the publish→wake ordering tolerance; the
+   ADR-023 §2 `heartbeat(extend)`/`save_offset` classifications; the
+   `EventReceiver::try_recv` closed shape; the `get_job` prose; the
+   mem-arithmetic no-action) and the gate audited that **no
+   undisposed class-1 candidate remains**. The class terminates
+   permanently at the core crate's first `cargo publish` — the 0.1.0
+   release this gate blesses, per §1's amendment; from that publish
+   on, contract changes are classes 2–4 only.)*
 2. **Additive extension** (the ADR-009/010 *shape*, applied
    post-release) — a new trait method, a new type, a new error
    variant, a new field on a consumer-read value type (§3's