[Shpuntyara]

AD replication success and ordinary Windows host fixtures do not establish SYSVOL convergence, effective policy, delegation, or recoverability. This change adds focused AD/GPO diagnostics, exact-object/GPO recovery procedures, capability provenance, adversarial scenarios, and a separate two-DC/member domain acceptance plan.

The source-only checker validates an offline fixture plan or selected read-only metadata. It rejects unknown/noninteger GPO versions and always refuses mutation before native calls. Protected AD writes require an externally registered immutable typed task and signed admission. PR #40 is now merged as the platform 0.16 protected Windows transport/endpoint foundation; it does not ship AD mutation tasks or activate protection on the acceptance lab.

Validation for 18083fd, rebased onto main 15a7cec:

• All 34 GitHub CI checks completed successfully; no skipped or failed checks.
• This includes the native protected Windows HTTPS/JEA job, native Linux broker isolation, Windows fixtures, cross-platform regressions, release/contract validation and secret scanning.
• Locally, all 4 directory tests and 41 platform tests pass.
• Independent rebase review found no material issues. All 202 base evaluation cases are preserved byte-for-value, with exactly six unchanged AD cases added: 208 unique cases in total. The functional AD change is unchanged from the previously reviewed patch.
• Independent agent review is source review, not identity-backed human GitHub approval or live domain acceptance.

Draft acceptance boundary: all seven live domain rows remain not_run, including actual policy, delegation, SYSVOL fault and AD/GPO recovery drills. The existing disposable lab and the necessary role/forest/client scope changes are authorized. The user selected protected Codex execution before directory writes; a separate requester context, external authority, deployed broker/connector and immutable AD tasks are not yet provisioned. Native transport CI proves a synthetic endpoint, not Kerberos, real gMSA rights, requester isolation or AD recovery.

Keep this draft until required real domain acceptance passes. Any subsequent source change requires final-head CI and independent review before merge. No workflow or branch protection is weakened.

Refs #28.

[Shpuntyara]

Independent agent review completed for d18ec63 (this records agent review, not identity-backed human GitHub approval).

• P1: a concurrent GPO link/edit could invalidate the destructive fixture before-state. Resolved by removing the direct write branch in alignment with platform 0.15; -Execute always refuses before native calls.
• P2: null GPO version counters could compare equal and produce a false read-only baseline. Resolved by validating all four counters as observed nonnegative integer types before comparison.

The independent reviewer reran a separate blackbox harness (healthy, unknown, stale, local mismatch and cross-DC mismatch), plus all 4 directory regression methods on PowerShell 5.1 and 7. Final verdict: no blocking findings for documentation/offline/read-only scope. Reviewed checker SHA-256: 3810078a8ffdb6dd26d65e6578c0c1c556b10c87f6aa1f9098b0295933f28aff.

Actual domain integration, client policy, delegation and AD/GPO recovery remain not_run; this PR stays draft.

[Shpuntyara]

Final validation for d18ec63: all 27 CI checks completed with success (zero skipped/failed checks), including both Python 3.13 OS jobs, Windows native fixtures, Codex native loops, Linux broker isolation, container/IaC/recovery/edge suites and dependency/secret checks.

Full local Python 3.13.5 regression: 231 tests, OK (7 unchanged platform-specific skips). Public-source/release builds and release verification also pass. Independent agent re-review is clean for the implemented documentation/offline/read-only scope.

No merge: actual domain integration and recovery remain not_run. Preserve the draft acceptance boundary and refresh base/CI/review before any later merge.