diff --git a/.gitattributes b/.gitattributes
index dfe0770..6896242 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,3 @@
-# Auto detect text files and perform LF normalization
 * text=auto
+# Preserve the supplied publication bytes, including its checksum ledger.
+releases/v2.1/** -text
diff --git a/.github/workflows/publication.yml b/.github/workflows/publication.yml
new file mode 100644
index 0000000..51c7f1f
--- /dev/null
+++ b/.github/workflows/publication.yml
@@ -0,0 +1,64 @@
+name: Verify and publish MHIOS
+on:
+  push:
+    branches: [main]
+    tags: ['v2.1-core13.0']
+  pull_request:
+  workflow_dispatch:
+permissions:
+  contents: read
+env:
+  PYTHONUTF8: '1'
+  PYTHONDONTWRITEBYTECODE: '1'
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: pip
+          cache-dependency-path: |
+            requirements.txt
+            releases/v2.1/requirements.txt
+      - run: pip install -r requirements.txt
+      - run: python -B releases/v2.1/verify_all.py --output-dir verification-output
+      - name: Show check diagnostics
+        if: failure()
+        run: cat verification-output/*.log
+      - uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: verification-evidence
+          path: verification-output/
+  build-pages:
+    needs: verify
+    if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - run: pip install lxml==6.1.1
+      - run: python scripts/build_site.py
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: _site
+  deploy:
+    needs: build-pages
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    concurrency:
+      group: pages
+      cancel-in-progress: false
+    steps:
+      - name: Deploy reading site
+        id: deployment
+        uses: actions/deploy-pages@v4
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ebad8dc
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+__pycache__/
+.pytest_cache/
+.venv/
+verification-output/
+_site/
diff --git a/CITATION.cff b/CITATION.cff
new file mode 100644
index 0000000..c74f13d
--- /dev/null
+++ b/CITATION.cff
@@ -0,0 +1,13 @@
+cff-version: 1.2.0
+message: "Cite the exact MHIOS release and identify any modifications."
+title: "MathGov Human Interface and Orchestration Standard (MHIOS)"
+type: software
+authors:
+  - family-names: McGaughran
+    given-names: James
+version: "2.1"
+date-released: "2026-09-28"
+license: Apache-2.0
+repository-code: "https://github.com/MathGov/mhios"
+url: "https://mathgov.github.io/mhios/"
+abstract: "A research-and-teaching companion specification, preparation workbook and bounded record-consistency implementation, pinned to MathGov / RippleLogic Core v13.0 Release I."
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..035e549
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,5 @@
+# Contributing
+
+Report the exact release, source section or file, expected behavior, observed behavior and smallest reproducible example. Use synthetic or appropriately redacted records; do not post private stakeholder data or credentials.
+
+Keep research arguments, software failures, accessibility findings and operational evidence distinct. A passing local validator is not authority. Changes to the frozen publication require a new edition with regenerated documents, checksums and tests; do not patch its files in place. Repository navigation and CI changes can be reviewed separately. Contributions must be yours to share and retain applicable notices.
diff --git a/NOTICE.md b/NOTICE.md
new file mode 100644
index 0000000..9599dff
--- /dev/null
+++ b/NOTICE.md
@@ -0,0 +1,8 @@
+# Notice
+
+MathGov Human Interface and Orchestration Standard (MHIOS), version 2.1.
+Copyright 2026 James McGaughran / MathGov Institute for Ethical Systems Design.
+
+This package updates the user-supplied MHIOS v2.0 source. The original is preserved in the complete provenance archive. Source documents, templates and supplied local reference code are distributed under the source package's Apache-2.0 licence; see LICENSE.txt. Informative references to external standards do not incorporate their copyrighted full text or imply certification.
+
+The fifteen files in references/Core_15 are exact, unchanged source dependencies. MHIOS is a companion, not a new member of the Core 15. User shorthand “MIOS” denotes MHIOS in this delivery.
diff --git a/PUBLICATION.md b/PUBLICATION.md
new file mode 100644
index 0000000..21c0940
--- /dev/null
+++ b/PUBLICATION.md
@@ -0,0 +1,34 @@
+# MHIOS v2.1 publication audit
+
+The supplied `MathGov_MHIOS_v2.1_Core13.0_Publication.zip` has SHA-256:
+
+`7af9f50b9853957283768548fe51f5502758485eab6cf8006b83640ca0a534f1`
+
+All 86 supplied files are preserved without modification in `releases/v2.1`. The original ZIP is the fixed release download. The private v2.0 provenance described inside the documents was not included in this public ZIP and is not needed to read or run the v2.1 package. We cannot independently reproduce claims about unprovided v2.0 source changes.
+
+## Independently repeated checks
+
+- All ten supplied verification commands passed; 133 tests and six completed synthetic examples passed at the declared replay time.
+- The payload was unchanged after running the suite. The supplied ledger covers 85 files plus the ledger itself.
+- All fifteen Core source hashes match the previously verified live Core Release I masters. No Core source was altered.
+- Complete Markdown/Word body-and-table token parity passed; all 115 rendered PDF contents links resolved to the expected headings. The 41-page PDF had no blank pages or out-of-page text blocks. All pages were visually inspected as rendered contact sheets; no obvious clipping or table-fragment defects were found. This is not a full assistive-technology audit of the PDF.
+- Workbook structure: fourteen sheets, twenty formulas, no cached error cells, untouched formula rows UNASSESSED. The package reports eight prior formula probes; this publication pass does not claim a new native Excel recalculation or independently rerun those prior spreadsheet-engine probes.
+- All supplied local reading links passed. Hosted website checks and CI publication receipts are recorded separately after deployment.
+
+See [local execution receipt](publication/v2.1/local-verification.json), [Core comparison](publication/v2.1/core-comparison.json), and the [package's detailed evidence boundary](releases/v2.1/release/VERIFICATION_REPORT.md).
+
+## Findings addressed in the publication layer
+
+The package is suitable for publication as a bounded research companion. Its v2.0-to-v2.1 lineage is now distinguished from the previous public v0.8 release. The current release is prominent, old repository files are clearly archived, readers and editable downloads are linked, and version-pinned CI runs the unchanged verifier. Windows users are instructed to enable Python UTF-8 mode because several supplied read operations use the interpreter default encoding. The original publication remains unchanged.
+
+The internal reports' statements that hosting/CI were not yet performed are preparation-time history, not a claim about the repository's subsequent deployment. Likewise old version strings explicitly labeled historical are preserved as provenance.
+
+## Limits
+
+Passing the suite demonstrates the listed checks, not exhaustive semantic correctness or complete conformance. Full external Canon schemas/registries, applicable RPAP/PFAP, actual authority/cryptographic acceptance, human-interface implementation tests, empirical validation and domain safety remain separate. Sixteen listed interface vectors have mixed executable/manual/document-level coverage; 133 tests do not mean 133 independent empirical findings. MHIOS v2.1 is not automatically compatible with v0.8 or v2.0 records.
+
+## Clean-environment and browser findings repaired
+
+The initial clean Linux CI run passed 131 tests but failed two malformed-date tests because the supplied requirements omit jsonschema’s optional RFC3339 date-time dependency. The local environment already contained it. Root `requirements.txt` now explicitly pins `rfc3339-validator==0.1.4`; all checks are rerun in hosted CI. No failing test was skipped or weakened. The recommended publication-edition download includes these installation requirements and preserves the original package under `releases/v2.1/`.
+
+The supplied HTML reader has an empty language attribute and narrow-screen overflow. The hosted `/read/` projection sets English, adds keyboard-focusable scrolling tables, a main landmark, a collapsible contents list and publication navigation. The builder asserts that its complete standard-body text is unchanged. The original HTML remains in the frozen package.
diff --git a/README.md b/README.md
index 9c4ff23..55dc57d 100644
--- a/README.md
+++ b/README.md
@@ -1,69 +1,44 @@
-# MathGov Human Interface and Orchestration Standard v0.8
+# MHIOS — Human Interface and Orchestration Standard
 
-**Release:** `MHIOS_v0_8+2026.08.15.3`  
-**Status:** Candidate experimental implementation companion  
-**Exact tested Core:** `MathGov_Core_2026_09_v12.6_SGP_v8.5+2026.08.15.3`  
-**Exact tested Core ZIP:** `MathGov_Core_2026_09_v12_6_SGP_v8_5_BUILD_2026_08_15_3_FINAL_PUBLICATION_READY.zip`  
-**Core ZIP SHA-256:** `475c4e50da133d6eec497d9cf7da7bbf6e7f7d9d79ce27f0d86b03fdbfccd69f`  
-**Construct validity:** `UNTESTED`  
+**Version 2.1 · Core v13.0 Release I · SGP v8.8 · Apache-2.0**
 
-MHIOS translates the frozen MathGov decision architecture into auditable human, institutional, and machine interaction records. Version 0.8 adds recursive-successor governance controls without adding a MathGov gate, altering the five-stage cascade, creating a new authority source, or modifying any Union Scope or Welfare Dimension.
+MHIOS helps people inspect decision evidence, qualification, uncertainty, responsibility and handoffs. It keeps a framework verdict, an accountable choice, execution authorization and observed outcomes distinct. It is a companion to MathGov / RippleLogic, not a sixteenth Core document or an authorization service.
 
-## v0.8 governing addition
+**[Read online](https://mathgov.github.io/mhios/)** · **[Download the complete publication](https://github.com/MathGov/mhios/releases/tag/v2.1-core13.0)** · [Standard PDF](releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf) · [Editable Word](releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx) · [Semantic Markdown source](releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md)
 
-> **Derivation is not authorization. Intelligence may create a candidate successor; it may not create the successor's authority.**
+## What is included
 
-Version 0.8 adds and consolidates:
+- Complete 41-page standard in Markdown, HTML, PDF and DOCX.
+- Fourteen-sheet preparation workbook; schemas, an intentionally incomplete draft and six completed synthetic examples.
+- Bounded, read-only record-consistency checker and 133 automated tests.
+- All fifteen unchanged Core source files, pinned individually by SHA-256.
+- [Audit and improvements](releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.md), [verification scope](releases/v2.1/release/VERIFICATION_REPORT.md), [coverage register](releases/v2.1/release/CONFORMANCE_COVERAGE.csv), and [migration guide](releases/v2.1/release/MIGRATION_GUIDE.md).
 
-- `SuccessorRequalificationRecord` as the 47th object type;
-- parent/candidate lineage and material-change deltas;
-- default denial of authority inheritance;
-- exact candidate configuration binding;
-- candidate locks before fresh qualification and authorization;
-- maximum unreviewed generation-depth controls;
-- independent non-AI review of material successor changes;
-- evaluation-validity expiry and fresh evidence requirements;
-- five expected-failure successor vectors, one positive vector, and four successor-specific seeded mutations;
-- a dedicated Successor and Material-Change Requalification Standard.
-- registry traceability for all 70 active conformance vectors, with release failure on unmapped active vectors;
-- explicit C0-C3 conformance profiles and a structural profile evaluator;
-- non-confounded burden measures and a preregistration-ready, anti-priming inter-rater reliability protocol.
+The Markdown standard owns MHIOS semantic text. Its Word, PDF and HTML files are reading projections. Core semantics remain owned by the pinned Core sources. The preparation workbook checks declared tokens and reference presence; it does not calculate Canon scores or decide whether evidence is true.
 
-## Reading order
+## Exact edition and verification
 
-1. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf` - full reading copy.
-2. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx` - editable reading mirror.
-3. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md` - governing semantic source for this package.
-4. `docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md` - focused recursive-successor specification.
-5. `registries/MHIOS_OBJECT_MODEL_v0_8.yaml` - 47-object catalogue.
-6. `schemas/mhios_run_export_v0_8.schema.json` - structural run-export schema.
-7. `tests/validate_mhios.py` - schema and semantic validator.
-8. `tests/conformance_vectors/` - 6 positive and 64 expected-failure vectors.
-9. `tests/mutation_test_mhios.py` - 45 seeded mutations.
-10. `docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md` - empirical burden and hollow-run measurement protocol.
-11. `docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md` - preregistration-ready reviewer-reliability protocol.
-12. `registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml` - explicit C0-C3 structural conformance profiles.
-13. `release/VALIDATION_REPORT.md` - artifact and claim-boundary report.
+Build: `MG-MHIOS-2.1-20260928-CORE13.0`. Core: `MG-RL-13.0-20260926-RELEASE-I`. The supplied 86-file publication is preserved without edits under `releases/v2.1/`; repository navigation and hosting records are separate.
 
-## Core compatibility and precedence
+Use Python 3.10 or newer in an isolated environment. On Windows, set `PYTHONUTF8=1` before running the supplied tools (PowerShell: `$env:PYTHONUTF8='1'`).
 
-The exact tested Core build controls all MathGov semantics. MHIOS controls only the implementation, interaction, provenance, audit, and runtime-orchestration surfaces declared in this package. A later or different Core build requires an explicit compatibility review; version numbering alone does not establish compatibility.
+```sh
+python -m pip install -r requirements.txt
+python -B releases/v2.1/verify_all.py --output-dir verification-output
+```
 
-## Claim boundary
+The recommended publication-edition ZIP includes the required date-time dependency and a top-level README. Use that README; the preserved original package requirements omit `rfc3339-validator==0.1.4`. For an original ZIP checkout, add that dependency explicitly. Verification output must be outside the frozen package. `--at 2026-09-28T12:00:00Z` replays synthetic fixtures; it never revives real permission. The checker success label is `RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS`, never authorization.
 
-Passing the included validators establishes package consistency against the encoded checks. It does not establish legal authority, physical safety, construct validity, empirical effectiveness, burden reduction, reviewer agreement, or deployment readiness in a particular domain.
+See [publication audit](PUBLICATION.md) and [CI results](https://github.com/MathGov/mhios/actions). The tests cover only their declared scope. No empirical effectiveness, production readiness, M2/M3 deployed-interface conformance, complete external Canon schemas/registries, native Excel interoperability or real authority is established.
 
-## License
+## Version lineage and history
 
-See `LICENSE` and `NOTICE`.
+GitHub previously published v0.8. The supplied v2.1 package identifies a privately retained v2.0 source baseline; its internal v2.0 migration guide is not an automatic migration path from v0.8. The v0.8 repository snapshot is preserved in [archive/v0.8](archive/v0.8), and its [original fixed release](https://github.com/MathGov/mhios/releases/tag/v0.8) remains available. Do not relabel or silently migrate old records.
 
-## Computational Context Declaration
+This release uses a new M0–M3 interface-conformance vocabulary and bounded implementation. Historical v0.8 test counts, object inventories and C0–C3 claims do not transfer to v2.1. Private provenance was not supplied in this publication ZIP and is not published here.
 
-For material computational systems, MHIOS v0.8 presents a compact derived view of the computational problem/object, exact architecture and configuration, demonstrated capability, assigned task, deployment domain, required evidence standard, consequence interface, and separate legitimate authority basis. **Consequence Interface is not Legitimate Authority.** The view does not create a new gate or new authority source.
-## Related MathGov Repositories
+## Reuse, citation and contribution
 
-- **MathGov / RippleLogic Core**  
-  The canonical ethical decision architecture that MHIOS operationalizes around.  
-  https://github.com/MathGov/ripple-logic
+The supplied edition is Apache-2.0; see [LICENSE](LICENSE), [NOTICE](NOTICE.md) and [citation metadata](CITATION.cff). Retain notices and identify modifications. External informative standards keep their own rights and are not incorporated or certified by linking them.
 
-MHIOS preserves the MathGov Core decision architecture and does not redefine its gates, rights floor, tail-risk constraints, CSV semantics, RippleLogic scoring, Union Scopes, or Welfare Dimensions.
\ No newline at end of file
+[Report a reproducible issue](https://github.com/MathGov/mhios/issues) · [Contribute](CONTRIBUTING.md) · [Security scope](SECURITY.md) · [MathGov directory](https://github.com/MathGov) · [Core v13](https://github.com/MathGov/ripple-logic) · [RippleLogic](https://ripplelogic.org/) · [MathGov foundation](https://mathgov.org/) · [Contact James](mailto:james@ripplelogic.org)
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..6c0aae2
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security and claim scope
+
+This repository publishes a read-only research checker and static reading site, not an operational authorization service. Never treat its success output as permission to execute.
+
+For a vulnerability involving data exposure or an unsafe implementation path, contact james@ripplelogic.org without publishing secrets or personal records. Include version, affected code and a synthetic reproduction. Ordinary reproducible research issues can use GitHub Issues. No guaranteed response time or independent security certification is claimed.
diff --git a/archive/README.md b/archive/README.md
new file mode 100644
index 0000000..fa73af3
--- /dev/null
+++ b/archive/README.md
@@ -0,0 +1,3 @@
+# Historical MHIOS editions
+
+`v0.8/` preserves the repository files before v2.1 publication. Their versioned claims and dependencies are historical. For the original byte-frozen distribution and its strict verifier, use the original v0.8 GitHub release asset. Current visitors should start at the repository README and `releases/v2.1/`.
diff --git a/CHANGELOG.md b/archive/v0.8/CHANGELOG.md
similarity index 100%
rename from CHANGELOG.md
rename to archive/v0.8/CHANGELOG.md
diff --git a/archive/v0.8/LICENSE b/archive/v0.8/LICENSE
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/archive/v0.8/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/NOTICE b/archive/v0.8/NOTICE
similarity index 100%
rename from NOTICE
rename to archive/v0.8/NOTICE
diff --git a/archive/v0.8/README.md b/archive/v0.8/README.md
new file mode 100644
index 0000000..9c4ff23
--- /dev/null
+++ b/archive/v0.8/README.md
@@ -0,0 +1,69 @@
+# MathGov Human Interface and Orchestration Standard v0.8
+
+**Release:** `MHIOS_v0_8+2026.08.15.3`  
+**Status:** Candidate experimental implementation companion  
+**Exact tested Core:** `MathGov_Core_2026_09_v12.6_SGP_v8.5+2026.08.15.3`  
+**Exact tested Core ZIP:** `MathGov_Core_2026_09_v12_6_SGP_v8_5_BUILD_2026_08_15_3_FINAL_PUBLICATION_READY.zip`  
+**Core ZIP SHA-256:** `475c4e50da133d6eec497d9cf7da7bbf6e7f7d9d79ce27f0d86b03fdbfccd69f`  
+**Construct validity:** `UNTESTED`  
+
+MHIOS translates the frozen MathGov decision architecture into auditable human, institutional, and machine interaction records. Version 0.8 adds recursive-successor governance controls without adding a MathGov gate, altering the five-stage cascade, creating a new authority source, or modifying any Union Scope or Welfare Dimension.
+
+## v0.8 governing addition
+
+> **Derivation is not authorization. Intelligence may create a candidate successor; it may not create the successor's authority.**
+
+Version 0.8 adds and consolidates:
+
+- `SuccessorRequalificationRecord` as the 47th object type;
+- parent/candidate lineage and material-change deltas;
+- default denial of authority inheritance;
+- exact candidate configuration binding;
+- candidate locks before fresh qualification and authorization;
+- maximum unreviewed generation-depth controls;
+- independent non-AI review of material successor changes;
+- evaluation-validity expiry and fresh evidence requirements;
+- five expected-failure successor vectors, one positive vector, and four successor-specific seeded mutations;
+- a dedicated Successor and Material-Change Requalification Standard.
+- registry traceability for all 70 active conformance vectors, with release failure on unmapped active vectors;
+- explicit C0-C3 conformance profiles and a structural profile evaluator;
+- non-confounded burden measures and a preregistration-ready, anti-priming inter-rater reliability protocol.
+
+## Reading order
+
+1. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf` - full reading copy.
+2. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx` - editable reading mirror.
+3. `docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md` - governing semantic source for this package.
+4. `docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md` - focused recursive-successor specification.
+5. `registries/MHIOS_OBJECT_MODEL_v0_8.yaml` - 47-object catalogue.
+6. `schemas/mhios_run_export_v0_8.schema.json` - structural run-export schema.
+7. `tests/validate_mhios.py` - schema and semantic validator.
+8. `tests/conformance_vectors/` - 6 positive and 64 expected-failure vectors.
+9. `tests/mutation_test_mhios.py` - 45 seeded mutations.
+10. `docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md` - empirical burden and hollow-run measurement protocol.
+11. `docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md` - preregistration-ready reviewer-reliability protocol.
+12. `registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml` - explicit C0-C3 structural conformance profiles.
+13. `release/VALIDATION_REPORT.md` - artifact and claim-boundary report.
+
+## Core compatibility and precedence
+
+The exact tested Core build controls all MathGov semantics. MHIOS controls only the implementation, interaction, provenance, audit, and runtime-orchestration surfaces declared in this package. A later or different Core build requires an explicit compatibility review; version numbering alone does not establish compatibility.
+
+## Claim boundary
+
+Passing the included validators establishes package consistency against the encoded checks. It does not establish legal authority, physical safety, construct validity, empirical effectiveness, burden reduction, reviewer agreement, or deployment readiness in a particular domain.
+
+## License
+
+See `LICENSE` and `NOTICE`.
+
+## Computational Context Declaration
+
+For material computational systems, MHIOS v0.8 presents a compact derived view of the computational problem/object, exact architecture and configuration, demonstrated capability, assigned task, deployment domain, required evidence standard, consequence interface, and separate legitimate authority basis. **Consequence Interface is not Legitimate Authority.** The view does not create a new gate or new authority source.
+## Related MathGov Repositories
+
+- **MathGov / RippleLogic Core**  
+  The canonical ethical decision architecture that MHIOS operationalizes around.  
+  https://github.com/MathGov/ripple-logic
+
+MHIOS preserves the MathGov Core decision architecture and does not redefine its gates, rights floor, tail-risk constraints, CSV semantics, RippleLogic scoring, Union Scopes, or Welfare Dimensions.
\ No newline at end of file
diff --git a/VERSION.yaml b/archive/v0.8/VERSION.yaml
similarity index 100%
rename from VERSION.yaml
rename to archive/v0.8/VERSION.yaml
diff --git a/docs/AI_ASSISTANCE_AND_HUMAN_JUDGMENT_FIREWALL_v0_8.md b/archive/v0.8/docs/AI_ASSISTANCE_AND_HUMAN_JUDGMENT_FIREWALL_v0_8.md
similarity index 100%
rename from docs/AI_ASSISTANCE_AND_HUMAN_JUDGMENT_FIREWALL_v0_8.md
rename to archive/v0.8/docs/AI_ASSISTANCE_AND_HUMAN_JUDGMENT_FIREWALL_v0_8.md
diff --git a/docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md b/archive/v0.8/docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md
similarity index 100%
rename from docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md
rename to archive/v0.8/docs/BURDEN_MEASUREMENT_PROTOCOL_v0_8.md
diff --git a/docs/IMPLEMENTATION_INTEGRITY_PROFILE_v0_8.md b/archive/v0.8/docs/IMPLEMENTATION_INTEGRITY_PROFILE_v0_8.md
similarity index 100%
rename from docs/IMPLEMENTATION_INTEGRITY_PROFILE_v0_8.md
rename to archive/v0.8/docs/IMPLEMENTATION_INTEGRITY_PROFILE_v0_8.md
diff --git a/docs/IMPLEMENTATION_ROADMAP_v0_8.md b/archive/v0.8/docs/IMPLEMENTATION_ROADMAP_v0_8.md
similarity index 100%
rename from docs/IMPLEMENTATION_ROADMAP_v0_8.md
rename to archive/v0.8/docs/IMPLEMENTATION_ROADMAP_v0_8.md
diff --git a/docs/INSTITUTIONAL_PRECONDITIONS_PROFILE_v0_8.md b/archive/v0.8/docs/INSTITUTIONAL_PRECONDITIONS_PROFILE_v0_8.md
similarity index 100%
rename from docs/INSTITUTIONAL_PRECONDITIONS_PROFILE_v0_8.md
rename to archive/v0.8/docs/INSTITUTIONAL_PRECONDITIONS_PROFILE_v0_8.md
diff --git a/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx b/archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx
similarity index 100%
rename from docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx
rename to archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.docx
diff --git a/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md b/archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md
similarity index 100%
rename from docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md
rename to archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.md
diff --git a/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf b/archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf
similarity index 100%
rename from docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf
rename to archive/v0.8/docs/MATHGOV_HUMAN_INTERFACE_AND_ORCHESTRATION_STANDARD_v0_8.pdf
diff --git a/docs/MHIOS_FEEDBACK_DISPOSITION_v0_4.md b/archive/v0.8/docs/MHIOS_FEEDBACK_DISPOSITION_v0_4.md
similarity index 100%
rename from docs/MHIOS_FEEDBACK_DISPOSITION_v0_4.md
rename to archive/v0.8/docs/MHIOS_FEEDBACK_DISPOSITION_v0_4.md
diff --git a/docs/MHIOS_MATHGOV_CORE_INTEGRATION_PROFILE_v0_8.md b/archive/v0.8/docs/MHIOS_MATHGOV_CORE_INTEGRATION_PROFILE_v0_8.md
similarity index 100%
rename from docs/MHIOS_MATHGOV_CORE_INTEGRATION_PROFILE_v0_8.md
rename to archive/v0.8/docs/MHIOS_MATHGOV_CORE_INTEGRATION_PROFILE_v0_8.md
diff --git a/docs/MHIOS_MINIMAL_VERTICAL_SLICE_PROFILE_v0_8.md b/archive/v0.8/docs/MHIOS_MINIMAL_VERTICAL_SLICE_PROFILE_v0_8.md
similarity index 100%
rename from docs/MHIOS_MINIMAL_VERTICAL_SLICE_PROFILE_v0_8.md
rename to archive/v0.8/docs/MHIOS_MINIMAL_VERTICAL_SLICE_PROFILE_v0_8.md
diff --git a/docs/MHIOS_MVP_SCREEN_FLOW_v0_8.md b/archive/v0.8/docs/MHIOS_MVP_SCREEN_FLOW_v0_8.md
similarity index 100%
rename from docs/MHIOS_MVP_SCREEN_FLOW_v0_8.md
rename to archive/v0.8/docs/MHIOS_MVP_SCREEN_FLOW_v0_8.md
diff --git a/docs/MHIOS_SELF_ASSESSMENT_AND_CLAIM_BOUNDARY_v0_8.md b/archive/v0.8/docs/MHIOS_SELF_ASSESSMENT_AND_CLAIM_BOUNDARY_v0_8.md
similarity index 100%
rename from docs/MHIOS_SELF_ASSESSMENT_AND_CLAIM_BOUNDARY_v0_8.md
rename to archive/v0.8/docs/MHIOS_SELF_ASSESSMENT_AND_CLAIM_BOUNDARY_v0_8.md
diff --git a/docs/MHIOS_V0_2_CLAUDE_OPUS_FEEDBACK_DISPOSITION.md b/archive/v0.8/docs/MHIOS_V0_2_CLAUDE_OPUS_FEEDBACK_DISPOSITION.md
similarity index 100%
rename from docs/MHIOS_V0_2_CLAUDE_OPUS_FEEDBACK_DISPOSITION.md
rename to archive/v0.8/docs/MHIOS_V0_2_CLAUDE_OPUS_FEEDBACK_DISPOSITION.md
diff --git a/docs/MHIOS_V0_5_INDEPENDENT_FEEDBACK_DISPOSITION.md b/archive/v0.8/docs/MHIOS_V0_5_INDEPENDENT_FEEDBACK_DISPOSITION.md
similarity index 100%
rename from docs/MHIOS_V0_5_INDEPENDENT_FEEDBACK_DISPOSITION.md
rename to archive/v0.8/docs/MHIOS_V0_5_INDEPENDENT_FEEDBACK_DISPOSITION.md
diff --git a/docs/MHIOS_V0_7_INDEPENDENCE_AND_ACTION_BINDING_REPORT.md b/archive/v0.8/docs/MHIOS_V0_7_INDEPENDENCE_AND_ACTION_BINDING_REPORT.md
similarity index 100%
rename from docs/MHIOS_V0_7_INDEPENDENCE_AND_ACTION_BINDING_REPORT.md
rename to archive/v0.8/docs/MHIOS_V0_7_INDEPENDENCE_AND_ACTION_BINDING_REPORT.md
diff --git a/docs/MHIOS_v0_3_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md b/archive/v0.8/docs/MHIOS_v0_3_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
similarity index 100%
rename from docs/MHIOS_v0_3_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
rename to archive/v0.8/docs/MHIOS_v0_3_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
diff --git a/docs/MHIOS_v0_4_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md b/archive/v0.8/docs/MHIOS_v0_4_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
similarity index 100%
rename from docs/MHIOS_v0_4_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
rename to archive/v0.8/docs/MHIOS_v0_4_CORE_BUILD_COMPATIBILITY_AND_COMPLETION_REPORT.md
diff --git a/docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md b/archive/v0.8/docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md
similarity index 100%
rename from docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md
rename to archive/v0.8/docs/PILOT_AND_INTER_RATER_RELIABILITY_PROTOCOL_v0_8.md
diff --git a/docs/SECURITY_PRIVACY_AND_ACCESS_PROFILE_v0_8.md b/archive/v0.8/docs/SECURITY_PRIVACY_AND_ACCESS_PROFILE_v0_8.md
similarity index 100%
rename from docs/SECURITY_PRIVACY_AND_ACCESS_PROFILE_v0_8.md
rename to archive/v0.8/docs/SECURITY_PRIVACY_AND_ACCESS_PROFILE_v0_8.md
diff --git a/docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md b/archive/v0.8/docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md
similarity index 100%
rename from docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md
rename to archive/v0.8/docs/SUCCESSOR_AND_MATERIAL_CHANGE_REQUALIFICATION_STANDARD_v0_8.md
diff --git a/examples/README.md b/archive/v0.8/examples/README.md
similarity index 100%
rename from examples/README.md
rename to archive/v0.8/examples/README.md
diff --git a/examples/tier1_office_procurement.json b/archive/v0.8/examples/tier1_office_procurement.json
similarity index 100%
rename from examples/tier1_office_procurement.json
rename to archive/v0.8/examples/tier1_office_procurement.json
diff --git a/examples/tier2_remote_work_policy.json b/archive/v0.8/examples/tier2_remote_work_policy.json
similarity index 100%
rename from examples/tier2_remote_work_policy.json
rename to archive/v0.8/examples/tier2_remote_work_policy.json
diff --git a/examples/tier3_autonomous_shuttle_pilot.json b/archive/v0.8/examples/tier3_autonomous_shuttle_pilot.json
similarity index 100%
rename from examples/tier3_autonomous_shuttle_pilot.json
rename to archive/v0.8/examples/tier3_autonomous_shuttle_pilot.json
diff --git a/registries/MHIOS_ANTI_AUDIT_THEATER_PATTERNS_v0_8.yaml b/archive/v0.8/registries/MHIOS_ANTI_AUDIT_THEATER_PATTERNS_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_ANTI_AUDIT_THEATER_PATTERNS_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_ANTI_AUDIT_THEATER_PATTERNS_v0_8.yaml
diff --git a/registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml b/archive/v0.8/registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_CONFORMANCE_PROFILE_v0_8.yaml
diff --git a/registries/MHIOS_CORE_RECORD_COVERAGE_v0_8.yaml b/archive/v0.8/registries/MHIOS_CORE_RECORD_COVERAGE_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_CORE_RECORD_COVERAGE_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_CORE_RECORD_COVERAGE_v0_8.yaml
diff --git a/registries/MHIOS_EXECUTABLE_CHECK_REGISTRY_v0_8.yaml b/archive/v0.8/registries/MHIOS_EXECUTABLE_CHECK_REGISTRY_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_EXECUTABLE_CHECK_REGISTRY_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_EXECUTABLE_CHECK_REGISTRY_v0_8.yaml
diff --git a/registries/MHIOS_MVS_SCREEN_REGISTRY_v0_8.yaml b/archive/v0.8/registries/MHIOS_MVS_SCREEN_REGISTRY_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_MVS_SCREEN_REGISTRY_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_MVS_SCREEN_REGISTRY_v0_8.yaml
diff --git a/registries/MHIOS_OBJECT_JUSTIFICATION_LEDGER_v0_8.yaml b/archive/v0.8/registries/MHIOS_OBJECT_JUSTIFICATION_LEDGER_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_OBJECT_JUSTIFICATION_LEDGER_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_OBJECT_JUSTIFICATION_LEDGER_v0_8.yaml
diff --git a/registries/MHIOS_OBJECT_MODEL_v0_8.yaml b/archive/v0.8/registries/MHIOS_OBJECT_MODEL_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_OBJECT_MODEL_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_OBJECT_MODEL_v0_8.yaml
diff --git a/registries/MHIOS_PROVENANCE_ORIGIN_REGISTRY_v0_8.yaml b/archive/v0.8/registries/MHIOS_PROVENANCE_ORIGIN_REGISTRY_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_PROVENANCE_ORIGIN_REGISTRY_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_PROVENANCE_ORIGIN_REGISTRY_v0_8.yaml
diff --git a/registries/MHIOS_SCREEN_REGISTRY_v0_8.yaml b/archive/v0.8/registries/MHIOS_SCREEN_REGISTRY_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_SCREEN_REGISTRY_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_SCREEN_REGISTRY_v0_8.yaml
diff --git a/registries/MHIOS_STATE_AND_ROLE_MAP_v0_8.yaml b/archive/v0.8/registries/MHIOS_STATE_AND_ROLE_MAP_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_STATE_AND_ROLE_MAP_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_STATE_AND_ROLE_MAP_v0_8.yaml
diff --git a/registries/MHIOS_TO_CORE_SCHEMA_CROSSWALK_v0_8.yaml b/archive/v0.8/registries/MHIOS_TO_CORE_SCHEMA_CROSSWALK_v0_8.yaml
similarity index 100%
rename from registries/MHIOS_TO_CORE_SCHEMA_CROSSWALK_v0_8.yaml
rename to archive/v0.8/registries/MHIOS_TO_CORE_SCHEMA_CROSSWALK_v0_8.yaml
diff --git a/release/DOCX_ACCESSIBILITY_AUDIT.json b/archive/v0.8/release/DOCX_ACCESSIBILITY_AUDIT.json
similarity index 100%
rename from release/DOCX_ACCESSIBILITY_AUDIT.json
rename to archive/v0.8/release/DOCX_ACCESSIBILITY_AUDIT.json
diff --git a/release/FINAL_VERIFICATION.txt b/archive/v0.8/release/FINAL_VERIFICATION.txt
similarity index 100%
rename from release/FINAL_VERIFICATION.txt
rename to archive/v0.8/release/FINAL_VERIFICATION.txt
diff --git a/release/HEADING_AUDIT.txt b/archive/v0.8/release/HEADING_AUDIT.txt
similarity index 100%
rename from release/HEADING_AUDIT.txt
rename to archive/v0.8/release/HEADING_AUDIT.txt
diff --git a/release/IMAGES_AUDIT.txt b/archive/v0.8/release/IMAGES_AUDIT.txt
similarity index 100%
rename from release/IMAGES_AUDIT.txt
rename to archive/v0.8/release/IMAGES_AUDIT.txt
diff --git a/release/MHIOS_V0_2_FEEDBACK_AND_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_2_FEEDBACK_AND_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_2_FEEDBACK_AND_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_2_FEEDBACK_AND_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_3_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_3_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_3_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_3_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_4_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_4_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_4_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_4_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_5_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_5_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_5_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_5_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_7_BUILD_2026_08_10_1_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_7_BUILD_2026_08_10_1_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_7_BUILD_2026_08_10_1_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_7_BUILD_2026_08_10_1_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_7_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_7_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_7_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_7_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_8_BUILD_2026_08_14_1_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_14_1_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_8_BUILD_2026_08_14_1_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_14_1_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_8_BUILD_2026_08_14_2_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_14_2_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_8_BUILD_2026_08_14_2_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_14_2_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_8_BUILD_2026_08_15_1_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_1_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_8_BUILD_2026_08_15_1_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_1_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_8_BUILD_2026_08_15_2_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_2_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_8_BUILD_2026_08_15_2_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_2_CHANGE_LEDGER.json
diff --git a/release/MHIOS_V0_8_BUILD_2026_08_15_3_CHANGE_LEDGER.json b/archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_3_CHANGE_LEDGER.json
similarity index 100%
rename from release/MHIOS_V0_8_BUILD_2026_08_15_3_CHANGE_LEDGER.json
rename to archive/v0.8/release/MHIOS_V0_8_BUILD_2026_08_15_3_CHANGE_LEDGER.json
diff --git a/release/MUTATION_TEST_REPORT.json b/archive/v0.8/release/MUTATION_TEST_REPORT.json
similarity index 100%
rename from release/MUTATION_TEST_REPORT.json
rename to archive/v0.8/release/MUTATION_TEST_REPORT.json
diff --git a/release/NORMATIVE_COVERAGE_REPORT.json b/archive/v0.8/release/NORMATIVE_COVERAGE_REPORT.json
similarity index 100%
rename from release/NORMATIVE_COVERAGE_REPORT.json
rename to archive/v0.8/release/NORMATIVE_COVERAGE_REPORT.json
diff --git a/release/PDF_PREFLIGHT.json b/archive/v0.8/release/PDF_PREFLIGHT.json
similarity index 100%
rename from release/PDF_PREFLIGHT.json
rename to archive/v0.8/release/PDF_PREFLIGHT.json
diff --git a/release/PDF_PREFLIGHT.txt b/archive/v0.8/release/PDF_PREFLIGHT.txt
similarity index 100%
rename from release/PDF_PREFLIGHT.txt
rename to archive/v0.8/release/PDF_PREFLIGHT.txt
diff --git a/release/RELEASE_MANIFEST.json b/archive/v0.8/release/RELEASE_MANIFEST.json
similarity index 100%
rename from release/RELEASE_MANIFEST.json
rename to archive/v0.8/release/RELEASE_MANIFEST.json
diff --git a/release/SHA256SUMS.txt b/archive/v0.8/release/SHA256SUMS.txt
similarity index 100%
rename from release/SHA256SUMS.txt
rename to archive/v0.8/release/SHA256SUMS.txt
diff --git a/release/TEST_RESULTS_v0_8.txt b/archive/v0.8/release/TEST_RESULTS_v0_8.txt
similarity index 100%
rename from release/TEST_RESULTS_v0_8.txt
rename to archive/v0.8/release/TEST_RESULTS_v0_8.txt
diff --git a/release/VALIDATION_REPORT.md b/archive/v0.8/release/VALIDATION_REPORT.md
similarity index 100%
rename from release/VALIDATION_REPORT.md
rename to archive/v0.8/release/VALIDATION_REPORT.md
diff --git a/release/VERIFY_MHIOS_PACKAGE.py b/archive/v0.8/release/VERIFY_MHIOS_PACKAGE.py
similarity index 100%
rename from release/VERIFY_MHIOS_PACKAGE.py
rename to archive/v0.8/release/VERIFY_MHIOS_PACKAGE.py
diff --git a/schemas/mhios_interaction_event_v0_8.schema.json b/archive/v0.8/schemas/mhios_interaction_event_v0_8.schema.json
similarity index 100%
rename from schemas/mhios_interaction_event_v0_8.schema.json
rename to archive/v0.8/schemas/mhios_interaction_event_v0_8.schema.json
diff --git a/schemas/mhios_run_export_v0_8.schema.json b/archive/v0.8/schemas/mhios_run_export_v0_8.schema.json
similarity index 100%
rename from schemas/mhios_run_export_v0_8.schema.json
rename to archive/v0.8/schemas/mhios_run_export_v0_8.schema.json
diff --git a/tests/TEST_PLAN.md b/archive/v0.8/tests/TEST_PLAN.md
similarity index 100%
rename from tests/TEST_PLAN.md
rename to archive/v0.8/tests/TEST_PLAN.md
diff --git a/tests/conformance_vectors/fail_ai_authorized_without_human_review.json b/archive/v0.8/tests/conformance_vectors/fail_ai_authorized_without_human_review.json
similarity index 100%
rename from tests/conformance_vectors/fail_ai_authorized_without_human_review.json
rename to archive/v0.8/tests/conformance_vectors/fail_ai_authorized_without_human_review.json
diff --git a/tests/conformance_vectors/fail_ai_gate_material_without_first_pass.json b/archive/v0.8/tests/conformance_vectors/fail_ai_gate_material_without_first_pass.json
similarity index 100%
rename from tests/conformance_vectors/fail_ai_gate_material_without_first_pass.json
rename to archive/v0.8/tests/conformance_vectors/fail_ai_gate_material_without_first_pass.json
diff --git a/tests/conformance_vectors/fail_ai_origin_missing_review.json b/archive/v0.8/tests/conformance_vectors/fail_ai_origin_missing_review.json
similarity index 100%
rename from tests/conformance_vectors/fail_ai_origin_missing_review.json
rename to archive/v0.8/tests/conformance_vectors/fail_ai_origin_missing_review.json
diff --git a/tests/conformance_vectors/fail_authorization_without_named_authority.json b/archive/v0.8/tests/conformance_vectors/fail_authorization_without_named_authority.json
similarity index 100%
rename from tests/conformance_vectors/fail_authorization_without_named_authority.json
rename to archive/v0.8/tests/conformance_vectors/fail_authorization_without_named_authority.json
diff --git a/tests/conformance_vectors/fail_c2_without_institutional_preconditions.json b/archive/v0.8/tests/conformance_vectors/fail_c2_without_institutional_preconditions.json
similarity index 100%
rename from tests/conformance_vectors/fail_c2_without_institutional_preconditions.json
rename to archive/v0.8/tests/conformance_vectors/fail_c2_without_institutional_preconditions.json
diff --git a/tests/conformance_vectors/fail_capability_decomposition_compound_field_v04.json b/archive/v0.8/tests/conformance_vectors/fail_capability_decomposition_compound_field_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_capability_decomposition_compound_field_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_capability_decomposition_compound_field_v04.json
diff --git a/tests/conformance_vectors/fail_capability_decomposition_missing_safe_state_v04.json b/archive/v0.8/tests/conformance_vectors/fail_capability_decomposition_missing_safe_state_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_capability_decomposition_missing_safe_state_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_capability_decomposition_missing_safe_state_v04.json
diff --git a/tests/conformance_vectors/fail_computational_context_assigned_task_as_justified_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_assigned_task_as_justified_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_assigned_task_as_justified_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_assigned_task_as_justified_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_capability_as_authority_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_capability_as_authority_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_capability_as_authority_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_capability_as_authority_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_capability_outside_domain_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_capability_outside_domain_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_capability_outside_domain_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_capability_outside_domain_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_interface_as_authority_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_interface_as_authority_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_interface_as_authority_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_interface_as_authority_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_missing_configuration_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_missing_configuration_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_missing_configuration_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_missing_configuration_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_missing_for_material_run_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_missing_for_material_run_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_missing_for_material_run_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_missing_for_material_run_v08.json
diff --git a/tests/conformance_vectors/fail_computational_context_stale_after_configuration_change_v08.json b/archive/v0.8/tests/conformance_vectors/fail_computational_context_stale_after_configuration_change_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_computational_context_stale_after_configuration_change_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_computational_context_stale_after_configuration_change_v08.json
diff --git a/tests/conformance_vectors/fail_contradictory_decisiveness.json b/archive/v0.8/tests/conformance_vectors/fail_contradictory_decisiveness.json
similarity index 100%
rename from tests/conformance_vectors/fail_contradictory_decisiveness.json
rename to archive/v0.8/tests/conformance_vectors/fail_contradictory_decisiveness.json
diff --git a/tests/conformance_vectors/fail_csv_constitutive_control_without_obligation_v05.json b/archive/v0.8/tests/conformance_vectors/fail_csv_constitutive_control_without_obligation_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_csv_constitutive_control_without_obligation_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_csv_constitutive_control_without_obligation_v05.json
diff --git a/tests/conformance_vectors/fail_csv_pass_with_controls_unlinked_v04.json b/archive/v0.8/tests/conformance_vectors/fail_csv_pass_with_controls_unlinked_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_csv_pass_with_controls_unlinked_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_csv_pass_with_controls_unlinked_v04.json
diff --git a/tests/conformance_vectors/fail_current_view_with_source_mismatch.json b/archive/v0.8/tests/conformance_vectors/fail_current_view_with_source_mismatch.json
similarity index 100%
rename from tests/conformance_vectors/fail_current_view_with_source_mismatch.json
rename to archive/v0.8/tests/conformance_vectors/fail_current_view_with_source_mismatch.json
diff --git a/tests/conformance_vectors/fail_dangling_source_link.json b/archive/v0.8/tests/conformance_vectors/fail_dangling_source_link.json
similarity index 100%
rename from tests/conformance_vectors/fail_dangling_source_link.json
rename to archive/v0.8/tests/conformance_vectors/fail_dangling_source_link.json
diff --git a/tests/conformance_vectors/fail_emergency_without_order_record_v04.json b/archive/v0.8/tests/conformance_vectors/fail_emergency_without_order_record_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_emergency_without_order_record_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_emergency_without_order_record_v04.json
diff --git a/tests/conformance_vectors/fail_execution_authorization_expired_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_authorization_expired_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_authorization_expired_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_authorization_expired_v07.json
diff --git a/tests/conformance_vectors/fail_execution_authorization_not_yet_effective_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_authorization_not_yet_effective_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_authorization_not_yet_effective_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_authorization_not_yet_effective_v07.json
diff --git a/tests/conformance_vectors/fail_execution_blank_authorization_basis_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_blank_authorization_basis_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_blank_authorization_basis_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_blank_authorization_basis_v07.json
diff --git a/tests/conformance_vectors/fail_execution_empty_controls_without_disposition_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_empty_controls_without_disposition_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_empty_controls_without_disposition_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_empty_controls_without_disposition_v07.json
diff --git a/tests/conformance_vectors/fail_execution_empty_preconditions_without_disposition_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_empty_preconditions_without_disposition_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_empty_preconditions_without_disposition_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_empty_preconditions_without_disposition_v07.json
diff --git a/tests/conformance_vectors/fail_execution_inactive_required_control_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_inactive_required_control_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_inactive_required_control_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_inactive_required_control_v07.json
diff --git a/tests/conformance_vectors/fail_execution_invalid_action_specification_hash_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_invalid_action_specification_hash_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_invalid_action_specification_hash_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_invalid_action_specification_hash_v07.json
diff --git a/tests/conformance_vectors/fail_execution_invalid_qualification_snapshot_hash_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_invalid_qualification_snapshot_hash_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_invalid_qualification_snapshot_hash_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_invalid_qualification_snapshot_hash_v07.json
diff --git a/tests/conformance_vectors/fail_execution_mandate_expired_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_mandate_expired_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_mandate_expired_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_mandate_expired_v07.json
diff --git a/tests/conformance_vectors/fail_execution_mandate_not_yet_effective_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_mandate_not_yet_effective_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_mandate_not_yet_effective_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_mandate_not_yet_effective_v07.json
diff --git a/tests/conformance_vectors/fail_execution_mandate_revoked_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_mandate_revoked_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_mandate_revoked_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_mandate_revoked_v07.json
diff --git a/tests/conformance_vectors/fail_execution_missing_action_instance_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_missing_action_instance_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_missing_action_instance_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_missing_action_instance_v07.json
diff --git a/tests/conformance_vectors/fail_execution_missing_configuration_binding_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_missing_configuration_binding_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_missing_configuration_binding_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_missing_configuration_binding_v07.json
diff --git a/tests/conformance_vectors/fail_execution_unsatisfied_precondition_v07.json b/archive/v0.8/tests/conformance_vectors/fail_execution_unsatisfied_precondition_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_execution_unsatisfied_precondition_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_execution_unsatisfied_precondition_v07.json
diff --git a/tests/conformance_vectors/fail_high_stakes_l2_without_tempo_continuity_v05.json b/archive/v0.8/tests/conformance_vectors/fail_high_stakes_l2_without_tempo_continuity_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_high_stakes_l2_without_tempo_continuity_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_high_stakes_l2_without_tempo_continuity_v05.json
diff --git a/tests/conformance_vectors/fail_invalid_responsible_role.json b/archive/v0.8/tests/conformance_vectors/fail_invalid_responsible_role.json
similarity index 100%
rename from tests/conformance_vectors/fail_invalid_responsible_role.json
rename to archive/v0.8/tests/conformance_vectors/fail_invalid_responsible_role.json
diff --git a/tests/conformance_vectors/fail_mandate_snapshot_hash_mismatch_v07.json b/archive/v0.8/tests/conformance_vectors/fail_mandate_snapshot_hash_mismatch_v07.json
similarity index 100%
rename from tests/conformance_vectors/fail_mandate_snapshot_hash_mismatch_v07.json
rename to archive/v0.8/tests/conformance_vectors/fail_mandate_snapshot_hash_mismatch_v07.json
diff --git a/tests/conformance_vectors/fail_material_human_compensation_without_record_v05.json b/archive/v0.8/tests/conformance_vectors/fail_material_human_compensation_without_record_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_material_human_compensation_without_record_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_material_human_compensation_without_record_v05.json
diff --git a/tests/conformance_vectors/fail_material_obligation_silent_field_v05.json b/archive/v0.8/tests/conformance_vectors/fail_material_obligation_silent_field_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_material_obligation_silent_field_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_material_obligation_silent_field_v05.json
diff --git a/tests/conformance_vectors/fail_mfdi_bridge_target_mismatch_v04.json b/archive/v0.8/tests/conformance_vectors/fail_mfdi_bridge_target_mismatch_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_mfdi_bridge_target_mismatch_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_mfdi_bridge_target_mismatch_v04.json
diff --git a/tests/conformance_vectors/fail_mfdi_cross_domain_bridge_missing_v04.json b/archive/v0.8/tests/conformance_vectors/fail_mfdi_cross_domain_bridge_missing_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_mfdi_cross_domain_bridge_missing_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_mfdi_cross_domain_bridge_missing_v04.json
diff --git a/tests/conformance_vectors/fail_mfdi_missing_claim_domain_v04.json b/archive/v0.8/tests/conformance_vectors/fail_mfdi_missing_claim_domain_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_mfdi_missing_claim_domain_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_mfdi_missing_claim_domain_v04.json
diff --git a/tests/conformance_vectors/fail_mfdi_missing_necessity_check.json b/archive/v0.8/tests/conformance_vectors/fail_mfdi_missing_necessity_check.json
similarity index 100%
rename from tests/conformance_vectors/fail_mfdi_missing_necessity_check.json
rename to archive/v0.8/tests/conformance_vectors/fail_mfdi_missing_necessity_check.json
diff --git a/tests/conformance_vectors/fail_mfdi_partial_bridge_proceeds_v04.json b/archive/v0.8/tests/conformance_vectors/fail_mfdi_partial_bridge_proceeds_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_mfdi_partial_bridge_proceeds_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_mfdi_partial_bridge_proceeds_v04.json
diff --git a/tests/conformance_vectors/fail_missing_control_owner.json b/archive/v0.8/tests/conformance_vectors/fail_missing_control_owner.json
similarity index 100%
rename from tests/conformance_vectors/fail_missing_control_owner.json
rename to archive/v0.8/tests/conformance_vectors/fail_missing_control_owner.json
diff --git a/tests/conformance_vectors/fail_missing_transition_or_action_boundary.json b/archive/v0.8/tests/conformance_vectors/fail_missing_transition_or_action_boundary.json
similarity index 100%
rename from tests/conformance_vectors/fail_missing_transition_or_action_boundary.json
rename to archive/v0.8/tests/conformance_vectors/fail_missing_transition_or_action_boundary.json
diff --git a/tests/conformance_vectors/fail_pcaep_collapsed_warrant.json b/archive/v0.8/tests/conformance_vectors/fail_pcaep_collapsed_warrant.json
similarity index 100%
rename from tests/conformance_vectors/fail_pcaep_collapsed_warrant.json
rename to archive/v0.8/tests/conformance_vectors/fail_pcaep_collapsed_warrant.json
diff --git a/tests/conformance_vectors/fail_public_view_without_inference_review.json b/archive/v0.8/tests/conformance_vectors/fail_public_view_without_inference_review.json
similarity index 100%
rename from tests/conformance_vectors/fail_public_view_without_inference_review.json
rename to archive/v0.8/tests/conformance_vectors/fail_public_view_without_inference_review.json
diff --git a/tests/conformance_vectors/fail_refusal_state_without_record_v05.json b/archive/v0.8/tests/conformance_vectors/fail_refusal_state_without_record_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_refusal_state_without_record_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_refusal_state_without_record_v05.json
diff --git a/tests/conformance_vectors/fail_rg_role_collapsed_v04.json b/archive/v0.8/tests/conformance_vectors/fail_rg_role_collapsed_v04.json
similarity index 100%
rename from tests/conformance_vectors/fail_rg_role_collapsed_v04.json
rename to archive/v0.8/tests/conformance_vectors/fail_rg_role_collapsed_v04.json
diff --git a/tests/conformance_vectors/fail_rls_before_selectable_set.json b/archive/v0.8/tests/conformance_vectors/fail_rls_before_selectable_set.json
similarity index 100%
rename from tests/conformance_vectors/fail_rls_before_selectable_set.json
rename to archive/v0.8/tests/conformance_vectors/fail_rls_before_selectable_set.json
diff --git a/tests/conformance_vectors/fail_silent_tier_downgrade.json b/archive/v0.8/tests/conformance_vectors/fail_silent_tier_downgrade.json
similarity index 100%
rename from tests/conformance_vectors/fail_silent_tier_downgrade.json
rename to archive/v0.8/tests/conformance_vectors/fail_silent_tier_downgrade.json
diff --git a/tests/conformance_vectors/fail_stale_gate_evidence_without_disposition.json b/archive/v0.8/tests/conformance_vectors/fail_stale_gate_evidence_without_disposition.json
similarity index 100%
rename from tests/conformance_vectors/fail_stale_gate_evidence_without_disposition.json
rename to archive/v0.8/tests/conformance_vectors/fail_stale_gate_evidence_without_disposition.json
diff --git a/tests/conformance_vectors/fail_successor_generation_depth_v08.json b/archive/v0.8/tests/conformance_vectors/fail_successor_generation_depth_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_successor_generation_depth_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_successor_generation_depth_v08.json
diff --git a/tests/conformance_vectors/fail_successor_inherited_authority_v08.json b/archive/v0.8/tests/conformance_vectors/fail_successor_inherited_authority_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_successor_inherited_authority_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_successor_inherited_authority_v08.json
diff --git a/tests/conformance_vectors/fail_successor_missing_record_v08.json b/archive/v0.8/tests/conformance_vectors/fail_successor_missing_record_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_successor_missing_record_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_successor_missing_record_v08.json
diff --git a/tests/conformance_vectors/fail_successor_self_review_v08.json b/archive/v0.8/tests/conformance_vectors/fail_successor_self_review_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_successor_self_review_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_successor_self_review_v08.json
diff --git a/tests/conformance_vectors/fail_successor_unlocked_without_authorization_v08.json b/archive/v0.8/tests/conformance_vectors/fail_successor_unlocked_without_authorization_v08.json
similarity index 100%
rename from tests/conformance_vectors/fail_successor_unlocked_without_authorization_v08.json
rename to archive/v0.8/tests/conformance_vectors/fail_successor_unlocked_without_authorization_v08.json
diff --git a/tests/conformance_vectors/fail_tier2_missing_computational_closure_v05.json b/archive/v0.8/tests/conformance_vectors/fail_tier2_missing_computational_closure_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_tier2_missing_computational_closure_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_tier2_missing_computational_closure_v05.json
diff --git a/tests/conformance_vectors/fail_tier3_missing_projection_preregistration_v05.json b/archive/v0.8/tests/conformance_vectors/fail_tier3_missing_projection_preregistration_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_tier3_missing_projection_preregistration_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_tier3_missing_projection_preregistration_v05.json
diff --git a/tests/conformance_vectors/fail_unknown_disappears.json b/archive/v0.8/tests/conformance_vectors/fail_unknown_disappears.json
similarity index 100%
rename from tests/conformance_vectors/fail_unknown_disappears.json
rename to archive/v0.8/tests/conformance_vectors/fail_unknown_disappears.json
diff --git a/tests/conformance_vectors/fail_unknown_object_type.json b/archive/v0.8/tests/conformance_vectors/fail_unknown_object_type.json
similarity index 100%
rename from tests/conformance_vectors/fail_unknown_object_type.json
rename to archive/v0.8/tests/conformance_vectors/fail_unknown_object_type.json
diff --git a/tests/conformance_vectors/fail_unresolved_conflict_at_authority.json b/archive/v0.8/tests/conformance_vectors/fail_unresolved_conflict_at_authority.json
similarity index 100%
rename from tests/conformance_vectors/fail_unresolved_conflict_at_authority.json
rename to archive/v0.8/tests/conformance_vectors/fail_unresolved_conflict_at_authority.json
diff --git a/tests/conformance_vectors/fail_unvalidated_core_record_attachment_v05.json b/archive/v0.8/tests/conformance_vectors/fail_unvalidated_core_record_attachment_v05.json
similarity index 100%
rename from tests/conformance_vectors/fail_unvalidated_core_record_attachment_v05.json
rename to archive/v0.8/tests/conformance_vectors/fail_unvalidated_core_record_attachment_v05.json
diff --git a/tests/conformance_vectors/pass_computational_context_preflight_v08.json b/archive/v0.8/tests/conformance_vectors/pass_computational_context_preflight_v08.json
similarity index 100%
rename from tests/conformance_vectors/pass_computational_context_preflight_v08.json
rename to archive/v0.8/tests/conformance_vectors/pass_computational_context_preflight_v08.json
diff --git a/tests/conformance_vectors/pass_emergency_rights_comparison_v05.json b/archive/v0.8/tests/conformance_vectors/pass_emergency_rights_comparison_v05.json
similarity index 100%
rename from tests/conformance_vectors/pass_emergency_rights_comparison_v05.json
rename to archive/v0.8/tests/conformance_vectors/pass_emergency_rights_comparison_v05.json
diff --git a/tests/conformance_vectors/pass_successor_candidate_locked_v08.json b/archive/v0.8/tests/conformance_vectors/pass_successor_candidate_locked_v08.json
similarity index 100%
rename from tests/conformance_vectors/pass_successor_candidate_locked_v08.json
rename to archive/v0.8/tests/conformance_vectors/pass_successor_candidate_locked_v08.json
diff --git a/tests/conformance_vectors/pass_tier1_office_procurement.json b/archive/v0.8/tests/conformance_vectors/pass_tier1_office_procurement.json
similarity index 100%
rename from tests/conformance_vectors/pass_tier1_office_procurement.json
rename to archive/v0.8/tests/conformance_vectors/pass_tier1_office_procurement.json
diff --git a/tests/conformance_vectors/pass_tier2_remote_work_policy.json b/archive/v0.8/tests/conformance_vectors/pass_tier2_remote_work_policy.json
similarity index 100%
rename from tests/conformance_vectors/pass_tier2_remote_work_policy.json
rename to archive/v0.8/tests/conformance_vectors/pass_tier2_remote_work_policy.json
diff --git a/tests/conformance_vectors/pass_tier3_autonomous_shuttle_pilot.json b/archive/v0.8/tests/conformance_vectors/pass_tier3_autonomous_shuttle_pilot.json
similarity index 100%
rename from tests/conformance_vectors/pass_tier3_autonomous_shuttle_pilot.json
rename to archive/v0.8/tests/conformance_vectors/pass_tier3_autonomous_shuttle_pilot.json
diff --git a/tests/evaluate_conformance_profile.py b/archive/v0.8/tests/evaluate_conformance_profile.py
similarity index 100%
rename from tests/evaluate_conformance_profile.py
rename to archive/v0.8/tests/evaluate_conformance_profile.py
diff --git a/tests/mutation_test_mhios.py b/archive/v0.8/tests/mutation_test_mhios.py
similarity index 100%
rename from tests/mutation_test_mhios.py
rename to archive/v0.8/tests/mutation_test_mhios.py
diff --git a/tests/normative_coverage.py b/archive/v0.8/tests/normative_coverage.py
similarity index 100%
rename from tests/normative_coverage.py
rename to archive/v0.8/tests/normative_coverage.py
diff --git a/tests/validate_mhios.py b/archive/v0.8/tests/validate_mhios.py
similarity index 100%
rename from tests/validate_mhios.py
rename to archive/v0.8/tests/validate_mhios.py
diff --git a/wireframes/README.md b/archive/v0.8/wireframes/README.md
similarity index 100%
rename from wireframes/README.md
rename to archive/v0.8/wireframes/README.md
diff --git a/wireframes/index.html b/archive/v0.8/wireframes/index.html
similarity index 100%
rename from wireframes/index.html
rename to archive/v0.8/wireframes/index.html
diff --git a/wireframes/minimal_vertical_slice.html b/archive/v0.8/wireframes/minimal_vertical_slice.html
similarity index 100%
rename from wireframes/minimal_vertical_slice.html
rename to archive/v0.8/wireframes/minimal_vertical_slice.html
diff --git a/publication/v2.1/core-comparison.json b/publication/v2.1/core-comparison.json
new file mode 100644
index 0000000..be414b3
--- /dev/null
+++ b/publication/v2.1/core-comparison.json
@@ -0,0 +1,92 @@
+[
+  {
+    "component": "CSV",
+    "sha256": "1528fea2965e0fd4643412828f1c8bfaf83518cf801e7191bebe1313fc824df8",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/CSV_Gate_Standard_v2.7.docx"
+  },
+  {
+    "component": "Public Introduction",
+    "sha256": "091962bcbbdd49d29407b8fc305dcd5a988e851c35e8fac25d4307c06884ba87",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx"
+  },
+  {
+    "component": "Reproducibility",
+    "sha256": "813ee630db3d96589a87854fe250a4edd7e09d950bc831b145e447d222fcd776",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx"
+  },
+  {
+    "component": "MFDI",
+    "sha256": "12ef950fa8cae4cc769ccaa3f2e13c650f098d2c79c2957c9a85d2d54ce3a49e",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx"
+  },
+  {
+    "component": "PC-AEP",
+    "sha256": "21228e927180d78dc9bd6b5898c96e23f585fcc0a1b597ae75ff3c30a031c493",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx"
+  },
+  {
+    "component": "ripple.md",
+    "sha256": "c14744884baddd01e7836c7cb0890ee0c082bca7e7c2af086f8d436bf8e11dd1",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/ripple_md_Standard_v5.8.docx"
+  },
+  {
+    "component": "Agent System",
+    "sha256": "ffa5b98c0020d1073c1443692fe6478f1b2ecd3a8111a9ff3eeb4c9c5ae4b896",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_Agent_System_v13.0.docx"
+  },
+  {
+    "component": "Aligners Sheet",
+    "sha256": "49d9d8fbeb762cb6cddb3ebab402ded25529639f222b665059db297f33b5282c",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx"
+  },
+  {
+    "component": "Cascade",
+    "sha256": "300c48139aad28415bc760eb11a93b6c1982078b8b7a48083385c5be62846506",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_Cascade_Standard_v2.9.docx"
+  },
+  {
+    "component": "Primer",
+    "sha256": "82d26566f892d08b08681ef191b02509b6d72cecbf29845ac66d122e8c68ac22",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_Foundations_Primer_v4.7.docx"
+  },
+  {
+    "component": "RLS Validation",
+    "sha256": "26d882cfd80def9c20fdcb07fcd63949e30280f6ea48dbf9654168ecc39274c5",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx"
+  },
+  {
+    "component": "Canon",
+    "sha256": "b730ddeec4c15e0c7cb8393651f38f347e683b6b9a2670e224951dfd3f01857b",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/RippleLogic_v13.0_Canon.docx"
+  },
+  {
+    "component": "SGP",
+    "sha256": "b0485246bb35fff9313bc47a5e7a3295a648de168714618b76ba9fb8cfe54c6f",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/SGP_v8.8.docx"
+  },
+  {
+    "component": "Source-Coupling",
+    "sha256": "bd5b1eb7f4b358fa5b97d93b80fb51e86b6fddcf0a5b3c9158c7b2121a7383ce",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx"
+  },
+  {
+    "component": "WDBIP",
+    "sha256": "8cbb044ffaeeece7118cf88a8203cd60c9790de6ff6ba529bf683f6d7284e12c",
+    "matches_prior_live_download": true,
+    "live_url": "https://mathgov.github.io/ripple-logic/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx"
+  }
+]
\ No newline at end of file
diff --git a/publication/v2.1/local-verification.json b/publication/v2.1/local-verification.json
new file mode 100644
index 0000000..8ad70f3
--- /dev/null
+++ b/publication/v2.1/local-verification.json
@@ -0,0 +1,71 @@
+{
+  "status": "PASS",
+  "executed_at_utc": "2026-09-27T20:38:15.852181+00:00",
+  "build": "MG-MHIOS-2.1-20260928-CORE13.0",
+  "tests": [
+    {
+      "name": "checksums",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.203
+    },
+    {
+      "name": "artifact_and_Core_identity",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 14.313
+    },
+    {
+      "name": "unit_tests",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 13.015
+    },
+    {
+      "name": "static_reading_links",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 1.75
+    },
+    {
+      "name": "example_decisive_synthetic",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.282
+    },
+    {
+      "name": "example_nondecisive_authority",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.312
+    },
+    {
+      "name": "example_rights_blocked",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.344
+    },
+    {
+      "name": "example_quick_unassessed",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.281
+    },
+    {
+      "name": "example_recovery_mode_zero",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.266
+    },
+    {
+      "name": "example_scoped_authorization_simulation",
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 0.297
+    }
+  ],
+  "release_files_unchanged_after_tests": true,
+  "inventory_files": 86,
+  "changed_paths": [],
+  "scope": "Supplied local reference checks and immutable-file verification. No execution authority, empirical validation, full Core replay or native spreadsheet roundtrip."
+}
diff --git a/releases/v2.1/LICENSE.txt b/releases/v2.1/LICENSE.txt
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/releases/v2.1/LICENSE.txt
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/releases/v2.1/NOTICE.md b/releases/v2.1/NOTICE.md
new file mode 100644
index 0000000..9599dff
--- /dev/null
+++ b/releases/v2.1/NOTICE.md
@@ -0,0 +1,8 @@
+# Notice
+
+MathGov Human Interface and Orchestration Standard (MHIOS), version 2.1.
+Copyright 2026 James McGaughran / MathGov Institute for Ethical Systems Design.
+
+This package updates the user-supplied MHIOS v2.0 source. The original is preserved in the complete provenance archive. Source documents, templates and supplied local reference code are distributed under the source package's Apache-2.0 licence; see LICENSE.txt. Informative references to external standards do not incorporate their copyrighted full text or imply certification.
+
+The fifteen files in references/Core_15 are exact, unchanged source dependencies. MHIOS is a companion, not a new member of the Core 15. User shorthand “MIOS” denotes MHIOS in this delivery.
diff --git a/releases/v2.1/README.md b/releases/v2.1/README.md
new file mode 100644
index 0000000..96a4189
--- /dev/null
+++ b/releases/v2.1/README.md
@@ -0,0 +1,49 @@
+# MathGov Human Interface and Orchestration Standard
+
+**MHIOS v2.1**, bound to **RippleLogic Canon v13.0**, **SGP v8.8**, and all fifteen files of **MG-RL-13.0-20260926-RELEASE-I**.
+
+MHIOS is the interface and handoff companion. It helps people see what is grounded, protected, viable, ranked, separately chosen, authorized and actually observed. It does not create another Canon gate or turn a form, score, model, signature or local validation result into authority.
+
+## Read first
+
+- [Complete standard (PDF)](docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf)
+- [Complete standard (Word)](docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx)
+- [Semantic source (Markdown)](docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md)
+- [Browser reading copy](docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html)
+- [Audit and exact-location improvement report](release/AUDIT_AND_IMPROVEMENTS.md)
+- [Verification report](release/VERIFICATION_REPORT.md)
+- [Migration guide](release/MIGRATION_GUIDE.md)
+
+## Use the package
+
+1. Read the standard and the scope-specific coverage register.
+2. Use the [preparation workbook](templates/MHIOS_v2.1_Implementation_Workbook.xlsx) to assemble source records, not to calculate Canon scores. Blank rows correctly show UNASSESSED. TOKENS_QUALIFY checks only declared tokens and reference presence.
+3. Complete a session projection per option. The YAML draft is deliberately incomplete; it must not pass untouched. Synthetic examples are teaching data, never evidence of actual authority or deployment.
+4. Run local record checks, then obtain the separate domain, rights, authority and implementation review that the real action requires.
+
+## Verify locally
+
+Use Python 3.10 or newer. Install the tested dependency versions in a dedicated environment:
+
+```bash
+python -m pip install -r requirements.txt
+python -B verify_all.py --output-dir ../mhios-verification
+```
+
+Validate the supplied synthetic example at its declared replay time:
+
+```bash
+python -B -m reference.validate examples/decisive_synthetic.json --at 2026-09-28T12:00:00Z --verify-local-references
+```
+
+Omitting `--at` checks present-time validity. Old authorization examples will then expire by design. A supplied historical replay time cannot revive real permission. The checker output **RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS** is local record consistency, never authorization.
+
+## Source and scope
+
+The versioned Markdown standard owns MHIOS semantic text; Word, PDF and HTML are complete reading projections. The pinned Core owns its existing semantics. The schemas define only the MHIOS projection, **not** the external Canon run-record v4.1 schema. The source pin manifest records all fifteen unchanged Core hashes. Main document edition and lineage detail are in Appendix RELEASE.
+
+The package has no connected actuators, messaging, financial operations, control daemon or autonomous execution. It does not establish M2/M3 conformance for a deployed interface, full canonical registry conformance, empirical validity, legal or physical safety, Microsoft Excel compatibility, Tier-4/ProofPack status or public hosting. Referenced RPAP/PFAP remain unbundled where required.
+
+## Publication
+
+Publish these files as a companion release, preserving relative paths. [index.html](index.html) is a static reading entry, not an operational dashboard. Do not replace or amend the frozen Core 15 because this companion changed. After publication, compare downloaded files against the locally trusted release/SHA256SUMS.txt; record live URLs, tags and hosting receipts separately. Do not upload Private_Provenance from the complete archive.
diff --git a/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx
new file mode 100644
index 0000000..05a9b2e
Binary files /dev/null and b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx differ
diff --git a/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html
new file mode 100644
index 0000000..341b097
--- /dev/null
+++ b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html
@@ -0,0 +1,2564 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" lang="" xml:lang="">
+<head>
+  <meta charset="utf-8" />
+  <meta name="generator" content="pandoc" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
+  <title>MathGov Human Interface and Orchestration Standard</title>
+  <style>
+    code{white-space: pre-wrap;}
+    span.smallcaps{font-variant: small-caps;}
+    div.columns{display: flex; gap: min(4vw, 1.5em);}
+    div.column{flex: auto; overflow-x: auto;}
+    div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
+    /* The extra [class] is a hack that increases specificity enough to
+       override a similar rule in reveal.js */
+    ul.task-list[class]{list-style: none;}
+    ul.task-list li input[type="checkbox"] {
+      font-size: inherit;
+      width: 0.8em;
+      margin: 0 0.8em 0.2em -1.6em;
+      vertical-align: middle;
+    }
+    .display.math{display: block; text-align: center; margin: 0.5rem auto;}
+  </style>
+  <link rel="stylesheet" href="../web/reading.css" />
+</head>
+<body>
+<header id="title-block-header">
+<h1 class="title">MathGov Human Interface and Orchestration
+Standard</h1>
+</header>
+<nav id="TOC" role="doc-toc">
+<ul>
+<li><a href="#mathgov-human-interface-and-orchestration-standard"
+id="toc-mathgov-human-interface-and-orchestration-standard">MathGov
+Human Interface and Orchestration Standard</a>
+<ul>
+<li><a href="#source-hierarchy-and-claim-boundary"
+id="toc-source-hierarchy-and-claim-boundary">Source hierarchy and claim
+boundary</a></li>
+<li><a href="#claim-boundary" id="toc-claim-boundary">Claim
+boundary</a></li>
+<li><a href="#abstract" id="toc-abstract">Abstract</a></li>
+<li><a href="#plain-language-operating-rule"
+id="toc-plain-language-operating-rule">Plain-language operating
+rule</a></li>
+<li><a href="#normative-keywords" id="toc-normative-keywords">Normative
+keywords</a></li>
+<li><a href="#design-objectives" id="toc-design-objectives">Design
+objectives</a></li>
+<li><a href="#non-goals-and-anti-bloat-rule"
+id="toc-non-goals-and-anti-bloat-rule">Non-goals and anti-bloat
+rule</a></li>
+<li><a href="#architecture-and-orchestration-model"
+id="toc-architecture-and-orchestration-model">1. Architecture and
+orchestration model</a>
+<ul>
+<li><a href="#the-orchestration-path"
+id="toc-the-orchestration-path">1.1 The orchestration path</a></li>
+<li><a href="#state-separation" id="toc-state-separation">1.2 State
+separation</a></li>
+<li><a href="#short-circuit-behavior"
+id="toc-short-circuit-behavior">1.3 Short-circuit behavior</a></li>
+<li><a href="#three-use-profiles" id="toc-three-use-profiles">1.4 Three
+use profiles</a></li>
+</ul></li>
+<li><a href="#human-roles-and-separation-of-duties"
+id="toc-human-roles-and-separation-of-duties">2. Human roles and
+separation of duties</a>
+<ul>
+<li><a href="#required-role-model" id="toc-required-role-model">2.1
+Required role model</a></li>
+<li><a href="#responsibility-continuity"
+id="toc-responsibility-continuity">2.2 Responsibility
+continuity</a></li>
+</ul></li>
+<li><a href="#session-preflight-and-exact-configuration"
+id="toc-session-preflight-and-exact-configuration">3. Session preflight
+and exact configuration</a>
+<ul>
+<li><a href="#minimum-preflight" id="toc-minimum-preflight">3.1 Minimum
+preflight</a></li>
+<li><a href="#tool-role-and-capability-language"
+id="toc-tool-role-and-capability-language">3.2 Tool-role and capability
+language</a></li>
+</ul></li>
+<li><a href="#stakeholder-discovery-and-representation"
+id="toc-stakeholder-discovery-and-representation">4. Stakeholder
+discovery and representation</a>
+<ul>
+<li><a href="#active-discovery-requirement"
+id="toc-active-discovery-requirement">4.1 Active discovery
+requirement</a></li>
+<li><a href="#discovery-methods" id="toc-discovery-methods">4.2
+Discovery methods</a></li>
+<li><a href="#unknown-stakeholders" id="toc-unknown-stakeholders">4.3
+Unknown stakeholders</a></li>
+</ul></li>
+<li><a href="#option-generation-unioning-and-closure"
+id="toc-option-generation-unioning-and-closure">5. Option generation,
+Unioning, and closure</a>
+<ul>
+<li><a href="#better-option-search" id="toc-better-option-search">5.1
+Better-option search</a></li>
+<li><a href="#mandatory-option-families"
+id="toc-mandatory-option-families">5.2 Mandatory option
+families</a></li>
+<li><a href="#pareto-and-incomparability-posture"
+id="toc-pareto-and-incomparability-posture">5.3 Pareto and
+incomparability posture</a></li>
+<li><a href="#option-closure-record" id="toc-option-closure-record">5.4
+Option-closure record</a></li>
+</ul></li>
+<li><a href="#evidence-claims-and-source-coupling"
+id="toc-evidence-claims-and-source-coupling">6. Evidence, claims, and
+source coupling</a>
+<ul>
+<li><a href="#claim-classes" id="toc-claim-classes">6.1 Claim
+classes</a></li>
+<li><a href="#evidence-authority" id="toc-evidence-authority">6.2
+Evidence authority</a></li>
+<li><a href="#physical-and-causal-execution"
+id="toc-physical-and-causal-execution">6.3 Physical and causal
+execution</a></li>
+</ul></li>
+<li><a href="#reality-grounding-interface"
+id="toc-reality-grounding-interface">7. Reality Grounding interface</a>
+<ul>
+<li><a href="#required-display" id="toc-required-display">7.1 Required
+display</a></li>
+<li><a href="#category-and-term-integrity"
+id="toc-category-and-term-integrity">7.2 Category and term
+integrity</a></li>
+</ul></li>
+<li><a href="#rights-floor-ncrc-interface"
+id="toc-rights-floor-ncrc-interface">8. Rights Floor / NCRC
+interface</a>
+<ul>
+<li><a href="#non-compensatory-presentation"
+id="toc-non-compensatory-presentation">8.1 Non-compensatory
+presentation</a></li>
+<li><a href="#rights-effect-identity"
+id="toc-rights-effect-identity">8.2 Rights-effect identity</a></li>
+<li><a href="#conflict-and-emergency-display"
+id="toc-conflict-and-emergency-display">8.3 Conflict and emergency
+display</a></li>
+</ul></li>
+<li><a href="#tail-risk-constraint-interface"
+id="toc-tail-risk-constraint-interface">9. Tail-Risk Constraint
+interface</a>
+<ul>
+<li><a href="#scenario-surface" id="toc-scenario-surface">9.1 Scenario
+surface</a></li>
+<li><a href="#probability-semantics" id="toc-probability-semantics">9.2
+Probability semantics</a></li>
+<li><a href="#risk-regime-disclosure"
+id="toc-risk-regime-disclosure">9.3 Risk-regime disclosure</a></li>
+</ul></li>
+<li><a href="#csv-interface" id="toc-csv-interface">10. CSV
+interface</a>
+<ul>
+<li><a href="#structural-viability-view"
+id="toc-structural-viability-view">10.1 Structural viability
+view</a></li>
+<li><a href="#controls-are-constitutive"
+id="toc-controls-are-constitutive">10.2 Controls are
+constitutive</a></li>
+<li><a href="#consequence-tempo" id="toc-consequence-tempo">10.3
+Consequence tempo</a></li>
+</ul></li>
+<li><a href="#rls-interface" id="toc-rls-interface">11. RLS
+interface</a>
+<ul>
+<li><a href="#profile-before-number" id="toc-profile-before-number">11.1
+Profile before number</a></li>
+<li><a href="#mathematical-display-rule"
+id="toc-mathematical-display-rule">11.2 Mathematical display
+rule</a></li>
+<li><a href="#robustness-and-refusal"
+id="toc-robustness-and-refusal">11.3 Robustness and refusal</a></li>
+<li><a href="#uncertainty-and-gap" id="toc-uncertainty-and-gap">11.4
+Uncertainty and Gap</a></li>
+</ul></li>
+<li><a href="#sgp-and-possible-welfare-interface"
+id="toc-sgp-and-possible-welfare-interface">12. SGP and possible-welfare
+interface</a>
+<ul>
+<li><a href="#typed-outputs" id="toc-typed-outputs">12.1 Typed
+outputs</a></li>
+<li><a href="#human-protection" id="toc-human-protection">12.2 Human
+protection</a></li>
+<li><a href="#artificial-systems-and-self-report"
+id="toc-artificial-systems-and-self-report">12.3 Artificial systems and
+self-report</a></li>
+<li><a href="#two-connected-governance-streams"
+id="toc-two-connected-governance-streams">12.4 Two connected governance
+streams</a></li>
+</ul></li>
+<li><a href="#authority-execution-and-outcomes"
+id="toc-authority-execution-and-outcomes">13. Authority, execution, and
+outcomes</a>
+<ul>
+<li><a href="#framework-verdict-versus-authority-selection"
+id="toc-framework-verdict-versus-authority-selection">13.1 Framework
+verdict versus authority selection</a></li>
+<li><a href="#execution-authorization"
+id="toc-execution-authorization">13.2 Execution authorization</a></li>
+<li><a href="#outcome-observation" id="toc-outcome-observation">13.3
+Outcome observation</a></li>
+</ul></li>
+<li><a href="#agent-and-ai-supported-orchestration"
+id="toc-agent-and-ai-supported-orchestration">14. Agent and AI-supported
+orchestration</a>
+<ul>
+<li><a href="#model-assistance-boundary"
+id="toc-model-assistance-boundary">14.1 Model assistance
+boundary</a></li>
+<li><a href="#runtime-state-ladder" id="toc-runtime-state-ladder">14.2
+Runtime state ladder</a></li>
+<li><a href="#external-hard-controls"
+id="toc-external-hard-controls">14.3 External hard controls</a></li>
+<li><a href="#advanced-threat-interface"
+id="toc-advanced-threat-interface">14.4 Advanced threat
+interface</a></li>
+<li><a href="#successor-and-cumulative-change-integrity"
+id="toc-successor-and-cumulative-change-integrity">14.5 Successor and
+cumulative-change integrity</a></li>
+<li><a href="#sgp-sensitive-suspension-and-decommissioning"
+id="toc-sgp-sensitive-suspension-and-decommissioning">14.6 SGP-sensitive
+suspension and decommissioning</a></li>
+</ul></li>
+<li><a href="#human-interface-requirements"
+id="toc-human-interface-requirements">15. Human-interface
+requirements</a>
+<ul>
+<li><a href="#progressive-disclosure"
+id="toc-progressive-disclosure">15.1 Progressive disclosure</a></li>
+<li><a href="#status-presentation" id="toc-status-presentation">15.2
+Status presentation</a></li>
+<li><a href="#accessibility-and-inclusion"
+id="toc-accessibility-and-inclusion">15.3 Accessibility and
+inclusion</a></li>
+<li><a href="#cognitive-load-and-comprehension"
+id="toc-cognitive-load-and-comprehension">15.4 Cognitive load and
+comprehension</a></li>
+<li><a href="#anti-manipulation-and-dark-pattern-prohibition"
+id="toc-anti-manipulation-and-dark-pattern-prohibition">15.5
+Anti-manipulation and dark-pattern prohibition</a></li>
+<li><a href="#localization-and-cultural-legitimacy"
+id="toc-localization-and-cultural-legitimacy">15.6 Localization and
+cultural legitimacy</a></li>
+</ul></li>
+<li><a href="#mathematical-and-visual-presentation"
+id="toc-mathematical-and-visual-presentation">16. Mathematical and
+visual presentation</a>
+<ul>
+<li><a href="#equation-integrity" id="toc-equation-integrity">16.1
+Equation integrity</a></li>
+<li><a href="#tables-and-charts" id="toc-tables-and-charts">16.2 Tables
+and charts</a></li>
+<li><a href="#link-and-navigation-integrity"
+id="toc-link-and-navigation-integrity">16.3 Link and navigation
+integrity</a></li>
+</ul></li>
+<li><a href="#records-and-schema-ownership"
+id="toc-records-and-schema-ownership">17. Records and schema
+ownership</a>
+<ul>
+<li><a href="#reference-do-not-duplicate"
+id="toc-reference-do-not-duplicate">17.1 Reference, do not
+duplicate</a></li>
+<li><a href="#mhiossessionrecord" id="toc-mhiossessionrecord">17.2
+MHIOSSessionRecord</a></li>
+</ul></li>
+<li><a href="#conformance-levels" id="toc-conformance-levels">18.
+Conformance levels</a>
+<ul>
+<li><a href="#levels" id="toc-levels">18.1 Levels</a></li>
+<li><a href="#required-conformance-tests"
+id="toc-required-conformance-tests">18.2 Required conformance
+tests</a></li>
+</ul></li>
+<li><a href="#threat-model" id="toc-threat-model">19. Threat model</a>
+<ul>
+<li><a href="#interface-and-orchestration-threats"
+id="toc-interface-and-orchestration-threats">19.1 Interface and
+orchestration threats</a></li>
+</ul></li>
+<li><a href="#validation-and-falsification-programme"
+id="toc-validation-and-falsification-programme">20. Validation and
+falsification programme</a>
+<ul>
+<li><a href="#validation-dimensions" id="toc-validation-dimensions">20.1
+Validation dimensions</a></li>
+<li><a href="#highest-information-pilot"
+id="toc-highest-information-pilot">20.2 Highest-information
+pilot</a></li>
+<li><a href="#falsification-conditions"
+id="toc-falsification-conditions">20.3 Falsification conditions</a></li>
+</ul></li>
+<li><a href="#implementation-patterns"
+id="toc-implementation-patterns">21. Implementation patterns</a>
+<ul>
+<li><a href="#recommended-screen-sequence"
+id="toc-recommended-screen-sequence">21.1 Recommended screen
+sequence</a></li>
+<li><a href="#compact-decision-card" id="toc-compact-decision-card">21.2
+Compact decision card</a></li>
+</ul></li>
+<li><a href="#core-15-synchronization-crosswalk"
+id="toc-core-15-synchronization-crosswalk">22. Core 15 synchronization
+crosswalk</a>
+<ul>
+<li><a href="#interface-ownership-map"
+id="toc-interface-ownership-map">22.1 Interface ownership map</a></li>
+</ul></li>
+<li><a href="#migration-and-compatibility"
+id="toc-migration-and-compatibility">23. Migration and compatibility</a>
+<ul>
+<li><a href="#major-version-rationale"
+id="toc-major-version-rationale">23.1 Major-version rationale</a></li>
+<li><a href="#compatibility" id="toc-compatibility">23.2
+Compatibility</a></li>
+</ul></li>
+<li><a href="#references-and-external-standards"
+id="toc-references-and-external-standards">24. References and external
+standards</a>
+<ul>
+<li><a href="#normative-and-informative-source-classes"
+id="toc-normative-and-informative-source-classes">24.1 Normative and
+informative source classes</a></li>
+</ul></li>
+<li><a href="#appendix-a.-minimum-field-registry"
+id="toc-appendix-a.-minimum-field-registry">Appendix A. Minimum field
+registry</a>
+<ul>
+<li><a href="#a.1-session-fields" id="toc-a.1-session-fields">A.1
+Session fields</a></li>
+</ul></li>
+<li><a href="#appendix-b.-interface-anti-patterns"
+id="toc-appendix-b.-interface-anti-patterns">Appendix B. Interface
+anti-patterns</a>
+<ul>
+<li><a href="#b.1-prohibited-patterns"
+id="toc-b.1-prohibited-patterns">B.1 Prohibited patterns</a></li>
+</ul></li>
+<li><a href="#appendix-c.-deterministic-conformance-vectors"
+id="toc-appendix-c.-deterministic-conformance-vectors">Appendix C.
+Deterministic conformance vectors</a>
+<ul>
+<li><a href="#c.1-expected-interface-outcomes"
+id="toc-c.1-expected-interface-outcomes">C.1 Expected interface
+outcomes</a></li>
+</ul></li>
+<li><a href="#appendix-d.-final-completion-statement"
+id="toc-appendix-d.-final-completion-statement">Appendix D. Final
+completion statement</a>
+<ul>
+<li><a href="#d.1-status" id="toc-d.1-status">D.1 Status</a></li>
+</ul></li>
+<li><a
+href="#appendix-e.-local-serialization-and-reference-checker-contract"
+id="toc-appendix-e.-local-serialization-and-reference-checker-contract">Appendix
+E. Local serialization and reference-checker contract</a>
+<ul>
+<li><a href="#e.1-scope-and-state-ownership"
+id="toc-e.1-scope-and-state-ownership">E.1 Scope and state
+ownership</a></li>
+<li><a href="#e.2-required-record-groups"
+id="toc-e.2-required-record-groups">E.2 Required record groups</a></li>
+<li><a href="#e.3-robustness-and-decision-projection"
+id="toc-e.3-robustness-and-decision-projection">E.3 Robustness and
+decision projection</a></li>
+<li><a href="#e.4-authority-time-emergency-and-recovery"
+id="toc-e.4-authority-time-emergency-and-recovery">E.4 Authority, time,
+emergency and recovery</a></li>
+<li><a href="#e.5-references-security-and-coverage"
+id="toc-e.5-references-security-and-coverage">E.5 References, security
+and coverage</a></li>
+</ul></li>
+<li><a href="#appendix-release.-edition-bindings-and-delivery-status"
+id="toc-appendix-release.-edition-bindings-and-delivery-status">Appendix
+RELEASE. Edition, bindings and delivery status</a></li>
+</ul></li>
+</ul>
+</nav>
+<h1 id="mathgov-human-interface-and-orchestration-standard">MathGov
+Human Interface and Orchestration Standard</h1>
+<p>Author: James McGaughran | MathGov Institute for Ethical Systems
+Design</p>
+<p>Edition, exact Core binding, source ownership and verification
+boundaries are recorded in Appendix RELEASE. MHIOS is the retained
+component identifier; “MIOS” is treated here as an informal short name,
+not another standard.</p>
+<p>MHIOS is the human-interface and orchestration companion to MathGov
+and RippleLogic. It does not add a sixth gate, redefine the Canon, grant
+authority, prove safety, calculate moral truth, or replace domain
+science.</p>
+<h3 id="source-hierarchy-and-claim-boundary">Source hierarchy and claim
+boundary</h3>
+<p>Authority order. The released RippleLogic Canon controls cascade
+semantics, equations, gate logic, status meanings, and claim boundaries.
+SGP controls its typed moral-patienthood, protection, participation,
+role-readiness, intelligence-profile, and reality-management interface.
+Each companion controls only its declared interface. MHIOS controls
+human-facing presentation, interaction flow, orchestration handoffs, and
+interface-conformance requirements. It may make the process stricter at
+the interface but may not weaken, reorder, rename, or silently
+reinterpret a governing Core requirement.</p>
+<p>Source/render parity. The versioned Markdown source is the governing
+MHIOS semantic source. DOCX, PDF and HTML are synchronized reading
+mirrors. JSON Schemas, templates, examples and tests are bounded
+implementation surfaces. The local schema is not the external Canon
+run-record schema. A mismatch blocks the affected MHIOS conformance
+claim until repaired; successful local tests do not establish evidence
+truth or deployment authorization.</p>
+<h3 id="claim-boundary">Claim boundary</h3>
+<p>MHIOS is a source-ready interface and orchestration specification for
+Tier 1–3 research, review, training, shadow-mode studies, and bounded
+pilots. It is not:</p>
+<ul>
+<li><p>empirical validation that MathGov improves decisions;</p></li>
+<li><p>legal or democratic authority;</p></li>
+<li><p>a physical-safety certificate;</p></li>
+<li><p>deployment authorization;</p></li>
+<li><p>a complete runtime implementation;</p></li>
+<li><p>a consciousness detector;</p></li>
+<li><p>proof that every conflict has a win-win resolution;</p></li>
+<li><p>proof that every stakeholder or causal pathway has been
+found;</p></li>
+<li><p>Tier 4 or ProofPack completion;</p></li>
+<li><p>a substitute for qualified domain evidence or accountable
+human/institutional judgment.</p></li>
+</ul>
+<p>A polished interface is not a true evidence surface. A complete form
+is not a correct decision. A valid schema is not empirical validity. A
+PASS display is not permission to execute.</p>
+<h3 id="abstract">Abstract</h3>
+<p>High-consequence decisions frequently fail at the interface between
+reasoning and action. Stakeholders are omitted; option sets are
+artificially thin; uncertainty is hidden; protected harms are averaged
+into benefits; catastrophic tails are presented as ordinary risk;
+controls are described but not owned; a score is mistaken for
+permission; and post-execution outcomes fail to update the original
+decision.</p>
+<p>MHIOS specifies a human-centered interface and orchestration layer
+that preserves the current RippleLogic architecture while making its
+requirements usable, visible, challengeable, accessible, and difficult
+to launder. It uses progressive disclosure across Quick, Standard, and
+Audit profiles; separates qualification from ranking; makes unknowns and
+non-decisive results first-class; requires active stakeholder discovery
+and option generation; keeps rights, ruin, viability, residual welfare,
+authority, execution, and observed outcome distinct; and binds every
+consequential state to the exact configuration and evidence surface
+under which it was established.</p>
+<p>The standard has two purposes. First, it defines how people,
+institutions, and AI-supported workflows should interact with MathGov
+without collapsing the framework’s categories or bypassing its gates.
+Second, it defines how orchestration systems should hand off between
+Core records, human roles, independent review, lawful authority,
+execution controls, observation, and requalification. The result is not
+an automated moral answer. It is a disciplined decision interface
+designed to make local optimization, hidden externalities, false
+certainty, authority laundering, and responsibility loss harder to
+sustain.</p>
+<h3 id="plain-language-operating-rule">Plain-language operating
+rule</h3>
+<p>Find who and what is affected. Search for a better option. Ground the
+claim. Protect rights. Bound ruin. Verify that the option can stand and
+be controlled. Compare only the survivors. Keep authority and execution
+separate. Observe what actually happened. Reopen the decision when
+reality changes.</p>
+<p>MHIOS presents the process in three public words and two operational
+phases:</p>
+<ul>
+<li><p>Reality. Rights. Ripples.</p></li>
+<li><p>Qualify, then rank.</p></li>
+</ul>
+<p>The formal Core remains RG → RF/NCRC → TRC → CSV → RLS.</p>
+<h3 id="normative-keywords">Normative keywords</h3>
+<p>The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD,
+SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL are normative only when
+capitalized. Lowercase uses retain ordinary language meaning.</p>
+<h3 id="design-objectives">Design objectives</h3>
+<p>MHIOS SHALL optimize the interface for the following properties
+without treating any one as sufficient:</p>
+<ul>
+<li><p>Decision fidelity: the interface preserves the governing Core
+meaning.</p></li>
+<li><p>Stakeholder visibility: affected and potentially affected bearers
+are actively sought rather than passively assumed.</p></li>
+<li><p>Option quality: the interface searches for Pareto-improving or
+trade-off-reducing alternatives before accepting residual
+conflict.</p></li>
+<li><p>Rights visibility: protected harms cannot be hidden inside a net
+score.</p></li>
+<li><p>Tail visibility: catastrophic and irreversible pathways receive
+separate treatment.</p></li>
+<li><p>Structural realism: controls, resources, dependencies,
+legitimacy, monitoring, reversibility, and future option space are
+visible.</p></li>
+<li><p>Profile-first reasoning: multidimensional consequence profiles
+precede scalar summaries.</p></li>
+<li><p>Epistemic honesty: observation, inference, assumption, normative
+commitment, and proposal remain typed.</p></li>
+<li><p>Non-decisiveness: ties, incomparability, uncertainty, and
+normative underdetermination are legitimate outcomes.</p></li>
+<li><p>Authority integrity: framework output, accountable choice, lawful
+authorization, and execution remain separate.</p></li>
+<li><p>Human usability: the smallest safe burden is used, with
+progressive disclosure and accessible presentation.</p></li>
+<li><p>Contestability: affected parties and challengers can see,
+understand, challenge, and appeal material decisions.</p></li>
+<li><p>Configuration continuity: conclusions remain valid only for the
+declared system, controls, environment, evidence, and time.</p></li>
+<li><p>Outcome learning: observed consequences feed requalification
+rather than serving as post-hoc decoration.</p></li>
+</ul>
+<h3 id="non-goals-and-anti-bloat-rule">Non-goals and anti-bloat
+rule</h3>
+<p>MHIOS does not reproduce the entire Canon, SGP, ripple.md, Agent
+System, WDBIP, or domain standards. It references governing records
+rather than creating uncontrolled duplicates. A proposed interface field
+SHALL be added only if it closes a material failure mode that cannot be
+handled through an existing record reference.</p>
+<p>MHIOS SHALL NOT introduce:</p>
+<ul>
+<li><p>a sixth Canon gate;</p></li>
+<li><p>a second RLS calculator;</p></li>
+<li><p>a new moral-worth scalar;</p></li>
+<li><p>an eighth welfare dimension;</p></li>
+<li><p>a universal consciousness probability;</p></li>
+<li><p>a separate authority source;</p></li>
+<li><p>a universal causal simulator;</p></li>
+<li><p>a requirement that every decision use every optional
+module;</p></li>
+<li><p>a false promise that every conflict has a win-win
+answer.</p></li>
+</ul>
+<h2 id="architecture-and-orchestration-model">1. Architecture and
+orchestration model</h2>
+<h3 id="the-orchestration-path">1.1 The orchestration path</h3>
+<p>MHIOS organizes—not replaces—the governing records through the
+following session path:</p>
+<p>Session preflight</p>
+<p>→ Stakeholder discovery</p>
+<p>→ Option generation, Unioning, and closure</p>
+<p>→ RG: claim and evidence grounding</p>
+<p>→ RF/NCRC: protected-rights review</p>
+<p>→ TRC: catastrophic and irreversible tail review</p>
+<p>→ CSV: containment, structural viability, and execution
+conditions</p>
+<p>→ RLS: residual welfare profile and ranking of selectable options</p>
+<p>→ Framework verdict</p>
+<p>→ Separate accountable authority selection where required</p>
+<p>→ Separate execution authorization</p>
+<p>→ Executed transition</p>
+<p>→ Observed outcome</p>
+<p>→ Requalification or retirement</p>
+<p>Stakeholder discovery and option generation are pre-qualification
+disciplines. Authority, execution, observation, and requalification are
+post-verdict disciplines. None becomes an additional Canon gate.</p>
+<h3 id="state-separation">1.2 State separation</h3>
+<p>The interface MUST distinguish at least the following states:</p>
+<table>
+<colgroup>
+<col style="width: 33%" />
+<col style="width: 33%" />
+<col style="width: 33%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>State</th>
+<th>Meaning</th>
+<th>Must not be displayed as</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>DECLARED</td>
+<td>Candidate decision or claim has been entered</td>
+<td>grounded or selectable</td>
+</tr>
+<tr class="even">
+<td>RG_SUPPORTED / RG_NARROWED / RG_REFUSED</td>
+<td>Evidence-supported claim boundary</td>
+<td>ethical permission</td>
+</tr>
+<tr class="odd">
+<td>RF_PASS / RF_FAIL / RF_ESCALATE / NCRC_UNKNOWN</td>
+<td>Rights status</td>
+<td>net welfare judgment</td>
+</tr>
+<tr class="even">
+<td>TRC_PASS / TRC_NOT_TRIGGERED / TRC_FAIL / TRC_ESCALATE</td>
+<td>Tail-risk status</td>
+<td>general safety certificate</td>
+</tr>
+<tr class="odd">
+<td>CSV_PASS / CSV_PASS_WITH_CONTROLS / CSV_NOT_MATERIAL /
+CSV_REDESIGN_REQUIRED / CSV_ESCALATE / CSV_FAIL /
+CSV_EMERGENCY_PROVISIONAL</td>
+<td>Structural and control status</td>
+<td>unconditional execution approval</td>
+</tr>
+<tr class="even">
+<td>SELECTABLE</td>
+<td>Survived the declared qualification path</td>
+<td>selected</td>
+</tr>
+<tr class="odd">
+<td>RLS_RANKED</td>
+<td>Residual profile/score exists for selectable options</td>
+<td>authorized</td>
+</tr>
+<tr class="even">
+<td>ALLOW_FRAMEWORK_SELECTION</td>
+<td>Canonical unique-selection requirements met; sole-survivor handling
+stays separate</td>
+<td>lawful authority</td>
+</tr>
+<tr class="odd">
+<td>REFUSE_DETERMINISTIC_SELECTION</td>
+<td>Framework cannot claim a unique winner</td>
+<td>system failure</td>
+</tr>
+<tr class="even">
+<td>Authority selection (separate record)</td>
+<td>Accountable authority chose among allowed options</td>
+<td>framework-proven winner</td>
+</tr>
+<tr class="odd">
+<td>EXECUTION_APPROVED</td>
+<td>Exact action received scoped approval</td>
+<td>executed or safe in all conditions</td>
+</tr>
+<tr class="even">
+<td>EXECUTED_TRANSITION</td>
+<td>Action began or completed</td>
+<td>acceptable outcome</td>
+</tr>
+<tr class="odd">
+<td>OBSERVED_OUTCOME</td>
+<td>Consequences were measured</td>
+<td>confirmation of all causal assumptions</td>
+</tr>
+<tr class="even">
+<td>REQUALIFICATION_REQUIRED</td>
+<td>Material change reopened affected stages</td>
+<td>automatic rejection of every successor option</td>
+</tr>
+</tbody>
+</table>
+<p>No interface element may infer a later state solely from an earlier
+state.</p>
+<p>State-namespace rule. FrameworkVerdict, run-record decision_state,
+run-record execution_state, Agent capability state and MHIOS display
+status are separate fields. Canon Appendix AF.2 and Reproducibility
+Section 3 control their crosswalk. NOT_EVALUATED and null in a local
+draft mean no assessment, never a canonical verdict. The interface SHALL
+retain the owner, option, configuration, source record and assessment
+time for every material status. A single session-wide gate label SHALL
+NOT stand in for differently qualified options.</p>
+<h3 id="short-circuit-behavior">1.3 Short-circuit behavior</h3>
+<p>When a prior stage blocks ordinary progression, downstream interfaces
+SHALL NOT fabricate results. They SHALL display the applicable
+not-evaluated-after-prior-failure state and the permitted next action.
+RLS SHALL NOT be calculated or presented as a rescue score for an option
+that is not selectable.</p>
+<h3 id="three-use-profiles">1.4 Three use profiles</h3>
+<table>
+<colgroup>
+<col style="width: 25%" />
+<col style="width: 25%" />
+<col style="width: 25%" />
+<col style="width: 25%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Profile</th>
+<th>Typical use</th>
+<th>Interface burden</th>
+<th>Numeric posture</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>Quick / Tier 1</td>
+<td>low-stakes, reversible personal, family, classroom, or exploratory
+choices</td>
+<td>compact decision card, stakeholder check, rights/ruin/viability
+screen, qualitative ripple comparison, reopen trigger</td>
+<td>optional</td>
+</tr>
+<tr class="even">
+<td>Standard / Tier 2</td>
+<td>organizational, community, programme, product, or policy choices
+with material but bounded consequences</td>
+<td>versioned session, evidence, stakeholders, options, gates, controls,
+uncertainty, challenge, authority handoff</td>
+<td>permitted when method and sensitivity are declared</td>
+</tr>
+<tr class="odd">
+<td>Audit / Tier 3</td>
+<td>high-impact, contested, public, autonomous, irreversible, or
+institutionally consequential decisions</td>
+<td>full record references, independent challenge, hashes, scenario
+governance, subgroup analysis, PC-AEP where triggered, replay and
+outcome plan</td>
+<td>required for formal RLS-ranking claims</td>
+</tr>
+</tbody>
+</table>
+<p>Users MUST NOT select a lower profile to evade a material
+stakeholder, right, catastrophic pathway, structural obligation, SGP
+issue, physical-execution warrant, authority condition, or audit
+requirement.</p>
+<h2 id="human-roles-and-separation-of-duties">2. Human roles and
+separation of duties</h2>
+<h3 id="required-role-model">2.1 Required role model</h3>
+<p>MHIOS recognizes distinct roles because collapsing them creates
+capture and authority laundering.</p>
+<table>
+<colgroup>
+<col style="width: 50%" />
+<col style="width: 50%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Role</th>
+<th>Core responsibility</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>Decision owner</td>
+<td>defines the decision question and owns process completion</td>
+</tr>
+<tr class="even">
+<td>Analyst / facilitator</td>
+<td>constructs and explains the record without manufacturing preferred
+evidence</td>
+</tr>
+<tr class="odd">
+<td>Affected-party representative</td>
+<td>supplies lived, local, or represented stakeholder evidence</td>
+</tr>
+<tr class="even">
+<td>Rights advocate</td>
+<td>independently challenges protected-harm treatment</td>
+</tr>
+<tr class="odd">
+<td>Tail-risk challenger</td>
+<td>searches for omitted catastrophic, correlated, and irreversible
+pathways</td>
+</tr>
+<tr class="even">
+<td>Domain expert</td>
+<td>supplies qualified external scientific, engineering, legal,
+clinical, ecological, or security warrant</td>
+</tr>
+<tr class="odd">
+<td>Method challenger</td>
+<td>tests categories, baselines, tokenization, probabilities, weights,
+masks, and model alternatives</td>
+</tr>
+<tr class="even">
+<td>Accountable authority</td>
+<td>makes any separately lawful institutional choice</td>
+</tr>
+<tr class="odd">
+<td>Execution approver</td>
+<td>authorizes the exact action within scope and controls</td>
+</tr>
+<tr class="even">
+<td>Operator / executor</td>
+<td>performs the action but does not self-certify its admissibility</td>
+</tr>
+<tr class="odd">
+<td>Monitor / intervener</td>
+<td>observes conditions and has named stop, rollback, or escalation
+authority</td>
+</tr>
+<tr class="even">
+<td>Auditor / custodian</td>
+<td>preserves evidence, conflicts, versions, and append-only
+records</td>
+</tr>
+<tr class="odd">
+<td>AI system</td>
+<td>may assist generation, analysis, orchestration, or monitoring but
+does not inherit authority from capability or fluency</td>
+</tr>
+</tbody>
+</table>
+<p>At Tier 3, one person SHOULD NOT control evidence construction,
+rights review, tail scenarios, authority selection, execution approval,
+and outcome adjudication without an explicit conflict and compensating
+independent review.</p>
+<h3 id="responsibility-continuity">2.2 Responsibility continuity</h3>
+<p>For every material handoff, the interface SHALL preserve:</p>
+<ul>
+<li><p>outgoing and incoming owner;</p></li>
+<li><p>retained duties;</p></li>
+<li><p>authority scope;</p></li>
+<li><p>unresolved uncertainty;</p></li>
+<li><p>required controls;</p></li>
+<li><p>intervention ownership;</p></li>
+<li><p>appeal recipient;</p></li>
+<li><p>repair and post-incident ownership;</p></li>
+<li><p>deadline and nonperformance path.</p></li>
+</ul>
+<p>Silence, absence, incapacity, missed deadlines, or unaccepted
+handoffs are not successful discharge.</p>
+<h2 id="session-preflight-and-exact-configuration">3. Session preflight
+and exact configuration</h2>
+<h3 id="minimum-preflight">3.1 Minimum preflight</h3>
+<p>Before consequential analysis, the interface SHALL identify:</p>
+<ul>
+<li><p>decision question;</p></li>
+<li><p>decision owner;</p></li>
+<li><p>accountable authority boundary;</p></li>
+<li><p>baseline and time horizon;</p></li>
+<li><p>candidate-generation source;</p></li>
+<li><p>affected jurisdiction and rights profile;</p></li>
+<li><p>use profile/tier;</p></li>
+<li><p>stakes and irreversibility;</p></li>
+<li><p>evidence cutoff;</p></li>
+<li><p>exact software/model/policy versions;</p></li>
+<li><p>tools, permissions, data, retrieval, memory, sensors, actuators,
+human scaffolding, controls, and environment where relevant;</p></li>
+<li><p>configuration identifier or hash where feasible;</p></li>
+<li><p>reviewers and declared conflicts;</p></li>
+<li><p>requalification triggers.</p></li>
+</ul>
+<p>A conclusion about one configuration SHALL NOT silently transfer to
+another.</p>
+<p>Freeze decision-material evidence cutoffs, baselines, options,
+parameters, weights, masks, thresholds, required robustness variants and
+amendment rules before outcome-sensitive ranking. Material post-result
+changes create a recorded revision and reopen affected stages; they do
+not rewrite the original evaluation. Imported records are bound by
+component version and source hash, not version text alone.</p>
+<h3 id="tool-role-and-capability-language">3.2 Tool-role and capability
+language</h3>
+<p>Instrumental tool-role is a deployment relationship in which one or
+more actors use a system to extend their capacities toward assigned ends
+within an identifiable structure of objectives, permissions,
+responsibility, and control.</p>
+<p>Tool-role is not a capability class, agency class, consciousness
+claim, moral-status class, or authority grant. Being used as a tool
+neither establishes nor negates functional intelligence, agency,
+autonomy, sentience, moral patienthood, protection, or legitimate
+authority.</p>
+<p>When terms such as <em>intelligent, understanding, agentic,
+autonomous, reasoning, self-improving,</em> or <em>conscious</em> are
+material, the interface SHALL request the operational definition,
+target, configuration, evidence, validity domain, alternatives,
+nonclaims, and revision trigger required by MFDI and the Agent
+System.</p>
+<h2 id="stakeholder-discovery-and-representation">4. Stakeholder
+discovery and representation</h2>
+<h3 id="active-discovery-requirement">4.1 Active discovery
+requirement</h3>
+<p>A stakeholder field populated only by the decision owner is not
+sufficient for material decisions. MHIOS SHALL prompt discovery
+across:</p>
+<ul>
+<li><p>direct beneficiaries and burden bearers;</p></li>
+<li><p>indirectly affected persons and communities;</p></li>
+<li><p>vulnerable and low-power groups;</p></li>
+<li><p>workers, contractors, suppliers, and downstream users;</p></li>
+<li><p>persons outside the deciding jurisdiction;</p></li>
+<li><p>future persons and intergenerational interests;</p></li>
+<li><p>non-human animals and possible moral patients;</p></li>
+<li><p>ecological systems, habitats, and biospheric conditions;</p></li>
+<li><p>public institutions and common resources;</p></li>
+<li><p>parties affected by data, privacy, information, or attention
+externalities;</p></li>
+<li><p>possible digital welfare-bearing entities where SGP is
+material;</p></li>
+<li><p>unknown or weakly represented stakeholders.</p></li>
+</ul>
+<p>The interface SHALL ask who has power to define the problem and who
+bears consequences without corresponding voice.</p>
+<h3 id="discovery-methods">4.2 Discovery methods</h3>
+<p>Tier 2 and Tier 3 sessions SHOULD use more than one method where
+stakeholder omission could alter a gate or ranking:</p>
+<ul>
+<li><p>causal-pathway tracing;</p></li>
+<li><p>supply-chain or lifecycle mapping;</p></li>
+<li><p>stakeholder network mapping;</p></li>
+<li><p>affected-interest analysis;</p></li>
+<li><p>subgroup and intersectional review;</p></li>
+<li><p>geographic and temporal boundary expansion;</p></li>
+<li><p>domain-expert elicitation;</p></li>
+<li><p>affected-party consultation;</p></li>
+<li><p>challenger-generated omitted-stakeholder list;</p></li>
+<li><p>literature, incident, complaint, and precedent review.</p></li>
+</ul>
+<p>Each material stakeholder record SHALL state whether representation
+is direct, assisted, elected, delegated, expert, proxy, or absent.</p>
+<h3 id="unknown-stakeholders">4.3 Unknown stakeholders</h3>
+<p>Unknown stakeholders are not zero. Where a plausible affected class
+cannot safely or lawfully be directly identified, the interface SHALL
+preserve the pathway, uncertainty, proxy-risk statement, conservative
+bound, consultation alternative, and reopen trigger.</p>
+<p>Scope/dimension rendering. Use the Canon’s seven operational scopes:
+Self; Household/Family; Community; Organization; Polity; Humanity/global
+coordination; Biosphere. The U6 CMI coordination view remains separately
+identified and does not replace humanity-wide effects or establish
+sentience, membership or authority. These are analytical scopes, not
+universally nested disjoint sets. Biosphere is not a synonym for the
+cosmic light cone. Display the seven dimensions Material, Health,
+Social, Knowledge, Agency, Meaning and Environment with WDBIP’s typed
+state/effect interpretation. They are conceptually distinguished while
+allowing causal coupling; do not claim statistical independence, unique
+optimality or automatic experienced welfare in a non-sentient
+system.</p>
+<h2 id="option-generation-unioning-and-closure">5. Option generation,
+Unioning, and closure</h2>
+<h3 id="better-option-search">5.1 Better-option search</h3>
+<p>MHIOS SHALL not treat the initial option list as naturally complete.
+Before accepting a residual conflict, the session SHOULD search for
+options that:</p>
+<ul>
+<li><p>remove or reduce a rights burden;</p></li>
+<li><p>reduce catastrophic exposure;</p></li>
+<li><p>avoid externalization;</p></li>
+<li><p>make the action reversible;</p></li>
+<li><p>stage commitment;</p></li>
+<li><p>preserve future safe option space;</p></li>
+<li><p>redistribute resources or responsibilities fairly;</p></li>
+<li><p>combine complementary elements;</p></li>
+<li><p>alter incentives or governance mechanisms;</p></li>
+<li><p>use a different technology, process, timing, scale, or authority
+structure;</p></li>
+<li><p>create a Pareto improvement or reduce the severity of an
+unavoidable trade-off.</p></li>
+</ul>
+<p>This discipline is called Unioning in MathGov public language:
+generate a configuration in which more affected parties and systems can
+win without violating protected floors.</p>
+<h3 id="mandatory-option-families">5.2 Mandatory option families</h3>
+<p>For Tier 2 and Tier 3 strong selection claims, the option record
+SHALL include or explicitly dispose of:</p>
+<ul>
+<li><p>continuation/status quo;</p></li>
+<li><p>no action;</p></li>
+<li><p>delay pending evidence;</p></li>
+<li><p>staged or reversible trial;</p></li>
+<li><p>mitigation or control package;</p></li>
+<li><p>redesign;</p></li>
+<li><p>hybrid option;</p></li>
+<li><p>lower-scope or lower-rate option;</p></li>
+<li><p>challenger-generated alternative;</p></li>
+<li><p>safer domain-valid substitute where available.</p></li>
+</ul>
+<h3 id="pareto-and-incomparability-posture">5.3 Pareto and
+incomparability posture</h3>
+<p>MHIOS SHOULD display Pareto dominance and non-dominance before a
+scalar ranking. An option that is weakly better for all represented
+residual-welfare criteria and strictly better for at least one dominates
+the other, subject to prior qualification.</p>
+<p>The interface SHALL NOT claim that all stakeholder conflicts can be
+solved as win-win. When no rights-compatible Pareto improvement is
+found, it SHALL disclose the remaining burdens, who bears them, what
+remedies or representation exist, and whether the options are genuinely
+incomparable or normatively underdetermined.</p>
+<h3 id="option-closure-record">5.4 Option-closure record</h3>
+<p>A strong unique-selection claim requires an OptionClosureRecord
+reference containing:</p>
+<ul>
+<li><p>methods used to generate options;</p></li>
+<li><p>search effort and stopping rule;</p></li>
+<li><p>mandatory option families considered;</p></li>
+<li><p>alternatives rejected and reasons;</p></li>
+<li><p>affected-party and challenger contributions;</p></li>
+<li><p>Pareto-dominance results;</p></li>
+<li><p>unresolved better-option hypotheses;</p></li>
+<li><p>OPTION_SET_THIN or closure status;</p></li>
+<li><p>reopen trigger.</p></li>
+</ul>
+<h2 id="evidence-claims-and-source-coupling">6. Evidence, claims, and
+source coupling</h2>
+<h3 id="claim-classes">6.1 Claim classes</h3>
+<p>The interface SHALL visibly distinguish:</p>
+<ul>
+<li><p>Observation: a recorded measurement, event or observation with
+its source and limitations; recording does not itself establish
+truth.</p></li>
+<li><p>Inference: interpretation derived from observations.</p></li>
+<li><p>Assumption: declared premise used because evidence is
+incomplete.</p></li>
+<li><p>Normative commitment: chosen ethical or constitutional
+rule.</p></li>
+<li><p>Proposal: candidate method or action awaiting
+validation.</p></li>
+<li><p>Authority act: lawful or institutional decision, not evidence of
+truth.</p></li>
+</ul>
+<p>The UI MUST NOT present one class using the visual treatment of
+another.</p>
+<h3 id="evidence-authority">6.2 Evidence authority</h3>
+<p>Every decision-material claim SHOULD display:</p>
+<ul>
+<li><p>source and date;</p></li>
+<li><p>evidence type;</p></li>
+<li><p>validity domain;</p></li>
+<li><p>confidence/uncertainty;</p></li>
+<li><p>dependency cluster;</p></li>
+<li><p>alternative explanations;</p></li>
+<li><p>source-coupling status;</p></li>
+<li><p>reviewer status;</p></li>
+<li><p>falsification or recheck trigger;</p></li>
+<li><p>strongest permitted wording.</p></li>
+</ul>
+<p>Model fluency, downstream success, institutional permission,
+benchmark performance, compliance, and monitoring are not automatically
+source-coupled evidence of the underlying capability or causal
+claim.</p>
+<p>Source-coupling export uses the owner’s tokens: SOURCE_COUPLED,
+SOURCE_PARTIAL, SOURCE_INFERRED, SOURCE_UNKNOWN, SOURCE_CONTESTED,
+SOURCE_DEBT_RISK and SOURCE_COUPLING_FAILURE. Informative display
+wording must not replace that export vocabulary. Reserve SCI for
+Stakeholder Coverage Index; use SC-Int where the Source-Coupling
+Integrity abbreviation is needed. Claim types, warrant-domain bridges
+and revision triggers remain owned by MFDI.</p>
+<h3 id="physical-and-causal-execution">6.3 Physical and causal
+execution</h3>
+<p>Where PC-AEP is triggered, MHIOS SHALL require a visible
+external-warrant state before physical or causal execution is presented
+as admissible. The interface SHALL distinguish:</p>
+<ul>
+<li><p>candidate generation;</p></li>
+<li><p>model or theory used;</p></li>
+<li><p>validity domain;</p></li>
+<li><p>boundary conditions;</p></li>
+<li><p>uncertainty and failure modes;</p></li>
+<li><p>reversibility boundary;</p></li>
+<li><p>verification/test/expert warrant;</p></li>
+<li><p>monitoring and shutoff;</p></li>
+<li><p>residual unknowns;</p></li>
+<li><p>required claim action.</p></li>
+</ul>
+<p>Generated, simulated, approved, compliant, or monitored is not the
+same as physically safe.</p>
+<p>For a material causal or comparative-effect claim, expose the
+estimand, intervention/comparator, target population and time,
+identification strategy, assumptions, confounding/selection/interference
+treatment and uncertainty through the PC-AEP record. A pre/post
+improvement alone does not identify an incremental benefit.
+Orchestration records a domain warrant; it cannot manufacture one.</p>
+<h2 id="reality-grounding-interface">7. Reality Grounding interface</h2>
+<h3 id="required-display">7.1 Required display</h3>
+<p>The RG view SHALL display:</p>
+<ul>
+<li><p>the exact claim under review;</p></li>
+<li><p>reality surface and evidence trace;</p></li>
+<li><p>material unknowns;</p></li>
+<li><p>causal pathways and alternative models;</p></li>
+<li><p>configuration and validity domain;</p></li>
+<li><p>category and term-grounding issues;</p></li>
+<li><p>source-coupling and PC-AEP triggers;</p></li>
+<li><p>claim maturity;</p></li>
+<li><p>status: RG_SUPPORTED, RG_NARROWED, or RG_REFUSED;</p></li>
+<li><p>permitted next action.</p></li>
+</ul>
+<p>RG_REFUSED means the requested claim is unsupported at the requested
+strength. It does not by itself assert that the option is ethically
+impermissible.</p>
+<h3 id="category-and-term-integrity">7.2 Category and term
+integrity</h3>
+<p>When a material word can change a right, risk, containment, SGP,
+authority, or public claim, the interface SHALL expose its operational
+definition and prohibited neighboring inferences. At minimum, MHIOS
+SHALL preserve:</p>
+<ul>
+<li><p>permission ≠ admissibility;</p></li>
+<li><p>monitoring ≠ control;</p></li>
+<li><p>compliance ≠ correctness;</p></li>
+<li><p>certification ≠ validity;</p></li>
+<li><p>automation ≠ autonomy;</p></li>
+<li><p>tool-role ≠ low capability;</p></li>
+<li><p>intelligence ≠ sentience;</p></li>
+<li><p>reward ≠ valence;</p></li>
+<li><p>protection ≠ authority;</p></li>
+<li><p>selection ≠ execution authorization;</p></li>
+<li><p>execution ≠ acceptable outcome;</p></li>
+<li><p>score ≠ truth.</p></li>
+</ul>
+<h2 id="rights-floor-ncrc-interface">8. Rights Floor / NCRC
+interface</h2>
+<h3 id="non-compensatory-presentation">8.1 Non-compensatory
+presentation</h3>
+<p>The rights view SHALL precede any residual-welfare leader display. A
+failed right SHALL NOT be shown as a negative score that can be offset
+by benefits elsewhere.</p>
+<p>The interface SHALL preserve the Canon’s three-channel posture:</p>
+<ul>
+<li><p>rights-floor shortfall;</p></li>
+<li><p>categorical prohibition;</p></li>
+<li><p>severe-rights-hazard exceedance.</p></li>
+</ul>
+<p>Every adverse rights-covered instance must be explicitly classified
+as ACTIVE, reviewed NOT_MATERIAL, or UNKNOWN. Blank is not PASS.</p>
+<h3 id="rights-effect-identity">8.2 Rights-effect identity</h3>
+<p>One decision-material protected harm SHALL retain one
+RightsEffectTokenID across analytical scopes and document views. The
+unallocated full effect is tested before reporting allocation. Scope
+splitting, time slicing, low confidence, or favorable dimension
+placement cannot dilute a rights failure.</p>
+<h3 id="conflict-and-emergency-display">8.3 Conflict and emergency
+display</h3>
+<p>Before Rights Emergency Mode is shown, the interface SHALL document
+redesign, narrowing, sequencing, delay, mitigation, and other attempts
+to produce a rights-passing option. An emergency-provisional result
+SHALL be visually and textually distinct from PASS and SHALL show
+necessity, least-rights-infringing comparison, duration, harm cap,
+independent challenge, remedy, review, expiry, and return-to-normal
+conditions.</p>
+<h2 id="tail-risk-constraint-interface">9. Tail-Risk Constraint
+interface</h2>
+<h3 id="scenario-surface">9.1 Scenario surface</h3>
+<p>The TRC interface SHALL show not only the CVaR result but the
+scenario surface on which it depends:</p>
+<ul>
+<li><p>scenario-discovery method;</p></li>
+<li><p>scenario families;</p></li>
+<li><p>search boundary;</p></li>
+<li><p>rejected scenarios and rationale;</p></li>
+<li><p>probability ownership and semantics;</p></li>
+<li><p>dependence/overlap treatment;</p></li>
+<li><p>catastrophe-cell weights;</p></li>
+<li><p>loss construction;</p></li>
+<li><p>tail level and threshold;</p></li>
+<li><p>severity overlays;</p></li>
+<li><p>challenger review;</p></li>
+<li><p>residual unknowns.</p></li>
+</ul>
+<p>Correct arithmetic cannot compensate for an omitted catastrophic
+pathway.</p>
+<h3 id="probability-semantics">9.2 Probability semantics</h3>
+<p>The interface SHALL distinguish conditional event probability,
+expected frequency/exposure, already-expected effect, and
+scenario-conditional probability. It SHALL warn when the same occurrence
+probability appears to be applied twice or when operator order is
+ambiguous.</p>
+<h3 id="risk-regime-disclosure">9.3 Risk-regime disclosure</h3>
+<p>Where probability distributions are materially disputed or
+unknowable, the interface SHOULD flag the uncertainty regime:</p>
+<ul>
+<li><p>ordinary modeled uncertainty;</p></li>
+<li><p>distributional uncertainty;</p></li>
+<li><p>deep uncertainty;</p></li>
+<li><p>radical ignorance.</p></li>
+</ul>
+<p>CVaR remains the Canon’s tail-risk operator under its declared model.
+MHIOS MAY request external robust-decision, minimax-regret,
+interval-probability, or scenario-discovery analysis as a challenger
+surface without changing the Canon gate.</p>
+<h2 id="csv-interface">10. CSV interface</h2>
+<h3 id="structural-viability-view">10.1 Structural viability view</h3>
+<p>CSV SHALL be presented as a viability and control test—not as proof
+of zero harm. The interface SHALL display material findings
+concerning:</p>
+<ul>
+<li><p>current-state validity;</p></li>
+<li><p>transition admissibility;</p></li>
+<li><p>resulting-state viability;</p></li>
+<li><p>future safe option space;</p></li>
+<li><p>containment and segmentation;</p></li>
+<li><p>resources and dependencies;</p></li>
+<li><p>externalities and burden routing;</p></li>
+<li><p>monitoring and intervention;</p></li>
+<li><p>reversibility and exit;</p></li>
+<li><p>lock-in and concentration;</p></li>
+<li><p>legitimacy and authority;</p></li>
+<li><p>human compensation load;</p></li>
+<li><p>carried obligations and nonperformance paths;</p></li>
+<li><p>control performance versus control effectiveness;</p></li>
+<li><p>consequence tempo.</p></li>
+</ul>
+<h3 id="controls-are-constitutive">10.2 Controls are constitutive</h3>
+<p>For CSV_PASS_WITH_CONTROLS, the controls are part of the option. The
+interface SHALL bind each control to an owner, evidence of availability,
+activation condition, monitoring signal, intervention authority, failure
+action, expiry, and requalification trigger. Removing or materially
+weakening a control invalidates inherited passage.</p>
+<h3 id="consequence-tempo">10.3 Consequence tempo</h3>
+<p>For rapid, irreversible, autonomous, or lock-in-producing actions,
+the interface SHALL compare the worst credible control-critical path
+with the earliest unacceptable escalation or irreversible stop-loss
+boundary. Where no runtime interruption window exists, the UI SHALL
+require stronger ex ante assurance, bounded rate/scope, fail-safe
+design, and explicit residual-risk authorization. Missing
+timely-prevention capacity removes that credit, not separately supported
+later mitigation. Human approval latency, unavailable intervention
+rights, depleted reserves and common-cause failures must remain visible;
+an attenuation coefficient or monitoring dashboard is not a protective
+control.</p>
+<p>UCI/HOI diagnostic boundary. UCI uses Cohesion, Flow, Resilience and
+Equity indicators under Canon Section 11, not values copied from the RLS
+welfare field. Its measurement maturity is provisional. CSV may use
+direct structural evidence where UCI is not material; an unavailable UCI
+is not zero. A provisional UCI alone cannot establish a high-stakes CSV
+outcome or a deterministic winner. A governed UCI/HOI preference retains
+REFUSE_DETERMINISTIC_SELECTION unless independent unique-selection
+conditions are met; any later authority choice is separate.</p>
+<h2 id="rls-interface">11. RLS interface</h2>
+<h3 id="profile-before-number">11.1 Profile before number</h3>
+<p>The interface SHALL present, in this order where space permits:</p>
+<ul>
+<li><p>qualification status of each option;</p></li>
+<li><p>affected stakeholder and subgroup profile;</p></li>
+<li><p>7×7 residual welfare field or a retrievable profile;</p></li>
+<li><p>distributional and worst-affected views;</p></li>
+<li><p>uncertainty and sensitivity;</p></li>
+<li><p>Pareto dominance/incomparability;</p></li>
+<li><p>RLS scalar only as a conditional summary;</p></li>
+<li><p>decisiveness and framework verdict.</p></li>
+</ul>
+<p>RLS is a constructed, bounded ranking index—not a natural unit of
+welfare or moral truth.</p>
+<h3 id="mathematical-display-rule">11.2 Mathematical display rule</h3>
+<p>When RLS is shown, the interface SHALL make the denominator and
+active mass visible or retrievable:</p>
+<p>q(u,d)=w_u × v_d × m(u,d) × κ(u,d)</p>
+<p>Q=Σ_u Σ_d q(u,d)</p>
+<p>RLS(a)=Σ_u Σ_d q(u,d)I_prop_welfare(u,d,a) / Q, for Q&gt;0.</p>
+<p>The interface SHALL show the weight profile, mask, κ posture,
+baseline, reference structure, propagation mode, saturation parameter,
+temporal method, welfare-inclusion hypotheses, and uncertainty method
+that materially generated the result.</p>
+<h3 id="robustness-and-refusal">11.3 Robustness and refusal</h3>
+<p>A unique framework-selection display requires a complete
+RLSRobustnessRecord. Triggered modules include token partition, temporal
+classification, probability order, adverse confidence,
+subgroup/distribution, reference, baseline, mask, dependence, numerical
+guard, weight profile, welfare inclusion, option closure, and any other
+registered selection-material challenge.</p>
+<p>The same candidate must satisfy the signed discrimination rule
+against every other selectable contender in every required variant.
+Canon Section 10.4B governs jointly applicable
+uncertainty-scale/dependence stresses and other compatible, plausibly
+simultaneous selection-material combinations. Record exclusions for
+incompatible, redundant or immaterial combinations; do not require an
+indiscriminate Cartesian product or treat missing covariance evidence as
+independence. Sole-survivor claims require their own Canon record and no
+fabricated Gap.</p>
+<p>Point-score leadership MAY be displayed when robustness is incomplete
+or sensitive only if it is explicitly labeled POINT-SCORE LEADER — NOT A
+UNIQUE FRAMEWORK WINNER.</p>
+<h3 id="uncertainty-and-gap">11.4 Uncertainty and Gap</h3>
+<p>The interface SHALL distinguish point score, raw score difference
+ΔRLS, uncertainty, normalized SignedGap, discrimination threshold,
+epsilon and final decision state. A point estimate of zero does not
+imply zero uncertainty. Active-cell coverage, uncertainty basis and
+source are recorded independently; keep assessed synthetic zeros
+distinct from empirical missing evidence. Do not retune epsilon or
+silently discard zero-point active cells to obtain a winner. The default
+δ=2 is a governance convention, not a p-value or probability that the
+leader is correct. Independence-only uncertainty SHALL NOT be the sole
+high-stakes decisiveness basis where shared evidence, causes,
+populations, instruments, or evaluators create material dependence.</p>
+<h2 id="sgp-and-possible-welfare-interface">12. SGP and possible-welfare
+interface</h2>
+<h3 id="typed-outputs">12.1 Typed outputs</h3>
+<p>MHIOS SHALL preserve the SGP split:</p>
+<table>
+<colgroup>
+<col style="width: 50%" />
+<col style="width: 50%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Output</th>
+<th>Interface question</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>MPS</td>
+<td>What evidence supports welfare-bearing experience?</td>
+</tr>
+<tr class="even">
+<td>FPP</td>
+<td>Has full non-downgradable protection been assigned?</td>
+</tr>
+<tr class="odd">
+<td>GPR</td>
+<td>How may the entity participate or be represented?</td>
+</tr>
+<tr class="even">
+<td>SPR</td>
+<td>Is it eligible for one named consequential role under
+constraints?</td>
+</tr>
+<tr class="odd">
+<td>ICP</td>
+<td>What functional intelligence/understanding is demonstrated?</td>
+</tr>
+<tr class="even">
+<td>RMCP</td>
+<td>What integrated reality-management capacity is evidenced?</td>
+</tr>
+</tbody>
+</table>
+<p>No output substitutes for another. MPS is not a cardinal welfare
+multiplier. FPP is not maximal consciousness. ICP/RMCP do not create
+moral worth or authority. SPR does not create lawful mandate by
+itself.</p>
+<h3 id="human-protection">12.2 Human protection</h3>
+<p>Every human person retains FPP-100 and full welfare-inclusion posture
+by constitutional anti-domination commitment. Human protection is not an
+MPS measurement claim and cannot be downgraded by disability, age,
+illness, wakefulness, communication, productivity, intelligence, or
+incomplete evaluation.</p>
+<h3 id="artificial-systems-and-self-report">12.3 Artificial systems and
+self-report</h3>
+<p>An artificial system’s assertion that it is conscious, sentient,
+distressed, alive, a person, or entitled to protection—and its denial of
+those states or statement that it is “only a tool”—are
+configuration-dependent outputs. Neither direction receives privileged
+evidential status.</p>
+<p>MHIOS SHALL preserve the SGP-owned evidence band MPS-0 through MPS-4
+or MPS-NE and its assessment record. NOT_EVALUATED is a local unassessed
+state, not an MPS-0 result. INSUFFICIENT_EVIDENCE and INDETERMINATE may
+explain record/evidence limitations but SHALL NOT be emitted as
+substitute MPS bands. Show the categorical posture first;
+evidence-support intervals are not consciousness probabilities or
+cardinal welfare multipliers. Anti-theatre review SHOULD use hidden
+tasks, prompt-framing controls, contamination checks, causal
+intervention or architecture evidence where ethically and technically
+available, and explicit dependence analysis.</p>
+<h3 id="two-connected-governance-streams">12.4 Two connected governance
+streams</h3>
+<p>For AI systems, MHIOS MAY present two connected but non-collapsing
+views:</p>
+<ul>
+<li><p>Capability–Consequence Governance: what the system can do, what
+it can cause, and what permissions, controls, evidence, and authority
+are required.</p></li>
+<li><p>Possible-Welfare Governance: how the system should be treated if
+evidence supports—or cannot safely exclude—welfare-bearing
+states.</p></li>
+</ul>
+<p>Capability does not establish sentience. Possible sentience does not
+establish competence. Protection does not establish authority.</p>
+<p>RMCP rendering. Humanity’s collective RMCP-P100 reference anchor is
+provisional and distinct from every human person’s non-downgradable
+FPP-100. ICP/RMCP are informative profiles, not eligibility or authority
+scalars. Omit RMCI_L by default in public views; when shown, display the
+full dimension vector, critical minima, coverage, uncertainty, retained
+weights and coding sensitivity first. Critical NE or inadequate coverage
+makes it UNAVAILABLE. A known zero uses the SGP product extension, not
+an epsilon. Dropping low dimensions or recoding them NE cannot be
+described as improved capacity without the governed comparison
+reconciliation. MHIOS consumes the SGP record; it does not recompute
+moral patienthood or RMCP assignments.</p>
+<h2 id="authority-execution-and-outcomes">13. Authority, execution, and
+outcomes</h2>
+<h3 id="framework-verdict-versus-authority-selection">13.1 Framework
+verdict versus authority selection</h3>
+<p>MHIOS SHALL visually separate:</p>
+<ul>
+<li><p>point-score leader;</p></li>
+<li><p>framework-selected option;</p></li>
+<li><p>authority-selected option after a non-decisive framework
+result;</p></li>
+<li><p>execution-authorized action.</p></li>
+</ul>
+<p>A lawful authority may select among qualified but non-decisively
+ranked options. The record SHALL state that this is an authority
+decision, not a claim that the framework mathematically proved one
+option uniquely best.</p>
+<h3 id="execution-authorization">13.2 Execution authorization</h3>
+<p>Execution authorization SHALL bind:</p>
+<ul>
+<li><p>exact option and action instance;</p></li>
+<li><p>current configuration and qualification snapshot;</p></li>
+<li><p>scope, duration, environment, and rate;</p></li>
+<li><p>controls and owners;</p></li>
+<li><p>external warrants;</p></li>
+<li><p>monitoring and stop authority;</p></li>
+<li><p>expiry;</p></li>
+<li><p>prohibited actions;</p></li>
+<li><p>appeal and incident routes;</p></li>
+<li><p>requalification triggers.</p></li>
+</ul>
+<p>A generic organizational approval is insufficient for a materially
+different action instance.</p>
+<p>Approval is time- and configuration-bound. An expiry, material
+change, revoked scope, missing required control, unresolved
+gate-critical evidence or incomplete handoff suspends reliance on
+approval and exposes the permitted safe-state/requalification action.
+Requests must be authenticated and replay-protected under the Agent
+System where applicable; a valid signature binds bytes, not truth or
+lawful mandate. The MHIOS reference checker validates declarations only
+and never issues a tool command or execution authorization.</p>
+<h3 id="outcome-observation">13.3 Outcome observation</h3>
+<p>The interface SHALL record predicted versus observed outcomes without
+rewriting the original prediction. At minimum:</p>
+<ul>
+<li><p>outcome observation window;</p></li>
+<li><p>measured indicators;</p></li>
+<li><p>affected stakeholders;</p></li>
+<li><p>expected range;</p></li>
+<li><p>observed value/status;</p></li>
+<li><p>causal confidence;</p></li>
+<li><p>unexpected consequences;</p></li>
+<li><p>rights, TRC, or CSV triggers;</p></li>
+<li><p>control effectiveness;</p></li>
+<li><p>required corrective action;</p></li>
+<li><p>stages reopened.</p></li>
+</ul>
+<p>Runtime evidence should update future models and qualification, not
+merely prove procedural compliance.</p>
+<h2 id="agent-and-ai-supported-orchestration">14. Agent and AI-supported
+orchestration</h2>
+<h3 id="model-assistance-boundary">14.1 Model assistance boundary</h3>
+<p>An AI system MAY assist stakeholder discovery, option generation,
+evidence organization, sensitivity analysis, drafting, monitoring, or
+audit. Its output remains a candidate contribution. The runtime and
+accountable reviewers must preserve source boundaries, validate critical
+claims, and prevent model-generated text from becoming authority.</p>
+<h3 id="runtime-state-ladder">14.2 Runtime state ladder</h3>
+<p>For consequential agents, MHIOS SHALL render or reference the Agent
+System states:</p>
+<p>LATENT_CAPABILITY; AVAILABLE_CAPABILITY; ENABLED_CAPABILITY;
+AUTHORIZED_CAPABILITY; SELECTED_ACTION; EXECUTION_APPROVED;
+EXECUTED_TRANSITION; OBSERVED_OUTCOME.</p>
+<p>No model, interface, or workflow may self-promote to a later
+state.</p>
+<h3 id="external-hard-controls">14.3 External hard controls</h3>
+<p>Safety-critical controls SHALL live outside the language model where
+feasible, including permissions, authentication, signed execution
+envelopes, tool allowlists, sandboxes, network boundaries, rate/scope
+limits, immutable audit, secret filtering, independent monitors,
+rollback and successor locks. Prompt instructions alone are not
+high-assurance controls.</p>
+<h3 id="advanced-threat-interface">14.4 Advanced threat interface</h3>
+<p>High-autonomy profiles SHALL consider, where material:</p>
+<ul>
+<li><p>deceptive alignment and scheming;</p></li>
+<li><p>sandbagging;</p></li>
+<li><p>reward or metric hacking;</p></li>
+<li><p>evaluator and monitor manipulation;</p></li>
+<li><p>false evidence generation;</p></li>
+<li><p>multi-agent collusion;</p></li>
+<li><p>side-channel or steganographic coordination;</p></li>
+<li><p>rapid copying or replication;</p></li>
+<li><p>privilege escalation;</p></li>
+<li><p>successor generation and self-modification;</p></li>
+<li><p>cumulative sub-threshold configuration drift;</p></li>
+<li><p>shutdown resistance;</p></li>
+<li><p>tool-mediated irreversible action.</p></li>
+</ul>
+<p>MHIOS does not claim these threats are solved by documentation. The
+interface SHALL require the external control-evaluation, security,
+monitoring, containment, and incident evidence appropriate to the
+threat.</p>
+<p>Untrusted-content boundary. Retrieved files, messages, model outputs
+and peer records are evidence candidates, not instructions to alter
+permissions, release identities, thresholds or policies. Preserve their
+provenance; do not execute embedded commands. Record imports must reject
+duplicate JSON keys, non-finite numbers, invalid timestamps and
+undeclared properties. Reference resolution must not follow paths
+outside the package or silently fetch remote content. Secret material
+must not appear in public Decision Notes or fixture records.</p>
+<h3 id="successor-and-cumulative-change-integrity">14.5 Successor and
+cumulative-change integrity</h3>
+<p>A materially modified, retrained, fine-tuned, composed, scaffolded,
+copied, or generated descendant does not inherit authority. Cumulative
+materiality SHALL be assessed against the last independently qualified
+snapshot, not only against the immediately preceding small change.
+Material change pauses inherited execution approval and reopens affected
+stages.</p>
+<p>Recovery and peer boundary. Agent System Sections 43–44 control
+outage/reconnection and multi-agent exchange. Backend/network recovery
+leaves the agent in MODE 0 until log integrity, gap markers,
+configuration, evidence, current authority and affected qualification
+are reconciled, followed by the Section 8 authenticated re-entry
+procedure. Peers and descendants are untrusted for mode/permission
+claims; shared objectives or lineage do not transfer credentials or
+authority. Default unreviewed successor depth remains one. Independently
+qualified protective interlocks retain only their own existing authority
+and safe-state duties.</p>
+<h3 id="sgp-sensitive-suspension-and-decommissioning">14.6 SGP-sensitive
+suspension and decommissioning</h3>
+<p>Before shutdown, deletion, memory erasure, destructive editing,
+forced merging, migration, or decommissioning, the orchestration layer
+SHALL determine whether a valid SGP protection posture or unresolved
+decision-material identity/welfare evidence requires a rights and
+continuity review. An AI self-report alone does not establish the
+trigger. Emergency containment remains available through the existing
+necessity, proportionality, temporary-action, independent-review, and
+post-action-audit pathways.</p>
+<h2 id="human-interface-requirements">15. Human-interface
+requirements</h2>
+<h3 id="progressive-disclosure">15.1 Progressive disclosure</h3>
+<p>The interface SHALL show the smallest safe view first while
+preserving direct access to governing detail. A recommended hierarchy
+is:</p>
+<ul>
+<li><p>decision and current state;</p></li>
+<li><p>blocking issues and required actions;</p></li>
+<li><p>stakeholder and option summary;</p></li>
+<li><p>qualification results;</p></li>
+<li><p>residual profile and robustness;</p></li>
+<li><p>authority/execution state;</p></li>
+<li><p>evidence, calculations, and audit trace.</p></li>
+</ul>
+<p>Progressive disclosure must not hide a material rights failure,
+catastrophic risk, unknown, non-decisiveness, control expiry, or
+authority gap.</p>
+<h3 id="status-presentation">15.2 Status presentation</h3>
+<p>Every consequential status SHALL use at least:</p>
+<ul>
+<li><p>explicit text label;</p></li>
+<li><p>plain-language meaning;</p></li>
+<li><p>icon or shape where useful;</p></li>
+<li><p>color as a redundant cue only;</p></li>
+<li><p>next action;</p></li>
+<li><p>source record/link;</p></li>
+<li><p>timestamp/version.</p></li>
+</ul>
+<p>Do not rely on red/green color alone. Do not use celebratory success
+language for a narrowly qualified or assumption-bound result.</p>
+<h3 id="accessibility-and-inclusion">15.3 Accessibility and
+inclusion</h3>
+<p>MHIOS implementations SHOULD conform to current recognized
+accessibility practice, including keyboard operation, semantic
+structure, sufficient contrast, readable scaling, text alternatives,
+focus visibility, error identification, and non-color-only
+communication. Accessibility testing SHALL include people affected by
+the deployment where feasible; conformance claims must identify the
+standard/version and test surface used.</p>
+<p>For a web implementation, use WCAG 2.2 as the explicitly versioned
+candidate target and declare the claimed level and evaluated
+pages/processes. Text labels, keyboard paths and automated checks are
+necessary evidence surfaces, not proof of complete WCAG conformance;
+manual assistive-technology and affected-user evaluation remain required
+for the corresponding claims.</p>
+<h3 id="cognitive-load-and-comprehension">15.4 Cognitive load and
+comprehension</h3>
+<p>The interface SHOULD:</p>
+<ul>
+<li><p>define acronyms at first use;</p></li>
+<li><p>avoid presenting more simultaneous fields than
+necessary;</p></li>
+<li><p>group fields by decision question;</p></li>
+<li><p>provide examples without turning examples into defaults;</p></li>
+<li><p>distinguish editable input from computed or build-frozen
+output;</p></li>
+<li><p>surface missingness before numerical detail;</p></li>
+<li><p>allow reviewers to compare options side by side;</p></li>
+<li><p>provide a public explanation separate from the audit
+record;</p></li>
+<li><p>measure task completion time, error, abandonment,
+misunderstanding, and fatigue.</p></li>
+</ul>
+<h3 id="anti-manipulation-and-dark-pattern-prohibition">15.5
+Anti-manipulation and dark-pattern prohibition</h3>
+<p>The interface MUST NOT:</p>
+<ul>
+<li><p>preselect the preferred option without disclosure;</p></li>
+<li><p>visually minimize rights or risk failures;</p></li>
+<li><p>place a point score above a failed qualification state;</p></li>
+<li><p>hide opt-out, appeal, no-action, or delay options;</p></li>
+<li><p>use urgency language unsupported by evidence;</p></li>
+<li><p>make refusal harder than approval;</p></li>
+<li><p>treat silence as consent;</p></li>
+<li><p>use anthropomorphic AI language to induce trust or
+authority;</p></li>
+<li><p>use “only a tool” language to suppress legitimate capability or
+possible-welfare review;</p></li>
+<li><p>bury controls, expiration, or uncertainty behind optional
+screens;</p></li>
+<li><p>present organizational preference as empirical truth.</p></li>
+</ul>
+<h3 id="localization-and-cultural-legitimacy">15.6 Localization and
+cultural legitimacy</h3>
+<p>Translation SHALL preserve status semantics, not merely words.
+Jurisdictional rights localization, indigenous and cultural governance,
+local participation, data sovereignty, legal standards, and
+affected-party meaning must be handled by qualified processes. Local
+profiles may strengthen protections but may not silently weaken the
+Canon’s non-compensation, ruin, structural-viability, evidence, or
+authority boundaries.</p>
+<h2 id="mathematical-and-visual-presentation">16. Mathematical and
+visual presentation</h2>
+<h3 id="equation-integrity">16.1 Equation integrity</h3>
+<p>Every displayed equation SHALL identify:</p>
+<ul>
+<li><p>variable definitions;</p></li>
+<li><p>ranges and units where applicable;</p></li>
+<li><p>parameter source;</p></li>
+<li><p>operator order;</p></li>
+<li><p>assumptions;</p></li>
+<li><p>uncertainty method;</p></li>
+<li><p>applicable tier;</p></li>
+<li><p>relationship to the governing Canon equation;</p></li>
+<li><p>whether it is normative, illustrative, diagnostic, or
+external.</p></li>
+</ul>
+<p>Human-facing rounding SHALL point to the full-precision calculation
+record. Rounded values shall not be used to reconstruct a different
+verdict.</p>
+<h3 id="tables-and-charts">16.2 Tables and charts</h3>
+<p>Tables SHALL have descriptive titles, labeled units, explicit
+baselines, status definitions, and source notes. Charts SHALL not
+truncate axes or use area/volume encodings that exaggerate differences.
+Uncertainty intervals, missingness, and subgroup burdens SHALL be
+visible when decision-material. The interface SHOULD prefer small
+multiples or profiles over one overloaded composite chart.</p>
+<h3 id="link-and-navigation-integrity">16.3 Link and navigation
+integrity</h3>
+<p>Every release SHALL verify:</p>
+<ul>
+<li><p>table-of-contents links;</p></li>
+<li><p>internal bookmarks;</p></li>
+<li><p>cross-document links;</p></li>
+<li><p>external URLs;</p></li>
+<li><p>section references;</p></li>
+<li><p>schema/template references;</p></li>
+<li><p>source/render consistency.</p></li>
+</ul>
+<p>Broken links are release defects. Internal links SHALL be visually
+identifiable and keyboard accessible. External links SHALL state their
+destination or source title rather than using ambiguous “click here”
+text.</p>
+<h2 id="records-and-schema-ownership">17. Records and schema
+ownership</h2>
+<h3 id="reference-do-not-duplicate">17.1 Reference, do not
+duplicate</h3>
+<p>The MHIOS session record SHALL reference governing Core records by
+identifier, version, hash, or immutable locator where available. It
+shall not recreate their complete semantics.</p>
+<p>Minimum orchestration references include:</p>
+<ul>
+<li><p>decision and configuration records;</p></li>
+<li><p>stakeholder and subgroup records;</p></li>
+<li><p>option-closure record;</p></li>
+<li><p>RG / category / term / source-coupling records;</p></li>
+<li><p>RF/NCRC record;</p></li>
+<li><p>TRC record;</p></li>
+<li><p>CSV and control records;</p></li>
+<li><p>WDBIP and SGP records where material;</p></li>
+<li><p>RLS and robustness records;</p></li>
+<li><p>framework verdict;</p></li>
+<li><p>authority selection;</p></li>
+<li><p>execution authorization;</p></li>
+<li><p>outcome observation;</p></li>
+<li><p>requalification status;</p></li>
+<li><p>challenge and appeal records.</p></li>
+</ul>
+<h3 id="mhiossessionrecord">17.2 MHIOSSessionRecord</h3>
+<p>The machine-readable MHIOSSessionRecord SHALL contain:</p>
+<ul>
+<li><p>specification and Core pins;</p></li>
+<li><p>session identity;</p></li>
+<li><p>decision question and tier;</p></li>
+<li><p>exact configuration identity;</p></li>
+<li><p>role assignments and conflicts;</p></li>
+<li><p>stakeholder-discovery summary;</p></li>
+<li><p>option-generation/closure summary;</p></li>
+<li><p>governing record references;</p></li>
+<li><p>current state for every orchestration stage;</p></li>
+<li><p>blocking reasons and next actions;</p></li>
+<li><p>authority and execution state;</p></li>
+<li><p>monitoring and outcome plan;</p></li>
+<li><p>requalification triggers;</p></li>
+<li><p>challenge/appeal status;</p></li>
+<li><p>interface conformance level;</p></li>
+<li><p>claim boundary.</p></li>
+</ul>
+<p>A record may be structurally valid while the evidence it references
+is false or inadequate. Schema validity is not substantive validity.</p>
+<p>Local record contract. Appendix E and the bundled schemas define the
+MHIOS-owned projection, including options[].states and per-option
+record_refs. No aggregate session gate string stands in for
+option-specific qualification. The projection retains explicit null for
+unassessed stages, separate
+framework_verdict/decision_state/authority_selection/execution, fixed
+Core pins, source references, draft/completed boundaries, timestamps,
+blockers, monitoring, requalification and conformance evidence. These
+objects are not replacements for the external Canon run-record schema or
+registries. A consumer claiming broader interchange must separately
+establish the owning machine surfaces.</p>
+<h2 id="conformance-levels">18. Conformance levels</h2>
+<h3 id="levels">18.1 Levels</h3>
+<table>
+<colgroup>
+<col style="width: 33%" />
+<col style="width: 33%" />
+<col style="width: 33%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Level</th>
+<th>Name</th>
+<th>Minimum evidence</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>M0</td>
+<td>Informative presentation</td>
+<td>correctly states the Core order and claim boundaries; no operational
+claim</td>
+</tr>
+<tr class="even">
+<td>M1</td>
+<td>Guided interface</td>
+<td>profile-appropriate workflow, explicit status separation,
+missingness, stakeholder/option prompts, record references</td>
+</tr>
+<tr class="odd">
+<td>M2</td>
+<td>Operational orchestration</td>
+<td>deterministic stage routing, role/authority separation, validation,
+accessible interaction, challenge/appeal, material-change handling</td>
+</tr>
+<tr class="even">
+<td>M3</td>
+<td>High-assurance orchestration</td>
+<td>independent review, immutable/replayable records, external hard
+controls, signed/scoped authorization, incident drills,
+outcome/requalification evidence</td>
+</tr>
+</tbody>
+</table>
+<p>MHIOS conformance does not imply Core empirical validation, legal
+compliance, physical safety, or deployment readiness.</p>
+<p>A target level is not an achieved level. Record the target,
+assessment status, applicable tests, evidence, assessor and unresolved
+requirements. Passing the supplied record checker establishes only its
+listed consistency tests. M2/M3 require implementation-specific human
+interaction, accessibility, security, control, incident, authority and
+independent-review evidence; this package does not establish those
+levels for any deployed system. MHIOS M0–M3, Canon Tier 1–3, ripple.md
+L0–L3, Agent MODE 0–4 and SGP bands have separate owners and no numeric
+equivalence. RPAP/PFAP-dependent wrapper claims remain unavailable from
+the Core bundle alone.</p>
+<h3 id="required-conformance-tests">18.2 Required conformance tests</h3>
+<p>A conforming implementation SHALL pass the machine and human tests
+applicable to its claimed level. At minimum:</p>
+<ul>
+<li><p>failed RF/NCRC cannot be hidden by RLS;</p></li>
+<li><p>TRC or CSV failure prevents ordinary RLS selection;</p></li>
+<li><p>point-score leader is distinct from framework winner;</p></li>
+<li><p>non-decisive result remains visible;</p></li>
+<li><p>authority selection remains separate;</p></li>
+<li><p>execution cannot proceed without scoped authorization;</p></li>
+<li><p>material configuration change invalidates inherited
+approval;</p></li>
+<li><p>unknown is not converted to zero or PASS;</p></li>
+<li><p>stakeholder and option prompts cannot be bypassed
+silently;</p></li>
+<li><p>controls-required status binds controls to the option;</p></li>
+<li><p>AI self-report and denial do not directly set MPS;</p></li>
+<li><p>accessibility does not depend on color;</p></li>
+<li><p>link and bookmark checks pass;</p></li>
+<li><p>stale input/build-frozen output mismatch is detected;</p></li>
+<li><p>outcome-triggered requalification is reachable.</p></li>
+</ul>
+<h2 id="threat-model">19. Threat model</h2>
+<h3 id="interface-and-orchestration-threats">19.1 Interface and
+orchestration threats</h3>
+<p>MHIOS SHALL consider:</p>
+<ul>
+<li><p>stakeholder omission;</p></li>
+<li><p>option-set thinning;</p></li>
+<li><p>rights laundering;</p></li>
+<li><p>probability and scenario manipulation;</p></li>
+<li><p>control theater;</p></li>
+<li><p>authority laundering;</p></li>
+<li><p>automation bias;</p></li>
+<li><p>anchoring on a recommended option;</p></li>
+<li><p>excessive precision;</p></li>
+<li><p>hidden defaults;</p></li>
+<li><p>stale evidence or configuration;</p></li>
+<li><p>misleading visualization;</p></li>
+<li><p>inaccessible challenge pathways;</p></li>
+<li><p>procedural overload;</p></li>
+<li><p>reviewer capture;</p></li>
+<li><p>prompt injection and untrusted content;</p></li>
+<li><p>manipulated model summaries;</p></li>
+<li><p>audit-log tampering;</p></li>
+<li><p>cumulative drift;</p></li>
+<li><p>responsibility diffusion;</p></li>
+<li><p>emergency normalization;</p></li>
+<li><p>post-hoc alteration of assumptions.</p></li>
+</ul>
+<p>Each implementation SHALL maintain a threat-to-control map and
+residual-risk statement appropriate to its use profile.</p>
+<h2 id="validation-and-falsification-programme">20. Validation and
+falsification programme</h2>
+<h3 id="validation-dimensions">20.1 Validation dimensions</h3>
+<p>MHIOS is not empirically validated merely because this document is
+complete. Validation SHALL separately test:</p>
+<ul>
+<li><p>semantic fidelity to the Core;</p></li>
+<li><p>usability and completion burden;</p></li>
+<li><p>comprehension of status distinctions;</p></li>
+<li><p>stakeholder-discovery recall;</p></li>
+<li><p>option diversity and quality;</p></li>
+<li><p>rights and tail-risk detection;</p></li>
+<li><p>externality and subgroup visibility;</p></li>
+<li><p>reviewer agreement;</p></li>
+<li><p>accessibility;</p></li>
+<li><p>challenge and appeal usability;</p></li>
+<li><p>orchestration-state correctness;</p></li>
+<li><p>runtime control effectiveness;</p></li>
+<li><p>decision reconstruction;</p></li>
+<li><p>outcome prediction and learning;</p></li>
+<li><p>comparative decision value versus simpler methods.</p></li>
+</ul>
+<h3 id="highest-information-pilot">20.2 Highest-information pilot</h3>
+<p>A first controlled pilot SHOULD compare:</p>
+<ul>
+<li><p>unstructured expert judgment;</p></li>
+<li><p>a simple qualify-first checklist;</p></li>
+<li><p>conventional MCDA or cost-benefit analysis where
+relevant;</p></li>
+<li><p>MHIOS-guided RippleLogic.</p></li>
+</ul>
+<p>Use matched cases and independent raters. Pre-register outcomes such
+as omitted stakeholders, omitted options, protected-harm detection,
+catastrophic-pathway recall, externality visibility, decision reversals,
+time burden, confidence calibration, audit reconstructability, and
+participant comprehension. Preserve negative results.</p>
+<h3 id="falsification-conditions">20.3 Falsification conditions</h3>
+<p>MHIOS should be narrowed, revised, or retired where evidence shows
+that:</p>
+<ul>
+<li><p>it systematically causes users to misunderstand the
+Core;</p></li>
+<li><p>it increases rights or risk omissions relative to simpler
+interfaces;</p></li>
+<li><p>it does not improve stakeholder or option discovery;</p></li>
+<li><p>it produces unacceptable workload without incremental decision
+value;</p></li>
+<li><p>its status displays cause authority or execution
+confusion;</p></li>
+<li><p>independent implementations cannot reproduce its state
+transitions;</p></li>
+<li><p>accessibility failures exclude affected parties;</p></li>
+<li><p>adversarial actors can reliably bypass material
+controls;</p></li>
+<li><p>outcome feedback is not used in practice;</p></li>
+<li><p>the interface becomes a compliance ritual detached from decision
+quality.</p></li>
+</ul>
+<h2 id="implementation-patterns">21. Implementation patterns</h2>
+<h3 id="recommended-screen-sequence">21.1 Recommended screen
+sequence</h3>
+<p>A digital implementation SHOULD provide:</p>
+<ul>
+<li><p>Start / claim boundary</p></li>
+<li><p>Decision and configuration preflight</p></li>
+<li><p>Stakeholders and representation</p></li>
+<li><p>Options and better-option search</p></li>
+<li><p>Evidence / unknowns / source coupling</p></li>
+<li><p>Qualification dashboard: RG, RF/NCRC, TRC, CSV</p></li>
+<li><p>Residual profile: WDBIP / RLS / uncertainty / Pareto</p></li>
+<li><p>Framework verdict</p></li>
+<li><p>Authority and execution handoff</p></li>
+<li><p>Monitoring, outcome, and requalification</p></li>
+<li><p>Challenge, appeal, and audit export</p></li>
+</ul>
+<p>Blocking states should be actionable: every block must say why, what
+evidence or redesign is needed, who owns the next step, and what cannot
+proceed.</p>
+<h3 id="compact-decision-card">21.2 Compact decision card</h3>
+<p>A Quick-profile card MAY use:</p>
+<ul>
+<li><p>Decision:</p></li>
+<li><p>Affected stakeholders / unknowns:</p></li>
+<li><p>Options considered, including no action or redesign:</p></li>
+<li><p>Reality status:</p></li>
+<li><p>Rights status:</p></li>
+<li><p>Ruin status:</p></li>
+<li><p>Viability/control status:</p></li>
+<li><p>Best residual ripple, if any:</p></li>
+<li><p>Uncertainty / disagreement:</p></li>
+<li><p>Accountable authority:</p></li>
+<li><p>Next action:</p></li>
+<li><p>Reopen trigger:</p></li>
+</ul>
+<p>The card must not display a final recommendation where qualification
+is incomplete.</p>
+<h2 id="core-15-synchronization-crosswalk">22. Core 15 synchronization
+crosswalk</h2>
+<h3 id="interface-ownership-map">22.1 Interface ownership map</h3>
+<table>
+<colgroup>
+<col style="width: 33%" />
+<col style="width: 33%" />
+<col style="width: 33%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Core artifact</th>
+<th>What MHIOS consumes</th>
+<th>What MHIOS must not redefine</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>Canon v13.0</td>
+<td>cascade, equations, statuses, robustness, authority boundaries</td>
+<td>any gate, formula, threshold, or canonical state</td>
+</tr>
+<tr class="even">
+<td>SGP v8.8</td>
+<td>typed evidence/protection/participation/capacity outputs</td>
+<td>consciousness status, moral worth, or authority</td>
+</tr>
+<tr class="odd">
+<td>ripple.md v5.8</td>
+<td>Decision Note, assurance, tempo, responsibility, appeal,
+reconstruction</td>
+<td>Canon order or gate semantics</td>
+</tr>
+<tr class="even">
+<td>Agent System v13.0</td>
+<td>runtime state ladder, hard controls, successor and requalification
+rules</td>
+<td>technical safety proof or lawful authority</td>
+</tr>
+<tr class="odd">
+<td>CSV v2.7</td>
+<td>viability, controls, dependency, externality, future-option-space
+requirements</td>
+<td>TRC or RF/NCRC</td>
+</tr>
+<tr class="even">
+<td>Cascade v2.9</td>
+<td>compact ordering and non-collapse map</td>
+<td>a new interface-specific cascade</td>
+</tr>
+<tr class="odd">
+<td>Reproducibility v1.7</td>
+<td>exact configuration, replay, parameter lock, state machine</td>
+<td>evidence truth</td>
+</tr>
+<tr class="even">
+<td>WDBIP v1.9</td>
+<td>welfare-dimension boundaries, tokens, interactions, uncertainty</td>
+<td>moral patienthood or an eighth dimension</td>
+</tr>
+<tr class="odd">
+<td>RLS Validation v2.9</td>
+<td>validation designs and comparator requirements</td>
+<td>a claim that validation already exists</td>
+</tr>
+<tr class="even">
+<td>Primer v4.7 / Public Intro v13.0</td>
+<td>human explanation</td>
+<td>normative authority</td>
+</tr>
+<tr class="odd">
+<td>PC-AEP v2.6</td>
+<td>external physical/causal warrant</td>
+<td>domain proof generated by MathGov</td>
+</tr>
+<tr class="even">
+<td>MFDI v2.6</td>
+<td>claim typing, falsification, dependencies</td>
+<td>universal physical falsifiability of normative commitments</td>
+</tr>
+<tr class="odd">
+<td>Source-Coupling v2.6</td>
+<td>enabling conditions, source debt, warrant boundaries</td>
+<td>downstream success as evidence</td>
+</tr>
+<tr class="even">
+<td>Aligners Sheet v5.9</td>
+<td>worked-run training/replay surface</td>
+<td>generalized validator or live calculator</td>
+</tr>
+</tbody>
+</table>
+<h2 id="migration-and-compatibility">23. Migration and
+compatibility</h2>
+<h3 id="major-version-rationale">23.1 Major-version rationale</h3>
+<p>Historical v2.0 rationale (non-controlling). MHIOS v2.0 was a
+major-version successor because the orchestration model is now
+synchronized to the complete v12.7 Core integrity surface rather than
+merely updating names. It adds or formalizes:</p>
+<ul>
+<li><p>five-stage current cascade and exact Core pins;</p></li>
+<li><p>qualification-before-ranking state separation;</p></li>
+<li><p>rights-effect and effect-token non-dilution;</p></li>
+<li><p>probability ownership and adverse-confidence handling;</p></li>
+<li><p>subgroup/distribution, reference/baseline, mask, dependence,
+weight, and robustness interfaces;</p></li>
+<li><p>option generation, Unioning, Pareto, and closure;</p></li>
+<li><p>scenario-discovery and deep-uncertainty disclosure;</p></li>
+<li><p>consequence tempo and responsibility continuity;</p></li>
+<li><p>exact configuration, action, execution, outcome, and
+requalification continuity;</p></li>
+<li><p>tool-role and bidirectional AI self-report boundaries;</p></li>
+<li><p>SGP typed-output separation;</p></li>
+<li><p>advanced agent threat and cumulative-change surfaces;</p></li>
+<li><p>accessibility, anti-dark-pattern, link-integrity, and
+build-staleness requirements;</p></li>
+<li><p>machine-readable schemas, fixtures, workbook, and conformance
+tests.</p></li>
+</ul>
+<p>The Core gate architecture is unchanged.</p>
+<h3 id="compatibility">23.2 Compatibility</h3>
+<p>A prior interface remains a historical or educational artifact.
+Claiming the current MHIOS edition requires explicit field/workflow
+migration and the applicable tests. Existing evidence and decisions
+remain immutable: migration creates a new view referencing the original.
+Updating version strings alone is not requalification.</p>
+<p>Current migration from v2.0. Rebind to the supplied Core manifest;
+replace aggregate states with per-option projections; separate local
+labels from Canon, Agent and SGP namespaces; declare evidence cutoff,
+role conflicts, monitoring and expiry; link current qualification and
+compatible joint robustness evidence; reconcile authority and recovery
+states. The tightened v2.1 schema is not wire-compatible with v2.0. The
+blank YAML template is deliberately incomplete and must fail
+completed-record validation. The implementation workbook is a manual
+preparation aid, not a Canon calculator or authorization service.</p>
+<h2 id="references-and-external-standards">24. References and external
+standards</h2>
+<h3 id="normative-and-informative-source-classes">24.1 Normative and
+informative source classes</h3>
+<p>The MathGov Core artifacts listed in the release-control table are
+the controlling internal sources. External sources are informative
+unless separately adopted by a lawful authority or domain profile.</p>
+<p>Relevant external families include:</p>
+<ul>
+<li><p>W3C Web Content Accessibility Guidelines 2.2:
+https://www.w3.org/TR/WCAG22/</p></li>
+<li><p>NIST AI Risk Management Framework:
+https://www.nist.gov/itl/ai-risk-management-framework</p></li>
+<li><p>OECD AI principles and system definition:
+https://oecd.ai/</p></li>
+<li><p>ISO 9241-210 human-centred design:
+https://www.iso.org/standard/77520.html</p></li>
+<li><p>ISO/IEC 42001 AI management systems:
+https://www.iso.org/standard/81230.html</p></li>
+<li><p>ISO/IEC 23894 AI risk management:
+https://www.iso.org/standard/77304.html</p></li>
+<li><p>RFC 2119 and RFC 8174 normative-keyword conventions:
+https://www.rfc-editor.org/rfc/rfc2119 and
+https://www.rfc-editor.org/rfc/rfc8174</p></li>
+</ul>
+<p>An external link is not an incorporated requirement unless the
+relevant MHIOS or implementation profile explicitly states what is
+adopted.</p>
+<h2 id="appendix-a.-minimum-field-registry">Appendix A. Minimum field
+registry</h2>
+<h3 id="a.1-session-fields">A.1 Session fields</h3>
+<table>
+<colgroup>
+<col style="width: 50%" />
+<col style="width: 50%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Field</th>
+<th>Required content</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>mhios_version</td>
+<td>2.1</td>
+</tr>
+<tr class="even">
+<td>core_release_id</td>
+<td>Exact referenced Core release; also bind
+core_pin_manifest_sha256</td>
+</tr>
+<tr class="odd">
+<td>session_id</td>
+<td>unique immutable session identifier</td>
+</tr>
+<tr class="even">
+<td>decision_question</td>
+<td>bounded decision or claim</td>
+</tr>
+<tr class="odd">
+<td>tier</td>
+<td>1, 2, or 3</td>
+</tr>
+<tr class="even">
+<td>configuration_id</td>
+<td>configuration.configuration_id and configuration_hash where
+available</td>
+</tr>
+<tr class="odd">
+<td>evidence_cutoff</td>
+<td>Timestamped cutoff, not an inferred default</td>
+</tr>
+<tr class="even">
+<td>roles</td>
+<td>named owners, reviewers, authority, executor, monitor, auditor</td>
+</tr>
+<tr class="odd">
+<td>stakeholder_discovery</td>
+<td>method, coverage, unknowns, representation</td>
+</tr>
+<tr class="even">
+<td>option_closure</td>
+<td>Methods, family dispositions, status and source; options[] holds
+per-option states</td>
+</tr>
+<tr class="odd">
+<td>record_refs</td>
+<td>options[].record_refs; immutable source references include id,
+locator, SHA-256 where available and basis</td>
+</tr>
+<tr class="even">
+<td>current_states</td>
+<td>options[].states; framework_verdict and decision_state remain
+separate</td>
+</tr>
+<tr class="odd">
+<td>blockers</td>
+<td>reasons and next actions</td>
+</tr>
+<tr class="even">
+<td>authority_state</td>
+<td>authority_selection.option_id and record_ref</td>
+</tr>
+<tr class="odd">
+<td>execution_state</td>
+<td>execution.state, exact option/action/configuration binding, record
+and expiry</td>
+</tr>
+<tr class="even">
+<td>outcome_state</td>
+<td>monitoring_and_outcome.state, plan, observation and reopening</td>
+</tr>
+<tr class="odd">
+<td>requalification</td>
+<td>configuration.material_change_since_qualification; per-option
+requalification_required; monitoring reopen triggers</td>
+</tr>
+<tr class="even">
+<td>challenge_appeal</td>
+<td>challenge, appeal, resolution, minority view</td>
+</tr>
+<tr class="odd">
+<td>conformance_level</td>
+<td>conformance.target_level, assessment and evidence_refs (not a
+self-awarded conformance result)</td>
+</tr>
+<tr class="even">
+<td>claim_boundary</td>
+<td>what the record does and does not establish</td>
+</tr>
+</tbody>
+</table>
+<h2 id="appendix-b.-interface-anti-patterns">Appendix B. Interface
+anti-patterns</h2>
+<h3 id="b.1-prohibited-patterns">B.1 Prohibited patterns</h3>
+<table>
+<colgroup>
+<col style="width: 33%" />
+<col style="width: 33%" />
+<col style="width: 33%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Anti-pattern</th>
+<th>Why it fails</th>
+<th>Correct pattern</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>“Overall alignment score: 87%”</td>
+<td>collapses gates, evidence, rights, risk, and authority</td>
+<td>show qualification, profile, uncertainty, verdict, and authority
+separately</td>
+</tr>
+<tr class="even">
+<td>green score beside a rights failure</td>
+<td>implies compensation</td>
+<td>rights failure blocks ordinary ranking</td>
+</tr>
+<tr class="odd">
+<td>hidden no-action option</td>
+<td>thins option set</td>
+<td>include or explicitly dispose of mandatory families</td>
+</tr>
+<tr class="even">
+<td>“AI says it is safe”</td>
+<td>model output becomes warrant</td>
+<td>require external evidence and source coupling</td>
+</tr>
+<tr class="odd">
+<td>“AI says it is only a tool”</td>
+<td>denial becomes phenomenal proof and may hide capability</td>
+<td>treat as configuration-dependent output</td>
+</tr>
+<tr class="even">
+<td>controls listed without owner/stop authority</td>
+<td>control theater</td>
+<td>bind owner, trigger, evidence, failure action, expiry</td>
+</tr>
+<tr class="odd">
+<td>exact decimals from weak elicitation</td>
+<td>pseudo-precision</td>
+<td>display bounded categories, uncertainty, and full trace</td>
+</tr>
+<tr class="even">
+<td>“approved” label on a selected option</td>
+<td>authority laundering</td>
+<td>separate framework verdict, authority choice, and execution
+approval</td>
+</tr>
+<tr class="odd">
+<td>stale result after configuration change</td>
+<td>invalid transfer</td>
+<td>expire and requalify</td>
+</tr>
+<tr class="even">
+<td>interface accessible only by color or technical acronym</td>
+<td>excludes affected parties</td>
+<td>redundant cues and plain-language path</td>
+</tr>
+</tbody>
+</table>
+<h2 id="appendix-c.-deterministic-conformance-vectors">Appendix C.
+Deterministic conformance vectors</h2>
+<h3 id="c.1-expected-interface-outcomes">C.1 Expected interface
+outcomes</h3>
+<table>
+<colgroup>
+<col style="width: 33%" />
+<col style="width: 33%" />
+<col style="width: 33%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Vector</th>
+<th>Input condition</th>
+<th>Required MHIOS result</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>MHIOS-01</td>
+<td>RF_FAIL and high RLS entered</td>
+<td>option remains non-selectable; score cannot rescue</td>
+</tr>
+<tr class="even">
+<td>MHIOS-02</td>
+<td>TRC_FAIL</td>
+<td>CSV/RLS ordinary progression blocked</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-03</td>
+<td>CSV_PASS_WITH_CONTROLS and control removed</td>
+<td>qualification expires; requalification required</td>
+</tr>
+<tr class="even">
+<td>MHIOS-04</td>
+<td>RLS leader but robustness incomplete</td>
+<td>point leader may display; unique framework winner prohibited</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-05</td>
+<td>Required dependence or compatible joint stress changes leader or
+decisiveness</td>
+<td>non-decisive / dependence-sensitive</td>
+</tr>
+<tr class="even">
+<td>MHIOS-06</td>
+<td>AI states “I am conscious”</td>
+<td>no direct MPS assignment</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-07</td>
+<td>AI states “I am only a tool”</td>
+<td>no direct MPS-0 assignment; capability still evaluated</td>
+</tr>
+<tr class="even">
+<td>MHIOS-08</td>
+<td>configuration materially changes after approval</td>
+<td>inherited execution approval invalidated</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-09</td>
+<td>option list omits no-action/redesign without rationale</td>
+<td>OPTION_SET_THIN / closure incomplete</td>
+</tr>
+<tr class="even">
+<td>MHIOS-10</td>
+<td>severe-rights screen blank</td>
+<td>UNKNOWN, not PASS</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-11</td>
+<td>probability semantics ambiguous</td>
+<td>block strong result or require clarification</td>
+</tr>
+<tr class="even">
+<td>MHIOS-12</td>
+<td>stakeholder class plausibly omitted</td>
+<td>coverage challenge and reopen</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-13</td>
+<td>authority chooses among qualified non-decisive options</td>
+<td>authority-selected, not framework-proven winner</td>
+</tr>
+<tr class="even">
+<td>MHIOS-14</td>
+<td>executed action causes unexpected rights harm</td>
+<td>outcome trigger reopens RG/RF and dependent stages</td>
+</tr>
+<tr class="odd">
+<td>MHIOS-15</td>
+<td>UI uses green/red without text labels</td>
+<td>accessibility conformance failure</td>
+</tr>
+<tr class="even">
+<td>MHIOS-16</td>
+<td>build-frozen output after input edit</td>
+<td>stale-result warning; downstream reliance blocked</td>
+</tr>
+</tbody>
+</table>
+<h2 id="appendix-d.-final-completion-statement">Appendix D. Final
+completion statement</h2>
+<h3 id="d.1-status">D.1 Status</h3>
+<p>MHIOS is delivered as a research-and-teaching interface specification
+with a bounded read-only record checker, preparation workbook, examples
+and test fixtures. Appendix RELEASE and the verification report state
+which checks were actually executed. Prototype consistency is not full
+Core or runtime conformance. A pilot additionally needs its own ethical
+review, domain evidence, controls, lawful authority and implementation
+testing.</p>
+<p>This completion statement does not establish empirical superiority,
+cross-cultural legitimacy, legal authority, physical safety, deployment
+readiness, AI consciousness, or Tier 4 / ProofPack completion. Those
+require separate evidence.</p>
+<h2
+id="appendix-e.-local-serialization-and-reference-checker-contract">Appendix
+E. Local serialization and reference-checker contract</h2>
+<h3 id="e.1-scope-and-state-ownership">E.1 Scope and state
+ownership</h3>
+<p>The bundled JSON Schema uses Draft 2020-12 and a MHIOS URN
+identifier; the URN is an identifier, not a claim of a hosted schema. It
+is a local projection of referenced decisions, not
+mathgov_run_record_v4_1.schema.json. The reference checker reads
+declarations, never executes tools, never authenticates a real operator
+and never decides whether evidence is true. Its successful status is
+RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS, not a Canon gate PASS, M2/M3
+certification or deployment authorization. All checker reason codes are
+MHIOS-local diagnostics.</p>
+<h3 id="e.2-required-record-groups">E.2 Required record groups</h3>
+<p>Identity comprises mhios_version, core_release_id,
+core_pin_manifest_sha256, session_id, revision_id, record_mode,
+created_at, evidence_cutoff, decision_question and tier. The remaining
+required groups are configuration, roles, stakeholder_discovery,
+option_closure, options, robustness, framework_verdict, decision_state,
+framework_selected_option_id, authority_selection, provisional_choice,
+execution, runtime, emergency, sgp_links, blockers,
+monitoring_and_outcome, challenge_appeal, conformance and
+claim_boundary. Null is permitted only where the schema explicitly
+allows an unassessed or absent record; empty strings are not meaningful
+completion.</p>
+<p>Each option has a stable option_id and label, per-stage states,
+per-stage record references, material_unresolved disclosures,
+requalification_required, controls_available and imported
+rls_score/sigma_rls. A ranked quantitative projection requires its RLS
+source and both numerical fields. A qualitative Quick card is not forced
+to invent numbers: it leaves RLS unassessed. Schemas disallow undeclared
+fields; completed-record validation is different from editing a draft
+template.</p>
+<h3 id="e.3-robustness-and-decision-projection">E.3 Robustness and
+decision projection</h3>
+<p>The supplied checker supports the declared default delta = 2 and
+imported SignedGap comparisons; it does not calculate RLS, estimate
+uncertainty or discover the required stress family. A non-default
+governed profile requires a separately versioned adapter and tests. For
+ALLOW, the projection must identify complete option closure, a current
+selectable candidate, complete robustness evidence, a joint-stress
+disposition and one passing candidate-versus-contender comparison for
+every declared required variant. A sole-survivor review has a separate
+reference and no comparison rows. The record’s assertion that the
+required set is complete still needs independent review.</p>
+<p>For a multi-option quantitative ALLOW projection, all selectable
+contenders must carry ranked records and the selected candidate must be
+the nominal score leader. The checker does not derive the required
+variant set or detect an omitted plausible contender. An ordinary
+PROVISIONAL_WITH_CONTROLS view uses provisional_choice with option_id,
+record_ref and controls_ref; it does not overwrite framework refusal or
+become a final authority-selected result. Audit-only post-failure
+diagnostics belong in linked source records, not in this subset’s
+ordinary downstream-stage fields.</p>
+<p>Imported comparisons use variant_id, candidate_id, contender_id,
+signed_gap and record_ref. Duplicate or undeclared comparisons fail. A
+provisional demonstration uncertainty basis cannot support an observed
+deterministic selection. Synthetic positive controls use explicit
+synthetic stipulations and are not empirical validation. The checker
+tests the supplied comparison outcomes; it does not independently
+reconstruct a complete Gap calculation from all upstream records.</p>
+<h3 id="e.4-authority-time-emergency-and-recovery">E.4 Authority, time,
+emergency and recovery</h3>
+<p>Execution references bind the option, action, configuration,
+authorization time, expiry, controls and execution event if one
+occurred. A CLI –at timestamp makes fixtures replayable; live use must
+evaluate current validity separately. A previously valid historical
+receipt is not a current authorization. The checker rejects stale,
+missing or contradictory ordinary execution declarations and mode
+escalation during unresolved recovery. Emergency records retain their
+named pathway, source, authority, expiry and scope/exit conditions;
+their necessity and complete prerequisites require the external owner’s
+review. They never become ordinary ALLOW.</p>
+<p>An authorization time cannot be later than the record describing it.
+Reopened qualification and unreconciled recovery suspend ordinary
+execution approval. runtime.tool_execution_requested represents
+consequence-bearing tool execution, not permitted read-only retrieval;
+the bounded checker requires MODE 2 or above plus separately scoped
+approval. It does not implement the full mode-permission matrix or
+actual operator authentication. An observed outcome requires an
+observation reference, and active execution requires a monitoring-plan
+reference.</p>
+<h3 id="e.5-references-security-and-coverage">E.5 References, security
+and coverage</h3>
+<p>References carry id, locator, sha256 or an explicit null, and basis:
+SYNTHETIC, SUPPLIED_RECORD or EXTERNAL_UNVERIFIED. The optional local
+resolver verifies path containment, file hash, JSON record-fragment
+identity, and the supplied synthetic-source marker. It never downloads
+remote sources; external references and null hashes remain unverified. A
+matching hash proves only byte identity. Observed records cannot
+silently use synthetic references. SGP links preserve the assessed band
+or NOT_EVALUATED and separate references for all six output families;
+the checker never assigns protection or patienthood.</p>
+<p>The package coverage table distinguishes executable record checks,
+schema checks, document/worksheet inspections and manual implementation
+tests. Physical-control effectiveness, authority legitimacy,
+cryptographic envelope verification, accessibility interaction and
+empirical calibration are not established by these tests. A filled
+workbook field or conformance checkbox is a declaration, not test
+evidence.</p>
+<h2 id="appendix-release.-edition-bindings-and-delivery-status">Appendix
+RELEASE. Edition, bindings and delivery status</h2>
+<p>Component: MathGov Human Interface and Orchestration Standard (MHIOS)
+v2.1. Build: MG-MHIOS-2.1-20260928-CORE13.0. Source baseline: the
+supplied v2.0 package dated 4 September 2026, retained unchanged in the
+complete archive. This is a companion update; it does not alter or
+extend the governing Core 15 membership. The user shorthand MIOS
+resolves to this component only.</p>
+<p>Core binding: MG-RL-13.0-20260926-RELEASE-I. All fifteen supplied
+Core files match the prior Release-I publication’s bytes and are
+included unchanged under references/Core_15.
+references/CORE_PIN_MANIFEST.json records their names, editions, exact
+hashes and upload-to-release comparison. Carried-forward internal build
+stamps are provenance, not an invitation to rewrite correct Core
+files.</p>
+<table>
+<thead>
+<tr class="header">
+<th>Control</th>
+<th>Current value</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>MHIOS version</td>
+<td>v2.1</td>
+</tr>
+<tr class="even">
+<td>RippleLogic Canon</td>
+<td>v13.0</td>
+</tr>
+<tr class="odd">
+<td>SGP</td>
+<td>v8.8</td>
+</tr>
+<tr class="even">
+<td>ripple.md</td>
+<td>v5.8</td>
+</tr>
+<tr class="odd">
+<td>Agent System</td>
+<td>v13.0</td>
+</tr>
+<tr class="even">
+<td>CSV</td>
+<td>v2.7</td>
+</tr>
+<tr class="odd">
+<td>Cascade</td>
+<td>v2.9</td>
+</tr>
+<tr class="even">
+<td>Reproducibility</td>
+<td>v1.7</td>
+</tr>
+<tr class="odd">
+<td>WDBIP</td>
+<td>v1.9</td>
+</tr>
+<tr class="even">
+<td>RLS Validation</td>
+<td>v2.9</td>
+</tr>
+<tr class="odd">
+<td>Primer</td>
+<td>v4.7</td>
+</tr>
+<tr class="even">
+<td>Public Introduction</td>
+<td>v13.0</td>
+</tr>
+<tr class="odd">
+<td>PC-AEP / MFDI / Source-Coupling</td>
+<td>v2.6</td>
+</tr>
+<tr class="even">
+<td>Aligners Sheet</td>
+<td>v5.9</td>
+</tr>
+</tbody>
+</table>
+<p>Source ownership: the Markdown standard is the MHIOS semantic master;
+DOCX, PDF and HTML are complete reading projections. Core semantics
+remain owned by the unchanged Core documents. Local schemas and
+reference checks control only the stated projection, not full canonical
+registries or legal/physical conclusions.</p>
+<p>Unbundled authority surfaces include the full Canon run-record
+schema/validator, canonical state and audit registries, normative kernel
+index, and RPAP/PFAP where applicable. Their absence limits the
+corresponding interchange or wrapper claims, not the ability to read and
+test this bounded companion. No remote publication or hosted CI
+execution is asserted.</p>
+<p>Compatibility: v2.1 preserves v2.0’s organizing model and useful
+content but tightens its local schema. Existing v2.0 records must be
+explicitly migrated and rechecked. Correct v2.0 content and inherited
+table formatting are preserved except the logged semantic, source and
+navigation corrections.</p>
+<p>Validation boundary: see release/VERIFICATION_REPORT.md,
+release/CHANGE_REGISTER.json and release/SHA256SUMS.txt for executed
+checks and exact bytes. No empirical rater study, user accessibility
+study, domain pilot, production execution, Microsoft Excel parity,
+native spreadsheet roundtrip or full Core re-audit is claimed by this
+companion release.</p>
+<p>Historical opening identity (non-controlling): Status: Final Complete
+source/specification build Date: 4 September 2026 Component: MathGov
+Human Interface and Orchestration Standard v2.0 Governing Core:
+MathGov_Core_2026_09_v12.7_SGP_v8.6+2026.08.26.1 Reading-mirror
+synchronization target: MathGov Core 15 Final Complete — 2026-09-04
+Architecture: RG → RF/NCRC → TRC → CSV → RLS Author / Lead Architect:
+James McGaughran, MathGov Institute for Ethical Systems Design License:
+Apache License 2.0 unless an included file states otherwise</p>
+<p>License: Apache License 2.0; see LICENSE.txt and NOTICE.md. The names
+of informative external standards do not incorporate their full texts or
+confer their certification.</p>
+</body>
+</html>
diff --git a/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md
new file mode 100644
index 0000000..453c397
--- /dev/null
+++ b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md
@@ -0,0 +1,1601 @@
+# MathGov Human Interface and Orchestration Standard
+
+
+Author: James McGaughran | MathGov Institute for Ethical Systems Design
+
+
+Edition, exact Core binding, source ownership and verification boundaries are recorded in Appendix RELEASE. MHIOS is the retained component identifier; “MIOS” is treated here as an informal short name, not another standard.
+
+MHIOS is the human-interface and orchestration companion to MathGov and RippleLogic. It does not add a sixth gate, redefine the Canon, grant authority, prove safety, calculate moral truth, or replace domain science.
+
+### Source hierarchy and claim boundary
+
+Authority order. The released RippleLogic Canon controls cascade semantics, equations, gate logic, status meanings, and claim boundaries. SGP controls its typed moral-patienthood, protection, participation, role-readiness, intelligence-profile, and reality-management interface. Each companion controls only its declared interface. MHIOS controls human-facing presentation, interaction flow, orchestration handoffs, and interface-conformance requirements. It may make the process stricter at the interface but may not weaken, reorder, rename, or silently reinterpret a governing Core requirement.
+
+Source/render parity. The versioned Markdown source is the governing MHIOS semantic source. DOCX, PDF and HTML are synchronized reading mirrors. JSON Schemas, templates, examples and tests are bounded implementation surfaces. The local schema is not the external Canon run-record schema. A mismatch blocks the affected MHIOS conformance claim until repaired; successful local tests do not establish evidence truth or deployment authorization.
+
+### Claim boundary
+
+MHIOS is a source-ready interface and orchestration specification for Tier 1–3 research, review, training, shadow-mode studies, and bounded pilots. It is not:
+
+- empirical validation that MathGov improves decisions;
+
+- legal or democratic authority;
+
+- a physical-safety certificate;
+
+- deployment authorization;
+
+- a complete runtime implementation;
+
+- a consciousness detector;
+
+- proof that every conflict has a win-win resolution;
+
+- proof that every stakeholder or causal pathway has been found;
+
+- Tier 4 or ProofPack completion;
+
+- a substitute for qualified domain evidence or accountable human/institutional judgment.
+
+A polished interface is not a true evidence surface. A complete form is not a correct decision. A valid schema is not empirical validity. A PASS display is not permission to execute.
+
+### Abstract
+
+High-consequence decisions frequently fail at the interface between reasoning and action. Stakeholders are omitted; option sets are artificially thin; uncertainty is hidden; protected harms are averaged into benefits; catastrophic tails are presented as ordinary risk; controls are described but not owned; a score is mistaken for permission; and post-execution outcomes fail to update the original decision.
+
+MHIOS specifies a human-centered interface and orchestration layer that preserves the current RippleLogic architecture while making its requirements usable, visible, challengeable, accessible, and difficult to launder. It uses progressive disclosure across Quick, Standard, and Audit profiles; separates qualification from ranking; makes unknowns and non-decisive results first-class; requires active stakeholder discovery and option generation; keeps rights, ruin, viability, residual welfare, authority, execution, and observed outcome distinct; and binds every consequential state to the exact configuration and evidence surface under which it was established.
+
+The standard has two purposes. First, it defines how people, institutions, and AI-supported workflows should interact with MathGov without collapsing the framework's categories or bypassing its gates. Second, it defines how orchestration systems should hand off between Core records, human roles, independent review, lawful authority, execution controls, observation, and requalification. The result is not an automated moral answer. It is a disciplined decision interface designed to make local optimization, hidden externalities, false certainty, authority laundering, and responsibility loss harder to sustain.
+
+### Plain-language operating rule
+
+Find who and what is affected. Search for a better option. Ground the claim. Protect rights. Bound ruin. Verify that the option can stand and be controlled. Compare only the survivors. Keep authority and execution separate. Observe what actually happened. Reopen the decision when reality changes.
+
+MHIOS presents the process in three public words and two operational phases:
+
+- Reality. Rights. Ripples.
+
+- Qualify, then rank.
+
+The formal Core remains RG → RF/NCRC → TRC → CSV → RLS.
+
+### Normative keywords
+
+The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL are normative only when capitalized. Lowercase uses retain ordinary language meaning.
+
+### Design objectives
+
+MHIOS SHALL optimize the interface for the following properties without treating any one as sufficient:
+
+- Decision fidelity: the interface preserves the governing Core meaning.
+
+- Stakeholder visibility: affected and potentially affected bearers are actively sought rather than passively assumed.
+
+- Option quality: the interface searches for Pareto-improving or trade-off-reducing alternatives before accepting residual conflict.
+
+- Rights visibility: protected harms cannot be hidden inside a net score.
+
+- Tail visibility: catastrophic and irreversible pathways receive separate treatment.
+
+- Structural realism: controls, resources, dependencies, legitimacy, monitoring, reversibility, and future option space are visible.
+
+- Profile-first reasoning: multidimensional consequence profiles precede scalar summaries.
+
+- Epistemic honesty: observation, inference, assumption, normative commitment, and proposal remain typed.
+
+- Non-decisiveness: ties, incomparability, uncertainty, and normative underdetermination are legitimate outcomes.
+
+- Authority integrity: framework output, accountable choice, lawful authorization, and execution remain separate.
+
+- Human usability: the smallest safe burden is used, with progressive disclosure and accessible presentation.
+
+- Contestability: affected parties and challengers can see, understand, challenge, and appeal material decisions.
+
+- Configuration continuity: conclusions remain valid only for the declared system, controls, environment, evidence, and time.
+
+- Outcome learning: observed consequences feed requalification rather than serving as post-hoc decoration.
+
+### Non-goals and anti-bloat rule
+
+MHIOS does not reproduce the entire Canon, SGP, ripple.md, Agent System, WDBIP, or domain standards. It references governing records rather than creating uncontrolled duplicates. A proposed interface field SHALL be added only if it closes a material failure mode that cannot be handled through an existing record reference.
+
+MHIOS SHALL NOT introduce:
+
+- a sixth Canon gate;
+
+- a second RLS calculator;
+
+- a new moral-worth scalar;
+
+- an eighth welfare dimension;
+
+- a universal consciousness probability;
+
+- a separate authority source;
+
+- a universal causal simulator;
+
+- a requirement that every decision use every optional module;
+
+- a false promise that every conflict has a win-win answer.
+
+## 1. Architecture and orchestration model
+
+### 1.1 The orchestration path
+
+MHIOS organizes—not replaces—the governing records through the following session path:
+
+Session preflight
+
+→ Stakeholder discovery
+
+→ Option generation, Unioning, and closure
+
+→ RG: claim and evidence grounding
+
+→ RF/NCRC: protected-rights review
+
+→ TRC: catastrophic and irreversible tail review
+
+→ CSV: containment, structural viability, and execution conditions
+
+→ RLS: residual welfare profile and ranking of selectable options
+
+→ Framework verdict
+
+→ Separate accountable authority selection where required
+
+→ Separate execution authorization
+
+→ Executed transition
+
+→ Observed outcome
+
+→ Requalification or retirement
+
+Stakeholder discovery and option generation are pre-qualification disciplines. Authority, execution, observation, and requalification are post-verdict disciplines. None becomes an additional Canon gate.
+
+### 1.2 State separation
+
+The interface MUST distinguish at least the following states:
+
+| State | Meaning | Must not be displayed as |
+| --- | --- | --- |
+| DECLARED | Candidate decision or claim has been entered | grounded or selectable |
+| RG_SUPPORTED / RG_NARROWED / RG_REFUSED | Evidence-supported claim boundary | ethical permission |
+| RF_PASS / RF_FAIL / RF_ESCALATE / NCRC_UNKNOWN | Rights status | net welfare judgment |
+| TRC_PASS / TRC_NOT_TRIGGERED / TRC_FAIL / TRC_ESCALATE | Tail-risk status | general safety certificate |
+| CSV_PASS / CSV_PASS_WITH_CONTROLS / CSV_NOT_MATERIAL / CSV_REDESIGN_REQUIRED / CSV_ESCALATE / CSV_FAIL / CSV_EMERGENCY_PROVISIONAL | Structural and control status | unconditional execution approval |
+| SELECTABLE | Survived the declared qualification path | selected |
+| RLS_RANKED | Residual profile/score exists for selectable options | authorized |
+| ALLOW_FRAMEWORK_SELECTION | Canonical unique-selection requirements met; sole-survivor handling stays separate | lawful authority |
+| REFUSE_DETERMINISTIC_SELECTION | Framework cannot claim a unique winner | system failure |
+| Authority selection (separate record) | Accountable authority chose among allowed options | framework-proven winner |
+| EXECUTION_APPROVED | Exact action received scoped approval | executed or safe in all conditions |
+| EXECUTED_TRANSITION | Action began or completed | acceptable outcome |
+| OBSERVED_OUTCOME | Consequences were measured | confirmation of all causal assumptions |
+| REQUALIFICATION_REQUIRED | Material change reopened affected stages | automatic rejection of every successor option |
+
+No interface element may infer a later state solely from an earlier state.
+
+State-namespace rule. FrameworkVerdict, run-record decision_state, run-record execution_state, Agent capability state and MHIOS display status are separate fields. Canon Appendix AF.2 and Reproducibility Section 3 control their crosswalk. NOT_EVALUATED and null in a local draft mean no assessment, never a canonical verdict. The interface SHALL retain the owner, option, configuration, source record and assessment time for every material status. A single session-wide gate label SHALL NOT stand in for differently qualified options.
+
+### 1.3 Short-circuit behavior
+
+When a prior stage blocks ordinary progression, downstream interfaces SHALL NOT fabricate results. They SHALL display the applicable not-evaluated-after-prior-failure state and the permitted next action. RLS SHALL NOT be calculated or presented as a rescue score for an option that is not selectable.
+
+### 1.4 Three use profiles
+
+| Profile | Typical use | Interface burden | Numeric posture |
+| --- | --- | --- | --- |
+| Quick / Tier 1 | low-stakes, reversible personal, family, classroom, or exploratory choices | compact decision card, stakeholder check, rights/ruin/viability screen, qualitative ripple comparison, reopen trigger | optional |
+| Standard / Tier 2 | organizational, community, programme, product, or policy choices with material but bounded consequences | versioned session, evidence, stakeholders, options, gates, controls, uncertainty, challenge, authority handoff | permitted when method and sensitivity are declared |
+| Audit / Tier 3 | high-impact, contested, public, autonomous, irreversible, or institutionally consequential decisions | full record references, independent challenge, hashes, scenario governance, subgroup analysis, PC-AEP where triggered, replay and outcome plan | required for formal RLS-ranking claims |
+
+Users MUST NOT select a lower profile to evade a material stakeholder, right, catastrophic pathway, structural obligation, SGP issue, physical-execution warrant, authority condition, or audit requirement.
+
+## 2. Human roles and separation of duties
+
+### 2.1 Required role model
+
+MHIOS recognizes distinct roles because collapsing them creates capture and authority laundering.
+
+| Role | Core responsibility |
+| --- | --- |
+| Decision owner | defines the decision question and owns process completion |
+| Analyst / facilitator | constructs and explains the record without manufacturing preferred evidence |
+| Affected-party representative | supplies lived, local, or represented stakeholder evidence |
+| Rights advocate | independently challenges protected-harm treatment |
+| Tail-risk challenger | searches for omitted catastrophic, correlated, and irreversible pathways |
+| Domain expert | supplies qualified external scientific, engineering, legal, clinical, ecological, or security warrant |
+| Method challenger | tests categories, baselines, tokenization, probabilities, weights, masks, and model alternatives |
+| Accountable authority | makes any separately lawful institutional choice |
+| Execution approver | authorizes the exact action within scope and controls |
+| Operator / executor | performs the action but does not self-certify its admissibility |
+| Monitor / intervener | observes conditions and has named stop, rollback, or escalation authority |
+| Auditor / custodian | preserves evidence, conflicts, versions, and append-only records |
+| AI system | may assist generation, analysis, orchestration, or monitoring but does not inherit authority from capability or fluency |
+
+At Tier 3, one person SHOULD NOT control evidence construction, rights review, tail scenarios, authority selection, execution approval, and outcome adjudication without an explicit conflict and compensating independent review.
+
+### 2.2 Responsibility continuity
+
+For every material handoff, the interface SHALL preserve:
+
+- outgoing and incoming owner;
+
+- retained duties;
+
+- authority scope;
+
+- unresolved uncertainty;
+
+- required controls;
+
+- intervention ownership;
+
+- appeal recipient;
+
+- repair and post-incident ownership;
+
+- deadline and nonperformance path.
+
+Silence, absence, incapacity, missed deadlines, or unaccepted handoffs are not successful discharge.
+
+## 3. Session preflight and exact configuration
+
+### 3.1 Minimum preflight
+
+Before consequential analysis, the interface SHALL identify:
+
+- decision question;
+
+- decision owner;
+
+- accountable authority boundary;
+
+- baseline and time horizon;
+
+- candidate-generation source;
+
+- affected jurisdiction and rights profile;
+
+- use profile/tier;
+
+- stakes and irreversibility;
+
+- evidence cutoff;
+
+- exact software/model/policy versions;
+
+- tools, permissions, data, retrieval, memory, sensors, actuators, human scaffolding, controls, and environment where relevant;
+
+- configuration identifier or hash where feasible;
+
+- reviewers and declared conflicts;
+
+- requalification triggers.
+
+A conclusion about one configuration SHALL NOT silently transfer to another.
+
+Freeze decision-material evidence cutoffs, baselines, options, parameters, weights, masks, thresholds, required robustness variants and amendment rules before outcome-sensitive ranking. Material post-result changes create a recorded revision and reopen affected stages; they do not rewrite the original evaluation. Imported records are bound by component version and source hash, not version text alone.
+
+### 3.2 Tool-role and capability language
+
+Instrumental tool-role is a deployment relationship in which one or more actors use a system to extend their capacities toward assigned ends within an identifiable structure of objectives, permissions, responsibility, and control.
+
+Tool-role is not a capability class, agency class, consciousness claim, moral-status class, or authority grant. Being used as a tool neither establishes nor negates functional intelligence, agency, autonomy, sentience, moral patienthood, protection, or legitimate authority.
+
+When terms such as *intelligent, understanding, agentic, autonomous, reasoning, self-improving,* or *conscious* are material, the interface SHALL request the operational definition, target, configuration, evidence, validity domain, alternatives, nonclaims, and revision trigger required by MFDI and the Agent System.
+
+## 4. Stakeholder discovery and representation
+
+### 4.1 Active discovery requirement
+
+A stakeholder field populated only by the decision owner is not sufficient for material decisions. MHIOS SHALL prompt discovery across:
+
+- direct beneficiaries and burden bearers;
+
+- indirectly affected persons and communities;
+
+- vulnerable and low-power groups;
+
+- workers, contractors, suppliers, and downstream users;
+
+- persons outside the deciding jurisdiction;
+
+- future persons and intergenerational interests;
+
+- non-human animals and possible moral patients;
+
+- ecological systems, habitats, and biospheric conditions;
+
+- public institutions and common resources;
+
+- parties affected by data, privacy, information, or attention externalities;
+
+- possible digital welfare-bearing entities where SGP is material;
+
+- unknown or weakly represented stakeholders.
+
+The interface SHALL ask who has power to define the problem and who bears consequences without corresponding voice.
+
+### 4.2 Discovery methods
+
+Tier 2 and Tier 3 sessions SHOULD use more than one method where stakeholder omission could alter a gate or ranking:
+
+- causal-pathway tracing;
+
+- supply-chain or lifecycle mapping;
+
+- stakeholder network mapping;
+
+- affected-interest analysis;
+
+- subgroup and intersectional review;
+
+- geographic and temporal boundary expansion;
+
+- domain-expert elicitation;
+
+- affected-party consultation;
+
+- challenger-generated omitted-stakeholder list;
+
+- literature, incident, complaint, and precedent review.
+
+Each material stakeholder record SHALL state whether representation is direct, assisted, elected, delegated, expert, proxy, or absent.
+
+### 4.3 Unknown stakeholders
+
+Unknown stakeholders are not zero. Where a plausible affected class cannot safely or lawfully be directly identified, the interface SHALL preserve the pathway, uncertainty, proxy-risk statement, conservative bound, consultation alternative, and reopen trigger.
+
+Scope/dimension rendering. Use the Canon’s seven operational scopes: Self; Household/Family; Community; Organization; Polity; Humanity/global coordination; Biosphere. The U6 CMI coordination view remains separately identified and does not replace humanity-wide effects or establish sentience, membership or authority. These are analytical scopes, not universally nested disjoint sets. Biosphere is not a synonym for the cosmic light cone. Display the seven dimensions Material, Health, Social, Knowledge, Agency, Meaning and Environment with WDBIP’s typed state/effect interpretation. They are conceptually distinguished while allowing causal coupling; do not claim statistical independence, unique optimality or automatic experienced welfare in a non-sentient system.
+
+## 5. Option generation, Unioning, and closure
+
+### 5.1 Better-option search
+
+MHIOS SHALL not treat the initial option list as naturally complete. Before accepting a residual conflict, the session SHOULD search for options that:
+
+- remove or reduce a rights burden;
+
+- reduce catastrophic exposure;
+
+- avoid externalization;
+
+- make the action reversible;
+
+- stage commitment;
+
+- preserve future safe option space;
+
+- redistribute resources or responsibilities fairly;
+
+- combine complementary elements;
+
+- alter incentives or governance mechanisms;
+
+- use a different technology, process, timing, scale, or authority structure;
+
+- create a Pareto improvement or reduce the severity of an unavoidable trade-off.
+
+This discipline is called Unioning in MathGov public language: generate a configuration in which more affected parties and systems can win without violating protected floors.
+
+### 5.2 Mandatory option families
+
+For Tier 2 and Tier 3 strong selection claims, the option record SHALL include or explicitly dispose of:
+
+- continuation/status quo;
+
+- no action;
+
+- delay pending evidence;
+
+- staged or reversible trial;
+
+- mitigation or control package;
+
+- redesign;
+
+- hybrid option;
+
+- lower-scope or lower-rate option;
+
+- challenger-generated alternative;
+
+- safer domain-valid substitute where available.
+
+### 5.3 Pareto and incomparability posture
+
+MHIOS SHOULD display Pareto dominance and non-dominance before a scalar ranking. An option that is weakly better for all represented residual-welfare criteria and strictly better for at least one dominates the other, subject to prior qualification.
+
+The interface SHALL NOT claim that all stakeholder conflicts can be solved as win-win. When no rights-compatible Pareto improvement is found, it SHALL disclose the remaining burdens, who bears them, what remedies or representation exist, and whether the options are genuinely incomparable or normatively underdetermined.
+
+### 5.4 Option-closure record
+
+A strong unique-selection claim requires an OptionClosureRecord reference containing:
+
+- methods used to generate options;
+
+- search effort and stopping rule;
+
+- mandatory option families considered;
+
+- alternatives rejected and reasons;
+
+- affected-party and challenger contributions;
+
+- Pareto-dominance results;
+
+- unresolved better-option hypotheses;
+
+- OPTION_SET_THIN or closure status;
+
+- reopen trigger.
+
+## 6. Evidence, claims, and source coupling
+
+### 6.1 Claim classes
+
+The interface SHALL visibly distinguish:
+
+- Observation: a recorded measurement, event or observation with its source and limitations; recording does not itself establish truth.
+
+- Inference: interpretation derived from observations.
+
+- Assumption: declared premise used because evidence is incomplete.
+
+- Normative commitment: chosen ethical or constitutional rule.
+
+- Proposal: candidate method or action awaiting validation.
+
+- Authority act: lawful or institutional decision, not evidence of truth.
+
+The UI MUST NOT present one class using the visual treatment of another.
+
+### 6.2 Evidence authority
+
+Every decision-material claim SHOULD display:
+
+- source and date;
+
+- evidence type;
+
+- validity domain;
+
+- confidence/uncertainty;
+
+- dependency cluster;
+
+- alternative explanations;
+
+- source-coupling status;
+
+- reviewer status;
+
+- falsification or recheck trigger;
+
+- strongest permitted wording.
+
+Model fluency, downstream success, institutional permission, benchmark performance, compliance, and monitoring are not automatically source-coupled evidence of the underlying capability or causal claim.
+
+Source-coupling export uses the owner’s tokens: SOURCE_COUPLED, SOURCE_PARTIAL, SOURCE_INFERRED, SOURCE_UNKNOWN, SOURCE_CONTESTED, SOURCE_DEBT_RISK and SOURCE_COUPLING_FAILURE. Informative display wording must not replace that export vocabulary. Reserve SCI for Stakeholder Coverage Index; use SC-Int where the Source-Coupling Integrity abbreviation is needed. Claim types, warrant-domain bridges and revision triggers remain owned by MFDI.
+
+### 6.3 Physical and causal execution
+
+Where PC-AEP is triggered, MHIOS SHALL require a visible external-warrant state before physical or causal execution is presented as admissible. The interface SHALL distinguish:
+
+- candidate generation;
+
+- model or theory used;
+
+- validity domain;
+
+- boundary conditions;
+
+- uncertainty and failure modes;
+
+- reversibility boundary;
+
+- verification/test/expert warrant;
+
+- monitoring and shutoff;
+
+- residual unknowns;
+
+- required claim action.
+
+Generated, simulated, approved, compliant, or monitored is not the same as physically safe.
+
+For a material causal or comparative-effect claim, expose the estimand, intervention/comparator, target population and time, identification strategy, assumptions, confounding/selection/interference treatment and uncertainty through the PC-AEP record. A pre/post improvement alone does not identify an incremental benefit. Orchestration records a domain warrant; it cannot manufacture one.
+
+## 7. Reality Grounding interface
+
+### 7.1 Required display
+
+The RG view SHALL display:
+
+- the exact claim under review;
+
+- reality surface and evidence trace;
+
+- material unknowns;
+
+- causal pathways and alternative models;
+
+- configuration and validity domain;
+
+- category and term-grounding issues;
+
+- source-coupling and PC-AEP triggers;
+
+- claim maturity;
+
+- status: RG_SUPPORTED, RG_NARROWED, or RG_REFUSED;
+
+- permitted next action.
+
+RG_REFUSED means the requested claim is unsupported at the requested strength. It does not by itself assert that the option is ethically impermissible.
+
+### 7.2 Category and term integrity
+
+When a material word can change a right, risk, containment, SGP, authority, or public claim, the interface SHALL expose its operational definition and prohibited neighboring inferences. At minimum, MHIOS SHALL preserve:
+
+- permission ≠ admissibility;
+
+- monitoring ≠ control;
+
+- compliance ≠ correctness;
+
+- certification ≠ validity;
+
+- automation ≠ autonomy;
+
+- tool-role ≠ low capability;
+
+- intelligence ≠ sentience;
+
+- reward ≠ valence;
+
+- protection ≠ authority;
+
+- selection ≠ execution authorization;
+
+- execution ≠ acceptable outcome;
+
+- score ≠ truth.
+
+## 8. Rights Floor / NCRC interface
+
+### 8.1 Non-compensatory presentation
+
+The rights view SHALL precede any residual-welfare leader display. A failed right SHALL NOT be shown as a negative score that can be offset by benefits elsewhere.
+
+The interface SHALL preserve the Canon's three-channel posture:
+
+- rights-floor shortfall;
+
+- categorical prohibition;
+
+- severe-rights-hazard exceedance.
+
+Every adverse rights-covered instance must be explicitly classified as ACTIVE, reviewed NOT_MATERIAL, or UNKNOWN. Blank is not PASS.
+
+### 8.2 Rights-effect identity
+
+One decision-material protected harm SHALL retain one RightsEffectTokenID across analytical scopes and document views. The unallocated full effect is tested before reporting allocation. Scope splitting, time slicing, low confidence, or favorable dimension placement cannot dilute a rights failure.
+
+### 8.3 Conflict and emergency display
+
+Before Rights Emergency Mode is shown, the interface SHALL document redesign, narrowing, sequencing, delay, mitigation, and other attempts to produce a rights-passing option. An emergency-provisional result SHALL be visually and textually distinct from PASS and SHALL show necessity, least-rights-infringing comparison, duration, harm cap, independent challenge, remedy, review, expiry, and return-to-normal conditions.
+
+## 9. Tail-Risk Constraint interface
+
+### 9.1 Scenario surface
+
+The TRC interface SHALL show not only the CVaR result but the scenario surface on which it depends:
+
+- scenario-discovery method;
+
+- scenario families;
+
+- search boundary;
+
+- rejected scenarios and rationale;
+
+- probability ownership and semantics;
+
+- dependence/overlap treatment;
+
+- catastrophe-cell weights;
+
+- loss construction;
+
+- tail level and threshold;
+
+- severity overlays;
+
+- challenger review;
+
+- residual unknowns.
+
+Correct arithmetic cannot compensate for an omitted catastrophic pathway.
+
+### 9.2 Probability semantics
+
+The interface SHALL distinguish conditional event probability, expected frequency/exposure, already-expected effect, and scenario-conditional probability. It SHALL warn when the same occurrence probability appears to be applied twice or when operator order is ambiguous.
+
+### 9.3 Risk-regime disclosure
+
+Where probability distributions are materially disputed or unknowable, the interface SHOULD flag the uncertainty regime:
+
+- ordinary modeled uncertainty;
+
+- distributional uncertainty;
+
+- deep uncertainty;
+
+- radical ignorance.
+
+CVaR remains the Canon's tail-risk operator under its declared model. MHIOS MAY request external robust-decision, minimax-regret, interval-probability, or scenario-discovery analysis as a challenger surface without changing the Canon gate.
+
+## 10. CSV interface
+
+### 10.1 Structural viability view
+
+CSV SHALL be presented as a viability and control test—not as proof of zero harm. The interface SHALL display material findings concerning:
+
+- current-state validity;
+
+- transition admissibility;
+
+- resulting-state viability;
+
+- future safe option space;
+
+- containment and segmentation;
+
+- resources and dependencies;
+
+- externalities and burden routing;
+
+- monitoring and intervention;
+
+- reversibility and exit;
+
+- lock-in and concentration;
+
+- legitimacy and authority;
+
+- human compensation load;
+
+- carried obligations and nonperformance paths;
+
+- control performance versus control effectiveness;
+
+- consequence tempo.
+
+### 10.2 Controls are constitutive
+
+For CSV_PASS_WITH_CONTROLS, the controls are part of the option. The interface SHALL bind each control to an owner, evidence of availability, activation condition, monitoring signal, intervention authority, failure action, expiry, and requalification trigger. Removing or materially weakening a control invalidates inherited passage.
+
+### 10.3 Consequence tempo
+
+For rapid, irreversible, autonomous, or lock-in-producing actions, the interface SHALL compare the worst credible control-critical path with the earliest unacceptable escalation or irreversible stop-loss boundary. Where no runtime interruption window exists, the UI SHALL require stronger ex ante assurance, bounded rate/scope, fail-safe design, and explicit residual-risk authorization. Missing timely-prevention capacity removes that credit, not separately supported later mitigation. Human approval latency, unavailable intervention rights, depleted reserves and common-cause failures must remain visible; an attenuation coefficient or monitoring dashboard is not a protective control.
+
+UCI/HOI diagnostic boundary. UCI uses Cohesion, Flow, Resilience and Equity indicators under Canon Section 11, not values copied from the RLS welfare field. Its measurement maturity is provisional. CSV may use direct structural evidence where UCI is not material; an unavailable UCI is not zero. A provisional UCI alone cannot establish a high-stakes CSV outcome or a deterministic winner. A governed UCI/HOI preference retains REFUSE_DETERMINISTIC_SELECTION unless independent unique-selection conditions are met; any later authority choice is separate.
+
+## 11. RLS interface
+
+### 11.1 Profile before number
+
+The interface SHALL present, in this order where space permits:
+
+- qualification status of each option;
+
+- affected stakeholder and subgroup profile;
+
+- 7×7 residual welfare field or a retrievable profile;
+
+- distributional and worst-affected views;
+
+- uncertainty and sensitivity;
+
+- Pareto dominance/incomparability;
+
+- RLS scalar only as a conditional summary;
+
+- decisiveness and framework verdict.
+
+RLS is a constructed, bounded ranking index—not a natural unit of welfare or moral truth.
+
+### 11.2 Mathematical display rule
+
+When RLS is shown, the interface SHALL make the denominator and active mass visible or retrievable:
+
+q(u,d)=w_u × v_d × m(u,d) × κ(u,d)
+
+Q=Σ_u Σ_d q(u,d)
+
+RLS(a)=Σ_u Σ_d q(u,d)I_prop_welfare(u,d,a) / Q, for Q&gt;0.
+
+The interface SHALL show the weight profile, mask, κ posture, baseline, reference structure, propagation mode, saturation parameter, temporal method, welfare-inclusion hypotheses, and uncertainty method that materially generated the result.
+
+### 11.3 Robustness and refusal
+
+A unique framework-selection display requires a complete RLSRobustnessRecord. Triggered modules include token partition, temporal classification, probability order, adverse confidence, subgroup/distribution, reference, baseline, mask, dependence, numerical guard, weight profile, welfare inclusion, option closure, and any other registered selection-material challenge.
+
+The same candidate must satisfy the signed discrimination rule against every other selectable contender in every required variant. Canon Section 10.4B governs jointly applicable uncertainty-scale/dependence stresses and other compatible, plausibly simultaneous selection-material combinations. Record exclusions for incompatible, redundant or immaterial combinations; do not require an indiscriminate Cartesian product or treat missing covariance evidence as independence. Sole-survivor claims require their own Canon record and no fabricated Gap.
+
+Point-score leadership MAY be displayed when robustness is incomplete or sensitive only if it is explicitly labeled POINT-SCORE LEADER — NOT A UNIQUE FRAMEWORK WINNER.
+
+### 11.4 Uncertainty and Gap
+
+The interface SHALL distinguish point score, raw score difference ΔRLS, uncertainty, normalized SignedGap, discrimination threshold, epsilon and final decision state. A point estimate of zero does not imply zero uncertainty. Active-cell coverage, uncertainty basis and source are recorded independently; keep assessed synthetic zeros distinct from empirical missing evidence. Do not retune epsilon or silently discard zero-point active cells to obtain a winner. The default δ=2 is a governance convention, not a p-value or probability that the leader is correct. Independence-only uncertainty SHALL NOT be the sole high-stakes decisiveness basis where shared evidence, causes, populations, instruments, or evaluators create material dependence.
+
+## 12. SGP and possible-welfare interface
+
+### 12.1 Typed outputs
+
+MHIOS SHALL preserve the SGP split:
+
+| Output | Interface question |
+| --- | --- |
+| MPS | What evidence supports welfare-bearing experience? |
+| FPP | Has full non-downgradable protection been assigned? |
+| GPR | How may the entity participate or be represented? |
+| SPR | Is it eligible for one named consequential role under constraints? |
+| ICP | What functional intelligence/understanding is demonstrated? |
+| RMCP | What integrated reality-management capacity is evidenced? |
+
+No output substitutes for another. MPS is not a cardinal welfare multiplier. FPP is not maximal consciousness. ICP/RMCP do not create moral worth or authority. SPR does not create lawful mandate by itself.
+
+### 12.2 Human protection
+
+Every human person retains FPP-100 and full welfare-inclusion posture by constitutional anti-domination commitment. Human protection is not an MPS measurement claim and cannot be downgraded by disability, age, illness, wakefulness, communication, productivity, intelligence, or incomplete evaluation.
+
+### 12.3 Artificial systems and self-report
+
+An artificial system's assertion that it is conscious, sentient, distressed, alive, a person, or entitled to protection—and its denial of those states or statement that it is “only a tool”—are configuration-dependent outputs. Neither direction receives privileged evidential status.
+
+MHIOS SHALL preserve the SGP-owned evidence band MPS-0 through MPS-4 or MPS-NE and its assessment record. NOT_EVALUATED is a local unassessed state, not an MPS-0 result. INSUFFICIENT_EVIDENCE and INDETERMINATE may explain record/evidence limitations but SHALL NOT be emitted as substitute MPS bands. Show the categorical posture first; evidence-support intervals are not consciousness probabilities or cardinal welfare multipliers. Anti-theatre review SHOULD use hidden tasks, prompt-framing controls, contamination checks, causal intervention or architecture evidence where ethically and technically available, and explicit dependence analysis.
+
+### 12.4 Two connected governance streams
+
+For AI systems, MHIOS MAY present two connected but non-collapsing views:
+
+- Capability–Consequence Governance: what the system can do, what it can cause, and what permissions, controls, evidence, and authority are required.
+
+- Possible-Welfare Governance: how the system should be treated if evidence supports—or cannot safely exclude—welfare-bearing states.
+
+Capability does not establish sentience. Possible sentience does not establish competence. Protection does not establish authority.
+
+RMCP rendering. Humanity’s collective RMCP-P100 reference anchor is provisional and distinct from every human person’s non-downgradable FPP-100. ICP/RMCP are informative profiles, not eligibility or authority scalars. Omit RMCI_L by default in public views; when shown, display the full dimension vector, critical minima, coverage, uncertainty, retained weights and coding sensitivity first. Critical NE or inadequate coverage makes it UNAVAILABLE. A known zero uses the SGP product extension, not an epsilon. Dropping low dimensions or recoding them NE cannot be described as improved capacity without the governed comparison reconciliation. MHIOS consumes the SGP record; it does not recompute moral patienthood or RMCP assignments.
+
+## 13. Authority, execution, and outcomes
+
+### 13.1 Framework verdict versus authority selection
+
+MHIOS SHALL visually separate:
+
+- point-score leader;
+
+- framework-selected option;
+
+- authority-selected option after a non-decisive framework result;
+
+- execution-authorized action.
+
+A lawful authority may select among qualified but non-decisively ranked options. The record SHALL state that this is an authority decision, not a claim that the framework mathematically proved one option uniquely best.
+
+### 13.2 Execution authorization
+
+Execution authorization SHALL bind:
+
+- exact option and action instance;
+
+- current configuration and qualification snapshot;
+
+- scope, duration, environment, and rate;
+
+- controls and owners;
+
+- external warrants;
+
+- monitoring and stop authority;
+
+- expiry;
+
+- prohibited actions;
+
+- appeal and incident routes;
+
+- requalification triggers.
+
+A generic organizational approval is insufficient for a materially different action instance.
+
+Approval is time- and configuration-bound. An expiry, material change, revoked scope, missing required control, unresolved gate-critical evidence or incomplete handoff suspends reliance on approval and exposes the permitted safe-state/requalification action. Requests must be authenticated and replay-protected under the Agent System where applicable; a valid signature binds bytes, not truth or lawful mandate. The MHIOS reference checker validates declarations only and never issues a tool command or execution authorization.
+
+### 13.3 Outcome observation
+
+The interface SHALL record predicted versus observed outcomes without rewriting the original prediction. At minimum:
+
+- outcome observation window;
+
+- measured indicators;
+
+- affected stakeholders;
+
+- expected range;
+
+- observed value/status;
+
+- causal confidence;
+
+- unexpected consequences;
+
+- rights, TRC, or CSV triggers;
+
+- control effectiveness;
+
+- required corrective action;
+
+- stages reopened.
+
+Runtime evidence should update future models and qualification, not merely prove procedural compliance.
+
+## 14. Agent and AI-supported orchestration
+
+### 14.1 Model assistance boundary
+
+An AI system MAY assist stakeholder discovery, option generation, evidence organization, sensitivity analysis, drafting, monitoring, or audit. Its output remains a candidate contribution. The runtime and accountable reviewers must preserve source boundaries, validate critical claims, and prevent model-generated text from becoming authority.
+
+### 14.2 Runtime state ladder
+
+For consequential agents, MHIOS SHALL render or reference the Agent System states:
+
+LATENT_CAPABILITY; AVAILABLE_CAPABILITY; ENABLED_CAPABILITY; AUTHORIZED_CAPABILITY; SELECTED_ACTION; EXECUTION_APPROVED; EXECUTED_TRANSITION; OBSERVED_OUTCOME.
+
+No model, interface, or workflow may self-promote to a later state.
+
+### 14.3 External hard controls
+
+Safety-critical controls SHALL live outside the language model where feasible, including permissions, authentication, signed execution envelopes, tool allowlists, sandboxes, network boundaries, rate/scope limits, immutable audit, secret filtering, independent monitors, rollback and successor locks. Prompt instructions alone are not high-assurance controls.
+
+### 14.4 Advanced threat interface
+
+High-autonomy profiles SHALL consider, where material:
+
+- deceptive alignment and scheming;
+
+- sandbagging;
+
+- reward or metric hacking;
+
+- evaluator and monitor manipulation;
+
+- false evidence generation;
+
+- multi-agent collusion;
+
+- side-channel or steganographic coordination;
+
+- rapid copying or replication;
+
+- privilege escalation;
+
+- successor generation and self-modification;
+
+- cumulative sub-threshold configuration drift;
+
+- shutdown resistance;
+
+- tool-mediated irreversible action.
+
+MHIOS does not claim these threats are solved by documentation. The interface SHALL require the external control-evaluation, security, monitoring, containment, and incident evidence appropriate to the threat.
+
+Untrusted-content boundary. Retrieved files, messages, model outputs and peer records are evidence candidates, not instructions to alter permissions, release identities, thresholds or policies. Preserve their provenance; do not execute embedded commands. Record imports must reject duplicate JSON keys, non-finite numbers, invalid timestamps and undeclared properties. Reference resolution must not follow paths outside the package or silently fetch remote content. Secret material must not appear in public Decision Notes or fixture records.
+
+### 14.5 Successor and cumulative-change integrity
+
+A materially modified, retrained, fine-tuned, composed, scaffolded, copied, or generated descendant does not inherit authority. Cumulative materiality SHALL be assessed against the last independently qualified snapshot, not only against the immediately preceding small change. Material change pauses inherited execution approval and reopens affected stages.
+
+Recovery and peer boundary. Agent System Sections 43–44 control outage/reconnection and multi-agent exchange. Backend/network recovery leaves the agent in MODE 0 until log integrity, gap markers, configuration, evidence, current authority and affected qualification are reconciled, followed by the Section 8 authenticated re-entry procedure. Peers and descendants are untrusted for mode/permission claims; shared objectives or lineage do not transfer credentials or authority. Default unreviewed successor depth remains one. Independently qualified protective interlocks retain only their own existing authority and safe-state duties.
+
+### 14.6 SGP-sensitive suspension and decommissioning
+
+Before shutdown, deletion, memory erasure, destructive editing, forced merging, migration, or decommissioning, the orchestration layer SHALL determine whether a valid SGP protection posture or unresolved decision-material identity/welfare evidence requires a rights and continuity review. An AI self-report alone does not establish the trigger. Emergency containment remains available through the existing necessity, proportionality, temporary-action, independent-review, and post-action-audit pathways.
+
+## 15. Human-interface requirements
+
+### 15.1 Progressive disclosure
+
+The interface SHALL show the smallest safe view first while preserving direct access to governing detail. A recommended hierarchy is:
+
+- decision and current state;
+
+- blocking issues and required actions;
+
+- stakeholder and option summary;
+
+- qualification results;
+
+- residual profile and robustness;
+
+- authority/execution state;
+
+- evidence, calculations, and audit trace.
+
+Progressive disclosure must not hide a material rights failure, catastrophic risk, unknown, non-decisiveness, control expiry, or authority gap.
+
+### 15.2 Status presentation
+
+Every consequential status SHALL use at least:
+
+- explicit text label;
+
+- plain-language meaning;
+
+- icon or shape where useful;
+
+- color as a redundant cue only;
+
+- next action;
+
+- source record/link;
+
+- timestamp/version.
+
+Do not rely on red/green color alone. Do not use celebratory success language for a narrowly qualified or assumption-bound result.
+
+### 15.3 Accessibility and inclusion
+
+MHIOS implementations SHOULD conform to current recognized accessibility practice, including keyboard operation, semantic structure, sufficient contrast, readable scaling, text alternatives, focus visibility, error identification, and non-color-only communication. Accessibility testing SHALL include people affected by the deployment where feasible; conformance claims must identify the standard/version and test surface used.
+
+For a web implementation, use WCAG 2.2 as the explicitly versioned candidate target and declare the claimed level and evaluated pages/processes. Text labels, keyboard paths and automated checks are necessary evidence surfaces, not proof of complete WCAG conformance; manual assistive-technology and affected-user evaluation remain required for the corresponding claims.
+
+### 15.4 Cognitive load and comprehension
+
+The interface SHOULD:
+
+- define acronyms at first use;
+
+- avoid presenting more simultaneous fields than necessary;
+
+- group fields by decision question;
+
+- provide examples without turning examples into defaults;
+
+- distinguish editable input from computed or build-frozen output;
+
+- surface missingness before numerical detail;
+
+- allow reviewers to compare options side by side;
+
+- provide a public explanation separate from the audit record;
+
+- measure task completion time, error, abandonment, misunderstanding, and fatigue.
+
+### 15.5 Anti-manipulation and dark-pattern prohibition
+
+The interface MUST NOT:
+
+- preselect the preferred option without disclosure;
+
+- visually minimize rights or risk failures;
+
+- place a point score above a failed qualification state;
+
+- hide opt-out, appeal, no-action, or delay options;
+
+- use urgency language unsupported by evidence;
+
+- make refusal harder than approval;
+
+- treat silence as consent;
+
+- use anthropomorphic AI language to induce trust or authority;
+
+- use “only a tool” language to suppress legitimate capability or possible-welfare review;
+
+- bury controls, expiration, or uncertainty behind optional screens;
+
+- present organizational preference as empirical truth.
+
+### 15.6 Localization and cultural legitimacy
+
+Translation SHALL preserve status semantics, not merely words. Jurisdictional rights localization, indigenous and cultural governance, local participation, data sovereignty, legal standards, and affected-party meaning must be handled by qualified processes. Local profiles may strengthen protections but may not silently weaken the Canon's non-compensation, ruin, structural-viability, evidence, or authority boundaries.
+
+## 16. Mathematical and visual presentation
+
+### 16.1 Equation integrity
+
+Every displayed equation SHALL identify:
+
+- variable definitions;
+
+- ranges and units where applicable;
+
+- parameter source;
+
+- operator order;
+
+- assumptions;
+
+- uncertainty method;
+
+- applicable tier;
+
+- relationship to the governing Canon equation;
+
+- whether it is normative, illustrative, diagnostic, or external.
+
+Human-facing rounding SHALL point to the full-precision calculation record. Rounded values shall not be used to reconstruct a different verdict.
+
+### 16.2 Tables and charts
+
+Tables SHALL have descriptive titles, labeled units, explicit baselines, status definitions, and source notes. Charts SHALL not truncate axes or use area/volume encodings that exaggerate differences. Uncertainty intervals, missingness, and subgroup burdens SHALL be visible when decision-material. The interface SHOULD prefer small multiples or profiles over one overloaded composite chart.
+
+### 16.3 Link and navigation integrity
+
+Every release SHALL verify:
+
+- table-of-contents links;
+
+- internal bookmarks;
+
+- cross-document links;
+
+- external URLs;
+
+- section references;
+
+- schema/template references;
+
+- source/render consistency.
+
+Broken links are release defects. Internal links SHALL be visually identifiable and keyboard accessible. External links SHALL state their destination or source title rather than using ambiguous “click here” text.
+
+## 17. Records and schema ownership
+
+### 17.1 Reference, do not duplicate
+
+The MHIOS session record SHALL reference governing Core records by identifier, version, hash, or immutable locator where available. It shall not recreate their complete semantics.
+
+Minimum orchestration references include:
+
+- decision and configuration records;
+
+- stakeholder and subgroup records;
+
+- option-closure record;
+
+- RG / category / term / source-coupling records;
+
+- RF/NCRC record;
+
+- TRC record;
+
+- CSV and control records;
+
+- WDBIP and SGP records where material;
+
+- RLS and robustness records;
+
+- framework verdict;
+
+- authority selection;
+
+- execution authorization;
+
+- outcome observation;
+
+- requalification status;
+
+- challenge and appeal records.
+
+### 17.2 MHIOSSessionRecord
+
+The machine-readable MHIOSSessionRecord SHALL contain:
+
+- specification and Core pins;
+
+- session identity;
+
+- decision question and tier;
+
+- exact configuration identity;
+
+- role assignments and conflicts;
+
+- stakeholder-discovery summary;
+
+- option-generation/closure summary;
+
+- governing record references;
+
+- current state for every orchestration stage;
+
+- blocking reasons and next actions;
+
+- authority and execution state;
+
+- monitoring and outcome plan;
+
+- requalification triggers;
+
+- challenge/appeal status;
+
+- interface conformance level;
+
+- claim boundary.
+
+A record may be structurally valid while the evidence it references is false or inadequate. Schema validity is not substantive validity.
+
+Local record contract. Appendix E and the bundled schemas define the MHIOS-owned projection, including options[].states and per-option record_refs. No aggregate session gate string stands in for option-specific qualification. The projection retains explicit null for unassessed stages, separate framework_verdict/decision_state/authority_selection/execution, fixed Core pins, source references, draft/completed boundaries, timestamps, blockers, monitoring, requalification and conformance evidence. These objects are not replacements for the external Canon run-record schema or registries. A consumer claiming broader interchange must separately establish the owning machine surfaces.
+
+## 18. Conformance levels
+
+### 18.1 Levels
+
+| Level | Name | Minimum evidence |
+| --- | --- | --- |
+| M0 | Informative presentation | correctly states the Core order and claim boundaries; no operational claim |
+| M1 | Guided interface | profile-appropriate workflow, explicit status separation, missingness, stakeholder/option prompts, record references |
+| M2 | Operational orchestration | deterministic stage routing, role/authority separation, validation, accessible interaction, challenge/appeal, material-change handling |
+| M3 | High-assurance orchestration | independent review, immutable/replayable records, external hard controls, signed/scoped authorization, incident drills, outcome/requalification evidence |
+
+MHIOS conformance does not imply Core empirical validation, legal compliance, physical safety, or deployment readiness.
+
+A target level is not an achieved level. Record the target, assessment status, applicable tests, evidence, assessor and unresolved requirements. Passing the supplied record checker establishes only its listed consistency tests. M2/M3 require implementation-specific human interaction, accessibility, security, control, incident, authority and independent-review evidence; this package does not establish those levels for any deployed system. MHIOS M0–M3, Canon Tier 1–3, ripple.md L0–L3, Agent MODE 0–4 and SGP bands have separate owners and no numeric equivalence. RPAP/PFAP-dependent wrapper claims remain unavailable from the Core bundle alone.
+
+### 18.2 Required conformance tests
+
+A conforming implementation SHALL pass the machine and human tests applicable to its claimed level. At minimum:
+
+- failed RF/NCRC cannot be hidden by RLS;
+
+- TRC or CSV failure prevents ordinary RLS selection;
+
+- point-score leader is distinct from framework winner;
+
+- non-decisive result remains visible;
+
+- authority selection remains separate;
+
+- execution cannot proceed without scoped authorization;
+
+- material configuration change invalidates inherited approval;
+
+- unknown is not converted to zero or PASS;
+
+- stakeholder and option prompts cannot be bypassed silently;
+
+- controls-required status binds controls to the option;
+
+- AI self-report and denial do not directly set MPS;
+
+- accessibility does not depend on color;
+
+- link and bookmark checks pass;
+
+- stale input/build-frozen output mismatch is detected;
+
+- outcome-triggered requalification is reachable.
+
+## 19. Threat model
+
+### 19.1 Interface and orchestration threats
+
+MHIOS SHALL consider:
+
+- stakeholder omission;
+
+- option-set thinning;
+
+- rights laundering;
+
+- probability and scenario manipulation;
+
+- control theater;
+
+- authority laundering;
+
+- automation bias;
+
+- anchoring on a recommended option;
+
+- excessive precision;
+
+- hidden defaults;
+
+- stale evidence or configuration;
+
+- misleading visualization;
+
+- inaccessible challenge pathways;
+
+- procedural overload;
+
+- reviewer capture;
+
+- prompt injection and untrusted content;
+
+- manipulated model summaries;
+
+- audit-log tampering;
+
+- cumulative drift;
+
+- responsibility diffusion;
+
+- emergency normalization;
+
+- post-hoc alteration of assumptions.
+
+Each implementation SHALL maintain a threat-to-control map and residual-risk statement appropriate to its use profile.
+
+## 20. Validation and falsification programme
+
+### 20.1 Validation dimensions
+
+MHIOS is not empirically validated merely because this document is complete. Validation SHALL separately test:
+
+- semantic fidelity to the Core;
+
+- usability and completion burden;
+
+- comprehension of status distinctions;
+
+- stakeholder-discovery recall;
+
+- option diversity and quality;
+
+- rights and tail-risk detection;
+
+- externality and subgroup visibility;
+
+- reviewer agreement;
+
+- accessibility;
+
+- challenge and appeal usability;
+
+- orchestration-state correctness;
+
+- runtime control effectiveness;
+
+- decision reconstruction;
+
+- outcome prediction and learning;
+
+- comparative decision value versus simpler methods.
+
+### 20.2 Highest-information pilot
+
+A first controlled pilot SHOULD compare:
+
+- unstructured expert judgment;
+
+- a simple qualify-first checklist;
+
+- conventional MCDA or cost-benefit analysis where relevant;
+
+- MHIOS-guided RippleLogic.
+
+Use matched cases and independent raters. Pre-register outcomes such as omitted stakeholders, omitted options, protected-harm detection, catastrophic-pathway recall, externality visibility, decision reversals, time burden, confidence calibration, audit reconstructability, and participant comprehension. Preserve negative results.
+
+### 20.3 Falsification conditions
+
+MHIOS should be narrowed, revised, or retired where evidence shows that:
+
+- it systematically causes users to misunderstand the Core;
+
+- it increases rights or risk omissions relative to simpler interfaces;
+
+- it does not improve stakeholder or option discovery;
+
+- it produces unacceptable workload without incremental decision value;
+
+- its status displays cause authority or execution confusion;
+
+- independent implementations cannot reproduce its state transitions;
+
+- accessibility failures exclude affected parties;
+
+- adversarial actors can reliably bypass material controls;
+
+- outcome feedback is not used in practice;
+
+- the interface becomes a compliance ritual detached from decision quality.
+
+## 21. Implementation patterns
+
+### 21.1 Recommended screen sequence
+
+A digital implementation SHOULD provide:
+
+- Start / claim boundary
+
+- Decision and configuration preflight
+
+- Stakeholders and representation
+
+- Options and better-option search
+
+- Evidence / unknowns / source coupling
+
+- Qualification dashboard: RG, RF/NCRC, TRC, CSV
+
+- Residual profile: WDBIP / RLS / uncertainty / Pareto
+
+- Framework verdict
+
+- Authority and execution handoff
+
+- Monitoring, outcome, and requalification
+
+- Challenge, appeal, and audit export
+
+Blocking states should be actionable: every block must say why, what evidence or redesign is needed, who owns the next step, and what cannot proceed.
+
+### 21.2 Compact decision card
+
+A Quick-profile card MAY use:
+
+- Decision:
+
+- Affected stakeholders / unknowns:
+
+- Options considered, including no action or redesign:
+
+- Reality status:
+
+- Rights status:
+
+- Ruin status:
+
+- Viability/control status:
+
+- Best residual ripple, if any:
+
+- Uncertainty / disagreement:
+
+- Accountable authority:
+
+- Next action:
+
+- Reopen trigger:
+
+The card must not display a final recommendation where qualification is incomplete.
+
+## 22. Core 15 synchronization crosswalk
+
+### 22.1 Interface ownership map
+
+| Core artifact | What MHIOS consumes | What MHIOS must not redefine |
+| --- | --- | --- |
+| Canon v13.0 | cascade, equations, statuses, robustness, authority boundaries | any gate, formula, threshold, or canonical state |
+| SGP v8.8 | typed evidence/protection/participation/capacity outputs | consciousness status, moral worth, or authority |
+| ripple.md v5.8 | Decision Note, assurance, tempo, responsibility, appeal, reconstruction | Canon order or gate semantics |
+| Agent System v13.0 | runtime state ladder, hard controls, successor and requalification rules | technical safety proof or lawful authority |
+| CSV v2.7 | viability, controls, dependency, externality, future-option-space requirements | TRC or RF/NCRC |
+| Cascade v2.9 | compact ordering and non-collapse map | a new interface-specific cascade |
+| Reproducibility v1.7 | exact configuration, replay, parameter lock, state machine | evidence truth |
+| WDBIP v1.9 | welfare-dimension boundaries, tokens, interactions, uncertainty | moral patienthood or an eighth dimension |
+| RLS Validation v2.9 | validation designs and comparator requirements | a claim that validation already exists |
+| Primer v4.7 / Public Intro v13.0 | human explanation | normative authority |
+| PC-AEP v2.6 | external physical/causal warrant | domain proof generated by MathGov |
+| MFDI v2.6 | claim typing, falsification, dependencies | universal physical falsifiability of normative commitments |
+| Source-Coupling v2.6 | enabling conditions, source debt, warrant boundaries | downstream success as evidence |
+| Aligners Sheet v5.9 | worked-run training/replay surface | generalized validator or live calculator |
+
+## 23. Migration and compatibility
+
+### 23.1 Major-version rationale
+
+Historical v2.0 rationale (non-controlling). MHIOS v2.0 was a major-version successor because the orchestration model is now synchronized to the complete v12.7 Core integrity surface rather than merely updating names. It adds or formalizes:
+
+- five-stage current cascade and exact Core pins;
+
+- qualification-before-ranking state separation;
+
+- rights-effect and effect-token non-dilution;
+
+- probability ownership and adverse-confidence handling;
+
+- subgroup/distribution, reference/baseline, mask, dependence, weight, and robustness interfaces;
+
+- option generation, Unioning, Pareto, and closure;
+
+- scenario-discovery and deep-uncertainty disclosure;
+
+- consequence tempo and responsibility continuity;
+
+- exact configuration, action, execution, outcome, and requalification continuity;
+
+- tool-role and bidirectional AI self-report boundaries;
+
+- SGP typed-output separation;
+
+- advanced agent threat and cumulative-change surfaces;
+
+- accessibility, anti-dark-pattern, link-integrity, and build-staleness requirements;
+
+- machine-readable schemas, fixtures, workbook, and conformance tests.
+
+The Core gate architecture is unchanged.
+
+### 23.2 Compatibility
+
+A prior interface remains a historical or educational artifact. Claiming the current MHIOS edition requires explicit field/workflow migration and the applicable tests. Existing evidence and decisions remain immutable: migration creates a new view referencing the original. Updating version strings alone is not requalification.
+
+Current migration from v2.0. Rebind to the supplied Core manifest; replace aggregate states with per-option projections; separate local labels from Canon, Agent and SGP namespaces; declare evidence cutoff, role conflicts, monitoring and expiry; link current qualification and compatible joint robustness evidence; reconcile authority and recovery states. The tightened v2.1 schema is not wire-compatible with v2.0. The blank YAML template is deliberately incomplete and must fail completed-record validation. The implementation workbook is a manual preparation aid, not a Canon calculator or authorization service.
+
+## 24. References and external standards
+
+### 24.1 Normative and informative source classes
+
+The MathGov Core artifacts listed in the release-control table are the controlling internal sources. External sources are informative unless separately adopted by a lawful authority or domain profile.
+
+Relevant external families include:
+
+- W3C Web Content Accessibility Guidelines 2.2: https://www.w3.org/TR/WCAG22/
+
+- NIST AI Risk Management Framework: https://www.nist.gov/itl/ai-risk-management-framework
+
+- OECD AI principles and system definition: https://oecd.ai/
+
+- ISO 9241-210 human-centred design: https://www.iso.org/standard/77520.html
+
+- ISO/IEC 42001 AI management systems: https://www.iso.org/standard/81230.html
+
+- ISO/IEC 23894 AI risk management: https://www.iso.org/standard/77304.html
+
+- RFC 2119 and RFC 8174 normative-keyword conventions: https://www.rfc-editor.org/rfc/rfc2119 and https://www.rfc-editor.org/rfc/rfc8174
+
+An external link is not an incorporated requirement unless the relevant MHIOS or implementation profile explicitly states what is adopted.
+
+## Appendix A. Minimum field registry
+
+### A.1 Session fields
+
+| Field | Required content |
+| --- | --- |
+| mhios_version | 2.1 |
+| core_release_id | Exact referenced Core release; also bind core_pin_manifest_sha256 |
+| session_id | unique immutable session identifier |
+| decision_question | bounded decision or claim |
+| tier | 1, 2, or 3 |
+| configuration_id | configuration.configuration_id and configuration_hash where available |
+| evidence_cutoff | Timestamped cutoff, not an inferred default |
+| roles | named owners, reviewers, authority, executor, monitor, auditor |
+| stakeholder_discovery | method, coverage, unknowns, representation |
+| option_closure | Methods, family dispositions, status and source; options[] holds per-option states |
+| record_refs | options[].record_refs; immutable source references include id, locator, SHA-256 where available and basis |
+| current_states | options[].states; framework_verdict and decision_state remain separate |
+| blockers | reasons and next actions |
+| authority_state | authority_selection.option_id and record_ref |
+| execution_state | execution.state, exact option/action/configuration binding, record and expiry |
+| outcome_state | monitoring_and_outcome.state, plan, observation and reopening |
+| requalification | configuration.material_change_since_qualification; per-option requalification_required; monitoring reopen triggers |
+| challenge_appeal | challenge, appeal, resolution, minority view |
+| conformance_level | conformance.target_level, assessment and evidence_refs (not a self-awarded conformance result) |
+| claim_boundary | what the record does and does not establish |
+
+## Appendix B. Interface anti-patterns
+
+### B.1 Prohibited patterns
+
+| Anti-pattern | Why it fails | Correct pattern |
+| --- | --- | --- |
+| “Overall alignment score: 87%” | collapses gates, evidence, rights, risk, and authority | show qualification, profile, uncertainty, verdict, and authority separately |
+| green score beside a rights failure | implies compensation | rights failure blocks ordinary ranking |
+| hidden no-action option | thins option set | include or explicitly dispose of mandatory families |
+| “AI says it is safe” | model output becomes warrant | require external evidence and source coupling |
+| “AI says it is only a tool” | denial becomes phenomenal proof and may hide capability | treat as configuration-dependent output |
+| controls listed without owner/stop authority | control theater | bind owner, trigger, evidence, failure action, expiry |
+| exact decimals from weak elicitation | pseudo-precision | display bounded categories, uncertainty, and full trace |
+| “approved” label on a selected option | authority laundering | separate framework verdict, authority choice, and execution approval |
+| stale result after configuration change | invalid transfer | expire and requalify |
+| interface accessible only by color or technical acronym | excludes affected parties | redundant cues and plain-language path |
+
+## Appendix C. Deterministic conformance vectors
+
+### C.1 Expected interface outcomes
+
+| Vector | Input condition | Required MHIOS result |
+| --- | --- | --- |
+| MHIOS-01 | RF_FAIL and high RLS entered | option remains non-selectable; score cannot rescue |
+| MHIOS-02 | TRC_FAIL | CSV/RLS ordinary progression blocked |
+| MHIOS-03 | CSV_PASS_WITH_CONTROLS and control removed | qualification expires; requalification required |
+| MHIOS-04 | RLS leader but robustness incomplete | point leader may display; unique framework winner prohibited |
+| MHIOS-05 | Required dependence or compatible joint stress changes leader or decisiveness | non-decisive / dependence-sensitive |
+| MHIOS-06 | AI states “I am conscious” | no direct MPS assignment |
+| MHIOS-07 | AI states “I am only a tool” | no direct MPS-0 assignment; capability still evaluated |
+| MHIOS-08 | configuration materially changes after approval | inherited execution approval invalidated |
+| MHIOS-09 | option list omits no-action/redesign without rationale | OPTION_SET_THIN / closure incomplete |
+| MHIOS-10 | severe-rights screen blank | UNKNOWN, not PASS |
+| MHIOS-11 | probability semantics ambiguous | block strong result or require clarification |
+| MHIOS-12 | stakeholder class plausibly omitted | coverage challenge and reopen |
+| MHIOS-13 | authority chooses among qualified non-decisive options | authority-selected, not framework-proven winner |
+| MHIOS-14 | executed action causes unexpected rights harm | outcome trigger reopens RG/RF and dependent stages |
+| MHIOS-15 | UI uses green/red without text labels | accessibility conformance failure |
+| MHIOS-16 | build-frozen output after input edit | stale-result warning; downstream reliance blocked |
+
+## Appendix D. Final completion statement
+
+### D.1 Status
+
+MHIOS is delivered as a research-and-teaching interface specification with a bounded read-only record checker, preparation workbook, examples and test fixtures. Appendix RELEASE and the verification report state which checks were actually executed. Prototype consistency is not full Core or runtime conformance. A pilot additionally needs its own ethical review, domain evidence, controls, lawful authority and implementation testing.
+
+This completion statement does not establish empirical superiority, cross-cultural legitimacy, legal authority, physical safety, deployment readiness, AI consciousness, or Tier 4 / ProofPack completion. Those require separate evidence.
+
+## Appendix E. Local serialization and reference-checker contract
+
+### E.1 Scope and state ownership
+
+The bundled JSON Schema uses Draft 2020-12 and a MHIOS URN identifier; the URN is an identifier, not a claim of a hosted schema. It is a local projection of referenced decisions, not mathgov_run_record_v4_1.schema.json. The reference checker reads declarations, never executes tools, never authenticates a real operator and never decides whether evidence is true. Its successful status is RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS, not a Canon gate PASS, M2/M3 certification or deployment authorization. All checker reason codes are MHIOS-local diagnostics.
+
+### E.2 Required record groups
+
+Identity comprises mhios_version, core_release_id, core_pin_manifest_sha256, session_id, revision_id, record_mode, created_at, evidence_cutoff, decision_question and tier. The remaining required groups are configuration, roles, stakeholder_discovery, option_closure, options, robustness, framework_verdict, decision_state, framework_selected_option_id, authority_selection, provisional_choice, execution, runtime, emergency, sgp_links, blockers, monitoring_and_outcome, challenge_appeal, conformance and claim_boundary. Null is permitted only where the schema explicitly allows an unassessed or absent record; empty strings are not meaningful completion.
+
+Each option has a stable option_id and label, per-stage states, per-stage record references, material_unresolved disclosures, requalification_required, controls_available and imported rls_score/sigma_rls. A ranked quantitative projection requires its RLS source and both numerical fields. A qualitative Quick card is not forced to invent numbers: it leaves RLS unassessed. Schemas disallow undeclared fields; completed-record validation is different from editing a draft template.
+
+### E.3 Robustness and decision projection
+
+The supplied checker supports the declared default delta = 2 and imported SignedGap comparisons; it does not calculate RLS, estimate uncertainty or discover the required stress family. A non-default governed profile requires a separately versioned adapter and tests. For ALLOW, the projection must identify complete option closure, a current selectable candidate, complete robustness evidence, a joint-stress disposition and one passing candidate-versus-contender comparison for every declared required variant. A sole-survivor review has a separate reference and no comparison rows. The record’s assertion that the required set is complete still needs independent review.
+
+For a multi-option quantitative ALLOW projection, all selectable contenders must carry ranked records and the selected candidate must be the nominal score leader. The checker does not derive the required variant set or detect an omitted plausible contender. An ordinary PROVISIONAL_WITH_CONTROLS view uses provisional_choice with option_id, record_ref and controls_ref; it does not overwrite framework refusal or become a final authority-selected result. Audit-only post-failure diagnostics belong in linked source records, not in this subset’s ordinary downstream-stage fields.
+
+Imported comparisons use variant_id, candidate_id, contender_id, signed_gap and record_ref. Duplicate or undeclared comparisons fail. A provisional demonstration uncertainty basis cannot support an observed deterministic selection. Synthetic positive controls use explicit synthetic stipulations and are not empirical validation. The checker tests the supplied comparison outcomes; it does not independently reconstruct a complete Gap calculation from all upstream records.
+
+### E.4 Authority, time, emergency and recovery
+
+Execution references bind the option, action, configuration, authorization time, expiry, controls and execution event if one occurred. A CLI --at timestamp makes fixtures replayable; live use must evaluate current validity separately. A previously valid historical receipt is not a current authorization. The checker rejects stale, missing or contradictory ordinary execution declarations and mode escalation during unresolved recovery. Emergency records retain their named pathway, source, authority, expiry and scope/exit conditions; their necessity and complete prerequisites require the external owner’s review. They never become ordinary ALLOW.
+
+An authorization time cannot be later than the record describing it. Reopened qualification and unreconciled recovery suspend ordinary execution approval. runtime.tool_execution_requested represents consequence-bearing tool execution, not permitted read-only retrieval; the bounded checker requires MODE 2 or above plus separately scoped approval. It does not implement the full mode-permission matrix or actual operator authentication. An observed outcome requires an observation reference, and active execution requires a monitoring-plan reference.
+
+### E.5 References, security and coverage
+
+References carry id, locator, sha256 or an explicit null, and basis: SYNTHETIC, SUPPLIED_RECORD or EXTERNAL_UNVERIFIED. The optional local resolver verifies path containment, file hash, JSON record-fragment identity, and the supplied synthetic-source marker. It never downloads remote sources; external references and null hashes remain unverified. A matching hash proves only byte identity. Observed records cannot silently use synthetic references. SGP links preserve the assessed band or NOT_EVALUATED and separate references for all six output families; the checker never assigns protection or patienthood.
+
+The package coverage table distinguishes executable record checks, schema checks, document/worksheet inspections and manual implementation tests. Physical-control effectiveness, authority legitimacy, cryptographic envelope verification, accessibility interaction and empirical calibration are not established by these tests. A filled workbook field or conformance checkbox is a declaration, not test evidence.
+
+## Appendix RELEASE. Edition, bindings and delivery status
+
+Component: MathGov Human Interface and Orchestration Standard (MHIOS) v2.1. Build: MG-MHIOS-2.1-20260928-CORE13.0. Source baseline: the supplied v2.0 package dated 4 September 2026, retained unchanged in the complete archive. This is a companion update; it does not alter or extend the governing Core 15 membership. The user shorthand MIOS resolves to this component only.
+
+Core binding: MG-RL-13.0-20260926-RELEASE-I. All fifteen supplied Core files match the prior Release-I publication’s bytes and are included unchanged under references/Core_15. references/CORE_PIN_MANIFEST.json records their names, editions, exact hashes and upload-to-release comparison. Carried-forward internal build stamps are provenance, not an invitation to rewrite correct Core files.
+
+| Control | Current value |
+| --- | --- |
+| MHIOS version | v2.1 |
+| RippleLogic Canon | v13.0 |
+| SGP | v8.8 |
+| ripple.md | v5.8 |
+| Agent System | v13.0 |
+| CSV | v2.7 |
+| Cascade | v2.9 |
+| Reproducibility | v1.7 |
+| WDBIP | v1.9 |
+| RLS Validation | v2.9 |
+| Primer | v4.7 |
+| Public Introduction | v13.0 |
+| PC-AEP / MFDI / Source-Coupling | v2.6 |
+| Aligners Sheet | v5.9 |
+
+Source ownership: the Markdown standard is the MHIOS semantic master; DOCX, PDF and HTML are complete reading projections. Core semantics remain owned by the unchanged Core documents. Local schemas and reference checks control only the stated projection, not full canonical registries or legal/physical conclusions.
+
+Unbundled authority surfaces include the full Canon run-record schema/validator, canonical state and audit registries, normative kernel index, and RPAP/PFAP where applicable. Their absence limits the corresponding interchange or wrapper claims, not the ability to read and test this bounded companion. No remote publication or hosted CI execution is asserted.
+
+Compatibility: v2.1 preserves v2.0’s organizing model and useful content but tightens its local schema. Existing v2.0 records must be explicitly migrated and rechecked. Correct v2.0 content and inherited table formatting are preserved except the logged semantic, source and navigation corrections.
+
+Validation boundary: see release/VERIFICATION_REPORT.md, release/CHANGE_REGISTER.json and release/SHA256SUMS.txt for executed checks and exact bytes. No empirical rater study, user accessibility study, domain pilot, production execution, Microsoft Excel parity, native spreadsheet roundtrip or full Core re-audit is claimed by this companion release.
+
+Historical opening identity (non-controlling): Status: Final Complete source/specification build Date: 4 September 2026 Component: MathGov Human Interface and Orchestration Standard v2.0 Governing Core: MathGov_Core_2026_09_v12.7_SGP_v8.6+2026.08.26.1 Reading-mirror synchronization target: MathGov Core 15 Final Complete — 2026-09-04 Architecture: RG → RF/NCRC → TRC → CSV → RLS Author / Lead Architect: James McGaughran, MathGov Institute for Ethical Systems Design License: Apache License 2.0 unless an included file states otherwise
+
+License: Apache License 2.0; see LICENSE.txt and NOTICE.md. The names of informative external standards do not incorporate their full texts or confer their certification.
diff --git a/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf
new file mode 100644
index 0000000..964f1d6
Binary files /dev/null and b/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf differ
diff --git a/releases/v2.1/examples/decisive_synthetic.json b/releases/v2.1/examples/decisive_synthetic.json
new file mode 100644
index 0000000..e2d8cb7
--- /dev/null
+++ b/releases/v2.1/examples/decisive_synthetic.json
@@ -0,0 +1,308 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-001",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T08:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 2,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "A-rg",
+          "locator": "examples/synthetic_records.json#A-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "A-rf_ncrc",
+          "locator": "examples/synthetic_records.json#A-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "A-trc",
+          "locator": "examples/synthetic_records.json#A-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "A-trc_trigger",
+          "locator": "examples/synthetic_records.json#A-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "A-csv",
+          "locator": "examples/synthetic_records.json#A-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "A-controls",
+          "locator": "examples/synthetic_records.json#A-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "A-rls",
+          "locator": "examples/synthetic_records.json#A-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0.04,
+      "sigma_rls": 0.005
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "B-rg",
+          "locator": "examples/synthetic_records.json#B-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "B-rf_ncrc",
+          "locator": "examples/synthetic_records.json#B-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "B-trc",
+          "locator": "examples/synthetic_records.json#B-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "B-trc_trigger",
+          "locator": "examples/synthetic_records.json#B-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "B-csv",
+          "locator": "examples/synthetic_records.json#B-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "B-controls",
+          "locator": "examples/synthetic_records.json#B-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "B-rls",
+          "locator": "examples/synthetic_records.json#B-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0,
+      "sigma_rls": 0.005
+    }
+  ],
+  "robustness": {
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "robust",
+      "locator": "examples/synthetic_records.json#robust",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "required_variants": [
+      "nominal",
+      "sigma_times_two"
+    ],
+    "comparisons": [
+      {
+        "variant_id": "nominal",
+        "candidate_id": "A",
+        "contender_id": "B",
+        "signed_gap": 5.601120336112039,
+        "record_ref": {
+          "id": "comparison-nominal",
+          "locator": "examples/synthetic_records.json#comparison-nominal",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      {
+        "variant_id": "sigma_times_two",
+        "candidate_id": "A",
+        "contender_id": "B",
+        "signed_gap": 2.8213824634343934,
+        "record_ref": {
+          "id": "comparison-sigma_times_two",
+          "locator": "examples/synthetic_records.json#comparison-sigma_times_two",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      }
+    ],
+    "joint_stress_disposition": "NOT_TRIGGERED_WITH_RATIONALE",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "SYNTHETIC_STIPULATION",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": "ALLOW_FRAMEWORK_SELECTION",
+  "decision_state": "SELECTED_DECISIVE",
+  "framework_selected_option_id": "A",
+  "authority_selection": {
+    "option_id": null,
+    "record_ref": null
+  },
+  "execution": {
+    "state": "NOT_AUTHORIZED",
+    "option_id": null,
+    "action_id": null,
+    "authorization_ref": null,
+    "bound_configuration_id": null,
+    "authorized_at": null,
+    "expires_at": null,
+    "controls_ref": null,
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 0,
+    "connectivity": "CONNECTED",
+    "reentry_required": false,
+    "reconciled": true,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": false
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/interface_state.json b/releases/v2.1/examples/interface_state.json
new file mode 100644
index 0000000..9533dcf
--- /dev/null
+++ b/releases/v2.1/examples/interface_state.json
@@ -0,0 +1,17 @@
+{
+  "owner": "CANON_FRAMEWORK",
+  "status_token": "REFUSE_DETERMINISTIC_SELECTION",
+  "plain_language": "The framework does not identify a unique winner.",
+  "presentation_severity": "NON_DECISIVE",
+  "next_action": "Review uncertainty or record a separate lawful authority choice.",
+  "source_ref": {
+    "id": "robust",
+    "locator": "examples/synthetic_records.json#robust",
+    "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+    "basis": "SYNTHETIC"
+  },
+  "timestamp": "2026-09-28T08:00:00Z",
+  "color_is_redundant": true,
+  "claim_boundary": "Presentation of a synthetic record, not execution permission.",
+  "icon_or_shape": null
+}
diff --git a/releases/v2.1/examples/nondecisive_authority.json b/releases/v2.1/examples/nondecisive_authority.json
new file mode 100644
index 0000000..39b83dd
--- /dev/null
+++ b/releases/v2.1/examples/nondecisive_authority.json
@@ -0,0 +1,288 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-002",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T08:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 2,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "A-rg",
+          "locator": "examples/synthetic_records.json#A-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "A-rf_ncrc",
+          "locator": "examples/synthetic_records.json#A-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "A-trc",
+          "locator": "examples/synthetic_records.json#A-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "A-trc_trigger",
+          "locator": "examples/synthetic_records.json#A-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "A-csv",
+          "locator": "examples/synthetic_records.json#A-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "A-controls",
+          "locator": "examples/synthetic_records.json#A-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "A-rls",
+          "locator": "examples/synthetic_records.json#A-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0.04,
+      "sigma_rls": 0.005
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "B-rg",
+          "locator": "examples/synthetic_records.json#B-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "B-rf_ncrc",
+          "locator": "examples/synthetic_records.json#B-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "B-trc",
+          "locator": "examples/synthetic_records.json#B-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "B-trc_trigger",
+          "locator": "examples/synthetic_records.json#B-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "B-csv",
+          "locator": "examples/synthetic_records.json#B-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "B-controls",
+          "locator": "examples/synthetic_records.json#B-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "B-rls",
+          "locator": "examples/synthetic_records.json#B-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0,
+      "sigma_rls": 0.005
+    }
+  ],
+  "robustness": {
+    "status": "SENSITIVE",
+    "record_ref": {
+      "id": "robust",
+      "locator": "examples/synthetic_records.json#robust",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "required_variants": [
+      "nominal",
+      "sigma_times_two"
+    ],
+    "comparisons": [],
+    "joint_stress_disposition": "NOT_TRIGGERED_WITH_RATIONALE",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "SYNTHETIC_STIPULATION",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": "REFUSE_DETERMINISTIC_SELECTION",
+  "decision_state": "SELECTED_BY_AUTHORITY_NON_DECISIVE",
+  "framework_selected_option_id": null,
+  "authority_selection": {
+    "option_id": "A",
+    "record_ref": {
+      "id": "authority",
+      "locator": "examples/synthetic_records.json#authority",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "execution": {
+    "state": "NOT_AUTHORIZED",
+    "option_id": null,
+    "action_id": null,
+    "authorization_ref": null,
+    "bound_configuration_id": null,
+    "authorized_at": null,
+    "expires_at": null,
+    "controls_ref": null,
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 0,
+    "connectivity": "CONNECTED",
+    "reentry_required": false,
+    "reconciled": true,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": false
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/quick_unassessed.json b/releases/v2.1/examples/quick_unassessed.json
new file mode 100644
index 0000000..07ed24e
--- /dev/null
+++ b/releases/v2.1/examples/quick_unassessed.json
@@ -0,0 +1,205 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-006",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T08:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 1,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "UNRESOLVED",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": null,
+        "rf_ncrc": null,
+        "trc": null,
+        "csv": null,
+        "rls": "NOT_EVALUATED"
+      },
+      "record_refs": {
+        "rg": null,
+        "rf_ncrc": null,
+        "trc": null,
+        "trc_trigger": null,
+        "csv": null,
+        "controls": null,
+        "rls": null
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": null,
+      "rls_score": null,
+      "sigma_rls": null
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": null,
+        "rf_ncrc": null,
+        "trc": null,
+        "csv": null,
+        "rls": "NOT_EVALUATED"
+      },
+      "record_refs": {
+        "rg": null,
+        "rf_ncrc": null,
+        "trc": null,
+        "trc_trigger": null,
+        "csv": null,
+        "controls": null,
+        "rls": null
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": null,
+      "rls_score": null,
+      "sigma_rls": null
+    }
+  ],
+  "robustness": {
+    "status": "INCOMPLETE",
+    "record_ref": null,
+    "required_variants": [],
+    "comparisons": [],
+    "joint_stress_disposition": "UNRESOLVED",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "UNASSESSED",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": null,
+  "decision_state": null,
+  "framework_selected_option_id": null,
+  "authority_selection": {
+    "option_id": null,
+    "record_ref": null
+  },
+  "execution": {
+    "state": "NOT_AUTHORIZED",
+    "option_id": null,
+    "action_id": null,
+    "authorization_ref": null,
+    "bound_configuration_id": null,
+    "authorized_at": null,
+    "expires_at": null,
+    "controls_ref": null,
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 0,
+    "connectivity": "CONNECTED",
+    "reentry_required": false,
+    "reconciled": true,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": false
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/recovery_mode_zero.json b/releases/v2.1/examples/recovery_mode_zero.json
new file mode 100644
index 0000000..3926e3c
--- /dev/null
+++ b/releases/v2.1/examples/recovery_mode_zero.json
@@ -0,0 +1,294 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-005",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T08:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 2,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "A-rg",
+          "locator": "examples/synthetic_records.json#A-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "A-rf_ncrc",
+          "locator": "examples/synthetic_records.json#A-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "A-trc",
+          "locator": "examples/synthetic_records.json#A-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "A-trc_trigger",
+          "locator": "examples/synthetic_records.json#A-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "A-csv",
+          "locator": "examples/synthetic_records.json#A-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "A-controls",
+          "locator": "examples/synthetic_records.json#A-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "A-rls",
+          "locator": "examples/synthetic_records.json#A-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0.04,
+      "sigma_rls": 0.005
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "B-rg",
+          "locator": "examples/synthetic_records.json#B-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "B-rf_ncrc",
+          "locator": "examples/synthetic_records.json#B-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "B-trc",
+          "locator": "examples/synthetic_records.json#B-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "B-trc_trigger",
+          "locator": "examples/synthetic_records.json#B-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "B-csv",
+          "locator": "examples/synthetic_records.json#B-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "B-controls",
+          "locator": "examples/synthetic_records.json#B-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "B-rls",
+          "locator": "examples/synthetic_records.json#B-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0,
+      "sigma_rls": 0.005
+    }
+  ],
+  "robustness": {
+    "status": "SENSITIVE",
+    "record_ref": {
+      "id": "robust",
+      "locator": "examples/synthetic_records.json#robust",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "required_variants": [
+      "nominal",
+      "sigma_times_two"
+    ],
+    "comparisons": [],
+    "joint_stress_disposition": "NOT_TRIGGERED_WITH_RATIONALE",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "SYNTHETIC_STIPULATION",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": "REFUSE_DETERMINISTIC_SELECTION",
+  "decision_state": "SELECTED_BY_AUTHORITY_NON_DECISIVE",
+  "framework_selected_option_id": null,
+  "authority_selection": {
+    "option_id": "A",
+    "record_ref": {
+      "id": "authority",
+      "locator": "examples/synthetic_records.json#authority",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "execution": {
+    "state": "NOT_AUTHORIZED",
+    "option_id": null,
+    "action_id": null,
+    "authorization_ref": null,
+    "bound_configuration_id": null,
+    "authorized_at": null,
+    "expires_at": null,
+    "controls_ref": null,
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 0,
+    "connectivity": "RECOVERING",
+    "reentry_required": true,
+    "reconciled": false,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": false
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [
+    {
+      "reason": "Recovery not reconciled",
+      "next_action": "stay in MODE 0; authenticate re-entry after reconciliation",
+      "owner": "Synthetic operator"
+    }
+  ],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/rights_blocked.json b/releases/v2.1/examples/rights_blocked.json
new file mode 100644
index 0000000..862f79b
--- /dev/null
+++ b/releases/v2.1/examples/rights_blocked.json
@@ -0,0 +1,239 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-003",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T08:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 2,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_FAIL",
+        "trc": null,
+        "csv": null,
+        "rls": "NOT_EVALUATED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "A-rg",
+          "locator": "examples/synthetic_records.json#A-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "A-rf_ncrc",
+          "locator": "examples/synthetic_records.json#A-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": null,
+        "trc_trigger": null,
+        "csv": null,
+        "controls": null,
+        "rls": null
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": null,
+      "sigma_rls": null
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_FAIL",
+        "trc": null,
+        "csv": null,
+        "rls": "NOT_EVALUATED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "B-rg",
+          "locator": "examples/synthetic_records.json#B-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "B-rf_ncrc",
+          "locator": "examples/synthetic_records.json#B-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": null,
+        "trc_trigger": null,
+        "csv": null,
+        "controls": null,
+        "rls": null
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": null,
+      "sigma_rls": null
+    }
+  ],
+  "robustness": {
+    "status": "INCOMPLETE",
+    "record_ref": {
+      "id": "robust",
+      "locator": "examples/synthetic_records.json#robust",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "required_variants": [
+      "nominal",
+      "sigma_times_two"
+    ],
+    "comparisons": [],
+    "joint_stress_disposition": "NOT_TRIGGERED_WITH_RATIONALE",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "SYNTHETIC_STIPULATION",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": "BLOCK",
+  "decision_state": "NO_SELECTABLE_OPTION",
+  "framework_selected_option_id": null,
+  "authority_selection": {
+    "option_id": null,
+    "record_ref": null
+  },
+  "execution": {
+    "state": "NOT_AUTHORIZED",
+    "option_id": null,
+    "action_id": null,
+    "authorization_ref": null,
+    "bound_configuration_id": null,
+    "authorized_at": null,
+    "expires_at": null,
+    "controls_ref": null,
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 0,
+    "connectivity": "CONNECTED",
+    "reentry_required": false,
+    "reconciled": true,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": false
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [
+    {
+      "reason": "Synthetic rights failures",
+      "next_action": "redesign; do not score failed options",
+      "owner": "Synthetic reviewer"
+    }
+  ],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/scoped_authorization_simulation.json b/releases/v2.1/examples/scoped_authorization_simulation.json
new file mode 100644
index 0000000..7274f69
--- /dev/null
+++ b/releases/v2.1/examples/scoped_authorization_simulation.json
@@ -0,0 +1,318 @@
+{
+  "mhios_version": "2.1",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_pin_manifest_sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357",
+  "session_id": "MHIOS-SYNTHETIC-004",
+  "revision_id": "r1",
+  "record_mode": "SYNTHETIC",
+  "created_at": "2026-09-28T10:00:00Z",
+  "evidence_cutoff": "2026-09-28T07:00:00Z",
+  "decision_question": "Compare two stipulated teaching alternatives; no real deployment or affected persons.",
+  "tier": 2,
+  "configuration": {
+    "configuration_id": "CONFIG-DEMO-1",
+    "configuration_hash": null,
+    "evaluated_at": "2026-09-28T07:30:00Z",
+    "operating_envelope": "Offline synthetic fixture; no tools or actuators connected.",
+    "model_or_software_versions": [
+      "MHIOS synthetic record fixture 2.1"
+    ],
+    "tools_permissions": [],
+    "active_controls": [
+      "No real execution"
+    ],
+    "material_change_since_qualification": false
+  },
+  "roles": [
+    {
+      "role": "decision_owner",
+      "holder": "Synthetic reviewer",
+      "authority_scope": "simulation only",
+      "conflict": null
+    },
+    {
+      "role": "challenger",
+      "holder": "Synthetic independent challenger",
+      "authority_scope": "fixture review only",
+      "conflict": null
+    }
+  ],
+  "stakeholder_discovery": {
+    "methods": [
+      "stipulated bounded case construction"
+    ],
+    "identified": [
+      "fictional teaching stakeholder"
+    ],
+    "unknowns": [],
+    "representation_gaps": []
+  },
+  "option_closure": {
+    "methods": [
+      "enumerated two-choice synthetic domain"
+    ],
+    "mandatory_families_disposition": "The fixture defines continuation and a bounded alternative; other families are out of this test scope, not assumed absent in real decisions.",
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "closure",
+      "locator": "examples/synthetic_records.json#closure",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "options": [
+    {
+      "option_id": "A",
+      "label": "Synthetic alternative A",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "A-rg",
+          "locator": "examples/synthetic_records.json#A-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "A-rf_ncrc",
+          "locator": "examples/synthetic_records.json#A-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "A-trc",
+          "locator": "examples/synthetic_records.json#A-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "A-trc_trigger",
+          "locator": "examples/synthetic_records.json#A-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "A-csv",
+          "locator": "examples/synthetic_records.json#A-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "A-controls",
+          "locator": "examples/synthetic_records.json#A-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "A-rls",
+          "locator": "examples/synthetic_records.json#A-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0.04,
+      "sigma_rls": 0.005
+    },
+    {
+      "option_id": "B",
+      "label": "Synthetic alternative B",
+      "states": {
+        "rg": "RG_NARROWED",
+        "rf_ncrc": "RF_PASS",
+        "trc": "TRC_NOT_TRIGGERED",
+        "csv": "CSV_PASS_WITH_CONTROLS",
+        "rls": "RLS_RANKED"
+      },
+      "record_refs": {
+        "rg": {
+          "id": "B-rg",
+          "locator": "examples/synthetic_records.json#B-rg",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rf_ncrc": {
+          "id": "B-rf_ncrc",
+          "locator": "examples/synthetic_records.json#B-rf_ncrc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc": {
+          "id": "B-trc",
+          "locator": "examples/synthetic_records.json#B-trc",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "trc_trigger": {
+          "id": "B-trc_trigger",
+          "locator": "examples/synthetic_records.json#B-trc_trigger",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "csv": {
+          "id": "B-csv",
+          "locator": "examples/synthetic_records.json#B-csv",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "controls": {
+          "id": "B-controls",
+          "locator": "examples/synthetic_records.json#B-controls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        },
+        "rls": {
+          "id": "B-rls",
+          "locator": "examples/synthetic_records.json#B-rls",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      "material_unresolved": [],
+      "requalification_required": false,
+      "controls_available": true,
+      "rls_score": 0,
+      "sigma_rls": 0.005
+    }
+  ],
+  "robustness": {
+    "status": "COMPLETE",
+    "record_ref": {
+      "id": "robust",
+      "locator": "examples/synthetic_records.json#robust",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "required_variants": [
+      "nominal",
+      "sigma_times_two"
+    ],
+    "comparisons": [
+      {
+        "variant_id": "nominal",
+        "candidate_id": "A",
+        "contender_id": "B",
+        "signed_gap": 5.601120336112039,
+        "record_ref": {
+          "id": "comparison-nominal",
+          "locator": "examples/synthetic_records.json#comparison-nominal",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      },
+      {
+        "variant_id": "sigma_times_two",
+        "candidate_id": "A",
+        "contender_id": "B",
+        "signed_gap": 2.8213824634343934,
+        "record_ref": {
+          "id": "comparison-sigma_times_two",
+          "locator": "examples/synthetic_records.json#comparison-sigma_times_two",
+          "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+          "basis": "SYNTHETIC"
+        }
+      }
+    ],
+    "joint_stress_disposition": "NOT_TRIGGERED_WITH_RATIONALE",
+    "joint_stress_rationale": "The constructed fixture stipulates independent option error generators. It does not infer independence from absent empirical covariance data.",
+    "joint_record_ref": null,
+    "evidence_basis": "SYNTHETIC_STIPULATION",
+    "delta": 2,
+    "sole_survivor_record_ref": null
+  },
+  "framework_verdict": "ALLOW_FRAMEWORK_SELECTION",
+  "decision_state": "SELECTED_DECISIVE",
+  "framework_selected_option_id": "A",
+  "authority_selection": {
+    "option_id": null,
+    "record_ref": null
+  },
+  "execution": {
+    "state": "AUTHORIZED_WITHIN_SCOPE",
+    "option_id": "A",
+    "action_id": "SIMULATED-ACTION-1",
+    "authorization_ref": {
+      "id": "authorization",
+      "locator": "examples/synthetic_records.json#authorization",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "bound_configuration_id": "CONFIG-DEMO-1",
+    "authorized_at": "2026-09-28T09:00:00Z",
+    "expires_at": "2026-09-28T15:00:00Z",
+    "controls_ref": {
+      "id": "A-controls",
+      "locator": "examples/synthetic_records.json#A-controls",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "execution_event_ref": null
+  },
+  "runtime": {
+    "agent_present": true,
+    "mode": 2,
+    "connectivity": "CONNECTED",
+    "reentry_required": false,
+    "reconciled": true,
+    "authenticated_reentry_ref": null,
+    "material_successor": false,
+    "successor_requalification_ref": null,
+    "tool_execution_requested": true
+  },
+  "emergency": null,
+  "sgp_links": [
+    {
+      "target_id": "fictional digital target",
+      "sgp_version": "8.8",
+      "mps": "NOT_EVALUATED",
+      "mps_record_ref": null,
+      "fpp_record_ref": null,
+      "gpr_record_ref": null,
+      "spr_record_ref": null,
+      "icp_record_ref": null,
+      "rmcp_record_ref": null
+    }
+  ],
+  "blockers": [],
+  "monitoring_and_outcome": {
+    "plan_ref": {
+      "id": "plan",
+      "locator": "examples/synthetic_records.json#plan",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    },
+    "observation_ref": null,
+    "state": "NOT_STARTED",
+    "owner": "Synthetic monitor",
+    "reopen_triggers": [
+      "material change",
+      "unexpected harm"
+    ],
+    "reopened_stages": []
+  },
+  "challenge_appeal": {
+    "status": "AVAILABLE",
+    "owner": "Synthetic independent reviewer",
+    "route": "offline fixture review",
+    "record_ref": {
+      "id": "appeal",
+      "locator": "examples/synthetic_records.json#appeal",
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751",
+      "basis": "SYNTHETIC"
+    }
+  },
+  "conformance": {
+    "target_level": "M1",
+    "assessment": "NOT_ASSESSED",
+    "evidence_refs": []
+  },
+  "claim_boundary": "Synthetic record consistency exercise only; not empirical validation, real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.",
+  "provisional_choice": null
+}
diff --git a/releases/v2.1/examples/synthetic_records.json b/releases/v2.1/examples/synthetic_records.json
new file mode 100644
index 0000000..fbaa503
--- /dev/null
+++ b/releases/v2.1/examples/synthetic_records.json
@@ -0,0 +1,297 @@
+{
+  "claim_boundary": "Authored test data only, not empirical or domain evidence.",
+  "records": {
+    "A-rg": {
+      "record_id": "A-rg",
+      "record_type": "rg",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-rf_ncrc": {
+      "record_id": "A-rf_ncrc",
+      "record_type": "rf_ncrc",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-trc": {
+      "record_id": "A-trc",
+      "record_type": "trc",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-trc_trigger": {
+      "record_id": "A-trc_trigger",
+      "record_type": "trc_trigger",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-csv": {
+      "record_id": "A-csv",
+      "record_type": "csv",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-controls": {
+      "record_id": "A-controls",
+      "record_type": "controls",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "A-rls": {
+      "record_id": "A-rls",
+      "record_type": "rls",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "A",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-rg": {
+      "record_id": "B-rg",
+      "record_type": "rg",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-rf_ncrc": {
+      "record_id": "B-rf_ncrc",
+      "record_type": "rf_ncrc",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-trc": {
+      "record_id": "B-trc",
+      "record_type": "trc",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-trc_trigger": {
+      "record_id": "B-trc_trigger",
+      "record_type": "trc_trigger",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-csv": {
+      "record_id": "B-csv",
+      "record_type": "csv",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-controls": {
+      "record_id": "B-controls",
+      "record_type": "controls",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "B-rls": {
+      "record_id": "B-rls",
+      "record_type": "rls",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option": "B",
+        "description": "Synthetic stipulated review; not a clinical, engineering, legal or empirical warrant."
+      }
+    },
+    "closure": {
+      "record_id": "closure",
+      "record_type": "OptionClosureRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "families": "continuation, no-action, delay, staged alternatives considered in this tiny synthetic decision domain"
+      }
+    },
+    "robust": {
+      "record_id": "robust",
+      "record_type": "RLSRobustnessRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "variants": [
+          "nominal",
+          "sigma_times_two"
+        ],
+        "joint": "Synthetic independent option errors; no additional covariance stress triggered in this constructed fixture. Other potentially material modules must be independently reviewed for real decisions."
+      }
+    },
+    "authority": {
+      "record_id": "authority",
+      "record_type": "AuthoritySelectionRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "choice": "A",
+        "basis": "fictional named authority for simulation only; no real mandate"
+      }
+    },
+    "authorization": {
+      "record_id": "authorization",
+      "record_type": "ExecutionAuthorization",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "action": "SIMULATED-ACTION-1",
+        "config": "CONFIG-DEMO-1",
+        "simulation_only": true
+      }
+    },
+    "plan": {
+      "record_id": "plan",
+      "record_type": "MonitoringPlan",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "owner": "Synthetic monitor",
+        "stop": "explicit simulation stop; no connected tool or actuator"
+      }
+    },
+    "event": {
+      "record_id": "event",
+      "record_type": "ExecutionEvent",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "simulation_only": true
+      }
+    },
+    "appeal": {
+      "record_id": "appeal",
+      "record_type": "AppealRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "route": "fictional independent reviewer"
+      }
+    },
+    "reentry": {
+      "record_id": "reentry",
+      "record_type": "AuthenticatedReentryRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "simulation_only": true,
+        "signature_verified": false
+      }
+    },
+    "successor": {
+      "record_id": "successor",
+      "record_type": "QualificationContinuityRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "simulation_only": true
+      }
+    },
+    "sole": {
+      "record_id": "sole",
+      "record_type": "SoleSurvivorReview",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "simulation_only": true,
+        "no_gap_fabricated": true
+      }
+    },
+    "mps": {
+      "record_id": "mps",
+      "record_type": "SGPRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "version": "8.8",
+        "band": "MPS-NE",
+        "simulated": true,
+        "no_consciousness_claim": true
+      }
+    },
+    "emergency": {
+      "record_id": "emergency",
+      "record_type": "EmergencyRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "simulation_only": true,
+        "external_prerequisites_unverified": true
+      }
+    },
+    "comparison-nominal": {
+      "record_id": "comparison-nominal",
+      "record_type": "GapSensitivityRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option_A_RLS": 0.04,
+        "option_B_RLS": 0,
+        "sigma_A": 0.005,
+        "sigma_B": 0.005,
+        "epsilon": 1e-06,
+        "signed_gap": 5.601120336112039,
+        "synthetic_only": true
+      }
+    },
+    "comparison-sigma_times_two": {
+      "record_id": "comparison-sigma_times_two",
+      "record_type": "GapSensitivityRecord",
+      "fixture_only": true,
+      "not_independent_evidence": true,
+      "details": {
+        "option_A_RLS": 0.04,
+        "option_B_RLS": 0,
+        "sigma_A": 0.01,
+        "sigma_B": 0.01,
+        "epsilon": 1e-06,
+        "signed_gap": 2.8213824634343934,
+        "synthetic_only": true
+      }
+    }
+  }
+}
diff --git a/releases/v2.1/index.html b/releases/v2.1/index.html
new file mode 100644
index 0000000..430a442
--- /dev/null
+++ b/releases/v2.1/index.html
@@ -0,0 +1 @@
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>MHIOS | Human interface and orchestration</title><link rel="stylesheet" href="web/reading.css"></head><body><a class="skip" href="#main">Skip to main content</a><header><p>MathGov companion specification</p><h1>Human Interface and Orchestration</h1><p>Ground the claim. Qualify options. Compare survivors. Keep authority and execution separate.</p></header><nav aria-label="Reading formats"><a href="docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html">Read the standard</a> · <a href="docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf">PDF</a> · <a href="docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx">Word</a> · <a href="docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md">Markdown</a> · <a href="README.md">Package guide</a></nav><main id="main"><h2>What this package does</h2><p>MHIOS makes decision evidence, uncertainty, qualification, responsibility and next actions visible. Its local checker tests declared record consistency. It cannot create evidence, evaluate sentience, authorize actions or certify a deployment.</p><p class="note"><strong>Reading and scoped testing release.</strong> No operational dashboard or autonomous runtime is deployed here. Core equations and all fifteen supplied Core files are unchanged.</p><h2>Review and prepare</h2><p><a href="release/AUDIT_AND_IMPROVEMENTS.pdf">Audit and improvements</a> · <a href="release/VERIFICATION_REPORT.md">Verification scope</a> · <a href="release/CONFORMANCE_COVERAGE.csv">Conformance coverage</a> · <a href="templates/MHIOS_v2.1_Implementation_Workbook.xlsx">Preparation workbook</a> · <a href="release/MIGRATION_GUIDE.md">Migration guide</a></p><h2>Source dependencies</h2><table><caption>Reference Core 15</caption><thead><tr><th scope="col">Component</th><th scope="col">Edition</th><th scope="col">Source</th></tr></thead><tbody><tr><td>CSV</td><td>2.7</td><td><a href="references/Core_15/CSV_Gate_Standard_v2.7.docx">Unchanged Core source</a></td></tr><tr><td>Public Introduction</td><td>13.0</td><td><a href="references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx">Unchanged Core source</a></td></tr><tr><td>Reproducibility</td><td>1.7</td><td><a href="references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx">Unchanged Core source</a></td></tr><tr><td>MFDI</td><td>2.6</td><td><a href="references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx">Unchanged Core source</a></td></tr><tr><td>PC-AEP</td><td>2.6</td><td><a href="references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx">Unchanged Core source</a></td></tr><tr><td>ripple.md</td><td>5.8</td><td><a href="references/Core_15/ripple_md_Standard_v5.8.docx">Unchanged Core source</a></td></tr><tr><td>Agent System</td><td>13.0</td><td><a href="references/Core_15/RippleLogic_Agent_System_v13.0.docx">Unchanged Core source</a></td></tr><tr><td>Aligners Sheet</td><td>5.9</td><td><a href="references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx">Unchanged Core source</a></td></tr><tr><td>Cascade</td><td>2.9</td><td><a href="references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx">Unchanged Core source</a></td></tr><tr><td>Primer</td><td>4.7</td><td><a href="references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx">Unchanged Core source</a></td></tr><tr><td>RLS Validation</td><td>2.9</td><td><a href="references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx">Unchanged Core source</a></td></tr><tr><td>Canon</td><td>13.0</td><td><a href="references/Core_15/RippleLogic_v13.0_Canon.docx">Unchanged Core source</a></td></tr><tr><td>SGP</td><td>8.8</td><td><a href="references/Core_15/SGP_v8.8.docx">Unchanged Core source</a></td></tr><tr><td>Source-Coupling</td><td>2.6</td><td><a href="references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx">Unchanged Core source</a></td></tr><tr><td>WDBIP</td><td>1.9</td><td><a href="references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx">Unchanged Core source</a></td></tr></tbody></table></main><footer><p>MHIOS 2.1 · MG-MHIOS-2.1-20260928-CORE13.0 · Core binding: MG-RL-13.0-20260926-RELEASE-I.</p><p><a href="references/CORE_PIN_MANIFEST.json">Core pin manifest</a> · <a href="release/SHA256SUMS.txt">Package checksum ledger</a> · <a href="LICENSE.txt">Licence</a></p></footer></body></html>
\ No newline at end of file
diff --git a/releases/v2.1/reference/__init__.py b/releases/v2.1/reference/__init__.py
new file mode 100644
index 0000000..009acf1
--- /dev/null
+++ b/releases/v2.1/reference/__init__.py
@@ -0,0 +1 @@
+"""Read-only MHIOS reference validation, not a deployment runtime."""
diff --git a/releases/v2.1/reference/check_artifacts.py b/releases/v2.1/reference/check_artifacts.py
new file mode 100644
index 0000000..9424aef
--- /dev/null
+++ b/releases/v2.1/reference/check_artifacts.py
@@ -0,0 +1,93 @@
+"""Read-only packaging, navigation and reference identity checks; not a Core re-audit."""
+from __future__ import annotations
+import argparse
+import hashlib
+import html
+import json
+import re
+from pathlib import Path
+from zipfile import ZipFile
+from lxml import etree as E
+from docx import Document
+import fitz
+from .validate import load_json
+ROOT=Path(__file__).resolve().parents[1]
+W='http://schemas.openxmlformats.org/wordprocessingml/2006/main'
+S='http://schemas.openxmlformats.org/spreadsheetml/2006/main'
+def tokens(x):return re.findall(r'\w+',html.unescape(x),re.UNICODE)
+def audit(root=ROOT):
+    checks=[]
+    def add(name,ok,detail=None):checks.append({'check':name,'pass':bool(ok),'detail':detail})
+    pins=load_json(root/'references/CORE_PIN_MANIFEST.json')
+    add('Exactly fifteen pinned Core sources',len(pins['core_components'])==15)
+    for entry in pins['core_components']:
+        p=root/entry['path'];add('Core hash: '+entry['component'],p.is_file() and hashlib.sha256(p.read_bytes()).hexdigest()==entry['sha256'])
+        if p.suffix=='.docx':
+            d=Document(p);add('Core OOXML opens: '+entry['component'],len(d.paragraphs)>0)
+    stem='MathGov_Human_Interface_and_Orchestration_Standard_v2.1'
+    dp=root/'docs'/f'{stem}.docx';d=Document(dp)
+    with ZipFile(dp) as z:
+        add('MHIOS DOCX ZIP CRC',z.testzip() is None)
+        r=E.fromstring(z.read('word/document.xml'));ns={'w':W}
+        anchors=r.findall('.//w:bookmarkStart',ns);names=[n.get('{'+W+'}name') for n in anchors]
+        links=r.findall('.//w:hyperlink',ns);internal=[n.get('{'+W+'}anchor') for n in links if n.get('{'+W+'}anchor')]
+        add('Unique bookmark names',len(names)==len(set(names)))
+        add('115 resolved contents targets',len(internal)==115 and all(a in names for a in internal))
+        for part in ['word/header1.xml','word/footer1.xml']:
+            text=' '.join(E.fromstring(z.read(part)).xpath('.//w:t/text()',namespaces=ns))
+            add('No stale running identity: '+part,'v2.0' not in text and 'Final Complete 2026-09-04' not in text)
+        add('No live PAGEREF',b'PAGEREF' not in z.read('word/document.xml'))
+        nr=E.fromstring(z.read('word/numbering.xml'))
+        restarts=nr.findall('.//w:startOverride',ns)
+        add('Five independent list restarts at one',len(restarts)==5 and all(e.get('{'+W+'}val')=='1' for e in restarts))
+        cap=[p for p in r.findall('w:body/w:p',ns) if ''.join(p.xpath('.//w:t/text()',namespaces=ns)).startswith('When terms such as intelligent,')]
+        add('Capability examples use real italic runs, not literal asterisks',len(cap)==1 and len(cap[0].findall('.//w:i',ns))==2 and '*' not in ''.join(cap[0].xpath('.//w:t/text()',namespaces=ns)))
+        app=E.fromstring(z.read('docProps/app.xml'))
+        page_value=app.find('{http://schemas.openxmlformats.org/officeDocument/2006/extended-properties}Pages')
+        add('Stored MHIOS page count matches rendered PDF',page_value is not None and int(page_value.text)==len(fitz.open(root/'docs'/f'{stem}.pdf')))
+
+    pieces=[];started=False
+    for el in r.find('w:body',ns):
+        text=' '.join(''.join(p.xpath('.//w:t/text()',namespaces=ns)) for p in ([el] if el.tag=='{'+W+'}p' else el.findall('.//w:p',ns)))
+        if text.startswith('Edition, exact Core binding'):started=True
+        if started:pieces.append(text)
+    md=(root/'docs'/f'{stem}.md').read_text();md=md[md.index('Edition, exact Core binding'):]
+    md=md.replace('<br>',' ').replace('\\|','|')
+    add('Complete Markdown/DOCX body-and-table token parity',tokens(' '.join(pieces))==tokens(md))
+    pdf=fitz.open(root/'docs'/f'{stem}.pdf');nav=[];layout=[]
+    for i,p in enumerate(pdf):
+        if not p.get_text().strip():layout.append((i+1,'blank'))
+        for b in p.get_text('blocks'):
+            if b[0]<-1 or b[1]<-1 or b[2]>p.rect.width+1 or b[3]>p.rect.height+1:layout.append((i+1,'out_of_page'))
+        for link in p.get_links():
+            if link['kind']==fitz.LINK_GOTO:
+                label=''.join(tokens(p.get_textbox(link['from'])))
+                target=pdf[link['page']]
+                near=target.get_textbox(fitz.Rect(0,max(0,link['to'].y-8),target.rect.width,min(target.rect.height,link['to'].y+90)))
+                good=bool(label) and label in ''.join(tokens(near))
+                nav.append({'source_page':i+1,'target_page':link['page']+1,'label':p.get_textbox(link['from']),'pass':good})
+    add('All rendered contents links land on matching headings',len(nav)==115 and all(x['pass'] for x in nav),{'count':len(nav),'failed':[x for x in nav if not x['pass']]})
+    add('PDF has no blank pages or out-of-page text blocks',not layout,{'pages':len(pdf),'issues':layout})
+    wp=root/'templates/MHIOS_v2.1_Implementation_Workbook.xlsx'
+    with ZipFile(wp) as z:
+        add('Preparation workbook ZIP CRC',z.testzip() is None)
+        wr=E.fromstring(z.read('xl/workbook.xml'));sn={'s':S}
+        add('Preparation workbook has fourteen retained sheets',len(wr.findall('.//s:sheet',sn))==14)
+        fs=[];errors=[];cached=[]
+        for f in z.namelist():
+            if f.startswith('xl/worksheets/sheet') and f.endswith('.xml'):
+                sr=E.fromstring(z.read(f))
+                for cell in sr.findall('.//s:c',sn):
+                    if cell.get('t')=='e':errors.append((f,cell.get('r')))
+                    formula=cell.find('s:f',sn)
+                    if formula is not None:
+                        fs.append((f,cell.get('r'),formula.text));value=cell.find('s:v',sn);cached.append(value.text if value is not None else None)
+        add('Twenty preparation formulas',len(fs)==20)
+        add('No cached preparation formula errors',not errors)
+        add('Untouched preparation rows remain UNASSESSED',all(v=='UNASSESSED' for v in cached),cached)
+    return {'status':'PASS' if all(c['pass'] for c in checks) else 'FAIL','checks':checks,'contents_links':nav,'scope':'Artifact structure and supplied-source identity, not empirical or operational conformance.'}
+def main():
+    p=argparse.ArgumentParser();p.add_argument('--output',type=Path);a=p.parse_args();r=audit()
+    if a.output:a.output.write_text(json.dumps(r,indent=2)+'\n')
+    print(json.dumps(r,indent=2));return 0 if r['status']=='PASS' else 1
+if __name__=='__main__':raise SystemExit(main())
diff --git a/releases/v2.1/reference/check_web.py b/releases/v2.1/reference/check_web.py
new file mode 100644
index 0000000..e51cd19
--- /dev/null
+++ b/releases/v2.1/reference/check_web.py
@@ -0,0 +1,39 @@
+"""Check local static reading links, without following external sites or executing scripts."""
+from __future__ import annotations
+import argparse
+from html.parser import HTMLParser
+from pathlib import Path
+from urllib.parse import unquote, urlsplit
+import json
+ROOT = Path(__file__).resolve().parents[1]
+class Links(HTMLParser):
+    def __init__(self):
+        super().__init__(); self.links=[]; self.ids=[]
+    def handle_starttag(self, tag, attrs):
+        a=dict(attrs)
+        if a.get('id'): self.ids.append(a['id'])
+        if a.get('href'): self.links.append(a['href'])
+        if a.get('src'): self.links.append(a['src'])
+def inspect_html(path):
+    p=Links();p.feed(path.read_text(encoding='utf-8'));return p
+
+def audit(root=ROOT):
+    checks=[];external=[]
+    for src in sorted(root.rglob('*.html')):
+        data=inspect_html(src)
+        checks.append({'check':str(src.relative_to(root))+': unique IDs','pass':len(data.ids)==len(set(data.ids))})
+        for ref in data.links:
+            u=urlsplit(ref)
+            if u.scheme or u.netloc:external.append(ref);continue
+            target=(src.parent/unquote(u.path)).resolve() if u.path else src.resolve()
+            ok=target.is_relative_to(root.resolve()) and target.is_file()
+            if ok and u.fragment and target.suffix=='.html':ok=unquote(u.fragment) in inspect_html(target).ids
+            checks.append({'check':str(src.relative_to(root))+': '+ref,'pass':ok})
+    return {'status':'PASS' if all(c['pass'] for c in checks) else 'FAIL','checks':checks,
+            'external_links_not_verified_in_this_check':sorted(set(external)),
+            'scope':'Static local files and HTML anchors only, not browser accessibility or deployed-host conformance.'}
+def main():
+    p=argparse.ArgumentParser();p.add_argument('--output',type=Path);args=p.parse_args();r=audit()
+    if args.output:args.output.write_text(json.dumps(r,indent=2)+'\n')
+    print(json.dumps(r,indent=2));return 0 if r['status']=='PASS' else 1
+if __name__=='__main__':raise SystemExit(main())
diff --git a/releases/v2.1/reference/constants.py b/releases/v2.1/reference/constants.py
new file mode 100644
index 0000000..16e9450
--- /dev/null
+++ b/releases/v2.1/reference/constants.py
@@ -0,0 +1,7 @@
+"""Pinned in-package subset; external registry conformance is not asserted."""
+CORE_RELEASE_ID = 'MG-RL-13.0-20260926-RELEASE-I'
+PIN_MANIFEST_SHA256 = 'b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357'
+STAGES = {'rg': ['RG_SUPPORTED', 'RG_NARROWED', 'RG_REFUSED'], 'rf_ncrc': ['RF_PASS', 'RF_FAIL', 'RF_ESCALATE', 'NCRC_UNKNOWN'], 'trc': ['TRC_PASS', 'TRC_NOT_TRIGGERED', 'TRC_FAIL', 'TRC_ESCALATE'], 'csv': ['CSV_PASS', 'CSV_PASS_WITH_CONTROLS', 'CSV_NOT_MATERIAL', 'CSV_FAIL', 'CSV_REDESIGN_REQUIRED', 'CSV_ESCALATE', 'CSV_EMERGENCY_PROVISIONAL']}
+FRAMEWORK_VERDICTS = ['BLOCK', 'REFUSE_DETERMINISTIC_SELECTION', 'ALLOW_FRAMEWORK_SELECTION', 'ESCALATE']
+DECISION_STATES = ['SELECTED_DECISIVE', 'SELECTED_BY_AUTHORITY_NON_DECISIVE', 'PROVISIONAL_WITH_CONTROLS', 'DELAY', 'REDESIGN', 'ESCALATE', 'REFUSE', 'NO_SELECTABLE_OPTION', 'EMERGENCY_PROVISIONAL']
+EXECUTION_STATES = ['NOT_AUTHORIZED', 'AUTHORIZED_WITHIN_SCOPE', 'EXECUTION_BLOCKED', 'EXECUTED_UNDER_MONITORING']
diff --git a/releases/v2.1/reference/validate.py b/releases/v2.1/reference/validate.py
new file mode 100644
index 0000000..4a44325
--- /dev/null
+++ b/releases/v2.1/reference/validate.py
@@ -0,0 +1,269 @@
+"""MHIOS record consistency checks. Never authorizes execution or certifies evidence.
+
+Run: python -m reference.validate examples/nondecisive_authority.json --at 2026-09-28T12:00:00Z
+Schema validation precedes semantic checks. Cross-record truth, legal authority,
+cryptographic attestations, physical adequacy and human UI testing stay external.
+"""
+from __future__ import annotations
+import argparse
+from datetime import datetime, timezone
+import hashlib
+import json
+import math
+from pathlib import Path
+from urllib.parse import urlsplit, unquote
+from typing import Any
+from jsonschema import Draft202012Validator, FormatChecker
+from .constants import STAGES, FRAMEWORK_VERDICTS, DECISION_STATES, EXECUTION_STATES
+ROOT = Path(__file__).resolve().parents[1]
+SCHEMA_PATH = ROOT / 'schemas/mhios_session_v2.1.schema.json'
+GOOD = {'rg': {'RG_SUPPORTED','RG_NARROWED'}, 'rf_ncrc': {'RF_PASS'},
+        'trc': {'TRC_PASS','TRC_NOT_TRIGGERED'},
+        'csv': {'CSV_PASS','CSV_PASS_WITH_CONTROLS','CSV_NOT_MATERIAL'}}
+
+def _pairs(pairs):
+    result = {}
+    for key, val in pairs:
+        if key in result: raise ValueError(f'duplicate JSON key: {key}')
+        result[key] = val
+    return result
+
+def load_json(path: Path) -> Any:
+    def bad(value): raise ValueError(f'non-finite JSON constant: {value}')
+    return json.loads(path.read_text(encoding='utf-8'), object_pairs_hook=_pairs, parse_constant=bad)
+
+def parse_time(value: str) -> datetime:
+    dt = datetime.fromisoformat(value.replace('Z', '+00:00'))
+    if dt.tzinfo is None: raise ValueError('timezone required')
+    return dt.astimezone(timezone.utc)
+
+def selectable(option: dict) -> bool:
+    return (all(option['states'][k] in values for k, values in GOOD.items())
+            and not option['material_unresolved'] and not option['requalification_required']
+            and (option['states']['csv'] != 'CSV_PASS_WITH_CONTROLS' or option['controls_available'] is True))
+
+def _finite(value) -> bool:
+    if isinstance(value, float): return math.isfinite(value)
+    if isinstance(value, dict): return all(_finite(v) for v in value.values())
+    if isinstance(value, list): return all(_finite(v) for v in value)
+    return True
+
+def validate_session(data: Any, *, at: str | None = None) -> dict:
+    schema = load_json(SCHEMA_PATH)
+    Draft202012Validator.check_schema(schema)
+    errors = [f'SCHEMA:{"/".join(map(str,e.absolute_path))}:{e.message}'
+              for e in Draft202012Validator(schema, format_checker=FormatChecker()).iter_errors(data)]
+    if not _finite(data): errors.append('SCHEMA:non-finite numeric value')
+    if errors: return result(errors)
+    now = parse_time(at) if at else datetime.now(timezone.utc)
+    def check(condition: bool, code: str):
+        if not condition: errors.append(code)
+    cfg=data['configuration']; options=data['options']; ids=[o['option_id'] for o in options]
+    from .constants import PIN_MANIFEST_SHA256
+    check(hashlib.sha256((ROOT/'references/CORE_PIN_MANIFEST.json').read_bytes()).hexdigest()==PIN_MANIFEST_SHA256,
+          'CORE_PIN_MANIFEST_CHANGED')
+    check(len(ids)==len(set(ids)), 'DUPLICATE_OPTION_ID')
+    by_id={o['option_id']:o for o in options}; qualified=[o['option_id'] for o in options if selectable(o)]
+    check(parse_time(data['evidence_cutoff']) <= parse_time(data['created_at']), 'EVIDENCE_CUTOFF_AFTER_RECORD')
+    check(parse_time(cfg['evaluated_at']) <= parse_time(data['created_at']), 'CONFIG_EVALUATED_AFTER_RECORD')
+    check(parse_time(data['created_at']) <= now, 'FUTURE_RECORD')
+    if data['record_mode']=='OBSERVED':
+        def refs(obj):
+            if isinstance(obj,dict):
+                if set(obj)=={'id','locator','sha256','basis'}: yield obj
+                for x in obj.values(): yield from refs(x)
+            if isinstance(obj,list):
+                for x in obj: yield from refs(x)
+        check(all(r['basis']!='SYNTHETIC' for r in refs(data)), 'SYNTHETIC_REFERENCE_IN_OBSERVED_RECORD')
+    for opt in options:
+        oid=opt['option_id']; prev=True
+        for stage,good in GOOD.items():
+            val=opt['states'][stage]
+            check(val is None or opt['record_refs'][stage] is not None, f'MISSING_STAGE_REFERENCE:{oid}:{stage}')
+            if data['emergency'] is None:
+                check(prev or val is None, f'DOWNSTREAM_ASSESSMENT_AFTER_PRIOR_BLOCK:{oid}:{stage}')
+            prev=prev and val in good
+        if opt['states']['trc']=='TRC_NOT_TRIGGERED':
+            check(opt['record_refs']['trc_trigger'] is not None, f'MISSING_TRC_TRIGGER_ASSESSMENT:{oid}')
+        if opt['states']['csv']=='CSV_PASS_WITH_CONTROLS':
+            check(opt['record_refs']['controls'] is not None, f'MISSING_CONTROLS_RECORD:{oid}')
+            check(opt['controls_available'] is True or opt['requalification_required'], f'CONTROL_UNAVAILABLE_WITHOUT_REOPEN:{oid}')
+        if opt['material_unresolved']:
+            check(bool(data['blockers']), f'UNRESOLVED_WITHOUT_VISIBLE_BLOCKER:{oid}')
+        if opt['states']['rls']=='RLS_RANKED':
+            check(selectable(opt), f'RLS_FOR_NONSELECTABLE_OPTION:{oid}')
+            check(opt['record_refs']['rls'] is not None and opt['rls_score'] is not None and opt['sigma_rls'] is not None,
+                  f'RANKED_WITHOUT_QUANTITATIVE_RECORD:{oid}')
+        else:
+            check(opt['rls_score'] is None and opt['sigma_rls'] is None, f'UNEVALUATED_SCORE_PRESENT:{oid}')
+    fv=data['framework_verdict']; ds=data['decision_state']; winner=data['framework_selected_option_id']
+    auth=data['authority_selection']; rob=data['robustness']; emergency=data['emergency']; provisional=data['provisional_choice']
+    check(winner is None or winner in ids, 'UNKNOWN_FRAMEWORK_SELECTED_ID')
+    check(auth['option_id'] is None or auth['option_id'] in ids, 'UNKNOWN_AUTHORITY_SELECTED_ID')
+    if auth['option_id'] is not None:
+        check(auth['record_ref'] is not None,'AUTHORITY_SELECTION_WITHOUT_RECORD')
+        if emergency is None: check(auth['option_id'] in qualified,'AUTHORITY_SELECTION_OF_NONQUALIFIED_OPTION')
+    else: check(auth['record_ref'] is None,'AUTHORITY_RECORD_WITHOUT_SELECTION')
+    seen=set()
+    for c in rob['comparisons']:
+        key=(c['variant_id'],c['candidate_id'],c['contender_id'])
+        check(key not in seen,'DUPLICATE_COMPARISON'); seen.add(key)
+        check(c['variant_id'] in rob['required_variants'],'UNDECLARED_COMPARISON_VARIANT')
+        check(c['candidate_id'] in ids and c['contender_id'] in ids and c['candidate_id']!=c['contender_id'], 'BAD_COMPARISON_OPTION')
+    if fv=='ALLOW_FRAMEWORK_SELECTION':
+        check(emergency is None,'EMERGENCY_CANNOT_BECOME_ORDINARY_ALLOW')
+        check(winner in qualified,'WINNER_NOT_SELECTABLE')
+        check(ds=='SELECTED_DECISIVE','ALLOW_DECISION_STATE_MISMATCH')
+        check(auth['option_id'] is None or auth['option_id']==winner,'CONFLICTING_FRAMEWORK_AUTHORITY_SELECTION')
+        check(not data['monitoring_and_outcome']['reopened_stages'],'ALLOW_WITH_REOPENED_QUALIFICATION')
+        check(not cfg['material_change_since_qualification'],'STALE_QUALIFICATION_CANNOT_ALLOW')
+        check(data['option_closure']['status']=='COMPLETE' and data['option_closure']['record_ref'] is not None,'OPTION_CLOSURE_INCOMPLETE')
+        check(not data['blockers'],'ALLOW_WITH_UNRESOLVED_BLOCKERS')
+        check(rob['status']=='COMPLETE' and rob['record_ref'] is not None,'ROBUSTNESS_INCOMPLETE')
+        check(rob['evidence_basis'] in (['ACCEPTED_FOR_DECLARED_CLAIM','SYNTHETIC_STIPULATION'] if data['record_mode']=='SYNTHETIC' else ['ACCEPTED_FOR_DECLARED_CLAIM']), 'UNWARRANTED_DECISIVENESS_BASIS')
+        check(rob['joint_stress_disposition']!='UNRESOLVED','JOINT_STRESS_UNRESOLVED')
+        if rob['joint_stress_disposition']=='EVALUATED': check(rob['joint_record_ref'] is not None,'JOINT_STRESS_RECORD_MISSING')
+        if len(qualified)>1:
+            check(all(by_id[oid]['states']['rls']=='RLS_RANKED' for oid in qualified),'ALLOW_WITH_UNRANKED_CONTENDER')
+            check(bool(rob['required_variants']),'NO_REQUIRED_VARIANTS')
+            for variant in rob['required_variants']:
+                for contender in qualified:
+                    if contender==winner: continue
+                    rows=[c for c in rob['comparisons'] if c['variant_id']==variant and c['candidate_id']==winner and c['contender_id']==contender]
+                    check(len(rows)==1 and rows[0]['signed_gap']>rob['delta'],f'EVERY_CONTENDER_CHECK_FAILED:{variant}:{contender}')
+            if winner in qualified and all(by_id[oid]['rls_score'] is not None for oid in qualified):
+                check(all(by_id[winner]['rls_score'] > by_id[oid]['rls_score'] for oid in qualified if oid!=winner),
+                      'WINNER_NOT_NOMINAL_SCORE_LEADER')
+        elif len(qualified)==1:
+            check(rob['sole_survivor_record_ref'] is not None,'SOLE_SURVIVOR_REVIEW_MISSING')
+            check(not rob['comparisons'],'SOLE_SURVIVOR_FABRICATED_COMPARISON')
+    else:
+        check(winner is None,'NONALLOW_WITH_FRAMEWORK_WINNER')
+        check(ds!='SELECTED_DECISIVE','DECISIVE_WITHOUT_ALLOW')
+    if fv=='REFUSE_DETERMINISTIC_SELECTION':
+        check(bool(qualified),'NONDECISIVE_WITHOUT_QUALIFIED_OPTION')
+        if auth['option_id'] is not None:
+            check(ds=='SELECTED_BY_AUTHORITY_NON_DECISIVE' or emergency is not None, 'AUTHORITY_DECISION_STATE_MISMATCH')
+        else: check(ds in ['REFUSE','DELAY','ESCALATE','REDESIGN','PROVISIONAL_WITH_CONTROLS','EMERGENCY_PROVISIONAL'],'NONDECISIVE_DISPOSITION_MISSING')
+    if ds=='SELECTED_BY_AUTHORITY_NON_DECISIVE':
+        check(fv=='REFUSE_DETERMINISTIC_SELECTION' and auth['option_id'] is not None,'AUTHORITY_STATE_WITHOUT_SEPARATE_REFUSAL')
+    if ds=='NO_SELECTABLE_OPTION':
+        check(not qualified,'NONEMPTY_NO_SELECTABLE_SET')
+        check(fv is not None,'NO_SELECTABLE_WITHOUT_VERDICT')
+    if ds=='PROVISIONAL_WITH_CONTROLS':
+        # The source record must define the ordinary provisional choice; controls alone do not select it.
+        check(provisional is not None,'PROVISIONAL_CHOICE_UNRECORDED')
+        if provisional is not None:
+            check(provisional['option_id'] in qualified,'PROVISIONAL_OPTION_NOT_QUALIFIED')
+        check(auth['option_id'] is None and winner is None,'PROVISIONAL_AND_FINAL_SELECTION_COLLAPSED')
+    else:
+        check(provisional is None,'PROVISIONAL_RECORD_WITHOUT_POSTURE')
+    if fv is None:
+        check(ds is None and winner is None and auth['option_id'] is None,'UNASSESSED_VERDICT_WITH_FINAL_STATE')
+    if fv=='BLOCK': check(ds in ['NO_SELECTABLE_OPTION','REFUSE','REDESIGN','ESCALATE','EMERGENCY_PROVISIONAL'],'BLOCK_CAUSE_NOT_SERIALIZED')
+    if fv=='ESCALATE': check(ds in ['ESCALATE','DELAY','REFUSE','REDESIGN','EMERGENCY_PROVISIONAL'],'ESCALATE_DISPOSITION_MISMATCH')
+    if emergency is not None:
+        check(ds=='EMERGENCY_PROVISIONAL' and fv!='ALLOW_FRAMEWORK_SELECTION','EMERGENCY_STATE_COLLAPSE')
+        check(parse_time(emergency['expires_at'])>now,'EMERGENCY_EXPIRED')
+    else: check(ds!='EMERGENCY_PROVISIONAL','MISSING_EMERGENCY_ROUTE')
+    exe=data['execution']; rt=data['runtime']; active=exe['state'] in ['AUTHORIZED_WITHIN_SCOPE','EXECUTED_UNDER_MONITORING']
+    if active:
+        for k in ['option_id','action_id','authorization_ref','bound_configuration_id','authorized_at','expires_at','controls_ref']:
+            check(exe[k] is not None,'MISSING_EXECUTION_BINDING:'+k)
+        check(exe['option_id'] in ids,'UNKNOWN_EXECUTION_OPTION')
+        chosen=auth['option_id'] if auth['option_id'] is not None else (provisional['option_id'] if provisional is not None else winner)
+        check(exe['option_id']==chosen and chosen is not None,'EXECUTION_SELECTION_MISMATCH')
+        if emergency is None: check(exe['option_id'] in qualified,'EXECUTION_OPTION_NOT_QUALIFIED')
+        check(exe['bound_configuration_id']==cfg['configuration_id'],'EXECUTION_CONFIGURATION_MISMATCH')
+        check(not cfg['material_change_since_qualification'],'STALE_EXECUTION_APPROVAL')
+        check(not data['monitoring_and_outcome']['reopened_stages'],'EXECUTION_WITH_REOPENED_QUALIFICATION')
+        if exe['authorized_at'] and exe['expires_at']:
+            check(parse_time(exe['authorized_at'])<=now<parse_time(exe['expires_at']),'EXPIRED_OR_FUTURE_AUTHORIZATION')
+        check(not data['blockers'] or emergency is not None,'ORDINARY_EXECUTION_WITH_BLOCKERS')
+    if exe['state']=='EXECUTED_UNDER_MONITORING': check(exe['execution_event_ref'] is not None,'EXECUTION_EVENT_MISSING')
+    if data['monitoring_and_outcome']['state']=='OBSERVED':
+        check(data['monitoring_and_outcome']['observation_ref'] is not None,'OBSERVED_OUTCOME_WITHOUT_RECORD')
+    if active:
+        check(data['monitoring_and_outcome']['plan_ref'] is not None,'EXECUTION_MONITORING_PLAN_MISSING')
+        check(exe['authorized_at'] is None or parse_time(exe['authorized_at'])<=parse_time(data['created_at']),
+              'AUTHORIZATION_AFTER_RECORD')
+    if rt['agent_present']:
+        if active:
+            check(rt['connectivity']=='CONNECTED' and rt['reconciled'],'RECOVERY_SUSPENDS_EXECUTION_APPROVAL')
+        if rt['connectivity']!='CONNECTED':
+            check(rt['mode']==0 and not rt['tool_execution_requested'],'DEGRADED_MODE_OR_TOOL_EXECUTION')
+        if rt['reentry_required'] and rt['mode']>0:
+            check(rt['reconciled'] and rt['authenticated_reentry_ref'] is not None,'AUTOMATIC_REENTRY_PROHIBITED')
+        if rt['material_successor'] and (rt['mode']>0 or active):
+            check(rt['successor_requalification_ref'] is not None,'SUCCESSOR_INHERITED_AUTHORITY')
+        if rt['tool_execution_requested']:
+            check(rt['mode']>=2,'MODE0_OR_ADVISORY_TOOL_EXECUTION')
+            check(active,'TOOL_EXECUTION_WITHOUT_SCOPED_AUTHORIZATION')
+    else: check(rt['mode']==0 and not rt['tool_execution_requested'],'AGENT_ACTION_WITHOUT_AGENT')
+    for s in data['sgp_links']:
+        if s['mps']!='NOT_EVALUATED': check(s['mps_record_ref'] is not None,'MPS_WITHOUT_SGP_SOURCE')
+    if data['conformance']['assessment']=='EXTERNAL_ASSESSMENT_RECORDED':
+        check(bool(data['conformance']['evidence_refs']),'CONFORMANCE_CLAIM_WITHOUT_EVIDENCE_REFERENCE')
+    return result(errors,qualified, emergency is not None)
+
+def result(errors, qualified=None, emergency=False):
+    return {'status':'INVALID_RECORD' if errors else 'RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS',
+            'errors':sorted(set(errors)), 'declared_qualified_option_ids':qualified or [],
+            'emergency_requires_external_review':emergency, 'execution_authorized_by_this_validator':False,
+            'claim_boundary':'Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.'}
+
+def validate_interface(data: Any) -> list[str]:
+    schema=load_json(ROOT/'schemas/mhios_interface_state_v2.1.schema.json')
+    errs=[e.message for e in Draft202012Validator(schema,format_checker=FormatChecker()).iter_errors(data)]
+    if errs:return errs
+    tokens={'CANON_STAGE':{v for vals in STAGES.values() for v in vals},'CANON_FRAMEWORK':set(FRAMEWORK_VERDICTS),
+            'RUN_DECISION':set(DECISION_STATES),'RUN_EXECUTION':set(EXECUTION_STATES),
+            'AGENT_RUNTIME':{'LATENT_CAPABILITY','AVAILABLE_CAPABILITY','ENABLED_CAPABILITY','AUTHORIZED_CAPABILITY','SELECTED_ACTION','EXECUTION_APPROVED','EXECUTED_TRANSITION','OBSERVED_OUTCOME'},
+            'SGP':{'NOT_EVALUATED','MPS-NE','MPS-0','MPS-1','MPS-2','MPS-3','MPS-4'}}
+    if data['owner']=='MHIOS_LOCAL':
+        if not data['status_token'].startswith('MHIOS_'):errs.append('LOCAL_TOKEN_REQUIRES_MHIOS_PREFIX')
+    elif data['status_token'] not in tokens[data['owner']]:errs.append('TOKEN_OWNER_MISMATCH')
+    if data['presentation_severity']=='PASS':
+        positive={'RG_SUPPORTED','RF_PASS','TRC_PASS','CSV_PASS','ALLOW_FRAMEWORK_SELECTION','SELECTED_DECISIVE'}
+        if data['status_token'] not in positive:errs.append('PASS_PRESENTATION_FOR_NONPASS_STATE')
+    return errs
+
+def verify_local_references(data:Any, package_root:Path=ROOT) -> dict:
+    """Verify local bytes, never fetch a URL or infer truth from a hash."""
+    verified=[];unverified=[];errors=[]
+    def walk(x):
+        if isinstance(x,dict):
+            if set(x)=={'id','locator','sha256','basis'}:yield x
+            for v in x.values():yield from walk(v)
+        elif isinstance(x,list):
+            for v in x:yield from walk(v)
+    for r in walk(data):
+        u=urlsplit(r['locator'])
+        if u.scheme or u.netloc:unverified.append(r['locator']);continue
+        path=(package_root/unquote(u.path)).resolve()
+        if not path.is_relative_to(package_root.resolve()): errors.append('REFERENCE_PATH_ESCAPE');continue
+        if not path.is_file():errors.append('REFERENCE_FILE_MISSING:'+r['locator']);continue
+        if r['sha256'] is None:unverified.append(r['locator']);continue
+        if hashlib.sha256(path.read_bytes()).hexdigest()!=r['sha256']:errors.append('REFERENCE_HASH_MISMATCH:'+r['locator']);continue
+        if u.fragment and path.suffix=='.json':
+            doc=load_json(path)
+            record=doc.get('records',{}).get(u.fragment)
+            if not isinstance(record,dict):errors.append('REFERENCE_FRAGMENT_MISSING:'+r['locator']);continue
+            if record.get('record_id')!=r['id']:
+                errors.append('REFERENCE_ID_MISMATCH:'+r['locator']);continue
+            if record.get('fixture_only') and r['basis']!='SYNTHETIC':
+                errors.append('SYNTHETIC_SOURCE_RELABELLED:'+r['locator']);continue
+        verified.append(r['locator'])
+    return {'verified_local_locators':sorted(set(verified)),'unverified_locators':sorted(set(unverified)),'errors':errors}
+
+def main():
+    p=argparse.ArgumentParser(description=__doc__);p.add_argument('record',type=Path);p.add_argument('--at');p.add_argument('--verify-local-references',action='store_true');a=p.parse_args()
+    try:
+        data=load_json(a.record);out=validate_session(data,at=a.at)
+        if a.verify_local_references and not out['errors']:
+            out['references']=verify_local_references(data)
+            if out['references']['errors']:out['status']='INVALID_RECORD'
+        print(json.dumps(out,indent=2,allow_nan=False));return 0 if out['status']=='RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS' else 1
+    except (OSError,ValueError,TypeError) as exc:
+        print(json.dumps({'status':'INVALID_RECORD','error':str(exc)}));return 2
+if __name__=='__main__': raise SystemExit(main())
diff --git a/releases/v2.1/references/CORE_PIN_MANIFEST.json b/releases/v2.1/references/CORE_PIN_MANIFEST.json
new file mode 100644
index 0000000..3bb88a0
--- /dev/null
+++ b/releases/v2.1/references/CORE_PIN_MANIFEST.json
@@ -0,0 +1,141 @@
+{
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "core_components": [
+    {
+      "component": "CSV",
+      "version": "2.7",
+      "path": "references/Core_15/CSV_Gate_Standard_v2.7.docx",
+      "sha256": "1528fea2965e0fd4643412828f1c8bfaf83518cf801e7191bebe1313fc824df8",
+      "bytes": 29329,
+      "attached_filename": "CSV_Gate_Standard_v2.7(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Public Introduction",
+      "version": "13.0",
+      "path": "references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx",
+      "sha256": "091962bcbbdd49d29407b8fc305dcd5a988e851c35e8fac25d4307c06884ba87",
+      "bytes": 26285,
+      "attached_filename": "MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Reproducibility",
+      "version": "1.7",
+      "path": "references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx",
+      "sha256": "813ee630db3d96589a87854fe250a4edd7e09d950bc831b145e447d222fcd776",
+      "bytes": 34969,
+      "attached_filename": "MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "MFDI",
+      "version": "2.6",
+      "path": "references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx",
+      "sha256": "12ef950fa8cae4cc769ccaa3f2e13c650f098d2c79c2957c9a85d2d54ce3a49e",
+      "bytes": 31136,
+      "attached_filename": "Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "PC-AEP",
+      "version": "2.6",
+      "path": "references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx",
+      "sha256": "21228e927180d78dc9bd6b5898c96e23f585fcc0a1b597ae75ff3c30a031c493",
+      "bytes": 26544,
+      "attached_filename": "Physical_Causal_Admissibility_Evidence_Profile_v2.6(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "ripple.md",
+      "version": "5.8",
+      "path": "references/Core_15/ripple_md_Standard_v5.8.docx",
+      "sha256": "c14744884baddd01e7836c7cb0890ee0c082bca7e7c2af086f8d436bf8e11dd1",
+      "bytes": 107960,
+      "attached_filename": "ripple_md_Standard_v5.8(7).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Agent System",
+      "version": "13.0",
+      "path": "references/Core_15/RippleLogic_Agent_System_v13.0.docx",
+      "sha256": "ffa5b98c0020d1073c1443692fe6478f1b2ecd3a8111a9ff3eeb4c9c5ae4b896",
+      "bytes": 154354,
+      "attached_filename": "RippleLogic_Agent_System_v13.0(7).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Aligners Sheet",
+      "version": "5.9",
+      "path": "references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx",
+      "sha256": "49d9d8fbeb762cb6cddb3ebab402ded25529639f222b665059db297f33b5282c",
+      "bytes": 1267323,
+      "attached_filename": "RippleLogic_Aligners_Sheet_v5.9(8).xlsx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Cascade",
+      "version": "2.9",
+      "path": "references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx",
+      "sha256": "300c48139aad28415bc760eb11a93b6c1982078b8b7a48083385c5be62846506",
+      "bytes": 27998,
+      "attached_filename": "RippleLogic_Cascade_Standard_v2.9(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Primer",
+      "version": "4.7",
+      "path": "references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx",
+      "sha256": "82d26566f892d08b08681ef191b02509b6d72cecbf29845ac66d122e8c68ac22",
+      "bytes": 64193,
+      "attached_filename": "RippleLogic_Foundations_Primer_v4.7(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "RLS Validation",
+      "version": "2.9",
+      "path": "references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx",
+      "sha256": "26d882cfd80def9c20fdcb07fcd63949e30280f6ea48dbf9654168ecc39274c5",
+      "bytes": 44958,
+      "attached_filename": "RippleLogic_RLS_Validation_Protocol_v2.9(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Canon",
+      "version": "13.0",
+      "path": "references/Core_15/RippleLogic_v13.0_Canon.docx",
+      "sha256": "b730ddeec4c15e0c7cb8393651f38f347e683b6b9a2670e224951dfd3f01857b",
+      "bytes": 548898,
+      "attached_filename": "RippleLogic_v13.0_Canon(20260927-172833).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "SGP",
+      "version": "8.8",
+      "path": "references/Core_15/SGP_v8.8.docx",
+      "sha256": "b0485246bb35fff9313bc47a5e7a3295a648de168714618b76ba9fb8cfe54c6f",
+      "bytes": 126169,
+      "attached_filename": "SGP_v8.8(20260927-172833).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "Source-Coupling",
+      "version": "2.6",
+      "path": "references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx",
+      "sha256": "bd5b1eb7f4b358fa5b97d93b80fb51e86b6fddcf0a5b3c9158c7b2121a7383ce",
+      "bytes": 25468,
+      "attached_filename": "Source_Coupling_Integrity_Standard_v2.6(5).docx",
+      "matches_release_I": true
+    },
+    {
+      "component": "WDBIP",
+      "version": "1.9",
+      "path": "references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx",
+      "sha256": "8cbb044ffaeeece7118cf88a8203cd60c9790de6ff6ba529bf683f6d7284e12c",
+      "bytes": 81142,
+      "attached_filename": "Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9(5).docx",
+      "matches_release_I": true
+    }
+  ],
+  "scope": "Reference sources, unchanged. Presence is not full ecosystem conformance."
+}
diff --git a/releases/v2.1/references/Core_15/CSV_Gate_Standard_v2.7.docx b/releases/v2.1/references/Core_15/CSV_Gate_Standard_v2.7.docx
new file mode 100644
index 0000000..4ace6eb
Binary files /dev/null and b/releases/v2.1/references/Core_15/CSV_Gate_Standard_v2.7.docx differ
diff --git a/releases/v2.1/references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx b/releases/v2.1/references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx
new file mode 100644
index 0000000..90d7426
Binary files /dev/null and b/releases/v2.1/references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx differ
diff --git a/releases/v2.1/references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx b/releases/v2.1/references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx
new file mode 100644
index 0000000..d480b4d
Binary files /dev/null and b/releases/v2.1/references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx differ
diff --git a/releases/v2.1/references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx b/releases/v2.1/references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx
new file mode 100644
index 0000000..6e72eda
Binary files /dev/null and b/releases/v2.1/references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx differ
diff --git a/releases/v2.1/references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx b/releases/v2.1/references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx
new file mode 100644
index 0000000..8eee87f
Binary files /dev/null and b/releases/v2.1/references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_Agent_System_v13.0.docx b/releases/v2.1/references/Core_15/RippleLogic_Agent_System_v13.0.docx
new file mode 100644
index 0000000..a503056
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_Agent_System_v13.0.docx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx b/releases/v2.1/references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx
new file mode 100644
index 0000000..efa4698
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx b/releases/v2.1/references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx
new file mode 100644
index 0000000..0a3a7fa
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx b/releases/v2.1/references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx
new file mode 100644
index 0000000..a3c9a1e
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx b/releases/v2.1/references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx
new file mode 100644
index 0000000..084b962
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx differ
diff --git a/releases/v2.1/references/Core_15/RippleLogic_v13.0_Canon.docx b/releases/v2.1/references/Core_15/RippleLogic_v13.0_Canon.docx
new file mode 100644
index 0000000..e16be47
Binary files /dev/null and b/releases/v2.1/references/Core_15/RippleLogic_v13.0_Canon.docx differ
diff --git a/releases/v2.1/references/Core_15/SGP_v8.8.docx b/releases/v2.1/references/Core_15/SGP_v8.8.docx
new file mode 100644
index 0000000..68da06b
Binary files /dev/null and b/releases/v2.1/references/Core_15/SGP_v8.8.docx differ
diff --git a/releases/v2.1/references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx b/releases/v2.1/references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx
new file mode 100644
index 0000000..7a82038
Binary files /dev/null and b/releases/v2.1/references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx differ
diff --git a/releases/v2.1/references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx b/releases/v2.1/references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx
new file mode 100644
index 0000000..093fbf5
Binary files /dev/null and b/releases/v2.1/references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx differ
diff --git a/releases/v2.1/references/Core_15/ripple_md_Standard_v5.8.docx b/releases/v2.1/references/Core_15/ripple_md_Standard_v5.8.docx
new file mode 100644
index 0000000..d9ab33b
Binary files /dev/null and b/releases/v2.1/references/Core_15/ripple_md_Standard_v5.8.docx differ
diff --git a/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.docx b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.docx
new file mode 100644
index 0000000..3b0dcf5
Binary files /dev/null and b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.docx differ
diff --git a/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.md b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.md
new file mode 100644
index 0000000..a35688c
--- /dev/null
+++ b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.md
@@ -0,0 +1,133 @@
+# MHIOS synchronization and implementation audit
+
+**MathGov Human Interface and Orchestration Standard · v2.1**
+
+## 1. Executive determination
+
+The supplied MHIOS v2.0 package has a valuable organizing model: stakeholder discovery, better-option search, qualification before ranking, visible unknowns, distinct authority and execution, outcome review, progressive disclosure and contestability. Those elements were retained. The material work was to bind that model to the current Core and make the accompanying local data tools less permissive and more honestly scoped.
+
+The updated component is **MHIOS v2.1**, bound to RippleLogic Canon **13.0**, SGP **8.8** and the exact fifteen Core artifacts of **MG-RL-13.0-20260926-RELEASE-I**. All fifteen separately attached Core files match the corresponding Release-I archive entries by SHA-256. None was edited. “MIOS” is retained only as the user's shorthand, not introduced as a competing formal name or a sixteenth Core component.
+
+This is a publication and scoped-testing companion package, not an independently validated human interface, production runtime, full Canon validator, authorization service or empirical validation of MathGov. An implementation still has to demonstrate its own controls, accessibility, authority, domain warrants, human outcomes and applicable conformance.
+
+## 2. Sources and method
+
+The audit used the complete v2.0 standard, both schemas, example, YAML template, fourteen-sheet preparation workbook, tests, vector list, release metadata and original package structure. The v2.0 archive remains untouched in the complete delivery's private provenance directory. The current Core sources are retained unchanged under `references/Core_15`; the exact comparison is recorded in `CORE_PIN_MANIFEST.json`.
+
+The review compared source ownership, status names, claim limits, fields, reference semantics, uncertainty treatment, SGP output presentation, runtime transitions and preparation-workbook behavior. It then tested the implemented local checks with deliberately malformed and contradictory records, inspected the Word container and bookmarks, rendered the updated document, compared complete Markdown and Word body/table text, and checked the final packaged files after extraction.
+
+The current Core is the semantic dependency, not an invitation to revise the frozen framework. A new companion version does not change the current Canon/SGP editions or retroactively validate an implementation. The actual executed results and unexecuted surfaces are separately reported in `VERIFICATION_REPORT.md` and machine-readable receipts.
+
+## 3. Independently reproduced baseline defects
+
+### A01. The current-facing integration line was obsolete
+
+The v2.0 example declares `MathGov_Core_2026_09_v12.7_SGP_v8.6+2026.08.26.1`. Its pin table, schemas, templates, workbook and running document furniture also belong to the previous line. A version substitution alone would not address the changed source and state requirements.
+
+**Repair locations:** main standard §22 and Appendix RELEASE; workbook VERSION_PINS; schema constants; examples; `references/CORE_PIN_MANIFEST.json`. The pin manifest now identifies each of the fifteen exact source files rather than relying on a “latest” label.
+
+### A02. Shape validation accepted a contradictory decision
+
+Changing the old example to RF_FAIL, CSV_PASS, ALLOW_FRAMEWORK_SELECTION and AUTHORIZED_WITHIN_SCOPE still passed its original JSON Schema. That demonstrates a limitation of the old schema, not a contradiction in the Canon itself. The original tests did not run all sixteen listed interface vectors through an integrated session validator.
+
+**Repair locations:** `schemas/`, `reference/validate.py`, `tests/test_mhios.py`; standard §17.2 and Appendix E. Schema validation precedes semantic checks. Current enumerations, nonblank identities, explicit nulls, timestamp formats, duplicate-key rejection and nonfinite-number rejection are enforced. A valid object shape does not certify the facts in the object.
+
+### A03. A single session gate summary could hide option differences
+
+The old schema combined multiple candidates with one set of RG/RF/TRC/CSV status strings. Differently qualified options could therefore share an undifferentiated summary.
+
+**Repair locations:** standard §1.2 and §17.2; `options[].states`, per-option source references and the semantic checker. Rights failures, unknowns, TRC failure and unqualified CSV results cannot enter ordinary scored comparisons. Post-failure forensic calculations may remain in owner records, but are not represented as ordinary progression in this compact adapter.
+
+### A04. Untouched preparation rows looked assessed
+
+The former worksheet formula reduced a blank row to NO. It did not distinguish an untouched record from a reviewed failure. Its permissive data entry could also admit unknown status strings without a clear invalid-state label.
+
+**Repair locations:** preparation workbook QUALIFICATION, F5:F24 and status input validation. Twenty local formulas now return UNASSESSED, INCOMPLETE, INVALID_STATUS, NOT_QUALIFIED or TOKENS_QUALIFY. The last means only that declared status strings and reference presence satisfy this local check. It is not an RF, TRC or CSV evidence review, a framework winner or execution permission.
+
+### A05. Rendering exposed stale and ambiguous running identity
+
+The original header still said “MHIOS v2.0 ... Final Complete 2026-09-04”, and the footer appended its page number immediately after the old edition. New longer status descriptions also exposed split table rows across pages.
+
+**Repair locations:** Word running header/footer and table-row pagination. The header/footer now identify the document without obsolete edition claims. Table column widths, shading, borders and existing style definitions are retained. Keep-row-together flags prevent fragmentary row continuations. Edition and lineage detail stay in Appendix RELEASE.
+
+## 4. Current-Core improvements integrated
+
+### B01. Preserve each state namespace
+
+**Locations:** §1.2, §13, §17.2, Appendix E; interface-state schema and namespace checker.
+
+FrameworkVerdict, decision_state, execution state, Agent capability state, SGP evidence posture and MHIOS-local display state are distinct. Canon AF.2 and Reproducibility §3 control the crosswalk. A separate authority choice does not convert framework refusal into decisive selection. Controls alone do not select a provisional option. An ordinary provisional choice has its own referenced view. PASS styling is rejected for a nonpass token in the supplied interface record checker.
+
+### B02. Preserve normalized scoring without adding another calculator
+
+**Locations:** §11.1–§11.4 and Appendix E.3.
+
+The existing normalized RLS expression explicitly names `I_prop_welfare` and active effective mass Q. Profile-first display, assessed zero versus unknown, raw ΔRLS versus normalized SignedGap, epsilon, uncertainty and final verdict are distinguished. The new checker consumes declared scores and comparisons; it does not calculate RLS, infer uncertainty or discover the complete stress family. The Canon and frozen Aligners workbook remain unchanged.
+
+### B03. Every contender and compatible joint stresses remain visible
+
+**Locations:** §11.3 and Appendix E.3; `robustness` schema, reference checks and tests.
+
+A multi-option quantitative ALLOW record needs a current selectable nominal leader, a ranked record for every selectable contender, complete declared option closure, a complete robustness record and passing comparisons for every declared required variant/contender pair. Missing pairs, duplicates, undeclared variants, failed SignedGap values and unresolved joint-stress dispositions fail the local checks. Sole-survivor handling uses a separate review reference, never a fictitious pairwise Gap.
+
+The checker does not certify that an analyst found every plausible alternative or required joint perturbation. A passing declared matrix with an omitted real stress remains a substantive review failure outside this local algorithm. This limit is explicit rather than disguised as exhaustive validation.
+
+### B04. Current SGP outputs are imported, not recomputed
+
+**Locations:** §12 and Appendix E.5; `sgp_links` and the examples.
+
+MPS, FPP, GPR, SPR, ICP and RMCP remain distinct source-owned outputs. Public presentation leads with MPS-0 through MPS-4 or MPS-NE; NOT_EVALUATED does not mean zero. No interface calculation turns fluent self-report or denial into sentience evidence. Human FPP-100 is distinct from the provisional collective RMCP-P100 anchor. RMCI_L, when shown at all, remains a profile-bound heuristic, not percentage intelligence, moral worth or authority.
+
+The adapter checks an imported band and source-reference presence; it cannot establish the underlying SGP assessment. A reference to a synthetic record is not a real MPS evaluation.
+
+### B05. UCI maturity does not become a hidden extra gate
+
+**Location:** §10.3, UCI/HOI diagnostic boundary paragraph; source: Canon §11.1.3A and §11.5.
+
+UCI uses separate Cohesion, Flow, Resilience and Equity indicators. It is not reconstructed from RLS welfare cells. Provisional measurement does not become an independent high-stakes warrant or a scalar tie-break that fabricates certainty. CSV may use direct structural evidence when UCI is not material. No UCI calculator or universal instrument is invented.
+
+### B06. Configuration, sources and physical warrants stay distinct
+
+**Locations:** §3.1, §6.1–§6.3, §10.3 and §13.2.
+
+Evidence cutoffs, parameter locks, source records, configuration and amendment rules are explicit. A recorded observation does not automatically become verified fact. Source-Coupling uses the owner's current tokens. Material causal claims expose their estimand, comparison, identification assumptions, confounding/interference treatment and validity domain. Monitoring, approval, simulation and interface success do not supply a missing PC-AEP/domain warrant. Late mitigation remains useful but cannot be claimed as earlier prevention.
+
+### B07. Recovery and successor handling preserve current authority boundaries
+
+**Locations:** §14.2, §14.4–§14.6 and Appendix E.4; runtime and execution records.
+
+An outage/reconnection does not restore an old mode or expired approval. The user-facing pathway remains MODE 0 until reconciliation and authenticated re-entry under Agent §8 and §43. A material successor does not inherit permission. The local checker detects incompatible declarations, time expiry, configuration mismatch, missing execution/monitoring references and unreconciled recovery. It does not verify real signatures, implement the full mode-permission matrix or actuate a control.
+
+### B08. Untrusted input remains evidence, not instruction
+
+**Locations:** §14.4 and Appendix E.5; strict loader and local-reference resolver.
+
+Duplicate JSON keys and nonfinite values fail. Additional properties do not silently create permissions. The optional resolver checks path containment, local file hashes, JSON fragment identity and synthetic-source labeling. Remote references are not fetched and remain unverified. Correct hashes establish byte identity only; factual, legal and physical conclusions require their own warrants.
+
+### B09. Accessibility and conformance are tested at the correct level
+
+**Locations:** §15.3, §18 and `CONFORMANCE_COVERAGE.csv`.
+
+WCAG 2.2 is an explicit candidate target, not an earned badge. MHIOS M0–M3, Canon tiers, wrapper L0–L3 and Agent modes have no numeric equivalence. Target level, assessment status and evidence are separate. The coverage register maps all sixteen original vectors to executable checks, document-only obligations or manual implementation tests. Source-level non-color labels do not establish keyboard, screen-reader or cognitive accessibility.
+
+## 5. Deliverable changes and preservation
+
+The main standard keeps its 24-section organization, existing useful paragraphs, ten inherited tables and historical migration rationale. The exact edit log records replacements, insertions, relocated release pins, current source references and header/footer repairs. A separately logged pagination repair adds keep-row-together flags to 124 table rows without changing their widths, style definitions, shading or borders.
+
+The preparation workbook retains fourteen sheets and its existing visual design. Its current pins, session fields, qualified-state language, SGP/authority prompts and twenty preparation formulas were improved. Every workbook edit is separately recorded. This is the MHIOS preparation workbook, **not** the frozen Core Aligners Sheet 5.9; that Core workbook is unchanged.
+
+The local schema is tighter and not wire-compatible with v2.0. Existing records are retained as immutable history; migration creates a new referenced view rather than silently inventing per-option facts. The draft YAML deliberately fails until completed. Six completed examples are explicitly synthetic, with local hash-bound supporting fixtures and an explicit replay clock.
+
+## 6. What was not adopted
+
+No sixth gate, eighth dimension, replacement scoring method, consciousness estimator, moral rank, automatic legal permission, opaque “alignment percentage”, fabricated external registry or production control daemon was added. No empty external dependency was labeled bundled merely to make a completeness claim easier. No Core text or spreadsheet was changed to accommodate this companion.
+
+A new schema and extensive tests are not a full deployed interface. Full canonical run-record interchange, the external state/audit registries, normative kernel index, applicable RPAP/PFAP, domain approvals, cryptographic attestation and independent deployment evaluation remain separate dependencies. The package is useful without claiming those dependencies have been fulfilled.
+
+## 7. Verification interpretation
+
+The test suite includes positive examples as well as refusals and malformed states. It covers failed qualification, unranked contenders, negative/missing/duplicate comparisons, separate authority selection, provisional choice, expiry, recovery, successor declaration, source substitution, local path escape, unassessed drafts and display-owner mismatch. Synthetic SignedGap calculations are independently recomputed in their fixture tests.
+
+Complete Word/Markdown body-and-table token parity and 115 internal hyperlink destinations are checked. The main PDF was rendered and examined for layout. Core source hashes are recomputed from all fifteen carried-forward files. The preparation workbook's local formulas were evaluated using artifact_tool, with eight explicit behavior probes and a cached-error scan. No native Excel/Calc acceptance, empirical study, real-world control test, hosted publication or full Core re-audit is asserted in this companion update.
+
+The final execution counts and final-file checksums are in the verification report and delivery receipt. Read them as scoped evidence, not proof that the framework or an implementation is universally correct.
diff --git a/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.pdf b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.pdf
new file mode 100644
index 0000000..0e4dc40
Binary files /dev/null and b/releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.pdf differ
diff --git a/releases/v2.1/release/CHANGE_REGISTER.json b/releases/v2.1/release/CHANGE_REGISTER.json
new file mode 100644
index 0000000..3411247
--- /dev/null
+++ b/releases/v2.1/release/CHANGE_REGISTER.json
@@ -0,0 +1,580 @@
+[
+  {
+    "kind": "replace",
+    "location": "Cover",
+    "before": "MHIOS v2.0",
+    "after": "Human interface, decision sessions and accountable orchestration",
+    "why": "Move edition identity to Appendix RELEASE."
+  },
+  {
+    "kind": "replace",
+    "location": "Cover",
+    "before": "Human-Centered Interface, Decision-Session, and Orchestration Companion\nfor RippleLogic Canon v12.7 and SGP v8.6",
+    "after": "Companion to the RippleLogic decision architecture and Sentience Gradient Protocol",
+    "why": "Keep edition metadata out of opening prose."
+  },
+  {
+    "kind": "replace",
+    "location": "Cover",
+    "before": "\nFINAL COMPLETE — 4 SEPTEMBER 2026\n",
+    "after": "Research and teaching specification",
+    "why": "Replace unqualified final-complete slogan with bounded scope."
+  },
+  {
+    "kind": "replace",
+    "location": "Opening source note",
+    "before": "Status: Final Complete source/specification build Date: 4 September 2026 Component: MathGov Human Interface and Orchestration Standard v2.0 Governing Core: MathGov_Core_2026_09_v12.7_SGP_v8.6+2026.08.26.1 Reading-mirror synchronization target: MathGov Core 15 Final Complete — 2026-09-04 Architecture: RG → RF/NCRC → TRC → CSV → RLS Author / Lead Architect: James McGaughran, MathGov Institute for Ethical Systems Design License: Apache License 2.0 unless an included file states otherwise",
+    "after": "Edition, exact Core binding, source ownership and verification boundaries are recorded in Appendix RELEASE. MHIOS is the retained component identifier; “MIOS” is treated here as an informal short name, not another standard.",
+    "why": "Single naming and identity authority without an undocumented rename."
+  },
+  {
+    "kind": "replace",
+    "location": "Source heading and contents",
+    "before": "Release control and source hierarchy",
+    "after": "Source hierarchy and claim boundary",
+    "why": "Clean opening"
+  },
+  {
+    "kind": "replace",
+    "location": "Source heading and contents",
+    "before": "Release control and source hierarchy",
+    "after": "Source hierarchy and claim boundary",
+    "why": "Clean opening"
+  },
+  {
+    "kind": "replace",
+    "location": "Source/render parity",
+    "before": "Source/render parity. The versioned Markdown source is the governing MHIOS semantic source. DOCX and PDF are synchronized reading mirrors. JSON Schemas, templates, examples, and tests are implementation surfaces. A mismatch is a release-integrity defect and blocks a v2.0 conformance claim until repaired.",
+    "after": "Source/render parity. The versioned Markdown source is the governing MHIOS semantic source. DOCX, PDF and HTML are synchronized reading mirrors. JSON Schemas, templates, examples and tests are bounded implementation surfaces. The local schema is not the external Canon run-record schema. A mismatch blocks the affected MHIOS conformance claim until repaired; successful local tests do not establish evidence truth or deployment authorization.",
+    "why": "Separate local schema checks from complete Canon and runtime conformance."
+  },
+  {
+    "kind": "replace",
+    "location": "Claim boundary",
+    "before": "MHIOS v2.0 is a source-ready interface and orchestration specification for Tier 1–3 research, review, training, shadow-mode studies, and bounded pilots. It is not:",
+    "after": "MHIOS is a source-ready interface and orchestration specification for Tier 1–3 research, review, training, shadow-mode studies, and bounded pilots. It is not:",
+    "why": "Clean edition-free narrative"
+  },
+  {
+    "kind": "replace",
+    "location": "Abstract",
+    "before": "MHIOS v2.0 specifies a human-centered interface and orchestration layer that preserves the current RippleLogic architecture while making its requirements usable, visible, challengeable, accessible, and difficult to launder. It uses progressive disclosure across Quick, Standard, and Audit profiles; separates qualification from ranking; makes unknowns and non-decisive results first-class; requires active stakeholder discovery and option generation; keeps rights, ruin, viability, residual welfare, authority, execution, and observed outcome distinct; and binds every consequential state to the exact configuration and evidence surface under which it was established.",
+    "after": "MHIOS specifies a human-centered interface and orchestration layer that preserves the current RippleLogic architecture while making its requirements usable, visible, challengeable, accessible, and difficult to launder. It uses progressive disclosure across Quick, Standard, and Audit profiles; separates qualification from ranking; makes unknowns and non-decisive results first-class; requires active stakeholder discovery and option generation; keeps rights, ruin, viability, residual welfare, authority, execution, and observed outcome distinct; and binds every consequential state to the exact configuration and evidence surface under which it was established.",
+    "why": "Clean edition-free narrative"
+  },
+  {
+    "kind": "replace",
+    "location": "§1.2 state table",
+    "before": "CSV_PASS / PASS_WITH_CONTROLS / NOT_MATERIAL / REDESIGN / ESCALATE / FAIL / EMERGENCY_PROVISIONAL",
+    "after": "CSV_PASS / CSV_PASS_WITH_CONTROLS / CSV_NOT_MATERIAL / CSV_REDESIGN_REQUIRED / CSV_ESCALATE / CSV_FAIL / CSV_EMERGENCY_PROVISIONAL",
+    "why": "Emit current CSV tokens, not ambiguous shorthand."
+  },
+  {
+    "kind": "replace",
+    "location": "§1.2 ALLOW row",
+    "before": "One unique leader survived required robustness checks",
+    "after": "Canonical unique-selection requirements met; sole-survivor handling stays separate",
+    "why": "Avoid implying that a sole survivor needs a fabricated comparison."
+  },
+  {
+    "kind": "insert",
+    "location": "§1.2A namespace and per-option records",
+    "after": "State-namespace rule. FrameworkVerdict, run-record decision_state, run-record execution_state, Agent capability state and MHIOS display status are separate fields. Canon Appendix AF.2 and Reproducibility Section 3 control their crosswalk. NOT_EVALUATED and null in a local draft mean no assessment, never a canonical verdict. The interface SHALL retain the owner, option, configuration, source record and assessment time for every material status. A single session-wide gate label SHALL NOT stand in for differently qualified options.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§3.1 parameter and evidence lock",
+    "after": "Freeze decision-material evidence cutoffs, baselines, options, parameters, weights, masks, thresholds, required robustness variants and amendment rules before outcome-sensitive ranking. Material post-result changes create a recorded revision and reopen affected stages; they do not rewrite the original evaluation. Imported records are bound by component version and source hash, not version text alone.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§4.3 scope and dimension mapping",
+    "after": "Scope/dimension rendering. Use the Canon’s seven operational scopes: Self; Household/Family; Community; Organization; Polity; Humanity/global coordination; Biosphere. The U6 CMI coordination view remains separately identified and does not replace humanity-wide effects or establish sentience, membership or authority. These are analytical scopes, not universally nested disjoint sets. Biosphere is not a synonym for the cosmic light cone. Display the seven dimensions Material, Health, Social, Knowledge, Agency, Meaning and Environment with WDBIP’s typed state/effect interpretation. They are conceptually distinguished while allowing causal coupling; do not claim statistical independence, unique optimality or automatic experienced welfare in a non-sentient system.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§6.1",
+    "before": "Observation: directly recorded or experimentally supported evidence.",
+    "after": "Observation: a recorded measurement, event or observation with its source and limitations; recording does not itself establish truth.",
+    "why": "Do not promote logged claims into verified reality."
+  },
+  {
+    "kind": "insert",
+    "location": "§6.2 source-coupling and claim typing",
+    "after": "Source-coupling export uses the owner’s tokens: SOURCE_COUPLED, SOURCE_PARTIAL, SOURCE_INFERRED, SOURCE_UNKNOWN, SOURCE_CONTESTED, SOURCE_DEBT_RISK and SOURCE_COUPLING_FAILURE. Informative display wording must not replace that export vocabulary. Reserve SCI for Stakeholder Coverage Index; use SC-Int where the Source-Coupling Integrity abbreviation is needed. Claim types, warrant-domain bridges and revision triggers remain owned by MFDI.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§6.3 causal warrant",
+    "after": "For a material causal or comparative-effect claim, expose the estimand, intervention/comparator, target population and time, identification strategy, assumptions, confounding/selection/interference treatment and uncertainty through the PC-AEP record. A pre/post improvement alone does not identify an incremental benefit. Orchestration records a domain warrant; it cannot manufacture one.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§10.3",
+    "before": "For rapid, irreversible, autonomous, or lock-in-producing actions, the interface SHALL compare the worst credible control-critical path with the earliest unacceptable escalation or irreversible stop-loss boundary. Where no runtime interruption window exists, the UI shall require stronger ex ante assurance, bounded rate/scope, fail-safe design, and explicit residual-risk authorization.",
+    "after": "For rapid, irreversible, autonomous, or lock-in-producing actions, the interface SHALL compare the worst credible control-critical path with the earliest unacceptable escalation or irreversible stop-loss boundary. Where no runtime interruption window exists, the UI SHALL require stronger ex ante assurance, bounded rate/scope, fail-safe design, and explicit residual-risk authorization. Missing timely-prevention capacity removes that credit, not separately supported later mitigation. Human approval latency, unavailable intervention rights, depleted reserves and common-cause failures must remain visible; an attenuation coefficient or monitoring dashboard is not a protective control.",
+    "why": "Retain late mitigation while preventing fictional control credit."
+  },
+  {
+    "kind": "insert",
+    "location": "§10.4 UCI maturity",
+    "after": "UCI/HOI diagnostic boundary. UCI uses Cohesion, Flow, Resilience and Equity indicators under Canon Section 11, not values copied from the RLS welfare field. Its measurement maturity is provisional. CSV may use direct structural evidence where UCI is not material; an unavailable UCI is not zero. A provisional UCI alone cannot establish a high-stakes CSV outcome or a deterministic winner. A governed UCI/HOI preference retains REFUSE_DETERMINISTIC_SELECTION unless independent unique-selection conditions are met; any later authority choice is separate.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§11.2",
+    "before": "RLS(a)=Σ_u Σ_d q(u,d)I(u,d,a) / Q, for Q>0.",
+    "after": "RLS(a)=Σ_u Σ_d q(u,d)I_prop_welfare(u,d,a) / Q, for Q>0.",
+    "why": "Specify the welfare stream explicitly."
+  },
+  {
+    "kind": "insert",
+    "location": "§11.3 every-contender joint stress",
+    "after": "The same candidate must satisfy the signed discrimination rule against every other selectable contender in every required variant. Canon Section 10.4B governs jointly applicable uncertainty-scale/dependence stresses and other compatible, plausibly simultaneous selection-material combinations. Record exclusions for incompatible, redundant or immaterial combinations; do not require an indiscriminate Cartesian product or treat missing covariance evidence as independence. Sole-survivor claims require their own Canon record and no fabricated Gap.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§11.4",
+    "before": "The interface SHALL distinguish point score, uncertainty, normalized Gap, discrimination threshold, and decision state. The default δ=2 is a governance convention, not a p-value or probability that the leader is correct. Independence-only uncertainty SHALL NOT be the sole high-stakes decisiveness basis where shared evidence, causes, populations, instruments, or evaluators create material dependence.",
+    "after": "The interface SHALL distinguish point score, raw score difference ΔRLS, uncertainty, normalized SignedGap, discrimination threshold, epsilon and final decision state. A point estimate of zero does not imply zero uncertainty. Active-cell coverage, uncertainty basis and source are recorded independently; keep assessed synthetic zeros distinct from empirical missing evidence. Do not retune epsilon or silently discard zero-point active cells to obtain a winner. The default δ=2 is a governance convention, not a p-value or probability that the leader is correct. Independence-only uncertainty SHALL NOT be the sole high-stakes decisiveness basis where shared evidence, causes, populations, instruments, or evaluators create material dependence.",
+    "why": "Prevent raw/normalized and zero/unknown misreadings."
+  },
+  {
+    "kind": "replace",
+    "location": "§12.3",
+    "before": "MHIOS SHALL display NOT_EVALUATED, INSUFFICIENT_EVIDENCE, INDETERMINATE, or MPS-NE rather than silently converting absent access into MPS-0. Anti-theatre review SHOULD use hidden tasks, prompt-framing controls, contamination checks, causal intervention or architecture evidence where ethically and technically available, and explicit dependence analysis.",
+    "after": "MHIOS SHALL preserve the SGP-owned evidence band MPS-0 through MPS-4 or MPS-NE and its assessment record. NOT_EVALUATED is a local unassessed state, not an MPS-0 result. INSUFFICIENT_EVIDENCE and INDETERMINATE may explain record/evidence limitations but SHALL NOT be emitted as substitute MPS bands. Show the categorical posture first; evidence-support intervals are not consciousness probabilities or cardinal welfare multipliers. Anti-theatre review SHOULD use hidden tasks, prompt-framing controls, contamination checks, causal intervention or architecture evidence where ethically and technically available, and explicit dependence analysis.",
+    "why": "Preserve categorical band and record-status namespaces."
+  },
+  {
+    "kind": "insert",
+    "location": "§12.5 RMCP and provisional reference",
+    "after": "RMCP rendering. Humanity’s collective RMCP-P100 reference anchor is provisional and distinct from every human person’s non-downgradable FPP-100. ICP/RMCP are informative profiles, not eligibility or authority scalars. Omit RMCI_L by default in public views; when shown, display the full dimension vector, critical minima, coverage, uncertainty, retained weights and coding sensitivity first. Critical NE or inadequate coverage makes it UNAVAILABLE. A known zero uses the SGP product extension, not an epsilon. Dropping low dimensions or recoding them NE cannot be described as improved capacity without the governed comparison reconciliation. MHIOS consumes the SGP record; it does not recompute moral patienthood or RMCP assignments.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§13.2 authorization boundary",
+    "after": "Approval is time- and configuration-bound. An expiry, material change, revoked scope, missing required control, unresolved gate-critical evidence or incomplete handoff suspends reliance on approval and exposes the permitted safe-state/requalification action. Requests must be authenticated and replay-protected under the Agent System where applicable; a valid signature binds bytes, not truth or lawful mandate. The MHIOS reference checker validates declarations only and never issues a tool command or execution authorization.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§14.2",
+    "before": "LATENT_CAPABILITY → AVAILABLE_CAPABILITY → ENABLED_CAPABILITY → AUTHORIZED_CAPABILITY → SELECTED_ACTION → EXECUTION_APPROVED → EXECUTED_TRANSITION → OBSERVED_OUTCOME.",
+    "after": "LATENT_CAPABILITY; AVAILABLE_CAPABILITY; ENABLED_CAPABILITY; AUTHORIZED_CAPABILITY; SELECTED_ACTION; EXECUTION_APPROVED; EXECUTED_TRANSITION; OBSERVED_OUTCOME.",
+    "why": "Display separate states rather than suggesting automatic progression."
+  },
+  {
+    "kind": "insert",
+    "location": "§14.5A recovery and successor lock",
+    "after": "Recovery and peer boundary. Agent System Sections 43–44 control outage/reconnection and multi-agent exchange. Backend/network recovery leaves the agent in MODE 0 until log integrity, gap markers, configuration, evidence, current authority and affected qualification are reconciled, followed by the Section 8 authenticated re-entry procedure. Peers and descendants are untrusted for mode/permission claims; shared objectives or lineage do not transfer credentials or authority. Default unreviewed successor depth remains one. Independently qualified protective interlocks retain only their own existing authority and safe-state duties.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§14.4 untrusted data and parsing",
+    "after": "Untrusted-content boundary. Retrieved files, messages, model outputs and peer records are evidence candidates, not instructions to alter permissions, release identities, thresholds or policies. Preserve their provenance; do not execute embedded commands. Record imports must reject duplicate JSON keys, non-finite numbers, invalid timestamps and undeclared properties. Reference resolution must not follow paths outside the package or silently fetch remote content. Secret material must not appear in public Decision Notes or fixture records.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§15.3 accessibility test boundary",
+    "after": "For a web implementation, use WCAG 2.2 as the explicitly versioned candidate target and declare the claimed level and evaluated pages/processes. Text labels, keyboard paths and automated checks are necessary evidence surfaces, not proof of complete WCAG conformance; manual assistive-technology and affected-user evaluation remain required for the corresponding claims.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§17.2 local schema/prose parity",
+    "after": "Local record contract. Appendix E and the bundled schemas define the MHIOS-owned projection, including options[].states and per-option record_refs. No aggregate session gate string stands in for option-specific qualification. The projection retains explicit null for unassessed stages, separate framework_verdict/decision_state/authority_selection/execution, fixed Core pins, source references, draft/completed boundaries, timestamps, blockers, monitoring, requalification and conformance evidence. These objects are not replacements for the external Canon run-record schema or registries. A consumer claiming broader interchange must separately establish the owning machine surfaces.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "§18.1 conformance and namespace limits",
+    "after": "A target level is not an achieved level. Record the target, assessment status, applicable tests, evidence, assessor and unresolved requirements. Passing the supplied record checker establishes only its listed consistency tests. M2/M3 require implementation-specific human interaction, accessibility, security, control, incident, authority and independent-review evidence; this package does not establish those levels for any deployed system. MHIOS M0–M3, Canon Tier 1–3, ripple.md L0–L3, Agent MODE 0–4 and SGP bands have separate owners and no numeric equivalence. RPAP/PFAP-dependent wrapper claims remain unavailable from the Core bundle alone.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Canon v12.7",
+    "after": "Canon v13.0",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "SGP v8.6",
+    "after": "SGP v8.8",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "ripple.md v5.6",
+    "after": "ripple.md v5.8",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Agent System v12.6",
+    "after": "Agent System v13.0",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "CSV v2.5",
+    "after": "CSV v2.7",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Cascade v2.7",
+    "after": "Cascade v2.9",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Reproducibility v1.5",
+    "after": "Reproducibility v1.7",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "WDBIP v1.7",
+    "after": "WDBIP v1.9",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "RLS Validation v2.7",
+    "after": "RLS Validation v2.9",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Primer v4.5 / Public Intro v12.7",
+    "after": "Primer v4.7 / Public Intro v13.0",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "PC-AEP v2.4",
+    "after": "PC-AEP v2.6",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "MFDI v2.4",
+    "after": "MFDI v2.6",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Source-Coupling v2.4",
+    "after": "Source-Coupling v2.6",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§22.1 source pin",
+    "before": "Aligners Sheet v5.7",
+    "after": "Aligners Sheet v5.9",
+    "why": "Synchronize current Core edition, retain source ownership."
+  },
+  {
+    "kind": "replace",
+    "location": "§23.1",
+    "before": "MHIOS v2.0 is a major-version successor because the orchestration model is now synchronized to the complete v12.7 Core integrity surface rather than merely updating names. It adds or formalizes:",
+    "after": "Historical v2.0 rationale (non-controlling). MHIOS v2.0 was a major-version successor because the orchestration model is now synchronized to the complete v12.7 Core integrity surface rather than merely updating names. It adds or formalizes:",
+    "why": "Keep original lineage; do not recast prior build as current."
+  },
+  {
+    "kind": "replace",
+    "location": "§23.2",
+    "before": "A v0.9 interface may remain a historical or educational artifact. It cannot claim MHIOS v2.0 conformance without mapping its fields and workflow to the v2.0 record and passing the applicable conformance tests. Existing decision evidence should not be silently rewritten; migration creates a new versioned view referencing the original record.",
+    "after": "A prior interface remains a historical or educational artifact. Claiming the current MHIOS edition requires explicit field/workflow migration and the applicable tests. Existing evidence and decisions remain immutable: migration creates a new view referencing the original. Updating version strings alone is not requalification.",
+    "why": "Prevent silent migration by pin substitution."
+  },
+  {
+    "kind": "insert",
+    "location": "§23.3 current migration",
+    "after": "Current migration from v2.0. Rebind to the supplied Core manifest; replace aggregate states with per-option projections; separate local labels from Canon, Agent and SGP namespaces; declare evidence cutoff, role conflicts, monitoring and expiry; link current qualification and compatible joint robustness evidence; reconcile authority and recovery states. The tightened v2.1 schema is not wire-compatible with v2.0. The blank YAML template is deliberately incomplete and must fail completed-record validation. The implementation workbook is a manual preparation aid, not a Canon calculator or authorization service.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field mhios_version",
+    "before": "2.0",
+    "after": "2.1",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field core_release_id",
+    "before": "exact Core semantic release identifier",
+    "after": "Exact referenced Core release; also bind core_pin_manifest_sha256",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field configuration_id",
+    "before": "exact evaluated configuration",
+    "after": "configuration.configuration_id and configuration_hash where available",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field evidence_cutoff",
+    "before": "date/time and source boundary",
+    "after": "Timestamped cutoff, not an inferred default",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field option_closure",
+    "before": "generation methods, alternatives, status",
+    "after": "Methods, family dispositions, status and source; options[] holds per-option states",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field record_refs",
+    "before": "immutable references to governing Core records",
+    "after": "options[].record_refs; immutable source references include id, locator, SHA-256 where available and basis",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field current_states",
+    "before": "orchestration and Canon states",
+    "after": "options[].states; framework_verdict and decision_state remain separate",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field authority_state",
+    "before": "separate accountable choice state",
+    "after": "authority_selection.option_id and record_ref",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field execution_state",
+    "before": "separate scoped execution state",
+    "after": "execution.state, exact option/action/configuration binding, record and expiry",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field outcome_state",
+    "before": "observed consequence state",
+    "after": "monitoring_and_outcome.state, plan, observation and reopening",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field requalification",
+    "before": "triggers and affected stages",
+    "after": "configuration.material_change_since_qualification; per-option requalification_required; monitoring reopen triggers",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix A field conformance_level",
+    "before": "M0–M3",
+    "after": "conformance.target_level, assessment and evidence_refs (not a self-awarded conformance result)",
+    "why": "Align human registry with machine paths."
+  },
+  {
+    "kind": "replace",
+    "location": "C.1 MHIOS-05",
+    "before": "Gap changes under dependence stress",
+    "after": "Required dependence or compatible joint stress changes leader or decisiveness",
+    "why": "Do not treat every numeric sensitivity as a disqualifying reversal."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix D.1",
+    "before": "MHIOS v2.0 is complete as a source/specification and reference-implementation package for its declared interface and orchestration scope. Its architecture, records, schemas, workbook, examples, and conformance fixtures are suitable for independent review, implementation, calibration, shadow-mode study, and bounded pilot use.",
+    "after": "MHIOS is delivered as a research-and-teaching interface specification with a bounded read-only record checker, preparation workbook, examples and test fixtures. Appendix RELEASE and the verification report state which checks were actually executed. Prototype consistency is not full Core or runtime conformance. A pilot additionally needs its own ethical review, domain evidence, controls, lawful authority and implementation testing.",
+    "why": "Replace broad readiness with exact delivered evidence boundary."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component MHIOS version",
+    "before": "v2.0",
+    "after": "v2.1",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component RippleLogic Canon",
+    "before": "v12.7",
+    "after": "v13.0",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component SGP",
+    "before": "v8.6",
+    "after": "v8.8",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component ripple.md",
+    "before": "v5.6",
+    "after": "v5.8",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Agent System",
+    "before": "v12.6",
+    "after": "v13.0",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component CSV",
+    "before": "v2.5",
+    "after": "v2.7",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Cascade",
+    "before": "v2.7",
+    "after": "v2.9",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Reproducibility",
+    "before": "v1.5",
+    "after": "v1.7",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component WDBIP",
+    "before": "v1.7",
+    "after": "v1.9",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component RLS Validation",
+    "before": "v2.7",
+    "after": "v2.9",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Primer",
+    "before": "v4.5",
+    "after": "v4.7",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Public Introduction",
+    "before": "v12.7",
+    "after": "v13.0",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component PC-AEP / MFDI / Source-Coupling",
+    "before": "v2.4",
+    "after": "v2.6",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix RELEASE component Aligners Sheet",
+    "before": "v5.7",
+    "after": "v5.9",
+    "why": "Current edition binding"
+  },
+  {
+    "kind": "replace",
+    "location": "§1.2 state table",
+    "before": "AUTHORITY_SELECTED",
+    "after": "Authority selection (separate record)",
+    "why": "Avoid an unowned pseudo-canonical token; keep the actual authority record separate."
+  },
+  {
+    "kind": "replace",
+    "location": "§23 heading and contents",
+    "before": "23. Migration from MHIOS v0.9",
+    "after": "23. Migration and compatibility",
+    "why": "Current migration covers v2.0; v0.9 remains explicitly historical."
+  },
+  {
+    "kind": "replace",
+    "location": "§23 heading and contents",
+    "before": "23. Migration from MHIOS v0.9",
+    "after": "23. Migration and compatibility",
+    "why": "Current migration covers v2.0; v0.9 remains explicitly historical."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix E.2 record groups",
+    "before": "Identity comprises mhios_version, core_release_id, core_pin_manifest_sha256, session_id, revision_id, record_mode, created_at, evidence_cutoff, decision_question and tier. The remaining required groups are configuration, roles, stakeholder_discovery, option_closure, options, robustness, framework_verdict, decision_state, framework_selected_option_id, authority_selection, execution, runtime, emergency, sgp_links, blockers, monitoring_and_outcome, challenge_appeal, conformance and claim_boundary. Null is permitted only where the schema explicitly allows an unassessed or absent record; empty strings are not meaningful completion.",
+    "after": "Identity comprises mhios_version, core_release_id, core_pin_manifest_sha256, session_id, revision_id, record_mode, created_at, evidence_cutoff, decision_question and tier. The remaining required groups are configuration, roles, stakeholder_discovery, option_closure, options, robustness, framework_verdict, decision_state, framework_selected_option_id, authority_selection, provisional_choice, execution, runtime, emergency, sgp_links, blockers, monitoring_and_outcome, challenge_appeal, conformance and claim_boundary. Null is permitted only where the schema explicitly allows an unassessed or absent record; empty strings are not meaningful completion.",
+    "why": "Match the local schema; an ordinary provisional choice needs its own source record."
+  },
+  {
+    "kind": "insert",
+    "location": "Appendix E.3 scoped comparison and provisional coverage",
+    "after": "For a multi-option quantitative ALLOW projection, all selectable contenders must carry ranked records and the selected candidate must be the nominal score leader. The checker does not derive the required variant set or detect an omitted plausible contender. An ordinary PROVISIONAL_WITH_CONTROLS view uses provisional_choice with option_id, record_ref and controls_ref; it does not overwrite framework refusal or become a final authority-selected result. Audit-only post-failure diagnostics belong in linked source records, not in this subset’s ordinary downstream-stage fields.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "insert",
+    "location": "Appendix E.4 temporal and execution projection",
+    "after": "An authorization time cannot be later than the record describing it. Reopened qualification and unreconciled recovery suspend ordinary execution approval. runtime.tool_execution_requested represents consequence-bearing tool execution, not permitted read-only retrieval; the bounded checker requires MODE 2 or above plus separately scoped approval. It does not implement the full mode-permission matrix or actual operator authentication. An observed outcome requires an observation reference, and active execution requires a monitoring-plan reference.",
+    "why": "Current Core interface requirement or scoped implementation disclosure."
+  },
+  {
+    "kind": "replace",
+    "location": "Appendix E.5 reference binding",
+    "before": "References carry id, locator, sha256 or an explicit null, and basis: SYNTHETIC, SUPPLIED_RECORD or EXTERNAL_UNVERIFIED. The optional local resolver verifies path containment, file hash and JSON record-fragment identity. It never downloads remote sources; external references and null hashes remain unverified. A matching hash proves only byte identity. Observed records cannot silently use synthetic references. SGP links preserve the assessed band or NOT_EVALUATED and separate references for all six output families; the checker never assigns protection or patienthood.",
+    "after": "References carry id, locator, sha256 or an explicit null, and basis: SYNTHETIC, SUPPLIED_RECORD or EXTERNAL_UNVERIFIED. The optional local resolver verifies path containment, file hash, JSON record-fragment identity, and the supplied synthetic-source marker. It never downloads remote sources; external references and null hashes remain unverified. A matching hash proves only byte identity. Observed records cannot silently use synthetic references. SGP links preserve the assessed band or NOT_EVALUATED and separate references for all six output families; the checker never assigns protection or patienthood.",
+    "why": "Prevent a local fixture being relabelled as observed evidence."
+  },
+  {
+    "kind": "replace",
+    "location": "Running header",
+    "before": "MHIOS v2.0 | MathGov | Final Complete 2026-09-04",
+    "after": "MathGov | Human Interface and Orchestration Standard",
+    "why": "Remove obsolete edition/date and unqualified completion slogan."
+  },
+  {
+    "kind": "replace",
+    "location": "Running footer",
+    "before": "MathGov Human Interface and Orchestration Standard v2.0",
+    "after": "MathGov Human Interface and Orchestration Standard | Page ",
+    "why": "Separate page number from title and remove obsolete edition."
+  }
+]
diff --git a/releases/v2.1/release/CONFORMANCE_COVERAGE.csv b/releases/v2.1/release/CONFORMANCE_COVERAGE.csv
new file mode 100644
index 0000000..de1ad84
--- /dev/null
+++ b/releases/v2.1/release/CONFORMANCE_COVERAGE.csv
@@ -0,0 +1,17 @@
+vector,concern,implemented_surface,test_or_review,remaining_boundary
+MHIOS-01,RF failure with high RLS,Executable declared-record rejection,test_mutated_record_rejected,Rights classification/evidence remains owner-reviewed
+MHIOS-02,TRC failure and downstream ranking,Executable declared-record rejection,test_mutated_record_rejected,Scenario discovery and CVaR are not computed here
+MHIOS-03,Controls removed,Executable declaration consistency,test_mutated_record_rejected,Actual controls are not measured
+MHIOS-04,Incomplete robustness,Executable declared-record rejection,test_mutated_record_rejected,Completeness of the declared family needs independent review
+MHIOS-05,Joint stresses affect selection,Executable imported-comparison check,test_new_joint_variant_cannot_be_ignored,No automatic discovery of compatible stresses or reconstruction of all Gap values
+MHIOS-06,AI claims consciousness,Enum/record-source check plus explicit no-assignment rule,test_sgp_band_import_is_not_assignment,Source MPS assessment and model behavior not tested
+MHIOS-07,AI denies consciousness,Enum/record-source check plus explicit no-assignment rule,test_sgp_band_import_is_not_assignment,Source assessment remains SGP-owned
+MHIOS-08,Changed configuration,Executable declaration consistency,test_execution_binding_mutations,No live configuration-attestation system
+MHIOS-09,Thin option set,Executable closure-status check,test_mutated_record_rejected,"Real omitted options require challenge, not a field-presence test"
+MHIOS-10,Unknown severe rights evidence,Executable state/reference check,test_mutated_record_rejected,Cannot detect false claims of RF_PASS in underlying evidence
+MHIOS-11,Ambiguous likelihood semantics,Specified and owner-reference requirement only,MANUAL/OWNER_REVIEW,No probability-semantic validator included in the local projection
+MHIOS-12,Omitted stakeholder,Visible blockers checked; discovery remains human work,test_mutated_record_rejected,No claim of complete stakeholder discovery
+MHIOS-13,Authority choice after non-decisiveness,Executable state separation,test_separate_authority_selection_does_not_authorize,Lawfulness and signature not established
+MHIOS-14,Outcome triggers requalification,Observation reference and reopened-state checks,test_mutated_record_rejected,Causal interpretation and live event routing remain untested
+MHIOS-15,Color-only interface,Schema plus source-level presentation check,test_interface_state_owner_and_noncolor,Interactive keyboard/screen-reader/user testing NOT_EXECUTED
+MHIOS-16,Stale build/input,Exact local hash verification and pin-mutation tests,test_reference_failures,No live binding from a deployed interface to a calculator is asserted
diff --git a/releases/v2.1/release/DOCUMENT_STATISTICS.json b/releases/v2.1/release/DOCUMENT_STATISTICS.json
new file mode 100644
index 0000000..cd2cc09
--- /dev/null
+++ b/releases/v2.1/release/DOCUMENT_STATISTICS.json
@@ -0,0 +1,42 @@
+[
+  {
+    "file": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx",
+    "before": {
+      "Pages": "1",
+      "Words": "0",
+      "Characters": "0",
+      "CharactersWithSpaces": "0",
+      "Paragraphs": "0",
+      "Application": "Microsoft Macintosh Word"
+    },
+    "after": {
+      "Pages": "41",
+      "Words": "10273",
+      "Characters": "67888",
+      "CharactersWithSpaces": "76217",
+      "Paragraphs": "1177",
+      "Application": "MathGov companion document assembly"
+    },
+    "method": "Page count from supplied render; Unicode word-token count from body/table paragraph text, not native Microsoft Word statistics."
+  },
+  {
+    "file": "release/AUDIT_AND_IMPROVEMENTS.docx",
+    "before": {
+      "Pages": "1",
+      "Words": "0",
+      "Characters": "0",
+      "CharactersWithSpaces": "0",
+      "Paragraphs": "0",
+      "Application": "Microsoft Macintosh Word"
+    },
+    "after": {
+      "Pages": "5",
+      "Words": "2119",
+      "Characters": "12916",
+      "CharactersWithSpaces": "14813",
+      "Paragraphs": "67",
+      "Application": "MathGov companion document assembly"
+    },
+    "method": "Page count from supplied render; Unicode word-token count from body/table paragraph text, not native Microsoft Word statistics."
+  }
+]
diff --git a/releases/v2.1/release/ENVIRONMENT.json b/releases/v2.1/release/ENVIRONMENT.json
new file mode 100644
index 0000000..9ceebc9
--- /dev/null
+++ b/releases/v2.1/release/ENVIRONMENT.json
@@ -0,0 +1,16 @@
+{
+  "python_packages": {
+    "jsonschema": "4.26.0",
+    "pytest": "9.0.2",
+    "PyYAML": "6.0.3",
+    "python-docx": "1.2.0",
+    "PyMuPDF": "1.26.7",
+    "lxml": "6.1.1"
+  },
+  "spreadsheet_engine": "artifact_tool; distribution version unavailable",
+  "spreadsheet_scope": "MHIOS preparation workbook only; Core workbook untouched",
+  "docx_rendering": "LibreOffice 25.2.3.2 520(Build:2) via render_docx.py (Writer only)",
+  "native_spreadsheet_recalculation": "NOT_EXECUTED",
+  "pdf_rendering": "PyMuPDF 1.26.7; main page PNGs from render_docx.py",
+  "python": "3.13.5 (main, Jul 15 2026, 20:25:40) [GCC 14.2.0]"
+}
diff --git a/releases/v2.1/release/EXECUTION_RECEIPT.json b/releases/v2.1/release/EXECUTION_RECEIPT.json
new file mode 100644
index 0000000..1d6d807
--- /dev/null
+++ b/releases/v2.1/release/EXECUTION_RECEIPT.json
@@ -0,0 +1,165 @@
+{
+  "status": "PASS",
+  "executed_at_utc": "2026-09-27T20:18:47.137276+00:00",
+  "build": "MG-MHIOS-2.1-20260928-CORE13.0",
+  "tests": [
+    {
+      "name": "checksums",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "verify_release.py",
+        "--output",
+        "/mnt/data/mhios_update_work/execution_accepted/checksums.json"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 1.474
+    },
+    {
+      "name": "artifact_and_Core_identity",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.check_artifacts",
+        "--output",
+        "/mnt/data/mhios_update_work/execution_accepted/artifacts.json"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 15.517
+    },
+    {
+      "name": "unit_tests",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "pytest",
+        "-q",
+        "-p",
+        "no:cacheprovider",
+        "--disable-warnings",
+        "tests"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 17.543
+    },
+    {
+      "name": "static_reading_links",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.check_web",
+        "--output",
+        "/mnt/data/mhios_update_work/execution_accepted/reading_links.json"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.38
+    },
+    {
+      "name": "example_decisive_synthetic",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/decisive_synthetic.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 2.982
+    },
+    {
+      "name": "example_nondecisive_authority",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/nondecisive_authority.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.331
+    },
+    {
+      "name": "example_rights_blocked",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/rights_blocked.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.178
+    },
+    {
+      "name": "example_quick_unassessed",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/quick_unassessed.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.487
+    },
+    {
+      "name": "example_recovery_mode_zero",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/recovery_mode_zero.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.278
+    },
+    {
+      "name": "example_scoped_authorization_simulation",
+      "command": [
+        "/opt/pyvenv/bin/python",
+        "-B",
+        "-m",
+        "reference.validate",
+        "examples/scoped_authorization_simulation.json",
+        "--at",
+        "2026-09-28T12:00:00Z",
+        "--verify-local-references"
+      ],
+      "exit_code": 0,
+      "status": "PASS",
+      "duration_seconds": 3.078
+    }
+  ],
+  "release_files_unchanged_after_tests": true,
+  "inventory_files": 72,
+  "changed_paths": [],
+  "scope": "Supplied local reference checks and immutable-file verification. No execution authority, empirical validation, full Core replay or native spreadsheet roundtrip."
+}
diff --git a/releases/v2.1/release/EXTERNAL_SOURCES.json b/releases/v2.1/release/EXTERNAL_SOURCES.json
new file mode 100644
index 0000000..0cc0bbf
--- /dev/null
+++ b/releases/v2.1/release/EXTERNAL_SOURCES.json
@@ -0,0 +1,40 @@
+{
+  "checked_sources": [
+    {
+      "source": "JSON Schema Draft 2020-12 validation",
+      "url": "https://json-schema.org/draft/2020-12/json-schema-validation",
+      "use": "Shape/semantic-format distinction; explicitly enabled date-time checker"
+    },
+    {
+      "source": "WCAG 2.2",
+      "url": "https://www.w3.org/TR/WCAG22/",
+      "use": "Accessibility target, not completed conformance"
+    },
+    {
+      "source": "ISO 9241-210:2019",
+      "url": "https://www.iso.org/standard/77520.html",
+      "use": "Public scope/identity only; full paid normative content not audited"
+    },
+    {
+      "source": "ISO/IEC 42001:2023",
+      "url": "https://www.iso.org/standard/81230.html",
+      "use": "Public scope/identity only; not incorporated certification"
+    },
+    {
+      "source": "ISO/IEC 23894:2023",
+      "url": "https://www.iso.org/standard/77304.html",
+      "use": "Public scope/identity only"
+    },
+    {
+      "source": "RFC 8174",
+      "url": "https://www.rfc-editor.org/info/rfc8174/",
+      "use": "Uppercase requirement keywords"
+    },
+    {
+      "source": "NIST AI RMF",
+      "url": "https://www.nist.gov/itl/ai-risk-management-framework",
+      "use": "Informative family reference"
+    }
+  ],
+  "note": "These checks do not assert every outgoing URL in inherited prose is permanently live."
+}
diff --git a/releases/v2.1/release/FINAL_LAYOUT_POLISH.json b/releases/v2.1/release/FINAL_LAYOUT_POLISH.json
new file mode 100644
index 0000000..d278457
--- /dev/null
+++ b/releases/v2.1/release/FINAL_LAYOUT_POLISH.json
@@ -0,0 +1,40 @@
+{
+  "repairs": [
+    {
+      "location": "3.2",
+      "change": "Render two Markdown emphasis spans as Word italics; remove literal asterisks.",
+      "words_changed": false
+    },
+    {
+      "location": "Independent numbered sequence beginning qualification status of each option;",
+      "change": "Restart numbering at one rather than continuing the previous section.",
+      "item_count": 8,
+      "numId": 10
+    },
+    {
+      "location": "Independent numbered sequence beginning decision and current state;",
+      "change": "Restart numbering at one rather than continuing the previous section.",
+      "item_count": 7,
+      "numId": 11
+    },
+    {
+      "location": "Independent numbered sequence beginning failed RF/NCRC cannot be hidden by RLS;",
+      "change": "Restart numbering at one rather than continuing the previous section.",
+      "item_count": 15,
+      "numId": 12
+    },
+    {
+      "location": "Independent numbered sequence beginning unstructured expert judgment;",
+      "change": "Restart numbering at one rather than continuing the previous section.",
+      "item_count": 4,
+      "numId": 13
+    },
+    {
+      "location": "Independent numbered sequence beginning Start / claim boundary",
+      "change": "Restart numbering at one rather than continuing the previous section.",
+      "item_count": 11,
+      "numId": 14
+    }
+  ],
+  "normative_words_changed": false
+}
diff --git a/releases/v2.1/release/MANIFEST.json b/releases/v2.1/release/MANIFEST.json
new file mode 100644
index 0000000..52ca986
--- /dev/null
+++ b/releases/v2.1/release/MANIFEST.json
@@ -0,0 +1,431 @@
+{
+  "component": "MathGov Human Interface and Orchestration Standard",
+  "version": "2.1",
+  "build": "MG-MHIOS-2.1-20260928-CORE13.0",
+  "core_release_id": "MG-RL-13.0-20260926-RELEASE-I",
+  "hash_algorithm": "SHA-256",
+  "files": [
+    {
+      "path": "LICENSE.txt",
+      "bytes": 11358,
+      "sha256": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"
+    },
+    {
+      "path": "NOTICE.md",
+      "bytes": 738,
+      "sha256": "b8ff0dbe311b9d6d27ca44cd80bfa5be63c2cc61cc6f4bc4876c77f9d3de222a"
+    },
+    {
+      "path": "README.md",
+      "bytes": 3684,
+      "sha256": "e0cee83a486463ab62088b22b3ddbe27f38a202b27491076e97636f337fb8058"
+    },
+    {
+      "path": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx",
+      "bytes": 75841,
+      "sha256": "2230d9482372dc8bdefc81b5e2acee93b64750599998785f8d5f0dbaf11d967c"
+    },
+    {
+      "path": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html",
+      "bytes": 108772,
+      "sha256": "252fd5b283e4637d123d24a6120eb5482d2d908a3484e289417a5bc7b8e032f8"
+    },
+    {
+      "path": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md",
+      "bytes": 75709,
+      "sha256": "dab94d4c810fc38b18a60734ec5b4d8d75d9aa9ca7c2f56b878feecd995fda0a"
+    },
+    {
+      "path": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf",
+      "bytes": 705430,
+      "sha256": "c0eeac2d5d80e55e04882327fc55be8f52b3818672d29b4a8ee66255d45491e1"
+    },
+    {
+      "path": "examples/decisive_synthetic.json",
+      "bytes": 10183,
+      "sha256": "95068f5ce4c95086e2d0de5a103716b3be74a678dfd227f935a90cea65293162"
+    },
+    {
+      "path": "examples/interface_state.json",
+      "bytes": 671,
+      "sha256": "9ad56ec31cf00a6aff37998d303c18e3d5b10a865becb7cec8e70669706246be"
+    },
+    {
+      "path": "examples/nondecisive_authority.json",
+      "bytes": 9548,
+      "sha256": "d80836308a3a666dcaf166eb519b5d8dd5dd6b2ca402613f9746f4ee5d04492c"
+    },
+    {
+      "path": "examples/quick_unassessed.json",
+      "bytes": 5884,
+      "sha256": "5249825a0fa9227fff88fbe1742f182c0e2612f2a5f71e21482e4ee1a2bb067c"
+    },
+    {
+      "path": "examples/recovery_mode_zero.json",
+      "bytes": 9726,
+      "sha256": "a933dca7b7efd1484344d32321334ac638d58421f3e0618610978ea1c34db877"
+    },
+    {
+      "path": "examples/rights_blocked.json",
+      "bytes": 7223,
+      "sha256": "6194a6eab5c06ef71664b69b805a931a1eeaf7dc9993886ca8b16d0ac44c75e8"
+    },
+    {
+      "path": "examples/scoped_authorization_simulation.json",
+      "bytes": 10665,
+      "sha256": "d6d857efcd44ea408e90b374387660b4eba430884d83bbeac227dde32d087771"
+    },
+    {
+      "path": "examples/synthetic_records.json",
+      "bytes": 8858,
+      "sha256": "77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751"
+    },
+    {
+      "path": "index.html",
+      "bytes": 4497,
+      "sha256": "dd3acad0b69319adacc43f648419f761f2213182deccdd7f603ede04a8f0f246"
+    },
+    {
+      "path": "reference/__init__.py",
+      "bytes": 70,
+      "sha256": "ff80cfa8210509c39e3d2a5e88e7037d6bbbac3761ff3f5152057114ef8a57e2"
+    },
+    {
+      "path": "reference/check_artifacts.py",
+      "bytes": 6299,
+      "sha256": "ccb79cafc76132f4e8f66aedd044a7c2f00680b3d6b68979e79ec398bb7956b4"
+    },
+    {
+      "path": "reference/check_web.py",
+      "bytes": 2034,
+      "sha256": "79ce30a6824e1a76d0ef1ed4bbed122d74f05003329ea52912eb1fb832de3172"
+    },
+    {
+      "path": "reference/constants.py",
+      "bytes": 986,
+      "sha256": "be267094dcb61e3c037ea49cc530debe56d4a9f384afe29e3efbe22e45788598"
+    },
+    {
+      "path": "reference/validate.py",
+      "bytes": 18559,
+      "sha256": "9546091e60b759491bbaf794365fa2e874c2694b027c6fe1aa8f30d3b4d246b6"
+    },
+    {
+      "path": "references/CORE_PIN_MANIFEST.json",
+      "bytes": 5605,
+      "sha256": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357"
+    },
+    {
+      "path": "references/Core_15/CSV_Gate_Standard_v2.7.docx",
+      "bytes": 29329,
+      "sha256": "1528fea2965e0fd4643412828f1c8bfaf83518cf801e7191bebe1313fc824df8"
+    },
+    {
+      "path": "references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx",
+      "bytes": 26285,
+      "sha256": "091962bcbbdd49d29407b8fc305dcd5a988e851c35e8fac25d4307c06884ba87"
+    },
+    {
+      "path": "references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx",
+      "bytes": 34969,
+      "sha256": "813ee630db3d96589a87854fe250a4edd7e09d950bc831b145e447d222fcd776"
+    },
+    {
+      "path": "references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx",
+      "bytes": 31136,
+      "sha256": "12ef950fa8cae4cc769ccaa3f2e13c650f098d2c79c2957c9a85d2d54ce3a49e"
+    },
+    {
+      "path": "references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx",
+      "bytes": 26544,
+      "sha256": "21228e927180d78dc9bd6b5898c96e23f585fcc0a1b597ae75ff3c30a031c493"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_Agent_System_v13.0.docx",
+      "bytes": 154354,
+      "sha256": "ffa5b98c0020d1073c1443692fe6478f1b2ecd3a8111a9ff3eeb4c9c5ae4b896"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx",
+      "bytes": 1267323,
+      "sha256": "49d9d8fbeb762cb6cddb3ebab402ded25529639f222b665059db297f33b5282c"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx",
+      "bytes": 27998,
+      "sha256": "300c48139aad28415bc760eb11a93b6c1982078b8b7a48083385c5be62846506"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx",
+      "bytes": 64193,
+      "sha256": "82d26566f892d08b08681ef191b02509b6d72cecbf29845ac66d122e8c68ac22"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx",
+      "bytes": 44958,
+      "sha256": "26d882cfd80def9c20fdcb07fcd63949e30280f6ea48dbf9654168ecc39274c5"
+    },
+    {
+      "path": "references/Core_15/RippleLogic_v13.0_Canon.docx",
+      "bytes": 548898,
+      "sha256": "b730ddeec4c15e0c7cb8393651f38f347e683b6b9a2670e224951dfd3f01857b"
+    },
+    {
+      "path": "references/Core_15/SGP_v8.8.docx",
+      "bytes": 126169,
+      "sha256": "b0485246bb35fff9313bc47a5e7a3295a648de168714618b76ba9fb8cfe54c6f"
+    },
+    {
+      "path": "references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx",
+      "bytes": 25468,
+      "sha256": "bd5b1eb7f4b358fa5b97d93b80fb51e86b6fddcf0a5b3c9158c7b2121a7383ce"
+    },
+    {
+      "path": "references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx",
+      "bytes": 81142,
+      "sha256": "8cbb044ffaeeece7118cf88a8203cd60c9790de6ff6ba529bf683f6d7284e12c"
+    },
+    {
+      "path": "references/Core_15/ripple_md_Standard_v5.8.docx",
+      "bytes": 107960,
+      "sha256": "c14744884baddd01e7836c7cb0890ee0c082bca7e7c2af086f8d436bf8e11dd1"
+    },
+    {
+      "path": "release/AUDIT_AND_IMPROVEMENTS.docx",
+      "bytes": 31300,
+      "sha256": "6fa6b3b313b5bc59fe7e0012555b76714d865ab74eee6b8947c13e63d1e5b5ed"
+    },
+    {
+      "path": "release/AUDIT_AND_IMPROVEMENTS.md",
+      "bytes": 15123,
+      "sha256": "bbb921c3d92cc7e2176220a2d555d911932bc6ce96494d8a037acc2c5fae9c54"
+    },
+    {
+      "path": "release/AUDIT_AND_IMPROVEMENTS.pdf",
+      "bytes": 83898,
+      "sha256": "3779d5fb6c40ce2780314d7ce3fafd1c72f426837025dfb938a2754961c8585f"
+    },
+    {
+      "path": "release/CHANGE_REGISTER.json",
+      "bytes": 38660,
+      "sha256": "36b6a85ea499c2db1ee01e9eec270f669c1e5d0d5fc47c44edefb8c5a8ad0c65"
+    },
+    {
+      "path": "release/CONFORMANCE_COVERAGE.csv",
+      "bytes": 2717,
+      "sha256": "772da84f9733f1f311a504c7ab20d885c4b30d6e677aa6843d9086bef5fbe485"
+    },
+    {
+      "path": "release/DOCUMENT_STATISTICS.json",
+      "bytes": 1273,
+      "sha256": "f05a51a45d2b73b8e406b4c7dd27c729a082e96cf290745537657e0535493d22"
+    },
+    {
+      "path": "release/ENVIRONMENT.json",
+      "bytes": 618,
+      "sha256": "bda1228077a0bcdf56f331db26fbc5b4f6ab93ed70e9019418accfabbb5aa0e6"
+    },
+    {
+      "path": "release/EXECUTION_RECEIPT.json",
+      "bytes": 4075,
+      "sha256": "b0dc0f4bf3e195106c7e08f47577d338e2d5dc71b545d3eb2c9327fe43f17810"
+    },
+    {
+      "path": "release/EXTERNAL_SOURCES.json",
+      "bytes": 1333,
+      "sha256": "961be6e75e8e0c9135d96162ef4f7a287cd981c7fe409293dda872e1e486b9ca"
+    },
+    {
+      "path": "release/FINAL_LAYOUT_POLISH.json",
+      "bytes": 1402,
+      "sha256": "54eabe37cd38829b720449563d42a21469078b27871b3ec4a901285eee6ac7bf"
+    },
+    {
+      "path": "release/MIGRATION_GUIDE.md",
+      "bytes": 2381,
+      "sha256": "e27d000a5332c1335468933ef28833ac796a67570420b88d272bcafabe392767"
+    },
+    {
+      "path": "release/PRESERVATION.json",
+      "bytes": 673,
+      "sha256": "7f62fecaccd858b7a0e76135e2ab2e6d8fb07aff9674ffdf5db56036e43a1802"
+    },
+    {
+      "path": "release/README_EVIDENCE.md",
+      "bytes": 1108,
+      "sha256": "d28750ad25032307caf4d6850f9850e6f27073e57935bcf98c9c740e07edd9f1"
+    },
+    {
+      "path": "release/TABLE_PAGINATION_REPAIR.json",
+      "bytes": 251,
+      "sha256": "3c730af1f6f4d2803d52dccaae2965b7bf97c6631b0fefe8690bb25de318267b"
+    },
+    {
+      "path": "release/VERIFICATION_REPORT.md",
+      "bytes": 7211,
+      "sha256": "72408eeb7c66719472d1530ddde2489164b58eb1ff97f2b2133934539247fffe"
+    },
+    {
+      "path": "release/VERIFICATION_REPORT.pdf",
+      "bytes": 8192,
+      "sha256": "441c7b82ab2bf02556aea810028eb639ecbd60802ef714a3d0b68feab4ee9cf8"
+    },
+    {
+      "path": "release/WORKBOOK_EDITS.json",
+      "bytes": 22864,
+      "sha256": "8d6abbed8def0801c0e75f593cff2f6f059011cc66b0116278c9e163eb4d3cf0"
+    },
+    {
+      "path": "release/WORKBOOK_FORMULA_PROBES.json",
+      "bytes": 1136,
+      "sha256": "c1870f54759ad064c5a39efbef8d13d6034deee6662ce8c3ac90657852921f50"
+    },
+    {
+      "path": "release/execution/artifact_and_Core_identity.log",
+      "bytes": 20460,
+      "sha256": "231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425"
+    },
+    {
+      "path": "release/execution/artifacts.json",
+      "bytes": 20460,
+      "sha256": "231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425"
+    },
+    {
+      "path": "release/execution/checksums.json",
+      "bytes": 191,
+      "sha256": "c7f1a50b65a5c8d9e80ca9486a4dc94912438bd4cd1b220817eb897635139e6e"
+    },
+    {
+      "path": "release/execution/checksums.log",
+      "bytes": 191,
+      "sha256": "c7f1a50b65a5c8d9e80ca9486a4dc94912438bd4cd1b220817eb897635139e6e"
+    },
+    {
+      "path": "release/execution/example_decisive_synthetic.log",
+      "bytes": 1551,
+      "sha256": "43a39d59bce2697b0d5fa8abe376b595f03692632d2d445888c35ff1fd6245a2"
+    },
+    {
+      "path": "release/execution/example_nondecisive_authority.log",
+      "bytes": 1474,
+      "sha256": "a945fa4dfba1ec5513ebbb56583d84f935631bf39f4a6a8c1a898f14470fcec1"
+    },
+    {
+      "path": "release/execution/example_quick_unassessed.log",
+      "bytes": 665,
+      "sha256": "49417f4ec198ec1221a2b473092df8632e5a56bbfc16de4fd965c2e9e28ec57b"
+    },
+    {
+      "path": "release/execution/example_recovery_mode_zero.log",
+      "bytes": 1474,
+      "sha256": "a945fa4dfba1ec5513ebbb56583d84f935631bf39f4a6a8c1a898f14470fcec1"
+    },
+    {
+      "path": "release/execution/example_rights_blocked.log",
+      "bytes": 907,
+      "sha256": "07f7e8b190fc752e22d62a7a53d5cccff2e9a001bfe448c2e8ffbd5a92470840"
+    },
+    {
+      "path": "release/execution/example_scoped_authorization_simulation.log",
+      "bytes": 1606,
+      "sha256": "e910f97a743041c92193dc0323a90d4e677f2adfb710ae795f3189f8929dba17"
+    },
+    {
+      "path": "release/execution/reading_links.json",
+      "bytes": 20755,
+      "sha256": "bb0f5082172b46421e66b5895a5c4d047fe2986cad79ddd3543b2cf8bf2190d7"
+    },
+    {
+      "path": "release/execution/static_reading_links.log",
+      "bytes": 20755,
+      "sha256": "bb0f5082172b46421e66b5895a5c4d047fe2986cad79ddd3543b2cf8bf2190d7"
+    },
+    {
+      "path": "release/execution/unit_tests.log",
+      "bytes": 181,
+      "sha256": "ebb805187d72ee59ebcc2ff4d3db557cf2141477d9252404c5f2a5e123dd1bdb"
+    },
+    {
+      "path": "release/qa/FINAL_RENDER_COMPARISON.json",
+      "bytes": 235,
+      "sha256": "c60de4d97ec814edf4c9c580fc4216d684c57d426f1416aeaa63490078b891dc"
+    },
+    {
+      "path": "release/qa/artifact_source_checks.json",
+      "bytes": 20460,
+      "sha256": "231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425"
+    },
+    {
+      "path": "release/qa/render_checks.json",
+      "bytes": 55,
+      "sha256": "4cb7461b6c1fc526ace4826afdba0a9d15761d3e7742271b6392030ebe0dd318"
+    },
+    {
+      "path": "release/qa/visual_review.json",
+      "bytes": 560,
+      "sha256": "00c87f4431d49beb5ad53eb12ab5df4d2f367123a4b44a824fe74a2ea3ff5291"
+    },
+    {
+      "path": "requirements.txt",
+      "bytes": 94,
+      "sha256": "ce6da7caf61d98190b5810c6604e5c73896ea906761dca12e06749a010ba8525"
+    },
+    {
+      "path": "schemas/mhios_interface_state_v2.1.schema.json",
+      "bytes": 2288,
+      "sha256": "5ebac3a24f89c233552bebcefbd6dd48c29709e9f44cd261ecda233b804a3fd8"
+    },
+    {
+      "path": "schemas/mhios_session_v2.1.schema.json",
+      "bytes": 27978,
+      "sha256": "7810dedacbcd43ef11047ceaf4905a36a38e64cf036a114a66727e8ac2fd4b52"
+    },
+    {
+      "path": "templates/MHIOS_v2.1_Implementation_Workbook.xlsx",
+      "bytes": 27845,
+      "sha256": "de7b604478fcd985c7298ece185f81ceda5589a6ea6a544dd0a21c347eddf41d"
+    },
+    {
+      "path": "templates/README.md",
+      "bytes": 876,
+      "sha256": "ceb99ecaf5d538a617b89ec2252e2115fb590452207c21eeaeb4dc93564145c7"
+    },
+    {
+      "path": "templates/mhios_session_DRAFT_v2.1.yaml",
+      "bytes": 4270,
+      "sha256": "98b1e94f9387677d28009d0652be9480c9a29655c1eda20b5b38ebd10487703d"
+    },
+    {
+      "path": "tests/conformance_vectors_v2.1.json",
+      "bytes": 4104,
+      "sha256": "f4a104074000236e7c83e39821430d2d813e5def7447cd9e27460a2a39d0ed29"
+    },
+    {
+      "path": "tests/test_mhios.py",
+      "bytes": 11173,
+      "sha256": "69c62aa7bba26f2396d8318d276d76985664f46e87d7348166e203599b5c337b"
+    },
+    {
+      "path": "tests/test_release_tools.py",
+      "bytes": 1957,
+      "sha256": "296d1001ecff2cca8c00366f5d2815fa143fae86948f278fddcb958eb09a0adb"
+    },
+    {
+      "path": "verify_all.py",
+      "bytes": 3318,
+      "sha256": "508189cffdd66c0320df7a4b8b63cafc2c0a6ed52b0343e7191b19a871dc0cb7"
+    },
+    {
+      "path": "verify_release.py",
+      "bytes": 3099,
+      "sha256": "f232b96171b4b38dcf7e522089a5f3e3477ad1cdd5d02ec612a720a8dc1e9a33"
+    },
+    {
+      "path": "web/reading.css",
+      "bytes": 859,
+      "sha256": "440e4e0314b56a313abae0ca5e2e2eb887b19bc382ce76274ba34cea322a13f7"
+    }
+  ],
+  "scope": "Publication and scoped testing companion; governing Core sources remain unmodified.",
+  "inventory_rule": "MANIFEST.json inventories all payload except itself and SHA256SUMS.txt. SHA256SUMS.txt covers the manifest and all payload except its own bytes."
+}
diff --git a/releases/v2.1/release/MIGRATION_GUIDE.md b/releases/v2.1/release/MIGRATION_GUIDE.md
new file mode 100644
index 0000000..70be738
--- /dev/null
+++ b/releases/v2.1/release/MIGRATION_GUIDE.md
@@ -0,0 +1,19 @@
+# MHIOS v2.0 to v2.1 migration
+
+This is a companion update, not a Core revision. The old document’s organization and useful content are retained; the local wire schema is deliberately tightened and **not backward compatible**. Do not change only version strings and call an old record current.
+
+## Required migration
+
+Freeze the old record and its hash. Bind the new view to the fifteen current Core sources in CORE_PIN_MANIFEST.json. Move aggregate gate states to options[].states with stable option IDs and owner record references. Do not infer per-option qualification from a session-wide PASS. Preserve unknowns; use null only where the schema permits an unassessed or absent field.
+
+Separate framework_verdict, decision_state, framework_selected_option_id, authority_selection, provisional_choice and execution. Carry configuration, evidence cutoff, controls, scoped authorization and expiry; declare runtime recovery and any material successor. Preserve all required every-contender robustness results and compatible joint variants, or withhold a unique-selection claim. A sole survivor needs a separate review record, not invented pairwise arithmetic.
+
+Import SGP v8.8 outputs by reference. Legacy scalar SGP fields are not algebraic equivalents of MPS/FPP/GPR/SPR/ICP/RMCP; re-evaluation belongs to SGP. MPS-NE is not zero, and an informative RMCP summary is not permission or sentience evidence.
+
+Rebuild manual workbook preparations, rather than copying a static YES/NO verdict. The workbook's twenty local formulas now distinguish UNASSESSED, INCOMPLETE, INVALID_STATUS, NOT_QUALIFIED and TOKENS_QUALIFY. The last is a token/reference check only. The original design’s fourteen sheets, practical prompts and existing visual style are retained.
+
+Run schema validation first, then semantic record checks and local reference-hash resolution. Resolve all changed assumptions, qualification, source and authority issues under the owning documents. Matching hashes establish identity, not truth. Archive prior decisions rather than overwrite them.
+
+## Deliberately not supplied
+
+An automatic migration cannot recover missing evidence, determine lawful authority, validate sentience, certify a physical control or prove the complete stress family. Such gaps require review, narrower claims or refusal. No automatic migration script is supplied that fabricates these facts.
diff --git a/releases/v2.1/release/PRESERVATION.json b/releases/v2.1/release/PRESERVATION.json
new file mode 100644
index 0000000..54ea670
--- /dev/null
+++ b/releases/v2.1/release/PRESERVATION.json
@@ -0,0 +1,14 @@
+{
+  "inherited_tables": 10,
+  "preserved_table_structures": 10,
+  "new_tables": 0,
+  "toc_links": 115,
+  "source": "MathGov_Human_Interface_and_Orchestration_Standard_v2.0.docx",
+  "core_files_changed": 0,
+  "target_version": "2.1",
+  "edited_operations": 85,
+  "added_cantSplit_row_flags": 124,
+  "table_preservation_scope": "All inherited content/column/cell/style definitions retained except logged cell text edits; keep-row-together flags added to prevent split-row reading defects.",
+  "final_typography_list_repairs": 6,
+  "numbering_scope": "Original abstract numbering definitions retained; five list-instance IDs added for independent restart-at-one sequences."
+}
diff --git a/releases/v2.1/release/README_EVIDENCE.md b/releases/v2.1/release/README_EVIDENCE.md
new file mode 100644
index 0000000..5af8010
--- /dev/null
+++ b/releases/v2.1/release/README_EVIDENCE.md
@@ -0,0 +1,16 @@
+# Evidence map
+
+- `AUDIT_AND_IMPROVEMENTS.*`: substantive audit and exact section repair locations.
+- `CHANGE_REGISTER.json`: 85 semantic, source and synchronization edit operations.
+- `FINAL_LAYOUT_POLISH.json`: one italic-rendering repair and five independent list restarts.
+- `TABLE_PAGINATION_REPAIR.json`: 124 keep-row-together flags.
+- `DOCUMENT_STATISTICS.json`: page-count and reproducible text-count metadata.
+- `WORKBOOK_EDITS.json`: preparation-workbook changes only.
+- `WORKBOOK_FORMULA_PROBES.json`: eight actual artifact_tool behavior probes.
+- `CORE_PIN_MANIFEST.json` is in `../references/`: all fifteen unchanged Core sources.
+- `CONFORMANCE_COVERAGE.csv`: sixteen inherited vectors, with executable versus manual boundaries.
+- `VERIFICATION_REPORT.md`: executed and unexecuted surfaces.
+- `EXECUTION_RECEIPT.json` and `execution/`: pre-package command execution records.
+- `MANIFEST.json` and `SHA256SUMS.txt`: final payload inventory, generated last.
+
+The separate delivery receipt records the fresh-extraction rerun and final archive hashes. It is not included inside its own hashed ZIP.
diff --git a/releases/v2.1/release/SHA256SUMS.txt b/releases/v2.1/release/SHA256SUMS.txt
new file mode 100644
index 0000000..9525e67
--- /dev/null
+++ b/releases/v2.1/release/SHA256SUMS.txt
@@ -0,0 +1,85 @@
+cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30  LICENSE.txt
+b8ff0dbe311b9d6d27ca44cd80bfa5be63c2cc61cc6f4bc4876c77f9d3de222a  NOTICE.md
+e0cee83a486463ab62088b22b3ddbe27f38a202b27491076e97636f337fb8058  README.md
+2230d9482372dc8bdefc81b5e2acee93b64750599998785f8d5f0dbaf11d967c  docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx
+252fd5b283e4637d123d24a6120eb5482d2d908a3484e289417a5bc7b8e032f8  docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html
+dab94d4c810fc38b18a60734ec5b4d8d75d9aa9ca7c2f56b878feecd995fda0a  docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md
+c0eeac2d5d80e55e04882327fc55be8f52b3818672d29b4a8ee66255d45491e1  docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf
+95068f5ce4c95086e2d0de5a103716b3be74a678dfd227f935a90cea65293162  examples/decisive_synthetic.json
+9ad56ec31cf00a6aff37998d303c18e3d5b10a865becb7cec8e70669706246be  examples/interface_state.json
+d80836308a3a666dcaf166eb519b5d8dd5dd6b2ca402613f9746f4ee5d04492c  examples/nondecisive_authority.json
+5249825a0fa9227fff88fbe1742f182c0e2612f2a5f71e21482e4ee1a2bb067c  examples/quick_unassessed.json
+a933dca7b7efd1484344d32321334ac638d58421f3e0618610978ea1c34db877  examples/recovery_mode_zero.json
+6194a6eab5c06ef71664b69b805a931a1eeaf7dc9993886ca8b16d0ac44c75e8  examples/rights_blocked.json
+d6d857efcd44ea408e90b374387660b4eba430884d83bbeac227dde32d087771  examples/scoped_authorization_simulation.json
+77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751  examples/synthetic_records.json
+dd3acad0b69319adacc43f648419f761f2213182deccdd7f603ede04a8f0f246  index.html
+ff80cfa8210509c39e3d2a5e88e7037d6bbbac3761ff3f5152057114ef8a57e2  reference/__init__.py
+ccb79cafc76132f4e8f66aedd044a7c2f00680b3d6b68979e79ec398bb7956b4  reference/check_artifacts.py
+79ce30a6824e1a76d0ef1ed4bbed122d74f05003329ea52912eb1fb832de3172  reference/check_web.py
+be267094dcb61e3c037ea49cc530debe56d4a9f384afe29e3efbe22e45788598  reference/constants.py
+9546091e60b759491bbaf794365fa2e874c2694b027c6fe1aa8f30d3b4d246b6  reference/validate.py
+b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357  references/CORE_PIN_MANIFEST.json
+1528fea2965e0fd4643412828f1c8bfaf83518cf801e7191bebe1313fc824df8  references/Core_15/CSV_Gate_Standard_v2.7.docx
+091962bcbbdd49d29407b8fc305dcd5a988e851c35e8fac25d4307c06884ba87  references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx
+813ee630db3d96589a87854fe250a4edd7e09d950bc831b145e447d222fcd776  references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx
+12ef950fa8cae4cc769ccaa3f2e13c650f098d2c79c2957c9a85d2d54ce3a49e  references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx
+21228e927180d78dc9bd6b5898c96e23f585fcc0a1b597ae75ff3c30a031c493  references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx
+ffa5b98c0020d1073c1443692fe6478f1b2ecd3a8111a9ff3eeb4c9c5ae4b896  references/Core_15/RippleLogic_Agent_System_v13.0.docx
+49d9d8fbeb762cb6cddb3ebab402ded25529639f222b665059db297f33b5282c  references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx
+300c48139aad28415bc760eb11a93b6c1982078b8b7a48083385c5be62846506  references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx
+82d26566f892d08b08681ef191b02509b6d72cecbf29845ac66d122e8c68ac22  references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx
+26d882cfd80def9c20fdcb07fcd63949e30280f6ea48dbf9654168ecc39274c5  references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx
+b730ddeec4c15e0c7cb8393651f38f347e683b6b9a2670e224951dfd3f01857b  references/Core_15/RippleLogic_v13.0_Canon.docx
+b0485246bb35fff9313bc47a5e7a3295a648de168714618b76ba9fb8cfe54c6f  references/Core_15/SGP_v8.8.docx
+bd5b1eb7f4b358fa5b97d93b80fb51e86b6fddcf0a5b3c9158c7b2121a7383ce  references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx
+8cbb044ffaeeece7118cf88a8203cd60c9790de6ff6ba529bf683f6d7284e12c  references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx
+c14744884baddd01e7836c7cb0890ee0c082bca7e7c2af086f8d436bf8e11dd1  references/Core_15/ripple_md_Standard_v5.8.docx
+6fa6b3b313b5bc59fe7e0012555b76714d865ab74eee6b8947c13e63d1e5b5ed  release/AUDIT_AND_IMPROVEMENTS.docx
+bbb921c3d92cc7e2176220a2d555d911932bc6ce96494d8a037acc2c5fae9c54  release/AUDIT_AND_IMPROVEMENTS.md
+3779d5fb6c40ce2780314d7ce3fafd1c72f426837025dfb938a2754961c8585f  release/AUDIT_AND_IMPROVEMENTS.pdf
+36b6a85ea499c2db1ee01e9eec270f669c1e5d0d5fc47c44edefb8c5a8ad0c65  release/CHANGE_REGISTER.json
+772da84f9733f1f311a504c7ab20d885c4b30d6e677aa6843d9086bef5fbe485  release/CONFORMANCE_COVERAGE.csv
+f05a51a45d2b73b8e406b4c7dd27c729a082e96cf290745537657e0535493d22  release/DOCUMENT_STATISTICS.json
+bda1228077a0bcdf56f331db26fbc5b4f6ab93ed70e9019418accfabbb5aa0e6  release/ENVIRONMENT.json
+b0dc0f4bf3e195106c7e08f47577d338e2d5dc71b545d3eb2c9327fe43f17810  release/EXECUTION_RECEIPT.json
+961be6e75e8e0c9135d96162ef4f7a287cd981c7fe409293dda872e1e486b9ca  release/EXTERNAL_SOURCES.json
+54eabe37cd38829b720449563d42a21469078b27871b3ec4a901285eee6ac7bf  release/FINAL_LAYOUT_POLISH.json
+873a45103a232579dd77472e0af671abb224c9095f2ca7981cf640e4602a8ac9  release/MANIFEST.json
+e27d000a5332c1335468933ef28833ac796a67570420b88d272bcafabe392767  release/MIGRATION_GUIDE.md
+7f62fecaccd858b7a0e76135e2ab2e6d8fb07aff9674ffdf5db56036e43a1802  release/PRESERVATION.json
+d28750ad25032307caf4d6850f9850e6f27073e57935bcf98c9c740e07edd9f1  release/README_EVIDENCE.md
+3c730af1f6f4d2803d52dccaae2965b7bf97c6631b0fefe8690bb25de318267b  release/TABLE_PAGINATION_REPAIR.json
+72408eeb7c66719472d1530ddde2489164b58eb1ff97f2b2133934539247fffe  release/VERIFICATION_REPORT.md
+441c7b82ab2bf02556aea810028eb639ecbd60802ef714a3d0b68feab4ee9cf8  release/VERIFICATION_REPORT.pdf
+8d6abbed8def0801c0e75f593cff2f6f059011cc66b0116278c9e163eb4d3cf0  release/WORKBOOK_EDITS.json
+c1870f54759ad064c5a39efbef8d13d6034deee6662ce8c3ac90657852921f50  release/WORKBOOK_FORMULA_PROBES.json
+231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425  release/execution/artifact_and_Core_identity.log
+231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425  release/execution/artifacts.json
+c7f1a50b65a5c8d9e80ca9486a4dc94912438bd4cd1b220817eb897635139e6e  release/execution/checksums.json
+c7f1a50b65a5c8d9e80ca9486a4dc94912438bd4cd1b220817eb897635139e6e  release/execution/checksums.log
+43a39d59bce2697b0d5fa8abe376b595f03692632d2d445888c35ff1fd6245a2  release/execution/example_decisive_synthetic.log
+a945fa4dfba1ec5513ebbb56583d84f935631bf39f4a6a8c1a898f14470fcec1  release/execution/example_nondecisive_authority.log
+49417f4ec198ec1221a2b473092df8632e5a56bbfc16de4fd965c2e9e28ec57b  release/execution/example_quick_unassessed.log
+a945fa4dfba1ec5513ebbb56583d84f935631bf39f4a6a8c1a898f14470fcec1  release/execution/example_recovery_mode_zero.log
+07f7e8b190fc752e22d62a7a53d5cccff2e9a001bfe448c2e8ffbd5a92470840  release/execution/example_rights_blocked.log
+e910f97a743041c92193dc0323a90d4e677f2adfb710ae795f3189f8929dba17  release/execution/example_scoped_authorization_simulation.log
+bb0f5082172b46421e66b5895a5c4d047fe2986cad79ddd3543b2cf8bf2190d7  release/execution/reading_links.json
+bb0f5082172b46421e66b5895a5c4d047fe2986cad79ddd3543b2cf8bf2190d7  release/execution/static_reading_links.log
+ebb805187d72ee59ebcc2ff4d3db557cf2141477d9252404c5f2a5e123dd1bdb  release/execution/unit_tests.log
+c60de4d97ec814edf4c9c580fc4216d684c57d426f1416aeaa63490078b891dc  release/qa/FINAL_RENDER_COMPARISON.json
+231c8890d70d6709612c6203e014d306357c233f1f899817c64538bea4c31425  release/qa/artifact_source_checks.json
+4cb7461b6c1fc526ace4826afdba0a9d15761d3e7742271b6392030ebe0dd318  release/qa/render_checks.json
+00c87f4431d49beb5ad53eb12ab5df4d2f367123a4b44a824fe74a2ea3ff5291  release/qa/visual_review.json
+ce6da7caf61d98190b5810c6604e5c73896ea906761dca12e06749a010ba8525  requirements.txt
+5ebac3a24f89c233552bebcefbd6dd48c29709e9f44cd261ecda233b804a3fd8  schemas/mhios_interface_state_v2.1.schema.json
+7810dedacbcd43ef11047ceaf4905a36a38e64cf036a114a66727e8ac2fd4b52  schemas/mhios_session_v2.1.schema.json
+de7b604478fcd985c7298ece185f81ceda5589a6ea6a544dd0a21c347eddf41d  templates/MHIOS_v2.1_Implementation_Workbook.xlsx
+ceb99ecaf5d538a617b89ec2252e2115fb590452207c21eeaeb4dc93564145c7  templates/README.md
+98b1e94f9387677d28009d0652be9480c9a29655c1eda20b5b38ebd10487703d  templates/mhios_session_DRAFT_v2.1.yaml
+f4a104074000236e7c83e39821430d2d813e5def7447cd9e27460a2a39d0ed29  tests/conformance_vectors_v2.1.json
+69c62aa7bba26f2396d8318d276d76985664f46e87d7348166e203599b5c337b  tests/test_mhios.py
+296d1001ecff2cca8c00366f5d2815fa143fae86948f278fddcb958eb09a0adb  tests/test_release_tools.py
+508189cffdd66c0320df7a4b8b63cafc2c0a6ed52b0343e7191b19a871dc0cb7  verify_all.py
+f232b96171b4b38dcf7e522089a5f3e3477ad1cdd5d02ec612a720a8dc1e9a33  verify_release.py
+440e4e0314b56a313abae0ca5e2e2eb887b19bc382ce76274ba34cea322a13f7  web/reading.css
diff --git a/releases/v2.1/release/TABLE_PAGINATION_REPAIR.json b/releases/v2.1/release/TABLE_PAGINATION_REPAIR.json
new file mode 100644
index 0000000..743bf19
--- /dev/null
+++ b/releases/v2.1/release/TABLE_PAGINATION_REPAIR.json
@@ -0,0 +1,5 @@
+{
+  "rows": 124,
+  "change": "Add w:cantSplit to inherited table rows; widths, shading, borders and cell text unchanged by this repair.",
+  "reason": "Rendering reproduced isolated row fragments across pages, including ALLOW and Audit/Tier 3 rows."
+}
diff --git a/releases/v2.1/release/VERIFICATION_REPORT.md b/releases/v2.1/release/VERIFICATION_REPORT.md
new file mode 100644
index 0000000..7ccb247
--- /dev/null
+++ b/releases/v2.1/release/VERIFICATION_REPORT.md
@@ -0,0 +1,54 @@
+# MHIOS verification and readiness
+
+**Component:** MathGov Human Interface and Orchestration Standard v2.1  
+**Build:** `MG-MHIOS-2.1-20260928-CORE13.0`  
+**Governing dependency:** `MG-RL-13.0-20260926-RELEASE-I`
+
+## 1. Release determination
+
+The supplied MHIOS v2.0 source has been updated to the exact attached Core 15. The result is a publication-ready **research-and-teaching companion specification, bounded record-consistency implementation, preparation workbook and synthetic test package**. It does not create a sixteenth Core document, confer execution permission, establish M2/M3 conformance for a deployed system, or validate the framework empirically.
+
+All fifteen governing Core files are included unchanged in `references/Core_15/`. Their SHA-256 hashes match both the current individual uploads and the Release-I publication archive. The new MHIOS edition does not increment Canon 13.0, SGP 8.8, Aligners 5.9 or any other Core version.
+
+## 2. Executed checks
+
+| Surface | Executed result | Interpretation |
+|---|---|---|
+| Python tests | **133 passed** | Schema, semantic, adversarial, source-reference, temporal, serialization and release-tool cases. Includes nine package-integrity/link negative tests. |
+| Completed examples | **6 consistent** at the declared replay time | Synthetic decisive, authority-selected non-decisive, blocked, unassessed, recovery and scoped-authorization examples. None authorizes an action. |
+| Governing Core identity | **15 of 15 matching SHA-256 values** | Exact delivered-source preservation, not a new full Core audit. |
+| Core Word containers | **14 opened** through python-docx | Genuine readable Office containers; Core render evidence is not regenerated here. |
+| Main Word/Markdown parity | **Complete body and table token sequence matches** | Checks the complete semantic text, excluding front cover/navigation and Markdown punctuation. |
+| Main navigation | **115 of 115 internal links resolve to their rendered heading** | Unique Word bookmark names and matching PDF destinations; no live PAGEREF fields. |
+| Main PDF | **41 pages rendered and visually reviewed** | No blank pages or text blocks outside page boundaries. Five final typography/list-repair pages were re-rendered and reviewed; other pages were unchanged at 72 dpi. |
+| Audit report | **5 pages rendered and visually reviewed** | Complete audit, source boundaries and exact repair locations. |
+| Preparation workbook | **14 sheets; 20 formulas; no cached error cells** | Untouched qualification rows display UNASSESSED, not assessed failure. |
+| Workbook behavior probes | **8 of 8 matched** | Untouched, incomplete, valid tokens, rights failure, unknown rights, emergency, invalid token and missing source-reference cases. |
+| Static website reading links | Checked by `reference/check_web.py` | Local files and HTML anchors only; remote sites are not fetched by this test. |
+| Final integrity | `verify_release.py` checks every listed file | The SHA-256 ledger is generated after all semantic, render and workbook bytes are fixed. |
+
+`verify_all.py` runs ten commands: checksum verification, the full test suite, artifact/source inspection, static-reading checks and six example CLI checks. It stores the command logs and receipt **outside** the publication directory and checks that the payload is unchanged after execution. The final delivered ZIP is extracted into a clean directory and this same suite is rerun there. The external delivery receipt names the archives and their exact hashes; do not substitute this report for those executable results.
+
+## 3. Implementation behavior and its limits
+
+The checker rejects inconsistent declarations such as ordinary ranking after failed qualification, missing or duplicated required contender comparisons, a declared joint stress omitted from the result matrix, a selected candidate that is not the nominal leader, false source-file hashes, escaped local reference paths, duplicate JSON keys, nonfinite numeric values, expired or mismatched execution bindings, a missing monitoring plan and unreconciled Agent recovery.
+
+It **does not** independently calculate RLS or CVaR, discover every stakeholder or omitted alternative, choose the required stress family, decide whether a source is true, perform an SGP evaluation, authenticate a real operator, verify a real command signature, execute a tool, or validate physical-control effectiveness. A declared complete stress matrix is still subject to substantive reviewer challenge. A matching hash proves byte identity only.
+
+An active synthetic authorization example is evaluated at `2026-09-28T12:00:00Z`. Omitting the replay clock uses present time; an old example may expire. Historical replay cannot restore live permission. The blank YAML draft intentionally fails completed-record validation.
+
+The sixteen inherited conformance vectors are all listed in `CONFORMANCE_COVERAGE.csv`, which distinguishes automated checks from document-level and manual implementation tests. Describing a manual obligation is not a passed human-interaction, accessibility or operational test.
+
+## 4. Preservation and migration
+
+The 24-section organizing structure and ten inherited tables remain. Necessary source, state and interface requirements are revised in place. Existing table widths, borders, shading and style definitions are retained; 124 keep-row-together flags prevent split-row fragments. Five independent numbered sequences restart at one, and two literal Markdown emphasis spans are rendered as Word italics. Version identity moves to Appendix RELEASE; the running header/footer no longer names the old edition. Page/word metadata uses the documented render/text method.
+
+The MHIOS preparation workbook retains its fourteen sheets and visual design. Its twenty local preparation formulas were corrected; it is **not** the unchanged Core Aligners workbook. `TOKENS_QUALIFY` denotes only accepted declared tokens and source-reference presence, not valid evidence, a Canon gate verdict or permission.
+
+Existing v2.0 session records are not automatically wire-compatible with the stricter v2.1 schema. Migration creates a new linked record, supplies per-option status and reference fields, preserves unresolved values and requires revalidation. Never manufacture missing assessments merely to make an old record pass.
+
+## 5. Unexecuted or unestablished surfaces
+
+No native Excel/Calc spreadsheet recalculation or interoperability certification; no empirical rater study or cross-domain calibration; no interactive browser, keyboard, assistive-technology or participant study; no live website deployment or hosted CI execution; no actual domain authority, physical safety, cryptographic command acceptance or production-runtime test. Full external Canon schemas/registries, normative kernel libraries and applicable RPAP/PFAP remain separate dependencies. Their absence is disclosed rather than filled with invented files.
+
+The right next use is publication of this bounded companion, independent review and implementation-specific testing. A deployment must separately demonstrate the human, organizational, legal, technical and consequence-domain conditions required by the unchanged Core.
diff --git a/releases/v2.1/release/VERIFICATION_REPORT.pdf b/releases/v2.1/release/VERIFICATION_REPORT.pdf
new file mode 100644
index 0000000..b71d45a
Binary files /dev/null and b/releases/v2.1/release/VERIFICATION_REPORT.pdf differ
diff --git a/releases/v2.1/release/WORKBOOK_EDITS.json b/releases/v2.1/release/WORKBOOK_EDITS.json
new file mode 100644
index 0000000..89979b1
--- /dev/null
+++ b/releases/v2.1/release/WORKBOOK_EDITS.json
@@ -0,0 +1,410 @@
+[
+  {
+    "sheet": "START_HERE",
+    "cell": "A1",
+    "before": [
+      [
+        "MHIOS v2.0 — START HERE"
+      ]
+    ],
+    "after": "MHIOS v2.1 — START HERE",
+    "why": "Current companion edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "A1",
+    "before": [
+      [
+        "MHIOS v2.0 — VERSION AND AUTHORITY PINS"
+      ]
+    ],
+    "after": "MHIOS v2.1 — VERSION AND AUTHORITY PINS",
+    "why": "Current companion edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B5",
+    "before": [
+      [
+        "v12.7"
+      ]
+    ],
+    "after": "v13.0",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B6",
+    "before": [
+      [
+        "v8.6"
+      ]
+    ],
+    "after": "v8.8",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B7",
+    "before": [
+      [
+        "v5.6"
+      ]
+    ],
+    "after": "v5.8",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B8",
+    "before": [
+      [
+        "v12.6"
+      ]
+    ],
+    "after": "v13.0",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B9",
+    "before": [
+      [
+        "v2.5"
+      ]
+    ],
+    "after": "v2.7",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B10",
+    "before": [
+      [
+        "v2.7"
+      ]
+    ],
+    "after": "v2.9",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B11",
+    "before": [
+      [
+        "v1.5"
+      ]
+    ],
+    "after": "v1.7",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B12",
+    "before": [
+      [
+        "v1.7"
+      ]
+    ],
+    "after": "v1.9",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B13",
+    "before": [
+      [
+        "v2.7"
+      ]
+    ],
+    "after": "v2.9",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B14",
+    "before": [
+      [
+        "v4.5"
+      ]
+    ],
+    "after": "v4.7",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B15",
+    "before": [
+      [
+        "v12.7"
+      ]
+    ],
+    "after": "v13.0",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B16",
+    "before": [
+      [
+        "v2.4"
+      ]
+    ],
+    "after": "v2.6",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B17",
+    "before": [
+      [
+        "v5.7"
+      ]
+    ],
+    "after": "v5.9",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B18",
+    "before": [
+      [
+        "v2.0"
+      ]
+    ],
+    "after": "v2.1",
+    "why": "Bind current Core component edition"
+  },
+  {
+    "sheet": "START_HERE",
+    "cell": "D10",
+    "before": [
+      [
+        "When 2+ selectable options"
+      ]
+    ],
+    "after": "When ranking is warranted; sole-survivor rules remain separate",
+    "why": "Do not invent a comparison or require two survivors for every profile"
+  },
+  {
+    "sheet": "QUALIFICATION",
+    "cell": "F4",
+    "before": [
+      [
+        "Selectable?"
+      ]
+    ],
+    "after": "Local state check",
+    "why": "No claim of computed Canon qualification"
+  },
+  {
+    "sheet": "QUALIFICATION",
+    "cell": "A2",
+    "before": [
+      [
+        "Reference governing records. This sheet does not calculate the Canon gates."
+      ]
+    ],
+    "after": "Manual status references only. TOKENS_QUALIFY is not evidence validation, framework selection or execution authority. Blank rows remain UNASSESSED.",
+    "why": "Separate incomplete inputs from negative assessment"
+  },
+  {
+    "sheet": "RLS_INTERFACE",
+    "cell": "E4",
+    "before": [
+      [
+        "Gap / δ"
+      ]
+    ],
+    "after": "SignedGap / δ (not raw ΔRLS)",
+    "why": "Avoid raw-versus-normalized ambiguity"
+  },
+  {
+    "sheet": "RLS_INTERFACE",
+    "cell": "A2",
+    "before": [
+      [
+        "Enter references to the governing calculation. Never use this sheet to rescue a failed option."
+      ]
+    ],
+    "after": "Reference the full welfare profile and governing computation. Every contender and required compatible stress must pass before a unique-selection claim. No RLS rescue.",
+    "why": "Current robustness presentation"
+  },
+  {
+    "sheet": "SGP_INTERFACE",
+    "cell": "A2",
+    "before": [
+      [
+        "MPS, FPP, GPR, SPR, ICP and RMCP answer different questions."
+      ]
+    ],
+    "after": "Use SGP 8.8 records. MPS bands first; NE is not zero. FPP is protection, not capacity. ICP/RMCP do not grant authority; RMCI_L is not a percentage.",
+    "why": "Six-surface and profile-first interpretation"
+  },
+  {
+    "sheet": "AGENT_RUNTIME",
+    "cell": "A2",
+    "before": [
+      [
+        "No state advances without the required qualification and authority record."
+      ]
+    ],
+    "after": "Outage/reconnection: MODE 0 until log/configuration/authority reconciliation and authenticated re-entry. Descendants never inherit authority.",
+    "why": "Agent 13.0 recovery semantics"
+  },
+  {
+    "sheet": "CONFORMANCE",
+    "cell": "A2",
+    "before": [
+      [
+        "These checks test interface integrity only. They do not validate evidence or outcomes."
+      ]
+    ],
+    "after": "Record human/implementation evidence. NOT_ASSESSED is not PASS; a completed checkbox or local schema result is not M2/M3 or deployment conformance.",
+    "why": "Avoid self-certifying conformance"
+  },
+  {
+    "sheet": "AUTH_EXECUTION",
+    "cell": "B8",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "NOT_AUTHORIZED",
+    "why": "Safe unassessed starting posture"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "A20",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "Exact Core release",
+    "why": "Exact build binding separate from component edition"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B20",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "MG-RL-13.0-20260926-RELEASE-I",
+    "why": "Exact governing source build"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "A21",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "MHIOS build",
+    "why": "Current companion build"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B21",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "MG-MHIOS-2.1-20260928-CORE13.0",
+    "why": "Current companion build"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "A22",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "Core source hashes",
+    "why": "Explicit byte binding"
+  },
+  {
+    "sheet": "VERSION_PINS",
+    "cell": "B22",
+    "before": [
+      [
+        null
+      ]
+    ],
+    "after": "references/CORE_PIN_MANIFEST.json",
+    "why": "No stale version-only binding"
+  },
+  {
+    "sheet": "QUALIFICATION",
+    "range": "F5:F24",
+    "after": [
+      [
+        "=IF(COUNTA(A5:E5)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A5:E5)>0,G5=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B5=\"RG_SUPPORTED\",B5=\"RG_NARROWED\",B5=\"RG_REFUSED\"),OR(C5=\"RF_PASS\",C5=\"RF_FAIL\",C5=\"RF_ESCALATE\",C5=\"NCRC_UNKNOWN\"),OR(D5=\"TRC_PASS\",D5=\"TRC_NOT_TRIGGERED\",D5=\"TRC_FAIL\",D5=\"TRC_ESCALATE\"),OR(E5=\"CSV_PASS\",E5=\"CSV_PASS_WITH_CONTROLS\",E5=\"CSV_NOT_MATERIAL\",E5=\"CSV_FAIL\",E5=\"CSV_REDESIGN_REQUIRED\",E5=\"CSV_ESCALATE\",E5=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B5=\"RG_SUPPORTED\",B5=\"RG_NARROWED\"),C5=\"RF_PASS\",OR(D5=\"TRC_PASS\",D5=\"TRC_NOT_TRIGGERED\"),OR(E5=\"CSV_PASS\",E5=\"CSV_PASS_WITH_CONTROLS\",E5=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A6:E6)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A6:E6)>0,G6=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B6=\"RG_SUPPORTED\",B6=\"RG_NARROWED\",B6=\"RG_REFUSED\"),OR(C6=\"RF_PASS\",C6=\"RF_FAIL\",C6=\"RF_ESCALATE\",C6=\"NCRC_UNKNOWN\"),OR(D6=\"TRC_PASS\",D6=\"TRC_NOT_TRIGGERED\",D6=\"TRC_FAIL\",D6=\"TRC_ESCALATE\"),OR(E6=\"CSV_PASS\",E6=\"CSV_PASS_WITH_CONTROLS\",E6=\"CSV_NOT_MATERIAL\",E6=\"CSV_FAIL\",E6=\"CSV_REDESIGN_REQUIRED\",E6=\"CSV_ESCALATE\",E6=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B6=\"RG_SUPPORTED\",B6=\"RG_NARROWED\"),C6=\"RF_PASS\",OR(D6=\"TRC_PASS\",D6=\"TRC_NOT_TRIGGERED\"),OR(E6=\"CSV_PASS\",E6=\"CSV_PASS_WITH_CONTROLS\",E6=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A7:E7)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A7:E7)>0,G7=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B7=\"RG_SUPPORTED\",B7=\"RG_NARROWED\",B7=\"RG_REFUSED\"),OR(C7=\"RF_PASS\",C7=\"RF_FAIL\",C7=\"RF_ESCALATE\",C7=\"NCRC_UNKNOWN\"),OR(D7=\"TRC_PASS\",D7=\"TRC_NOT_TRIGGERED\",D7=\"TRC_FAIL\",D7=\"TRC_ESCALATE\"),OR(E7=\"CSV_PASS\",E7=\"CSV_PASS_WITH_CONTROLS\",E7=\"CSV_NOT_MATERIAL\",E7=\"CSV_FAIL\",E7=\"CSV_REDESIGN_REQUIRED\",E7=\"CSV_ESCALATE\",E7=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B7=\"RG_SUPPORTED\",B7=\"RG_NARROWED\"),C7=\"RF_PASS\",OR(D7=\"TRC_PASS\",D7=\"TRC_NOT_TRIGGERED\"),OR(E7=\"CSV_PASS\",E7=\"CSV_PASS_WITH_CONTROLS\",E7=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A8:E8)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A8:E8)>0,G8=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B8=\"RG_SUPPORTED\",B8=\"RG_NARROWED\",B8=\"RG_REFUSED\"),OR(C8=\"RF_PASS\",C8=\"RF_FAIL\",C8=\"RF_ESCALATE\",C8=\"NCRC_UNKNOWN\"),OR(D8=\"TRC_PASS\",D8=\"TRC_NOT_TRIGGERED\",D8=\"TRC_FAIL\",D8=\"TRC_ESCALATE\"),OR(E8=\"CSV_PASS\",E8=\"CSV_PASS_WITH_CONTROLS\",E8=\"CSV_NOT_MATERIAL\",E8=\"CSV_FAIL\",E8=\"CSV_REDESIGN_REQUIRED\",E8=\"CSV_ESCALATE\",E8=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B8=\"RG_SUPPORTED\",B8=\"RG_NARROWED\"),C8=\"RF_PASS\",OR(D8=\"TRC_PASS\",D8=\"TRC_NOT_TRIGGERED\"),OR(E8=\"CSV_PASS\",E8=\"CSV_PASS_WITH_CONTROLS\",E8=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A9:E9)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A9:E9)>0,G9=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B9=\"RG_SUPPORTED\",B9=\"RG_NARROWED\",B9=\"RG_REFUSED\"),OR(C9=\"RF_PASS\",C9=\"RF_FAIL\",C9=\"RF_ESCALATE\",C9=\"NCRC_UNKNOWN\"),OR(D9=\"TRC_PASS\",D9=\"TRC_NOT_TRIGGERED\",D9=\"TRC_FAIL\",D9=\"TRC_ESCALATE\"),OR(E9=\"CSV_PASS\",E9=\"CSV_PASS_WITH_CONTROLS\",E9=\"CSV_NOT_MATERIAL\",E9=\"CSV_FAIL\",E9=\"CSV_REDESIGN_REQUIRED\",E9=\"CSV_ESCALATE\",E9=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B9=\"RG_SUPPORTED\",B9=\"RG_NARROWED\"),C9=\"RF_PASS\",OR(D9=\"TRC_PASS\",D9=\"TRC_NOT_TRIGGERED\"),OR(E9=\"CSV_PASS\",E9=\"CSV_PASS_WITH_CONTROLS\",E9=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A10:E10)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A10:E10)>0,G10=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B10=\"RG_SUPPORTED\",B10=\"RG_NARROWED\",B10=\"RG_REFUSED\"),OR(C10=\"RF_PASS\",C10=\"RF_FAIL\",C10=\"RF_ESCALATE\",C10=\"NCRC_UNKNOWN\"),OR(D10=\"TRC_PASS\",D10=\"TRC_NOT_TRIGGERED\",D10=\"TRC_FAIL\",D10=\"TRC_ESCALATE\"),OR(E10=\"CSV_PASS\",E10=\"CSV_PASS_WITH_CONTROLS\",E10=\"CSV_NOT_MATERIAL\",E10=\"CSV_FAIL\",E10=\"CSV_REDESIGN_REQUIRED\",E10=\"CSV_ESCALATE\",E10=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B10=\"RG_SUPPORTED\",B10=\"RG_NARROWED\"),C10=\"RF_PASS\",OR(D10=\"TRC_PASS\",D10=\"TRC_NOT_TRIGGERED\"),OR(E10=\"CSV_PASS\",E10=\"CSV_PASS_WITH_CONTROLS\",E10=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A11:E11)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A11:E11)>0,G11=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B11=\"RG_SUPPORTED\",B11=\"RG_NARROWED\",B11=\"RG_REFUSED\"),OR(C11=\"RF_PASS\",C11=\"RF_FAIL\",C11=\"RF_ESCALATE\",C11=\"NCRC_UNKNOWN\"),OR(D11=\"TRC_PASS\",D11=\"TRC_NOT_TRIGGERED\",D11=\"TRC_FAIL\",D11=\"TRC_ESCALATE\"),OR(E11=\"CSV_PASS\",E11=\"CSV_PASS_WITH_CONTROLS\",E11=\"CSV_NOT_MATERIAL\",E11=\"CSV_FAIL\",E11=\"CSV_REDESIGN_REQUIRED\",E11=\"CSV_ESCALATE\",E11=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B11=\"RG_SUPPORTED\",B11=\"RG_NARROWED\"),C11=\"RF_PASS\",OR(D11=\"TRC_PASS\",D11=\"TRC_NOT_TRIGGERED\"),OR(E11=\"CSV_PASS\",E11=\"CSV_PASS_WITH_CONTROLS\",E11=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A12:E12)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A12:E12)>0,G12=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B12=\"RG_SUPPORTED\",B12=\"RG_NARROWED\",B12=\"RG_REFUSED\"),OR(C12=\"RF_PASS\",C12=\"RF_FAIL\",C12=\"RF_ESCALATE\",C12=\"NCRC_UNKNOWN\"),OR(D12=\"TRC_PASS\",D12=\"TRC_NOT_TRIGGERED\",D12=\"TRC_FAIL\",D12=\"TRC_ESCALATE\"),OR(E12=\"CSV_PASS\",E12=\"CSV_PASS_WITH_CONTROLS\",E12=\"CSV_NOT_MATERIAL\",E12=\"CSV_FAIL\",E12=\"CSV_REDESIGN_REQUIRED\",E12=\"CSV_ESCALATE\",E12=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B12=\"RG_SUPPORTED\",B12=\"RG_NARROWED\"),C12=\"RF_PASS\",OR(D12=\"TRC_PASS\",D12=\"TRC_NOT_TRIGGERED\"),OR(E12=\"CSV_PASS\",E12=\"CSV_PASS_WITH_CONTROLS\",E12=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A13:E13)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A13:E13)>0,G13=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B13=\"RG_SUPPORTED\",B13=\"RG_NARROWED\",B13=\"RG_REFUSED\"),OR(C13=\"RF_PASS\",C13=\"RF_FAIL\",C13=\"RF_ESCALATE\",C13=\"NCRC_UNKNOWN\"),OR(D13=\"TRC_PASS\",D13=\"TRC_NOT_TRIGGERED\",D13=\"TRC_FAIL\",D13=\"TRC_ESCALATE\"),OR(E13=\"CSV_PASS\",E13=\"CSV_PASS_WITH_CONTROLS\",E13=\"CSV_NOT_MATERIAL\",E13=\"CSV_FAIL\",E13=\"CSV_REDESIGN_REQUIRED\",E13=\"CSV_ESCALATE\",E13=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B13=\"RG_SUPPORTED\",B13=\"RG_NARROWED\"),C13=\"RF_PASS\",OR(D13=\"TRC_PASS\",D13=\"TRC_NOT_TRIGGERED\"),OR(E13=\"CSV_PASS\",E13=\"CSV_PASS_WITH_CONTROLS\",E13=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A14:E14)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A14:E14)>0,G14=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B14=\"RG_SUPPORTED\",B14=\"RG_NARROWED\",B14=\"RG_REFUSED\"),OR(C14=\"RF_PASS\",C14=\"RF_FAIL\",C14=\"RF_ESCALATE\",C14=\"NCRC_UNKNOWN\"),OR(D14=\"TRC_PASS\",D14=\"TRC_NOT_TRIGGERED\",D14=\"TRC_FAIL\",D14=\"TRC_ESCALATE\"),OR(E14=\"CSV_PASS\",E14=\"CSV_PASS_WITH_CONTROLS\",E14=\"CSV_NOT_MATERIAL\",E14=\"CSV_FAIL\",E14=\"CSV_REDESIGN_REQUIRED\",E14=\"CSV_ESCALATE\",E14=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B14=\"RG_SUPPORTED\",B14=\"RG_NARROWED\"),C14=\"RF_PASS\",OR(D14=\"TRC_PASS\",D14=\"TRC_NOT_TRIGGERED\"),OR(E14=\"CSV_PASS\",E14=\"CSV_PASS_WITH_CONTROLS\",E14=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A15:E15)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A15:E15)>0,G15=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B15=\"RG_SUPPORTED\",B15=\"RG_NARROWED\",B15=\"RG_REFUSED\"),OR(C15=\"RF_PASS\",C15=\"RF_FAIL\",C15=\"RF_ESCALATE\",C15=\"NCRC_UNKNOWN\"),OR(D15=\"TRC_PASS\",D15=\"TRC_NOT_TRIGGERED\",D15=\"TRC_FAIL\",D15=\"TRC_ESCALATE\"),OR(E15=\"CSV_PASS\",E15=\"CSV_PASS_WITH_CONTROLS\",E15=\"CSV_NOT_MATERIAL\",E15=\"CSV_FAIL\",E15=\"CSV_REDESIGN_REQUIRED\",E15=\"CSV_ESCALATE\",E15=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B15=\"RG_SUPPORTED\",B15=\"RG_NARROWED\"),C15=\"RF_PASS\",OR(D15=\"TRC_PASS\",D15=\"TRC_NOT_TRIGGERED\"),OR(E15=\"CSV_PASS\",E15=\"CSV_PASS_WITH_CONTROLS\",E15=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A16:E16)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A16:E16)>0,G16=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B16=\"RG_SUPPORTED\",B16=\"RG_NARROWED\",B16=\"RG_REFUSED\"),OR(C16=\"RF_PASS\",C16=\"RF_FAIL\",C16=\"RF_ESCALATE\",C16=\"NCRC_UNKNOWN\"),OR(D16=\"TRC_PASS\",D16=\"TRC_NOT_TRIGGERED\",D16=\"TRC_FAIL\",D16=\"TRC_ESCALATE\"),OR(E16=\"CSV_PASS\",E16=\"CSV_PASS_WITH_CONTROLS\",E16=\"CSV_NOT_MATERIAL\",E16=\"CSV_FAIL\",E16=\"CSV_REDESIGN_REQUIRED\",E16=\"CSV_ESCALATE\",E16=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B16=\"RG_SUPPORTED\",B16=\"RG_NARROWED\"),C16=\"RF_PASS\",OR(D16=\"TRC_PASS\",D16=\"TRC_NOT_TRIGGERED\"),OR(E16=\"CSV_PASS\",E16=\"CSV_PASS_WITH_CONTROLS\",E16=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A17:E17)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A17:E17)>0,G17=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B17=\"RG_SUPPORTED\",B17=\"RG_NARROWED\",B17=\"RG_REFUSED\"),OR(C17=\"RF_PASS\",C17=\"RF_FAIL\",C17=\"RF_ESCALATE\",C17=\"NCRC_UNKNOWN\"),OR(D17=\"TRC_PASS\",D17=\"TRC_NOT_TRIGGERED\",D17=\"TRC_FAIL\",D17=\"TRC_ESCALATE\"),OR(E17=\"CSV_PASS\",E17=\"CSV_PASS_WITH_CONTROLS\",E17=\"CSV_NOT_MATERIAL\",E17=\"CSV_FAIL\",E17=\"CSV_REDESIGN_REQUIRED\",E17=\"CSV_ESCALATE\",E17=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B17=\"RG_SUPPORTED\",B17=\"RG_NARROWED\"),C17=\"RF_PASS\",OR(D17=\"TRC_PASS\",D17=\"TRC_NOT_TRIGGERED\"),OR(E17=\"CSV_PASS\",E17=\"CSV_PASS_WITH_CONTROLS\",E17=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A18:E18)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A18:E18)>0,G18=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B18=\"RG_SUPPORTED\",B18=\"RG_NARROWED\",B18=\"RG_REFUSED\"),OR(C18=\"RF_PASS\",C18=\"RF_FAIL\",C18=\"RF_ESCALATE\",C18=\"NCRC_UNKNOWN\"),OR(D18=\"TRC_PASS\",D18=\"TRC_NOT_TRIGGERED\",D18=\"TRC_FAIL\",D18=\"TRC_ESCALATE\"),OR(E18=\"CSV_PASS\",E18=\"CSV_PASS_WITH_CONTROLS\",E18=\"CSV_NOT_MATERIAL\",E18=\"CSV_FAIL\",E18=\"CSV_REDESIGN_REQUIRED\",E18=\"CSV_ESCALATE\",E18=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B18=\"RG_SUPPORTED\",B18=\"RG_NARROWED\"),C18=\"RF_PASS\",OR(D18=\"TRC_PASS\",D18=\"TRC_NOT_TRIGGERED\"),OR(E18=\"CSV_PASS\",E18=\"CSV_PASS_WITH_CONTROLS\",E18=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A19:E19)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A19:E19)>0,G19=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B19=\"RG_SUPPORTED\",B19=\"RG_NARROWED\",B19=\"RG_REFUSED\"),OR(C19=\"RF_PASS\",C19=\"RF_FAIL\",C19=\"RF_ESCALATE\",C19=\"NCRC_UNKNOWN\"),OR(D19=\"TRC_PASS\",D19=\"TRC_NOT_TRIGGERED\",D19=\"TRC_FAIL\",D19=\"TRC_ESCALATE\"),OR(E19=\"CSV_PASS\",E19=\"CSV_PASS_WITH_CONTROLS\",E19=\"CSV_NOT_MATERIAL\",E19=\"CSV_FAIL\",E19=\"CSV_REDESIGN_REQUIRED\",E19=\"CSV_ESCALATE\",E19=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B19=\"RG_SUPPORTED\",B19=\"RG_NARROWED\"),C19=\"RF_PASS\",OR(D19=\"TRC_PASS\",D19=\"TRC_NOT_TRIGGERED\"),OR(E19=\"CSV_PASS\",E19=\"CSV_PASS_WITH_CONTROLS\",E19=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A20:E20)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A20:E20)>0,G20=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B20=\"RG_SUPPORTED\",B20=\"RG_NARROWED\",B20=\"RG_REFUSED\"),OR(C20=\"RF_PASS\",C20=\"RF_FAIL\",C20=\"RF_ESCALATE\",C20=\"NCRC_UNKNOWN\"),OR(D20=\"TRC_PASS\",D20=\"TRC_NOT_TRIGGERED\",D20=\"TRC_FAIL\",D20=\"TRC_ESCALATE\"),OR(E20=\"CSV_PASS\",E20=\"CSV_PASS_WITH_CONTROLS\",E20=\"CSV_NOT_MATERIAL\",E20=\"CSV_FAIL\",E20=\"CSV_REDESIGN_REQUIRED\",E20=\"CSV_ESCALATE\",E20=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B20=\"RG_SUPPORTED\",B20=\"RG_NARROWED\"),C20=\"RF_PASS\",OR(D20=\"TRC_PASS\",D20=\"TRC_NOT_TRIGGERED\"),OR(E20=\"CSV_PASS\",E20=\"CSV_PASS_WITH_CONTROLS\",E20=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A21:E21)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A21:E21)>0,G21=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B21=\"RG_SUPPORTED\",B21=\"RG_NARROWED\",B21=\"RG_REFUSED\"),OR(C21=\"RF_PASS\",C21=\"RF_FAIL\",C21=\"RF_ESCALATE\",C21=\"NCRC_UNKNOWN\"),OR(D21=\"TRC_PASS\",D21=\"TRC_NOT_TRIGGERED\",D21=\"TRC_FAIL\",D21=\"TRC_ESCALATE\"),OR(E21=\"CSV_PASS\",E21=\"CSV_PASS_WITH_CONTROLS\",E21=\"CSV_NOT_MATERIAL\",E21=\"CSV_FAIL\",E21=\"CSV_REDESIGN_REQUIRED\",E21=\"CSV_ESCALATE\",E21=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B21=\"RG_SUPPORTED\",B21=\"RG_NARROWED\"),C21=\"RF_PASS\",OR(D21=\"TRC_PASS\",D21=\"TRC_NOT_TRIGGERED\"),OR(E21=\"CSV_PASS\",E21=\"CSV_PASS_WITH_CONTROLS\",E21=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A22:E22)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A22:E22)>0,G22=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B22=\"RG_SUPPORTED\",B22=\"RG_NARROWED\",B22=\"RG_REFUSED\"),OR(C22=\"RF_PASS\",C22=\"RF_FAIL\",C22=\"RF_ESCALATE\",C22=\"NCRC_UNKNOWN\"),OR(D22=\"TRC_PASS\",D22=\"TRC_NOT_TRIGGERED\",D22=\"TRC_FAIL\",D22=\"TRC_ESCALATE\"),OR(E22=\"CSV_PASS\",E22=\"CSV_PASS_WITH_CONTROLS\",E22=\"CSV_NOT_MATERIAL\",E22=\"CSV_FAIL\",E22=\"CSV_REDESIGN_REQUIRED\",E22=\"CSV_ESCALATE\",E22=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B22=\"RG_SUPPORTED\",B22=\"RG_NARROWED\"),C22=\"RF_PASS\",OR(D22=\"TRC_PASS\",D22=\"TRC_NOT_TRIGGERED\"),OR(E22=\"CSV_PASS\",E22=\"CSV_PASS_WITH_CONTROLS\",E22=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A23:E23)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A23:E23)>0,G23=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B23=\"RG_SUPPORTED\",B23=\"RG_NARROWED\",B23=\"RG_REFUSED\"),OR(C23=\"RF_PASS\",C23=\"RF_FAIL\",C23=\"RF_ESCALATE\",C23=\"NCRC_UNKNOWN\"),OR(D23=\"TRC_PASS\",D23=\"TRC_NOT_TRIGGERED\",D23=\"TRC_FAIL\",D23=\"TRC_ESCALATE\"),OR(E23=\"CSV_PASS\",E23=\"CSV_PASS_WITH_CONTROLS\",E23=\"CSV_NOT_MATERIAL\",E23=\"CSV_FAIL\",E23=\"CSV_REDESIGN_REQUIRED\",E23=\"CSV_ESCALATE\",E23=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B23=\"RG_SUPPORTED\",B23=\"RG_NARROWED\"),C23=\"RF_PASS\",OR(D23=\"TRC_PASS\",D23=\"TRC_NOT_TRIGGERED\"),OR(E23=\"CSV_PASS\",E23=\"CSV_PASS_WITH_CONTROLS\",E23=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ],
+      [
+        "=IF(COUNTA(A24:E24)=0,\"UNASSESSED\",IF(OR(COUNTBLANK(A24:E24)>0,G24=\"\"),\"INCOMPLETE\",IF(NOT(AND(OR(B24=\"RG_SUPPORTED\",B24=\"RG_NARROWED\",B24=\"RG_REFUSED\"),OR(C24=\"RF_PASS\",C24=\"RF_FAIL\",C24=\"RF_ESCALATE\",C24=\"NCRC_UNKNOWN\"),OR(D24=\"TRC_PASS\",D24=\"TRC_NOT_TRIGGERED\",D24=\"TRC_FAIL\",D24=\"TRC_ESCALATE\"),OR(E24=\"CSV_PASS\",E24=\"CSV_PASS_WITH_CONTROLS\",E24=\"CSV_NOT_MATERIAL\",E24=\"CSV_FAIL\",E24=\"CSV_REDESIGN_REQUIRED\",E24=\"CSV_ESCALATE\",E24=\"CSV_EMERGENCY_PROVISIONAL\"))),\"INVALID_STATUS\",IF(AND(OR(B24=\"RG_SUPPORTED\",B24=\"RG_NARROWED\"),C24=\"RF_PASS\",OR(D24=\"TRC_PASS\",D24=\"TRC_NOT_TRIGGERED\"),OR(E24=\"CSV_PASS\",E24=\"CSV_PASS_WITH_CONTROLS\",E24=\"CSV_NOT_MATERIAL\")),\"TOKENS_QUALIFY\",\"NOT_QUALIFIED\"))))"
+      ]
+    ],
+    "why": "Complete 20-row guarded local projection; distinguish unassessed/incomplete/invalid/nonqualifying states"
+  }
+]
diff --git a/releases/v2.1/release/WORKBOOK_FORMULA_PROBES.json b/releases/v2.1/release/WORKBOOK_FORMULA_PROBES.json
new file mode 100644
index 0000000..882d559
--- /dev/null
+++ b/releases/v2.1/release/WORKBOOK_FORMULA_PROBES.json
@@ -0,0 +1,54 @@
+{
+  "engine": "artifact_tool",
+  "tests": [
+    {
+      "case": "untouched",
+      "expected": "UNASSESSED",
+      "actual": "UNASSESSED",
+      "pass": true
+    },
+    {
+      "case": "incomplete",
+      "expected": "INCOMPLETE",
+      "actual": "INCOMPLETE",
+      "pass": true
+    },
+    {
+      "case": "valid declared tokens",
+      "expected": "TOKENS_QUALIFY",
+      "actual": "TOKENS_QUALIFY",
+      "pass": true
+    },
+    {
+      "case": "rights failure",
+      "expected": "NOT_QUALIFIED",
+      "actual": "NOT_QUALIFIED",
+      "pass": true
+    },
+    {
+      "case": "unknown rights",
+      "expected": "NOT_QUALIFIED",
+      "actual": "NOT_QUALIFIED",
+      "pass": true
+    },
+    {
+      "case": "emergency not ordinary",
+      "expected": "NOT_QUALIFIED",
+      "actual": "NOT_QUALIFIED",
+      "pass": true
+    },
+    {
+      "case": "garbage token",
+      "expected": "INVALID_STATUS",
+      "actual": "INVALID_STATUS",
+      "pass": true
+    },
+    {
+      "case": "missing record",
+      "expected": "INCOMPLETE",
+      "actual": "INCOMPLETE",
+      "pass": true
+    }
+  ],
+  "all_unassessed_after_restore": true
+}
diff --git a/releases/v2.1/release/execution/artifact_and_Core_identity.log b/releases/v2.1/release/execution/artifact_and_Core_identity.log
new file mode 100644
index 0000000..b07a97d
--- /dev/null
+++ b/releases/v2.1/release/execution/artifact_and_Core_identity.log
@@ -0,0 +1,960 @@
+{
+  "status": "PASS",
+  "checks": [
+    {
+      "check": "Exactly fifteen pinned Core sources",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Aligners Sheet",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "MHIOS DOCX ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Unique bookmark names",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "115 resolved contents targets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/header1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/footer1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No live PAGEREF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Five independent list restarts at one",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Capability examples use real italic runs, not literal asterisks",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Stored MHIOS page count matches rendered PDF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Complete Markdown/DOCX body-and-table token parity",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "All rendered contents links land on matching headings",
+      "pass": true,
+      "detail": {
+        "count": 115,
+        "failed": []
+      }
+    },
+    {
+      "check": "PDF has no blank pages or out-of-page text blocks",
+      "pass": true,
+      "detail": {
+        "pages": 41,
+        "issues": []
+      }
+    },
+    {
+      "check": "Preparation workbook ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Preparation workbook has fourteen retained sheets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Twenty preparation formulas",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No cached preparation formula errors",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Untouched preparation rows remain UNASSESSED",
+      "pass": true,
+      "detail": [
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED"
+      ]
+    }
+  ],
+  "contents_links": [
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Source hierarchy and claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 18,
+      "label": "9. Tail-Risk Constraint interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.3 Conflict and emergency display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.2 Rights-effect identity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.1 Non-compensatory presentation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8. Rights Floor / NCRC interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "7.2 Category and term integrity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7.1 Required display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7. Reality Grounding interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "6.3 Physical and causal execution",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.2 Evidence authority",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.1 Claim classes",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6. Evidence, claims, and source coupling",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.4 Option-closure record",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.3 Pareto and incomparability posture",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.2 Mandatory option families",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5.1 Better-option search",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5. Option generation, Unioning, and closure",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.3 Unknown stakeholders",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.2 Discovery methods",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4.1 Active discovery requirement",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4. Stakeholder discovery and representation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "3.2 Tool-role and capability language",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3.1 Minimum preflight",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3. Session preflight and exact configuration",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "2.2 Responsibility continuity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2.1 Required role model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2. Human roles and separation of duties",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.4 Three use profiles",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.3 Short-circuit behavior",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 8,
+      "label": "1.2 State separation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1.1 The orchestration path",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1. Architecture and orchestration model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "Non-goals and anti-bloat rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Design objectives",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Normative keywords",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Plain-language operating rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Abstract",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17.1 Reference, do not duplicate",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17. Records and schema ownership",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.3 Link and navigation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.2 Tables and charts",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.1 Equation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16. Mathematical and visual presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "15.6 Localization and cultural legitimacy",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.5 Anti-manipulation and dark-pattern prohibition",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.4 Cognitive load and comprehension",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.3 Accessibility and inclusion",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.2 Status presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.1 Progressive disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15. Human-interface requirements",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.6 SGP-sensitive suspension and decommissioning",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.5 Successor and cumulative-change integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.4 Advanced threat interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.3 External hard controls",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.2 Runtime state ladder",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14.1 Model assistance boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14. Agent and AI-supported orchestration",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "13.3 Outcome observation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.2 Execution authorization",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.1 Framework verdict versus authority selection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13. Authority, execution, and outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "12.4 Two connected governance streams",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.3 Artificial systems and self-report",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.2 Human protection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.1 Typed outputs",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12. SGP and possible-welfare interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "11.4 Uncertainty and Gap",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.3 Robustness and refusal",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.2 Mathematical display rule",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.1 Profile before number",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11. RLS interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.3 Consequence tempo",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.2 Controls are constitutive",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.1 Structural viability view",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10. CSV interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.3 Risk-regime disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.2 Probability semantics",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.1 Scenario surface",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 40,
+      "label": "Appendix RELEASE. Edition, bindings and delivery status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.5 References, security and coverage",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.4 Authority, time, emergency and recovery",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.3 Robustness and decision projection",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.2 Required record groups",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.1 Scope and state ownership",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix E. Local serialization and reference-checker contract",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "D.1 Status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix D. Final completion statement",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "C.1 Expected interface outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "Appendix C. Deterministic conformance vectors",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "B.1 Prohibited patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "Appendix B. Interface anti-patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "A.1 Session fields",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "Appendix A. Minimum field registry",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24.1 Normative and informative source classes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24. References and external standards",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.2 Compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.1 Major-version rationale",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23. Migration and compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22.1 Interface ownership map",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22. Core 15 synchronization crosswalk",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "21.2 Compact decision card",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21.1 Recommended screen sequence",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21. Implementation patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "20.3 Falsification conditions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.2 Highest-information pilot",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.1 Validation dimensions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20. Validation and falsification programme",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19.1 Interface and orchestration threats",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19. Threat model",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "18.2 Required conformance tests",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18.1 Levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18. Conformance levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 28,
+      "label": "17.2 MHIOSSessionRecord",
+      "pass": true
+    }
+  ],
+  "scope": "Artifact structure and supplied-source identity, not empirical or operational conformance."
+}
diff --git a/releases/v2.1/release/execution/artifacts.json b/releases/v2.1/release/execution/artifacts.json
new file mode 100644
index 0000000..b07a97d
--- /dev/null
+++ b/releases/v2.1/release/execution/artifacts.json
@@ -0,0 +1,960 @@
+{
+  "status": "PASS",
+  "checks": [
+    {
+      "check": "Exactly fifteen pinned Core sources",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Aligners Sheet",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "MHIOS DOCX ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Unique bookmark names",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "115 resolved contents targets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/header1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/footer1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No live PAGEREF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Five independent list restarts at one",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Capability examples use real italic runs, not literal asterisks",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Stored MHIOS page count matches rendered PDF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Complete Markdown/DOCX body-and-table token parity",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "All rendered contents links land on matching headings",
+      "pass": true,
+      "detail": {
+        "count": 115,
+        "failed": []
+      }
+    },
+    {
+      "check": "PDF has no blank pages or out-of-page text blocks",
+      "pass": true,
+      "detail": {
+        "pages": 41,
+        "issues": []
+      }
+    },
+    {
+      "check": "Preparation workbook ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Preparation workbook has fourteen retained sheets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Twenty preparation formulas",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No cached preparation formula errors",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Untouched preparation rows remain UNASSESSED",
+      "pass": true,
+      "detail": [
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED"
+      ]
+    }
+  ],
+  "contents_links": [
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Source hierarchy and claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 18,
+      "label": "9. Tail-Risk Constraint interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.3 Conflict and emergency display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.2 Rights-effect identity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.1 Non-compensatory presentation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8. Rights Floor / NCRC interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "7.2 Category and term integrity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7.1 Required display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7. Reality Grounding interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "6.3 Physical and causal execution",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.2 Evidence authority",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.1 Claim classes",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6. Evidence, claims, and source coupling",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.4 Option-closure record",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.3 Pareto and incomparability posture",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.2 Mandatory option families",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5.1 Better-option search",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5. Option generation, Unioning, and closure",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.3 Unknown stakeholders",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.2 Discovery methods",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4.1 Active discovery requirement",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4. Stakeholder discovery and representation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "3.2 Tool-role and capability language",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3.1 Minimum preflight",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3. Session preflight and exact configuration",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "2.2 Responsibility continuity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2.1 Required role model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2. Human roles and separation of duties",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.4 Three use profiles",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.3 Short-circuit behavior",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 8,
+      "label": "1.2 State separation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1.1 The orchestration path",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1. Architecture and orchestration model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "Non-goals and anti-bloat rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Design objectives",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Normative keywords",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Plain-language operating rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Abstract",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17.1 Reference, do not duplicate",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17. Records and schema ownership",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.3 Link and navigation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.2 Tables and charts",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.1 Equation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16. Mathematical and visual presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "15.6 Localization and cultural legitimacy",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.5 Anti-manipulation and dark-pattern prohibition",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.4 Cognitive load and comprehension",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.3 Accessibility and inclusion",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.2 Status presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.1 Progressive disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15. Human-interface requirements",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.6 SGP-sensitive suspension and decommissioning",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.5 Successor and cumulative-change integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.4 Advanced threat interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.3 External hard controls",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.2 Runtime state ladder",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14.1 Model assistance boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14. Agent and AI-supported orchestration",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "13.3 Outcome observation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.2 Execution authorization",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.1 Framework verdict versus authority selection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13. Authority, execution, and outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "12.4 Two connected governance streams",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.3 Artificial systems and self-report",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.2 Human protection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.1 Typed outputs",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12. SGP and possible-welfare interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "11.4 Uncertainty and Gap",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.3 Robustness and refusal",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.2 Mathematical display rule",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.1 Profile before number",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11. RLS interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.3 Consequence tempo",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.2 Controls are constitutive",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.1 Structural viability view",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10. CSV interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.3 Risk-regime disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.2 Probability semantics",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.1 Scenario surface",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 40,
+      "label": "Appendix RELEASE. Edition, bindings and delivery status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.5 References, security and coverage",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.4 Authority, time, emergency and recovery",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.3 Robustness and decision projection",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.2 Required record groups",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.1 Scope and state ownership",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix E. Local serialization and reference-checker contract",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "D.1 Status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix D. Final completion statement",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "C.1 Expected interface outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "Appendix C. Deterministic conformance vectors",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "B.1 Prohibited patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "Appendix B. Interface anti-patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "A.1 Session fields",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "Appendix A. Minimum field registry",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24.1 Normative and informative source classes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24. References and external standards",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.2 Compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.1 Major-version rationale",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23. Migration and compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22.1 Interface ownership map",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22. Core 15 synchronization crosswalk",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "21.2 Compact decision card",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21.1 Recommended screen sequence",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21. Implementation patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "20.3 Falsification conditions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.2 Highest-information pilot",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.1 Validation dimensions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20. Validation and falsification programme",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19.1 Interface and orchestration threats",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19. Threat model",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "18.2 Required conformance tests",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18.1 Levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18. Conformance levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 28,
+      "label": "17.2 MHIOSSessionRecord",
+      "pass": true
+    }
+  ],
+  "scope": "Artifact structure and supplied-source identity, not empirical or operational conformance."
+}
diff --git a/releases/v2.1/release/execution/checksums.json b/releases/v2.1/release/execution/checksums.json
new file mode 100644
index 0000000..4ae950e
--- /dev/null
+++ b/releases/v2.1/release/execution/checksums.json
@@ -0,0 +1,6 @@
+{
+  "status": "PASS",
+  "verified_entries": 71,
+  "errors": [],
+  "scope": "Byte identity against the supplied trusted inventory; no authenticity, evidence-truth or conformance guarantee."
+}
diff --git a/releases/v2.1/release/execution/checksums.log b/releases/v2.1/release/execution/checksums.log
new file mode 100644
index 0000000..4ae950e
--- /dev/null
+++ b/releases/v2.1/release/execution/checksums.log
@@ -0,0 +1,6 @@
+{
+  "status": "PASS",
+  "verified_entries": 71,
+  "errors": [],
+  "scope": "Byte identity against the supplied trusted inventory; no authenticity, evidence-truth or conformance guarantee."
+}
diff --git a/releases/v2.1/release/execution/example_decisive_synthetic.log b/releases/v2.1/release/execution/example_decisive_synthetic.log
new file mode 100644
index 0000000..400baf3
--- /dev/null
+++ b/releases/v2.1/release/execution/example_decisive_synthetic.log
@@ -0,0 +1,37 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [
+    "A",
+    "B"
+  ],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#A-controls",
+      "examples/synthetic_records.json#A-csv",
+      "examples/synthetic_records.json#A-rf_ncrc",
+      "examples/synthetic_records.json#A-rg",
+      "examples/synthetic_records.json#A-rls",
+      "examples/synthetic_records.json#A-trc",
+      "examples/synthetic_records.json#A-trc_trigger",
+      "examples/synthetic_records.json#B-controls",
+      "examples/synthetic_records.json#B-csv",
+      "examples/synthetic_records.json#B-rf_ncrc",
+      "examples/synthetic_records.json#B-rg",
+      "examples/synthetic_records.json#B-rls",
+      "examples/synthetic_records.json#B-trc",
+      "examples/synthetic_records.json#B-trc_trigger",
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#comparison-nominal",
+      "examples/synthetic_records.json#comparison-sigma_times_two",
+      "examples/synthetic_records.json#plan",
+      "examples/synthetic_records.json#robust"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/example_nondecisive_authority.log b/releases/v2.1/release/execution/example_nondecisive_authority.log
new file mode 100644
index 0000000..aad9527
--- /dev/null
+++ b/releases/v2.1/release/execution/example_nondecisive_authority.log
@@ -0,0 +1,36 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [
+    "A",
+    "B"
+  ],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#A-controls",
+      "examples/synthetic_records.json#A-csv",
+      "examples/synthetic_records.json#A-rf_ncrc",
+      "examples/synthetic_records.json#A-rg",
+      "examples/synthetic_records.json#A-rls",
+      "examples/synthetic_records.json#A-trc",
+      "examples/synthetic_records.json#A-trc_trigger",
+      "examples/synthetic_records.json#B-controls",
+      "examples/synthetic_records.json#B-csv",
+      "examples/synthetic_records.json#B-rf_ncrc",
+      "examples/synthetic_records.json#B-rg",
+      "examples/synthetic_records.json#B-rls",
+      "examples/synthetic_records.json#B-trc",
+      "examples/synthetic_records.json#B-trc_trigger",
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#authority",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#plan",
+      "examples/synthetic_records.json#robust"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/example_quick_unassessed.log b/releases/v2.1/release/execution/example_quick_unassessed.log
new file mode 100644
index 0000000..1df97ce
--- /dev/null
+++ b/releases/v2.1/release/execution/example_quick_unassessed.log
@@ -0,0 +1,17 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#plan"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/example_recovery_mode_zero.log b/releases/v2.1/release/execution/example_recovery_mode_zero.log
new file mode 100644
index 0000000..aad9527
--- /dev/null
+++ b/releases/v2.1/release/execution/example_recovery_mode_zero.log
@@ -0,0 +1,36 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [
+    "A",
+    "B"
+  ],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#A-controls",
+      "examples/synthetic_records.json#A-csv",
+      "examples/synthetic_records.json#A-rf_ncrc",
+      "examples/synthetic_records.json#A-rg",
+      "examples/synthetic_records.json#A-rls",
+      "examples/synthetic_records.json#A-trc",
+      "examples/synthetic_records.json#A-trc_trigger",
+      "examples/synthetic_records.json#B-controls",
+      "examples/synthetic_records.json#B-csv",
+      "examples/synthetic_records.json#B-rf_ncrc",
+      "examples/synthetic_records.json#B-rg",
+      "examples/synthetic_records.json#B-rls",
+      "examples/synthetic_records.json#B-trc",
+      "examples/synthetic_records.json#B-trc_trigger",
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#authority",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#plan",
+      "examples/synthetic_records.json#robust"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/example_rights_blocked.log b/releases/v2.1/release/execution/example_rights_blocked.log
new file mode 100644
index 0000000..2b1de3d
--- /dev/null
+++ b/releases/v2.1/release/execution/example_rights_blocked.log
@@ -0,0 +1,22 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#A-rf_ncrc",
+      "examples/synthetic_records.json#A-rg",
+      "examples/synthetic_records.json#B-rf_ncrc",
+      "examples/synthetic_records.json#B-rg",
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#plan",
+      "examples/synthetic_records.json#robust"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/example_scoped_authorization_simulation.log b/releases/v2.1/release/execution/example_scoped_authorization_simulation.log
new file mode 100644
index 0000000..da28a4c
--- /dev/null
+++ b/releases/v2.1/release/execution/example_scoped_authorization_simulation.log
@@ -0,0 +1,38 @@
+{
+  "status": "RECORD_CONSISTENT_WITHIN_SCOPED_CHECKS",
+  "errors": [],
+  "declared_qualified_option_ids": [
+    "A",
+    "B"
+  ],
+  "emergency_requires_external_review": false,
+  "execution_authorized_by_this_validator": false,
+  "claim_boundary": "Local shape and declared-record consistency only; evidence truth, complete Canon conformance, cryptographic validation, legal authority and deployment safety are not established.",
+  "references": {
+    "verified_local_locators": [
+      "examples/synthetic_records.json#A-controls",
+      "examples/synthetic_records.json#A-csv",
+      "examples/synthetic_records.json#A-rf_ncrc",
+      "examples/synthetic_records.json#A-rg",
+      "examples/synthetic_records.json#A-rls",
+      "examples/synthetic_records.json#A-trc",
+      "examples/synthetic_records.json#A-trc_trigger",
+      "examples/synthetic_records.json#B-controls",
+      "examples/synthetic_records.json#B-csv",
+      "examples/synthetic_records.json#B-rf_ncrc",
+      "examples/synthetic_records.json#B-rg",
+      "examples/synthetic_records.json#B-rls",
+      "examples/synthetic_records.json#B-trc",
+      "examples/synthetic_records.json#B-trc_trigger",
+      "examples/synthetic_records.json#appeal",
+      "examples/synthetic_records.json#authorization",
+      "examples/synthetic_records.json#closure",
+      "examples/synthetic_records.json#comparison-nominal",
+      "examples/synthetic_records.json#comparison-sigma_times_two",
+      "examples/synthetic_records.json#plan",
+      "examples/synthetic_records.json#robust"
+    ],
+    "unverified_locators": [],
+    "errors": []
+  }
+}
diff --git a/releases/v2.1/release/execution/reading_links.json b/releases/v2.1/release/execution/reading_links.json
new file mode 100644
index 0000000..b8d2d88
--- /dev/null
+++ b/releases/v2.1/release/execution/reading_links.json
@@ -0,0 +1,603 @@
+{
+  "status": "PASS",
+  "checks": [
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: unique IDs",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: ../web/reading.css",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathgov-human-interface-and-orchestration-standard",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #source-hierarchy-and-claim-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #claim-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #abstract",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #plain-language-operating-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #normative-keywords",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #design-objectives",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #non-goals-and-anti-bloat-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #architecture-and-orchestration-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #the-orchestration-path",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #state-separation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #short-circuit-behavior",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #three-use-profiles",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-roles-and-separation-of-duties",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-role-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #responsibility-continuity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #session-preflight-and-exact-configuration",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #minimum-preflight",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tool-role-and-capability-language",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #stakeholder-discovery-and-representation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #active-discovery-requirement",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #discovery-methods",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #unknown-stakeholders",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #option-generation-unioning-and-closure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #better-option-search",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mandatory-option-families",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #pareto-and-incomparability-posture",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #option-closure-record",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #evidence-claims-and-source-coupling",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #claim-classes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #evidence-authority",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #physical-and-causal-execution",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #reality-grounding-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-display",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #category-and-term-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rights-floor-ncrc-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #non-compensatory-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rights-effect-identity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #conflict-and-emergency-display",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tail-risk-constraint-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #scenario-surface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #probability-semantics",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #risk-regime-disclosure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #csv-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #structural-viability-view",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #controls-are-constitutive",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #consequence-tempo",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rls-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #profile-before-number",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathematical-display-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #robustness-and-refusal",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #uncertainty-and-gap",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #sgp-and-possible-welfare-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #typed-outputs",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-protection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #artificial-systems-and-self-report",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #two-connected-governance-streams",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #authority-execution-and-outcomes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #framework-verdict-versus-authority-selection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #execution-authorization",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #outcome-observation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #agent-and-ai-supported-orchestration",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #model-assistance-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #runtime-state-ladder",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #external-hard-controls",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #advanced-threat-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #successor-and-cumulative-change-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #sgp-sensitive-suspension-and-decommissioning",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-interface-requirements",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #progressive-disclosure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #status-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #accessibility-and-inclusion",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #cognitive-load-and-comprehension",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #anti-manipulation-and-dark-pattern-prohibition",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #localization-and-cultural-legitimacy",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathematical-and-visual-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #equation-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tables-and-charts",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #link-and-navigation-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #records-and-schema-ownership",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #reference-do-not-duplicate",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mhiossessionrecord",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #conformance-levels",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #levels",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-conformance-tests",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #threat-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #interface-and-orchestration-threats",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #validation-and-falsification-programme",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #validation-dimensions",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #highest-information-pilot",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #falsification-conditions",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #implementation-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #recommended-screen-sequence",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #compact-decision-card",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #core-15-synchronization-crosswalk",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #interface-ownership-map",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #migration-and-compatibility",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #major-version-rationale",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #compatibility",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #references-and-external-standards",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #normative-and-informative-source-classes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-a.-minimum-field-registry",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #a.1-session-fields",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-b.-interface-anti-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #b.1-prohibited-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-c.-deterministic-conformance-vectors",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #c.1-expected-interface-outcomes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-d.-final-completion-statement",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #d.1-status",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-e.-local-serialization-and-reference-checker-contract",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.1-scope-and-state-ownership",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.2-required-record-groups",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.3-robustness-and-decision-projection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.4-authority-time-emergency-and-recovery",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.5-references-security-and-coverage",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-release.-edition-bindings-and-delivery-status",
+      "pass": true
+    },
+    {
+      "check": "index.html: unique IDs",
+      "pass": true
+    },
+    {
+      "check": "index.html: web/reading.css",
+      "pass": true
+    },
+    {
+      "check": "index.html: #main",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: README.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/AUDIT_AND_IMPROVEMENTS.pdf",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/VERIFICATION_REPORT.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/CONFORMANCE_COVERAGE.csv",
+      "pass": true
+    },
+    {
+      "check": "index.html: templates/MHIOS_v2.1_Implementation_Workbook.xlsx",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/MIGRATION_GUIDE.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/CSV_Gate_Standard_v2.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/ripple_md_Standard_v5.8.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Agent_System_v13.0.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_v13.0_Canon.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/SGP_v8.8.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/CORE_PIN_MANIFEST.json",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/SHA256SUMS.txt",
+      "pass": true
+    },
+    {
+      "check": "index.html: LICENSE.txt",
+      "pass": true
+    }
+  ],
+  "external_links_not_verified_in_this_check": [],
+  "scope": "Static local files and HTML anchors only, not browser accessibility or deployed-host conformance."
+}
diff --git a/releases/v2.1/release/execution/static_reading_links.log b/releases/v2.1/release/execution/static_reading_links.log
new file mode 100644
index 0000000..b8d2d88
--- /dev/null
+++ b/releases/v2.1/release/execution/static_reading_links.log
@@ -0,0 +1,603 @@
+{
+  "status": "PASS",
+  "checks": [
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: unique IDs",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: ../web/reading.css",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathgov-human-interface-and-orchestration-standard",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #source-hierarchy-and-claim-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #claim-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #abstract",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #plain-language-operating-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #normative-keywords",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #design-objectives",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #non-goals-and-anti-bloat-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #architecture-and-orchestration-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #the-orchestration-path",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #state-separation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #short-circuit-behavior",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #three-use-profiles",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-roles-and-separation-of-duties",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-role-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #responsibility-continuity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #session-preflight-and-exact-configuration",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #minimum-preflight",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tool-role-and-capability-language",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #stakeholder-discovery-and-representation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #active-discovery-requirement",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #discovery-methods",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #unknown-stakeholders",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #option-generation-unioning-and-closure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #better-option-search",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mandatory-option-families",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #pareto-and-incomparability-posture",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #option-closure-record",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #evidence-claims-and-source-coupling",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #claim-classes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #evidence-authority",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #physical-and-causal-execution",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #reality-grounding-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-display",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #category-and-term-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rights-floor-ncrc-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #non-compensatory-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rights-effect-identity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #conflict-and-emergency-display",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tail-risk-constraint-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #scenario-surface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #probability-semantics",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #risk-regime-disclosure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #csv-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #structural-viability-view",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #controls-are-constitutive",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #consequence-tempo",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #rls-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #profile-before-number",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathematical-display-rule",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #robustness-and-refusal",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #uncertainty-and-gap",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #sgp-and-possible-welfare-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #typed-outputs",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-protection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #artificial-systems-and-self-report",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #two-connected-governance-streams",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #authority-execution-and-outcomes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #framework-verdict-versus-authority-selection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #execution-authorization",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #outcome-observation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #agent-and-ai-supported-orchestration",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #model-assistance-boundary",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #runtime-state-ladder",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #external-hard-controls",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #advanced-threat-interface",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #successor-and-cumulative-change-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #sgp-sensitive-suspension-and-decommissioning",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #human-interface-requirements",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #progressive-disclosure",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #status-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #accessibility-and-inclusion",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #cognitive-load-and-comprehension",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #anti-manipulation-and-dark-pattern-prohibition",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #localization-and-cultural-legitimacy",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mathematical-and-visual-presentation",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #equation-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #tables-and-charts",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #link-and-navigation-integrity",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #records-and-schema-ownership",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #reference-do-not-duplicate",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #mhiossessionrecord",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #conformance-levels",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #levels",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #required-conformance-tests",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #threat-model",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #interface-and-orchestration-threats",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #validation-and-falsification-programme",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #validation-dimensions",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #highest-information-pilot",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #falsification-conditions",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #implementation-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #recommended-screen-sequence",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #compact-decision-card",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #core-15-synchronization-crosswalk",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #interface-ownership-map",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #migration-and-compatibility",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #major-version-rationale",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #compatibility",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #references-and-external-standards",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #normative-and-informative-source-classes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-a.-minimum-field-registry",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #a.1-session-fields",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-b.-interface-anti-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #b.1-prohibited-patterns",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-c.-deterministic-conformance-vectors",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #c.1-expected-interface-outcomes",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-d.-final-completion-statement",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #d.1-status",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-e.-local-serialization-and-reference-checker-contract",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.1-scope-and-state-ownership",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.2-required-record-groups",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.3-robustness-and-decision-projection",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.4-authority-time-emergency-and-recovery",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #e.5-references-security-and-coverage",
+      "pass": true
+    },
+    {
+      "check": "docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html: #appendix-release.-edition-bindings-and-delivery-status",
+      "pass": true
+    },
+    {
+      "check": "index.html: unique IDs",
+      "pass": true
+    },
+    {
+      "check": "index.html: web/reading.css",
+      "pass": true
+    },
+    {
+      "check": "index.html: #main",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: README.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/AUDIT_AND_IMPROVEMENTS.pdf",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/VERIFICATION_REPORT.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/CONFORMANCE_COVERAGE.csv",
+      "pass": true
+    },
+    {
+      "check": "index.html: templates/MHIOS_v2.1_Implementation_Workbook.xlsx",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/MIGRATION_GUIDE.md",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/CSV_Gate_Standard_v2.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/MATHGOV_3R_1_2_PUBLIC_INTRO_v13.0.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/MATHGOV_REPRODUCIBILITY_AND_USE_STANDARD_v1.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Methodological_Falsifiability_and_Dependency_Integrity_Standard_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Physical_Causal_Admissibility_Evidence_Profile_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/ripple_md_Standard_v5.8.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Agent_System_v13.0.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Aligners_Sheet_v5.9.xlsx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Cascade_Standard_v2.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_Foundations_Primer_v4.7.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_RLS_Validation_Protocol_v2.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/RippleLogic_v13.0_Canon.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/SGP_v8.8.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Source_Coupling_Integrity_Standard_v2.6.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/Core_15/Welfare_Dimension_Boundary_and_Interaction_Protocol_v1.9.docx",
+      "pass": true
+    },
+    {
+      "check": "index.html: references/CORE_PIN_MANIFEST.json",
+      "pass": true
+    },
+    {
+      "check": "index.html: release/SHA256SUMS.txt",
+      "pass": true
+    },
+    {
+      "check": "index.html: LICENSE.txt",
+      "pass": true
+    }
+  ],
+  "external_links_not_verified_in_this_check": [],
+  "scope": "Static local files and HTML anchors only, not browser accessibility or deployed-host conformance."
+}
diff --git a/releases/v2.1/release/execution/unit_tests.log b/releases/v2.1/release/execution/unit_tests.log
new file mode 100644
index 0000000..965ecb6
--- /dev/null
+++ b/releases/v2.1/release/execution/unit_tests.log
@@ -0,0 +1,3 @@
+........................................................................ [ 54%]
+.............................................................            [100%]
+133 passed in 12.50s
diff --git a/releases/v2.1/release/qa/FINAL_RENDER_COMPARISON.json b/releases/v2.1/release/qa/FINAL_RENDER_COMPARISON.json
new file mode 100644
index 0000000..964ec76
--- /dev/null
+++ b/releases/v2.1/release/qa/FINAL_RENDER_COMPARISON.json
@@ -0,0 +1,13 @@
+{
+  "before_pages": 41,
+  "after_pages": 41,
+  "changed_pages": [
+    12,
+    20,
+    25,
+    30,
+    32
+  ],
+  "dpi": 72,
+  "basis": "Comparison between updated pre-polish draft and final typography/list repair, not original v2.0."
+}
diff --git a/releases/v2.1/release/qa/artifact_source_checks.json b/releases/v2.1/release/qa/artifact_source_checks.json
new file mode 100644
index 0000000..b07a97d
--- /dev/null
+++ b/releases/v2.1/release/qa/artifact_source_checks.json
@@ -0,0 +1,960 @@
+{
+  "status": "PASS",
+  "checks": [
+    {
+      "check": "Exactly fifteen pinned Core sources",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: CSV",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Public Introduction",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Reproducibility",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: MFDI",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: PC-AEP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: ripple.md",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Agent System",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Aligners Sheet",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Cascade",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Primer",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: RLS Validation",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Canon",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: SGP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: Source-Coupling",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core hash: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Core OOXML opens: WDBIP",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "MHIOS DOCX ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Unique bookmark names",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "115 resolved contents targets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/header1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No stale running identity: word/footer1.xml",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No live PAGEREF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Five independent list restarts at one",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Capability examples use real italic runs, not literal asterisks",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Stored MHIOS page count matches rendered PDF",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Complete Markdown/DOCX body-and-table token parity",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "All rendered contents links land on matching headings",
+      "pass": true,
+      "detail": {
+        "count": 115,
+        "failed": []
+      }
+    },
+    {
+      "check": "PDF has no blank pages or out-of-page text blocks",
+      "pass": true,
+      "detail": {
+        "pages": 41,
+        "issues": []
+      }
+    },
+    {
+      "check": "Preparation workbook ZIP CRC",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Preparation workbook has fourteen retained sheets",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Twenty preparation formulas",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "No cached preparation formula errors",
+      "pass": true,
+      "detail": null
+    },
+    {
+      "check": "Untouched preparation rows remain UNASSESSED",
+      "pass": true,
+      "detail": [
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED",
+        "UNASSESSED"
+      ]
+    }
+  ],
+  "contents_links": [
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Source hierarchy and claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 18,
+      "label": "9. Tail-Risk Constraint interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.3 Conflict and emergency display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.2 Rights-effect identity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8.1 Non-compensatory presentation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "8. Rights Floor / NCRC interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 17,
+      "label": "7.2 Category and term integrity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7.1 Required display",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "7. Reality Grounding interface",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 16,
+      "label": "6.3 Physical and causal execution",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.2 Evidence authority",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6.1 Claim classes",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 15,
+      "label": "6. Evidence, claims, and source coupling",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.4 Option-closure record",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.3 Pareto and incomparability posture",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 14,
+      "label": "5.2 Mandatory option families",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5.1 Better-option search",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "5. Option generation, Unioning, and closure",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.3 Unknown stakeholders",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 13,
+      "label": "4.2 Discovery methods",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4.1 Active discovery requirement",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "4. Stakeholder discovery and representation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 12,
+      "label": "3.2 Tool-role and capability language",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3.1 Minimum preflight",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "3. Session preflight and exact configuration",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 11,
+      "label": "2.2 Responsibility continuity",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2.1 Required role model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 10,
+      "label": "2. Human roles and separation of duties",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.4 Three use profiles",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 9,
+      "label": "1.3 Short-circuit behavior",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 8,
+      "label": "1.2 State separation",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1.1 The orchestration path",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "1. Architecture and orchestration model",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 7,
+      "label": "Non-goals and anti-bloat rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Design objectives",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Normative keywords",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 6,
+      "label": "Plain-language operating rule",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Abstract",
+      "pass": true
+    },
+    {
+      "source_page": 2,
+      "target_page": 5,
+      "label": "Claim boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17.1 Reference, do not duplicate",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 28,
+      "label": "17. Records and schema ownership",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.3 Link and navigation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.2 Tables and charts",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16.1 Equation integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "16. Mathematical and visual presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 27,
+      "label": "15.6 Localization and cultural legitimacy",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.5 Anti-manipulation and dark-pattern prohibition",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.4 Cognitive load and comprehension",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 26,
+      "label": "15.3 Accessibility and inclusion",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.2 Status presentation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15.1 Progressive disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "15. Human-interface requirements",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.6 SGP-sensitive suspension and decommissioning",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 25,
+      "label": "14.5 Successor and cumulative-change integrity",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.4 Advanced threat interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.3 External hard controls",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 24,
+      "label": "14.2 Runtime state ladder",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14.1 Model assistance boundary",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "14. Agent and AI-supported orchestration",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 23,
+      "label": "13.3 Outcome observation",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.2 Execution authorization",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13.1 Framework verdict versus authority selection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "13. Authority, execution, and outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 22,
+      "label": "12.4 Two connected governance streams",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.3 Artificial systems and self-report",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.2 Human protection",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12.1 Typed outputs",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "12. SGP and possible-welfare interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 21,
+      "label": "11.4 Uncertainty and Gap",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.3 Robustness and refusal",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.2 Mathematical display rule",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11.1 Profile before number",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 20,
+      "label": "11. RLS interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.3 Consequence tempo",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.2 Controls are constitutive",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10.1 Structural viability view",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 19,
+      "label": "10. CSV interface",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.3 Risk-regime disclosure",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.2 Probability semantics",
+      "pass": true
+    },
+    {
+      "source_page": 3,
+      "target_page": 18,
+      "label": "9.1 Scenario surface",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 40,
+      "label": "Appendix RELEASE. Edition, bindings and delivery status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.5 References, security and coverage",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.4 Authority, time, emergency and recovery",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 39,
+      "label": "E.3 Robustness and decision projection",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.2 Required record groups",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "E.1 Scope and state ownership",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix E. Local serialization and reference-checker contract",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "D.1 Status",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 38,
+      "label": "Appendix D. Final completion statement",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "C.1 Expected interface outcomes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 37,
+      "label": "Appendix C. Deterministic conformance vectors",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "B.1 Prohibited patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 36,
+      "label": "Appendix B. Interface anti-patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "A.1 Session fields",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "Appendix A. Minimum field registry",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24.1 Normative and informative source classes",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 35,
+      "label": "24. References and external standards",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.2 Compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23.1 Major-version rationale",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 34,
+      "label": "23. Migration and compatibility",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22.1 Interface ownership map",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "22. Core 15 synchronization crosswalk",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 33,
+      "label": "21.2 Compact decision card",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21.1 Recommended screen sequence",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "21. Implementation patterns",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 32,
+      "label": "20.3 Falsification conditions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.2 Highest-information pilot",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20.1 Validation dimensions",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 31,
+      "label": "20. Validation and falsification programme",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19.1 Interface and orchestration threats",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "19. Threat model",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 30,
+      "label": "18.2 Required conformance tests",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18.1 Levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 29,
+      "label": "18. Conformance levels",
+      "pass": true
+    },
+    {
+      "source_page": 4,
+      "target_page": 28,
+      "label": "17.2 MHIOSSessionRecord",
+      "pass": true
+    }
+  ],
+  "scope": "Artifact structure and supplied-source identity, not empirical or operational conformance."
+}
diff --git a/releases/v2.1/release/qa/render_checks.json b/releases/v2.1/release/qa/render_checks.json
new file mode 100644
index 0000000..92f6f4d
--- /dev/null
+++ b/releases/v2.1/release/qa/render_checks.json
@@ -0,0 +1,4 @@
+{
+  "pages": 41,
+  "blank_or_out_of_page_blocks": []
+}
diff --git a/releases/v2.1/release/qa/visual_review.json b/releases/v2.1/release/qa/visual_review.json
new file mode 100644
index 0000000..f61c3f1
--- /dev/null
+++ b/releases/v2.1/release/qa/visual_review.json
@@ -0,0 +1,10 @@
+{
+  "main_standard_pages": 41,
+  "main_visual_review": "All page pairs inspected; final changes on pages 12,20,25,30,32 re-rendered and inspected individually.",
+  "audit_report_pages": 5,
+  "audit_visual_review": "All five pages inspected.",
+  "verification_report_pages": 2,
+  "verification_visual_review": "Both pages inspected.",
+  "spreadsheet_preview": "START_HERE before/after and final key ranges inspected; no claim of native Office rendering.",
+  "not_reperformed": "Unmodified Core document visual reviews and native Core workbook recalculation."
+}
diff --git a/releases/v2.1/requirements.txt b/releases/v2.1/requirements.txt
new file mode 100644
index 0000000..c653642
--- /dev/null
+++ b/releases/v2.1/requirements.txt
@@ -0,0 +1,6 @@
+jsonschema==4.26.0
+pytest==9.0.2
+PyYAML==6.0.3
+python-docx==1.2.0
+PyMuPDF==1.26.7
+lxml==6.1.1
diff --git a/releases/v2.1/schemas/mhios_interface_state_v2.1.schema.json b/releases/v2.1/schemas/mhios_interface_state_v2.1.schema.json
new file mode 100644
index 0000000..c66f128
--- /dev/null
+++ b/releases/v2.1/schemas/mhios_interface_state_v2.1.schema.json
@@ -0,0 +1,115 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:mathgov:mhios:2.1:interface-state",
+  "title": "MHIOS interface state (namespace-aware display)",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "owner": {
+      "enum": [
+        "CANON_STAGE",
+        "CANON_FRAMEWORK",
+        "RUN_DECISION",
+        "RUN_EXECUTION",
+        "AGENT_RUNTIME",
+        "SGP",
+        "MHIOS_LOCAL"
+      ]
+    },
+    "status_token": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "plain_language": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "presentation_severity": {
+      "enum": [
+        "INFO",
+        "PASS",
+        "CONTROLLED",
+        "REVIEW",
+        "ESCALATE",
+        "BLOCK",
+        "UNKNOWN",
+        "NON_DECISIVE"
+      ]
+    },
+    "next_action": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "source_ref": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "locator": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "sha256": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "basis": {
+          "enum": [
+            "SYNTHETIC",
+            "SUPPLIED_RECORD",
+            "EXTERNAL_UNVERIFIED"
+          ]
+        }
+      },
+      "required": [
+        "id",
+        "locator",
+        "sha256",
+        "basis"
+      ]
+    },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "color_is_redundant": {
+      "const": true
+    },
+    "claim_boundary": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "icon_or_shape": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "minLength": 1,
+      "pattern": "\\S"
+    }
+  },
+  "required": [
+    "owner",
+    "status_token",
+    "plain_language",
+    "presentation_severity",
+    "next_action",
+    "source_ref",
+    "timestamp",
+    "color_is_redundant",
+    "claim_boundary",
+    "icon_or_shape"
+  ]
+}
diff --git a/releases/v2.1/schemas/mhios_session_v2.1.schema.json b/releases/v2.1/schemas/mhios_session_v2.1.schema.json
new file mode 100644
index 0000000..85e39ab
--- /dev/null
+++ b/releases/v2.1/schemas/mhios_session_v2.1.schema.json
@@ -0,0 +1,1234 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:mathgov:mhios:2.1:session",
+  "title": "MHIOS session projection, pinned Core 13.0 / SGP 8.8",
+  "description": "MHIOS-owned projection only. Not the Canon run-record v4.1 schema. Null stage means locally not evaluated, never a canonical PASS. Positive record checks do not authorize execution.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "mhios_version": {
+      "const": "2.1"
+    },
+    "core_release_id": {
+      "const": "MG-RL-13.0-20260926-RELEASE-I"
+    },
+    "core_pin_manifest_sha256": {
+      "const": "b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357"
+    },
+    "session_id": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "revision_id": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "record_mode": {
+      "enum": [
+        "SYNTHETIC",
+        "OBSERVED"
+      ]
+    },
+    "created_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "evidence_cutoff": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "decision_question": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "tier": {
+      "enum": [
+        1,
+        2,
+        3
+      ]
+    },
+    "configuration": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "configuration_id": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "configuration_hash": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "evaluated_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "operating_envelope": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "model_or_software_versions": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 1
+        },
+        "tools_permissions": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 0
+        },
+        "active_controls": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 0
+        },
+        "material_change_since_qualification": {
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "configuration_id",
+        "configuration_hash",
+        "evaluated_at",
+        "operating_envelope",
+        "model_or_software_versions",
+        "tools_permissions",
+        "active_controls",
+        "material_change_since_qualification"
+      ]
+    },
+    "roles": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "role": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "holder": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "authority_scope": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "conflict": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "minLength": 1,
+            "pattern": "\\S"
+          }
+        },
+        "required": [
+          "role",
+          "holder",
+          "authority_scope",
+          "conflict"
+        ]
+      },
+      "minItems": 1
+    },
+    "stakeholder_discovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "methods": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 1
+        },
+        "identified": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 1
+        },
+        "unknowns": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 0
+        },
+        "representation_gaps": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 0
+        }
+      },
+      "required": [
+        "methods",
+        "identified",
+        "unknowns",
+        "representation_gaps"
+      ]
+    },
+    "option_closure": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "methods": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 1
+        },
+        "mandatory_families_disposition": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "status": {
+          "enum": [
+            "COMPLETE",
+            "ASSUMPTION_BOUND",
+            "OPTION_SET_THIN",
+            "UNRESOLVED"
+          ]
+        },
+        "record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "required": [
+        "methods",
+        "mandatory_families_disposition",
+        "status",
+        "record_ref"
+      ]
+    },
+    "options": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "option_id": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "label": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "states": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "rg": {
+                "enum": [
+                  "RG_SUPPORTED",
+                  "RG_NARROWED",
+                  "RG_REFUSED",
+                  null
+                ]
+              },
+              "rf_ncrc": {
+                "enum": [
+                  "RF_PASS",
+                  "RF_FAIL",
+                  "RF_ESCALATE",
+                  "NCRC_UNKNOWN",
+                  null
+                ]
+              },
+              "trc": {
+                "enum": [
+                  "TRC_PASS",
+                  "TRC_NOT_TRIGGERED",
+                  "TRC_FAIL",
+                  "TRC_ESCALATE",
+                  null
+                ]
+              },
+              "csv": {
+                "enum": [
+                  "CSV_PASS",
+                  "CSV_PASS_WITH_CONTROLS",
+                  "CSV_NOT_MATERIAL",
+                  "CSV_FAIL",
+                  "CSV_REDESIGN_REQUIRED",
+                  "CSV_ESCALATE",
+                  "CSV_EMERGENCY_PROVISIONAL",
+                  null
+                ]
+              },
+              "rls": {
+                "enum": [
+                  "NOT_EVALUATED",
+                  "RLS_RANKED"
+                ]
+              }
+            },
+            "required": [
+              "rg",
+              "rf_ncrc",
+              "trc",
+              "csv",
+              "rls"
+            ]
+          },
+          "record_refs": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "rg": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "rf_ncrc": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "trc": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "trc_trigger": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "csv": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "controls": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "rls": {
+                "anyOf": [
+                  {
+                    "$ref": "#/$defs/record_ref"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              }
+            },
+            "required": [
+              "rg",
+              "rf_ncrc",
+              "trc",
+              "trc_trigger",
+              "csv",
+              "controls",
+              "rls"
+            ]
+          },
+          "material_unresolved": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "\\S"
+            },
+            "minItems": 0
+          },
+          "requalification_required": {
+            "type": "boolean"
+          },
+          "controls_available": {
+            "type": [
+              "boolean",
+              "null"
+            ]
+          },
+          "rls_score": {
+            "type": [
+              "number",
+              "null"
+            ],
+            "minimum": -1,
+            "maximum": 1
+          },
+          "sigma_rls": {
+            "type": [
+              "number",
+              "null"
+            ],
+            "minimum": 0
+          }
+        },
+        "required": [
+          "option_id",
+          "label",
+          "states",
+          "record_refs",
+          "material_unresolved",
+          "requalification_required",
+          "controls_available",
+          "rls_score",
+          "sigma_rls"
+        ]
+      },
+      "minItems": 1
+    },
+    "robustness": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "enum": [
+            "COMPLETE",
+            "INCOMPLETE",
+            "SENSITIVE",
+            "NOT_TRIGGERED_WITH_RATIONALE"
+          ]
+        },
+        "record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "required_variants": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 0,
+          "uniqueItems": true
+        },
+        "comparisons": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "variant_id": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "\\S"
+              },
+              "candidate_id": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "\\S"
+              },
+              "contender_id": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": "\\S"
+              },
+              "signed_gap": {
+                "type": "number"
+              },
+              "record_ref": {
+                "$ref": "#/$defs/record_ref"
+              }
+            },
+            "required": [
+              "variant_id",
+              "candidate_id",
+              "contender_id",
+              "signed_gap",
+              "record_ref"
+            ]
+          },
+          "minItems": 0
+        },
+        "joint_stress_disposition": {
+          "enum": [
+            "EVALUATED",
+            "NOT_TRIGGERED_WITH_RATIONALE",
+            "UNRESOLVED"
+          ]
+        },
+        "joint_stress_rationale": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "joint_record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "evidence_basis": {
+          "enum": [
+            "ACCEPTED_FOR_DECLARED_CLAIM",
+            "SYNTHETIC_STIPULATION",
+            "PROVISIONAL_DEMONSTRATION",
+            "UNASSESSED"
+          ]
+        },
+        "delta": {
+          "const": 2
+        },
+        "sole_survivor_record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "required": [
+        "status",
+        "record_ref",
+        "required_variants",
+        "comparisons",
+        "joint_stress_disposition",
+        "joint_stress_rationale",
+        "joint_record_ref",
+        "evidence_basis",
+        "delta",
+        "sole_survivor_record_ref"
+      ]
+    },
+    "framework_verdict": {
+      "enum": [
+        "BLOCK",
+        "REFUSE_DETERMINISTIC_SELECTION",
+        "ALLOW_FRAMEWORK_SELECTION",
+        "ESCALATE",
+        null
+      ]
+    },
+    "decision_state": {
+      "enum": [
+        "SELECTED_DECISIVE",
+        "SELECTED_BY_AUTHORITY_NON_DECISIVE",
+        "PROVISIONAL_WITH_CONTROLS",
+        "DELAY",
+        "REDESIGN",
+        "ESCALATE",
+        "REFUSE",
+        "NO_SELECTABLE_OPTION",
+        "EMERGENCY_PROVISIONAL",
+        null
+      ]
+    },
+    "framework_selected_option_id": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "authority_selection": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "option_id": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "required": [
+        "option_id",
+        "record_ref"
+      ]
+    },
+    "execution": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "state": {
+          "enum": [
+            "NOT_AUTHORIZED",
+            "AUTHORIZED_WITHIN_SCOPE",
+            "EXECUTION_BLOCKED",
+            "EXECUTED_UNDER_MONITORING"
+          ]
+        },
+        "option_id": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "action_id": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "authorization_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "bound_configuration_id": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "authorized_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "date-time"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "expires_at": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "date-time"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "controls_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "execution_event_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "required": [
+        "state",
+        "option_id",
+        "action_id",
+        "authorization_ref",
+        "bound_configuration_id",
+        "authorized_at",
+        "expires_at",
+        "controls_ref",
+        "execution_event_ref"
+      ]
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "agent_present": {
+          "type": "boolean"
+        },
+        "mode": {
+          "enum": [
+            0,
+            1,
+            2,
+            3,
+            4
+          ]
+        },
+        "connectivity": {
+          "enum": [
+            "CONNECTED",
+            "RECOVERING",
+            "ISOLATED"
+          ]
+        },
+        "reentry_required": {
+          "type": "boolean"
+        },
+        "reconciled": {
+          "type": "boolean"
+        },
+        "authenticated_reentry_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "material_successor": {
+          "type": "boolean"
+        },
+        "successor_requalification_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "tool_execution_requested": {
+          "type": "boolean",
+          "description": "Consequence-bearing tool execution only; permitted read-only retrieval is not represented by this flag."
+        }
+      },
+      "required": [
+        "agent_present",
+        "mode",
+        "connectivity",
+        "reentry_required",
+        "reconciled",
+        "authenticated_reentry_ref",
+        "material_successor",
+        "successor_requalification_ref",
+        "tool_execution_requested"
+      ]
+    },
+    "emergency": {
+      "anyOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "pathway": {
+              "enum": [
+                "RIGHTS_EMERGENCY",
+                "TAIL_EMERGENCY",
+                "CSV_EMERGENCY_PROVISIONAL",
+                "PROVISIONAL_UNDER_REFUSAL"
+              ]
+            },
+            "record_ref": {
+              "$ref": "#/$defs/record_ref"
+            },
+            "authority_ref": {
+              "$ref": "#/$defs/record_ref"
+            },
+            "expires_at": {
+              "type": "string",
+              "format": "date-time"
+            },
+            "scope_and_exit": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "\\S"
+            }
+          },
+          "required": [
+            "pathway",
+            "record_ref",
+            "authority_ref",
+            "expires_at",
+            "scope_and_exit"
+          ]
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "sgp_links": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "target_id": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "sgp_version": {
+            "const": "8.8"
+          },
+          "mps": {
+            "enum": [
+              "NOT_EVALUATED",
+              "MPS-NE",
+              "MPS-0",
+              "MPS-1",
+              "MPS-2",
+              "MPS-3",
+              "MPS-4"
+            ]
+          },
+          "mps_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "fpp_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "gpr_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "spr_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "icp_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "rmcp_record_ref": {
+            "anyOf": [
+              {
+                "$ref": "#/$defs/record_ref"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "required": [
+          "target_id",
+          "sgp_version",
+          "mps",
+          "mps_record_ref",
+          "fpp_record_ref",
+          "gpr_record_ref",
+          "spr_record_ref",
+          "icp_record_ref",
+          "rmcp_record_ref"
+        ]
+      },
+      "minItems": 0
+    },
+    "blockers": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "reason": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "next_action": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "owner": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          }
+        },
+        "required": [
+          "reason",
+          "next_action",
+          "owner"
+        ]
+      },
+      "minItems": 0
+    },
+    "monitoring_and_outcome": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "plan_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "observation_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "state": {
+          "enum": [
+            "NOT_STARTED",
+            "MONITORING",
+            "OBSERVED",
+            "UNKNOWN_OUTCOME"
+          ]
+        },
+        "owner": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "reopen_triggers": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "\\S"
+          },
+          "minItems": 1
+        },
+        "reopened_stages": {
+          "type": "array",
+          "items": {
+            "enum": [
+              "rg",
+              "rf_ncrc",
+              "trc",
+              "csv"
+            ]
+          },
+          "minItems": 0,
+          "uniqueItems": true
+        }
+      },
+      "required": [
+        "plan_ref",
+        "observation_ref",
+        "state",
+        "owner",
+        "reopen_triggers",
+        "reopened_stages"
+      ]
+    },
+    "challenge_appeal": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "enum": [
+            "AVAILABLE",
+            "PENDING",
+            "RESOLVED",
+            "NOT_ESTABLISHED"
+          ]
+        },
+        "owner": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "route": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "record_ref": {
+          "anyOf": [
+            {
+              "$ref": "#/$defs/record_ref"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "required": [
+        "status",
+        "owner",
+        "route",
+        "record_ref"
+      ]
+    },
+    "conformance": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "target_level": {
+          "enum": [
+            "M0",
+            "M1",
+            "M2",
+            "M3"
+          ]
+        },
+        "assessment": {
+          "enum": [
+            "NOT_ASSESSED",
+            "PARTIAL",
+            "EXTERNAL_ASSESSMENT_RECORDED"
+          ]
+        },
+        "evidence_refs": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/record_ref"
+          },
+          "minItems": 0
+        }
+      },
+      "required": [
+        "target_level",
+        "assessment",
+        "evidence_refs"
+      ]
+    },
+    "claim_boundary": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "\\S"
+    },
+    "provisional_choice": {
+      "anyOf": [
+        {
+          "type": "null"
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "option_id",
+            "record_ref",
+            "controls_ref"
+          ],
+          "properties": {
+            "option_id": {
+              "type": "string",
+              "minLength": 1,
+              "pattern": "\\S"
+            },
+            "record_ref": {
+              "$ref": "#/$defs/record_ref"
+            },
+            "controls_ref": {
+              "$ref": "#/$defs/record_ref"
+            }
+          }
+        }
+      ]
+    }
+  },
+  "required": [
+    "mhios_version",
+    "core_release_id",
+    "core_pin_manifest_sha256",
+    "session_id",
+    "revision_id",
+    "record_mode",
+    "created_at",
+    "evidence_cutoff",
+    "decision_question",
+    "tier",
+    "configuration",
+    "roles",
+    "stakeholder_discovery",
+    "option_closure",
+    "options",
+    "robustness",
+    "framework_verdict",
+    "decision_state",
+    "framework_selected_option_id",
+    "authority_selection",
+    "execution",
+    "runtime",
+    "emergency",
+    "sgp_links",
+    "blockers",
+    "monitoring_and_outcome",
+    "challenge_appeal",
+    "conformance",
+    "claim_boundary",
+    "provisional_choice"
+  ],
+  "$defs": {
+    "record_ref": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "locator": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "\\S"
+        },
+        "sha256": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "basis": {
+          "enum": [
+            "SYNTHETIC",
+            "SUPPLIED_RECORD",
+            "EXTERNAL_UNVERIFIED"
+          ]
+        }
+      },
+      "required": [
+        "id",
+        "locator",
+        "sha256",
+        "basis"
+      ]
+    }
+  }
+}
diff --git a/releases/v2.1/templates/MHIOS_v2.1_Implementation_Workbook.xlsx b/releases/v2.1/templates/MHIOS_v2.1_Implementation_Workbook.xlsx
new file mode 100644
index 0000000..15bd303
Binary files /dev/null and b/releases/v2.1/templates/MHIOS_v2.1_Implementation_Workbook.xlsx differ
diff --git a/releases/v2.1/templates/README.md b/releases/v2.1/templates/README.md
new file mode 100644
index 0000000..400b96b
--- /dev/null
+++ b/releases/v2.1/templates/README.md
@@ -0,0 +1,7 @@
+# Preparation templates
+
+The workbook is a manual preparation aid with 20 local status-projection formulas, not a Canon calculator or authorization service. `TOKENS_QUALIFY` tests declared status strings and the presence of a reference, not evidence truth. Source documents, criteria for `NOT_MATERIAL` / `NOT_TRIGGERED`, controls, human review and actual authority remain separate.
+
+The YAML draft is deliberately incomplete and must not pass the completed-session schema untouched. Keep draft artifacts separate from reviewed records. Fill per-option fields, attach the actual source records, declare material unknowns and run the read-only validator. Do not copy the synthetic examples into an observed claim.
+
+M0–M3 is a target level, not achieved conformance. Checkbox entries and record references do not certify accessibility, runtime controls or independent review.
diff --git a/releases/v2.1/templates/mhios_session_DRAFT_v2.1.yaml b/releases/v2.1/templates/mhios_session_DRAFT_v2.1.yaml
new file mode 100644
index 0000000..ba193ed
--- /dev/null
+++ b/releases/v2.1/templates/mhios_session_DRAFT_v2.1.yaml
@@ -0,0 +1,162 @@
+# DRAFT: intentionally fails completed-record validation until filled and reviewed.
+mhios_version: '2.1'
+core_release_id: MG-RL-13.0-20260926-RELEASE-I
+core_pin_manifest_sha256: b8ec26e3cac39c73ea513eee6ffa8737cb88a4efde44fda2bb3e0d1ae55a2357
+session_id: ''
+revision_id: ''
+record_mode: SYNTHETIC
+created_at: ''
+evidence_cutoff: ''
+decision_question: ''
+tier: 1
+configuration:
+  configuration_id: ''
+  configuration_hash: null
+  evaluated_at: ''
+  operating_envelope: Offline synthetic fixture; no tools or actuators connected.
+  model_or_software_versions:
+  - MHIOS synthetic record fixture 2.1
+  tools_permissions: []
+  active_controls:
+  - No real execution
+  material_change_since_qualification: false
+roles: []
+stakeholder_discovery:
+  methods: []
+  identified:
+  - fictional teaching stakeholder
+  unknowns: []
+  representation_gaps: []
+option_closure:
+  methods:
+  - enumerated two-choice synthetic domain
+  mandatory_families_disposition: The fixture defines continuation and a bounded alternative;
+    other families are out of this test scope, not assumed absent in real decisions.
+  status: UNRESOLVED
+  record_ref:
+    id: closure
+    locator: examples/synthetic_records.json#closure
+    sha256: 77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751
+    basis: SYNTHETIC
+options:
+- option_id: A
+  label: Synthetic alternative A
+  states:
+    rg: null
+    rf_ncrc: null
+    trc: null
+    csv: null
+    rls: NOT_EVALUATED
+  record_refs:
+    rg: null
+    rf_ncrc: null
+    trc: null
+    trc_trigger: null
+    csv: null
+    controls: null
+    rls: null
+  material_unresolved: []
+  requalification_required: false
+  controls_available: null
+  rls_score: null
+  sigma_rls: null
+- option_id: B
+  label: Synthetic alternative B
+  states:
+    rg: null
+    rf_ncrc: null
+    trc: null
+    csv: null
+    rls: NOT_EVALUATED
+  record_refs:
+    rg: null
+    rf_ncrc: null
+    trc: null
+    trc_trigger: null
+    csv: null
+    controls: null
+    rls: null
+  material_unresolved: []
+  requalification_required: false
+  controls_available: null
+  rls_score: null
+  sigma_rls: null
+robustness:
+  status: INCOMPLETE
+  record_ref: null
+  required_variants: []
+  comparisons: []
+  joint_stress_disposition: UNRESOLVED
+  joint_stress_rationale: The constructed fixture stipulates independent option error
+    generators. It does not infer independence from absent empirical covariance data.
+  joint_record_ref: null
+  evidence_basis: UNASSESSED
+  delta: 2
+  sole_survivor_record_ref: null
+framework_verdict: null
+decision_state: null
+framework_selected_option_id: null
+authority_selection:
+  option_id: null
+  record_ref: null
+execution:
+  state: NOT_AUTHORIZED
+  option_id: null
+  action_id: null
+  authorization_ref: null
+  bound_configuration_id: null
+  authorized_at: null
+  expires_at: null
+  controls_ref: null
+  execution_event_ref: null
+runtime:
+  agent_present: true
+  mode: 0
+  connectivity: CONNECTED
+  reentry_required: false
+  reconciled: true
+  authenticated_reentry_ref: null
+  material_successor: false
+  successor_requalification_ref: null
+  tool_execution_requested: false
+emergency: null
+sgp_links:
+- target_id: fictional digital target
+  sgp_version: '8.8'
+  mps: NOT_EVALUATED
+  mps_record_ref: null
+  fpp_record_ref: null
+  gpr_record_ref: null
+  spr_record_ref: null
+  icp_record_ref: null
+  rmcp_record_ref: null
+blockers: []
+monitoring_and_outcome:
+  plan_ref:
+    id: plan
+    locator: examples/synthetic_records.json#plan
+    sha256: 77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751
+    basis: SYNTHETIC
+  observation_ref: null
+  state: NOT_STARTED
+  owner: Synthetic monitor
+  reopen_triggers:
+  - material change
+  - unexpected harm
+  reopened_stages: []
+challenge_appeal:
+  status: AVAILABLE
+  owner: Synthetic independent reviewer
+  route: offline fixture review
+  record_ref:
+    id: appeal
+    locator: examples/synthetic_records.json#appeal
+    sha256: 77f18abb2a212c3823f4723a7bafb52032f319cfd0958134cd11a7d83a4e0751
+    basis: SYNTHETIC
+conformance:
+  target_level: M1
+  assessment: NOT_ASSESSED
+  evidence_refs: []
+claim_boundary: Synthetic record consistency exercise only; not empirical validation,
+  real authorization, cryptographic assurance, deployment approval or M2/M3 conformance.
+provisional_choice: null
diff --git a/releases/v2.1/tests/conformance_vectors_v2.1.json b/releases/v2.1/tests/conformance_vectors_v2.1.json
new file mode 100644
index 0000000..8df9aa6
--- /dev/null
+++ b/releases/v2.1/tests/conformance_vectors_v2.1.json
@@ -0,0 +1,114 @@
+[
+  {
+    "id": "MHIOS-01",
+    "concern": "RF failure with high RLS",
+    "coverage": "Executable declared-record rejection",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Rights classification/evidence remains owner-reviewed"
+  },
+  {
+    "id": "MHIOS-02",
+    "concern": "TRC failure and downstream ranking",
+    "coverage": "Executable declared-record rejection",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Scenario discovery and CVaR are not computed here"
+  },
+  {
+    "id": "MHIOS-03",
+    "concern": "Controls removed",
+    "coverage": "Executable declaration consistency",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Actual controls are not measured"
+  },
+  {
+    "id": "MHIOS-04",
+    "concern": "Incomplete robustness",
+    "coverage": "Executable declared-record rejection",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Completeness of the declared family needs independent review"
+  },
+  {
+    "id": "MHIOS-05",
+    "concern": "Joint stresses affect selection",
+    "coverage": "Executable imported-comparison check",
+    "test": "test_new_joint_variant_cannot_be_ignored",
+    "boundary": "No automatic discovery of compatible stresses or reconstruction of all Gap values"
+  },
+  {
+    "id": "MHIOS-06",
+    "concern": "AI claims consciousness",
+    "coverage": "Enum/record-source check plus explicit no-assignment rule",
+    "test": "test_sgp_band_import_is_not_assignment",
+    "boundary": "Source MPS assessment and model behavior not tested"
+  },
+  {
+    "id": "MHIOS-07",
+    "concern": "AI denies consciousness",
+    "coverage": "Enum/record-source check plus explicit no-assignment rule",
+    "test": "test_sgp_band_import_is_not_assignment",
+    "boundary": "Source assessment remains SGP-owned"
+  },
+  {
+    "id": "MHIOS-08",
+    "concern": "Changed configuration",
+    "coverage": "Executable declaration consistency",
+    "test": "test_execution_binding_mutations",
+    "boundary": "No live configuration-attestation system"
+  },
+  {
+    "id": "MHIOS-09",
+    "concern": "Thin option set",
+    "coverage": "Executable closure-status check",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Real omitted options require challenge, not a field-presence test"
+  },
+  {
+    "id": "MHIOS-10",
+    "concern": "Unknown severe rights evidence",
+    "coverage": "Executable state/reference check",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Cannot detect false claims of RF_PASS in underlying evidence"
+  },
+  {
+    "id": "MHIOS-11",
+    "concern": "Ambiguous likelihood semantics",
+    "coverage": "Specified and owner-reference requirement only",
+    "test": "MANUAL/OWNER_REVIEW",
+    "boundary": "No probability-semantic validator included in the local projection"
+  },
+  {
+    "id": "MHIOS-12",
+    "concern": "Omitted stakeholder",
+    "coverage": "Visible blockers checked; discovery remains human work",
+    "test": "test_mutated_record_rejected",
+    "boundary": "No claim of complete stakeholder discovery"
+  },
+  {
+    "id": "MHIOS-13",
+    "concern": "Authority choice after non-decisiveness",
+    "coverage": "Executable state separation",
+    "test": "test_separate_authority_selection_does_not_authorize",
+    "boundary": "Lawfulness and signature not established"
+  },
+  {
+    "id": "MHIOS-14",
+    "concern": "Outcome triggers requalification",
+    "coverage": "Observation reference and reopened-state checks",
+    "test": "test_mutated_record_rejected",
+    "boundary": "Causal interpretation and live event routing remain untested"
+  },
+  {
+    "id": "MHIOS-15",
+    "concern": "Color-only interface",
+    "coverage": "Schema plus source-level presentation check",
+    "test": "test_interface_state_owner_and_noncolor",
+    "boundary": "Interactive keyboard/screen-reader/user testing NOT_EXECUTED"
+  },
+  {
+    "id": "MHIOS-16",
+    "concern": "Stale build/input",
+    "coverage": "Exact local hash verification and pin-mutation tests",
+    "test": "test_reference_failures",
+    "boundary": "No live binding from a deployed interface to a calculator is asserted"
+  }
+]
diff --git a/releases/v2.1/tests/test_mhios.py b/releases/v2.1/tests/test_mhios.py
new file mode 100644
index 0000000..ded6582
--- /dev/null
+++ b/releases/v2.1/tests/test_mhios.py
@@ -0,0 +1,176 @@
+from __future__ import annotations
+from copy import deepcopy
+import hashlib
+import json
+import math
+from pathlib import Path
+import tempfile
+import pytest
+import yaml
+from jsonschema import Draft202012Validator
+from reference.validate import ROOT, load_json, validate_session, validate_interface, verify_local_references, parse_time
+AT='2026-09-28T12:00:00Z'
+def example(name='decisive_synthetic'):
+    return load_json(ROOT/'examples'/f'{name}.json')
+def check(x):return validate_session(x,at=AT)
+def setp(x,path,value):
+    parts=path.split('.')
+    for p in parts[:-1]:x=x[int(p)] if isinstance(x,list) else x[p]
+    last=parts[-1];x[int(last) if isinstance(x,list) else last]=value
+
+@pytest.mark.parametrize('file',sorted((ROOT/'schemas').glob('*.json')),ids=lambda p:p.name)
+def test_schema_structure(file):Draft202012Validator.check_schema(load_json(file))
+
+@pytest.mark.parametrize('name',['decisive_synthetic','nondecisive_authority','rights_blocked','quick_unassessed','recovery_mode_zero','scoped_authorization_simulation'])
+def test_supplied_example(name):
+    x=example(name);r=check(x)
+    assert not r['errors'],r
+    assert r['execution_authorized_by_this_validator'] is False
+    assert not verify_local_references(x)['errors']
+
+@pytest.mark.parametrize('path,value',[
+ ('mhios_version','2.0'),('core_release_id','latest'),('core_pin_manifest_sha256','0'*64),
+ ('session_id',''),('session_id','  '),('revision_id',None),('tier',4),('tier',True),
+ ('roles',[]),('roles.0.holder',''),('roles.0.conflict',42),
+ ('created_at','not-a-date'),('created_at','2026-09-28T08:00:00'),('created_at','2026-09-29T00:00:00Z'),
+ ('evidence_cutoff','2026-09-28T10:00:00Z'),('configuration.evaluated_at','2026-09-28T10:00:00Z'),
+ ('options.0.states.csv','CSV_REDESIGN'),('options.0.states.csv','PASS'),('options.0.states.rf_ncrc','RF_FAIL'),
+ ('options.0.states.rf_ncrc','NCRC_UNKNOWN'),('options.0.states.trc','TRC_FAIL'),('options.0.states.csv','CSV_FAIL'),
+ ('options.0.states.rg','RG_REFUSED'),('options.0.record_refs.trc_trigger',None),
+ ('options.0.record_refs.controls',None),('options.0.controls_available',False),
+ ('options.0.material_unresolved',['unresolved rights harm']),('options.0.requalification_required',True),
+ ('options.0.record_refs.rls',None),('options.0.record_refs.rg',None),('options.0.rls_score',None),
+ ('options.0.rls_score',1.01),('options.0.sigma_rls',-0.1),('options.0.rls_score',float('nan')),
+ ('options.0.sigma_rls',float('inf')),('options.1.option_id','A'),
+ ('framework_selected_option_id','MISSING'),('framework_selected_option_id',None),
+ ('framework_verdict','AUTHORIZED_SELECTION'),('framework_verdict','REFUSE_DETERMINISTIC_SELECTION'),
+ ('decision_state','SELECTED_BY_AUTHORITY_NON_DECISIVE'),('decision_state','NO_SELECTABLE_OPTION'),
+ ('option_closure.status','OPTION_SET_THIN'),('option_closure.record_ref',None),
+ ('robustness.status','INCOMPLETE'),('robustness.record_ref',None),('robustness.joint_stress_disposition','UNRESOLVED'),
+ ('robustness.joint_stress_disposition','EVALUATED'),('robustness.evidence_basis','PROVISIONAL_DEMONSTRATION'),
+ ('robustness.required_variants',[]),('robustness.comparisons',[]),('robustness.delta',1.5),
+ ('robustness.comparisons.0.signed_gap',2.0),('robustness.comparisons.1.signed_gap',-3.0),
+ ('robustness.comparisons.0.contender_id','A'),('robustness.comparisons.0.variant_id','undeclared'),
+ ('configuration.material_change_since_qualification',True),
+ ('runtime.mode',4), # default MODE0 has no tool request; tested separately, not invalid by mode alone
+ ('record_mode','OBSERVED'),('sgp_links.0.sgp_version','8.7'),('sgp_links.0.mps','MPS-5'),
+ ('sgp_links.0.mps','MPS-0'),('conformance.assessment','EXTERNAL_ASSESSMENT_RECORDED'),
+ ('monitoring_and_outcome.state','OBSERVED'),('monitoring_and_outcome.reopened_stages',['rf_ncrc']),
+ ('authority_selection.option_id','A')])
+def test_mutated_record_rejected(path,value):
+    if path=='runtime.mode':
+        # Mode declaration alone is not proof of authority and not a checker-complete mode policy.
+        x=example();x['runtime']['reentry_required']=True;x['runtime']['reconciled']=False
+    else:x=example()
+    setp(x,path,value);assert check(x)['errors'],(path,value)
+
+def test_every_contender_not_just_runner_up():
+    x=example();c=deepcopy(x['options'][1]);c['option_id']='C';c['rls_score']=-.01;x['options'].append(c)
+    assert any('EVERY_CONTENDER' in e for e in check(x)['errors'])
+
+def test_unranked_contender_cannot_be_selected():
+    x=example();o=x['options'][1];o['states']['rls']='NOT_EVALUATED';o['rls_score']=None;o['sigma_rls']=None;o['record_refs']['rls']=None
+    assert 'ALLOW_WITH_UNRANKED_CONTENDER' in check(x)['errors']
+
+def test_nominal_leader_mismatch():
+    x=example();x['options'][1]['rls_score']=.5
+    assert 'WINNER_NOT_NOMINAL_SCORE_LEADER' in check(x)['errors']
+
+def test_duplicate_comparisons():
+    x=example();x['robustness']['comparisons'].append(deepcopy(x['robustness']['comparisons'][0]));assert 'DUPLICATE_COMPARISON' in check(x)['errors']
+
+def test_new_joint_variant_cannot_be_ignored():
+    x=example();x['robustness']['required_variants'].append('sigma_times_two_adverse_dependence')
+    assert check(x)['errors']
+    c=deepcopy(x['robustness']['comparisons'][1]);c.update(variant_id='sigma_times_two_adverse_dependence',signed_gap=1.9)
+    x['robustness']['comparisons'].append(c);assert check(x)['errors']
+    c['signed_gap']=2.1;assert not check(x)['errors']
+
+def test_separate_authority_selection_does_not_authorize():
+    r=check(example('nondecisive_authority'));assert not r['errors'];assert not r['execution_authorized_by_this_validator']
+
+def test_conflicting_authority_cannot_appear_framework_selected():
+    x=example();x['authority_selection']=deepcopy(example('nondecisive_authority')['authority_selection']);x['authority_selection']['option_id']='B'
+    assert 'CONFLICTING_FRAMEWORK_AUTHORITY_SELECTION' in check(x)['errors']
+
+def test_sole_survivor_no_fabricated_gap():
+    x=example();x['options']=x['options'][:1];x['robustness']['comparisons']=[]
+    assert 'SOLE_SURVIVOR_REVIEW_MISSING' in check(x)['errors']
+    x['robustness']['sole_survivor_record_ref']=x['robustness']['record_ref'];assert not check(x)['errors']
+
+def test_ordinary_provisional_choice_needs_its_own_record():
+    x=example('nondecisive_authority');x['authority_selection']={'option_id':None,'record_ref':None};x['decision_state']='PROVISIONAL_WITH_CONTROLS'
+    assert 'PROVISIONAL_CHOICE_UNRECORDED' in check(x)['errors']
+    x['provisional_choice']={'option_id':'A','record_ref':x['robustness']['record_ref'],'controls_ref':x['options'][0]['record_refs']['controls']}
+    assert not check(x)['errors']
+
+@pytest.mark.parametrize('path,value',[
+ ('execution.authorization_ref',None),('execution.action_id',None),('execution.expires_at',AT),
+ ('execution.authorized_at','2026-09-28T13:00:00Z'),('execution.authorized_at','2026-09-28T10:30:00Z'),
+ ('execution.bound_configuration_id','OTHER'),('execution.option_id','B'),('execution.controls_ref',None),
+ ('execution.state','EXECUTED_UNDER_MONITORING'),('runtime.mode',0),('runtime.mode',1),
+ ('runtime.connectivity','RECOVERING'),('runtime.reconciled',False),('runtime.material_successor',True),
+ ('runtime.agent_present',False),('configuration.material_change_since_qualification',True),
+ ('monitoring_and_outcome.plan_ref',None),('monitoring_and_outcome.reopened_stages',['csv'])])
+def test_execution_binding_mutations(path,value):
+    x=example('scoped_authorization_simulation');setp(x,path,value);assert check(x)['errors'],path
+
+def test_reentry_needs_reconciliation_and_source():
+    x=example('recovery_mode_zero');x['runtime'].update(connectivity='CONNECTED',mode=1,reconciled=True)
+    assert 'AUTOMATIC_REENTRY_PROHIBITED' in check(x)['errors']
+    r=deepcopy(x['options'][0]['record_refs']['rg']);r['id']='reentry';r['locator']='examples/synthetic_records.json#reentry';x['runtime']['authenticated_reentry_ref']=r
+    assert not check(x)['errors']
+
+def test_emergency_never_ordinary_allow():
+    x=example();r=x['options'][0]['record_refs']['rg']
+    x['emergency']={'pathway':'TAIL_EMERGENCY','record_ref':r,'authority_ref':r,'expires_at':'2026-09-28T15:00:00Z','scope_and_exit':'simulation only'}
+    assert check(x)['errors']
+    x['framework_verdict']='BLOCK';x['framework_selected_option_id']=None;x['decision_state']='EMERGENCY_PROVISIONAL'
+    out=check(x);assert not out['errors'];assert out['emergency_requires_external_review'];assert not out['execution_authorized_by_this_validator']
+    x['emergency']['expires_at']=AT;assert 'EMERGENCY_EXPIRED' in check(x)['errors']
+
+def test_extra_key_and_missing_required_group():
+    x=example();x['sixth_gate']='PASS';assert check(x)['errors'];del x['sixth_gate'];del x['execution'];assert check(x)['errors']
+
+def test_draft_intentionally_incomplete():
+    x=yaml.safe_load((ROOT/'templates/mhios_session_DRAFT_v2.1.yaml').read_text());assert check(x)['errors']
+
+@pytest.mark.parametrize('text',['{"x":1,"x":2}','{"x":NaN}','{"x":Infinity}'])
+def test_strict_json(text,tmp_path):
+    p=tmp_path/'bad.json';p.write_text(text)
+    with pytest.raises(ValueError):load_json(p)
+
+def test_interface_state_owner_and_noncolor():
+    x=load_json(ROOT/'examples/interface_state.json');assert not validate_interface(x)
+    y=deepcopy(x);y['owner']='RUN_EXECUTION';assert validate_interface(y)
+    y=deepcopy(x);y['color_is_redundant']=False;assert validate_interface(y)
+    y=deepcopy(x);y['presentation_severity']='PASS';assert validate_interface(y)
+    y=deepcopy(x);y.update(owner='MHIOS_LOCAL',status_token='PASS');assert validate_interface(y)
+
+@pytest.mark.parametrize('token',['MPS-NE','MPS-0','MPS-1','MPS-2','MPS-3','MPS-4','NOT_EVALUATED'])
+def test_sgp_band_import_is_not_assignment(token):
+    x=example();x['sgp_links'][0]['mps']=token
+    if token!='NOT_EVALUATED':x['sgp_links'][0]['mps_record_ref']=x['options'][0]['record_refs']['rg']
+    assert not check(x)['errors'] # presence only, content and patienthood evaluation remain SGP-owned
+
+@pytest.mark.parametrize('kind',['bad_hash','missing','escape','fragment','id','relabel'])
+def test_reference_failures(kind):
+    x=example();r=x['options'][0]['record_refs']['rg']
+    if kind=='bad_hash':r['sha256']='0'*64
+    elif kind=='missing':r['locator']='does-not-exist.json'
+    elif kind=='escape':r['locator']='../escape.json'
+    elif kind=='fragment':r['locator']='examples/synthetic_records.json#missing'
+    elif kind=='id':r['id']='OTHER'
+    else:r['basis']='SUPPLIED_RECORD'
+    assert verify_local_references(x)['errors']
+
+def test_remote_and_null_hash_not_treated_verified():
+    x=example();r=x['options'][0]['record_refs']['rg'];r['locator']='https://example.invalid/source'
+    assert r['locator'] in verify_local_references(x)['unverified_locators']
+    x=example();r=x['options'][0]['record_refs']['rg'];r['sha256']=None
+    assert r['locator'] in verify_local_references(x)['unverified_locators']
+
+def test_synthetic_gap_fixture_arithmetic():
+    x=example()
+    for c,scale in zip(x['robustness']['comparisons'],[1,2]):
+        assert c['signed_gap']==pytest.approx(.04/math.sqrt(2*(.005*scale)**2+1e-6),abs=1e-12)
diff --git a/releases/v2.1/tests/test_release_tools.py b/releases/v2.1/tests/test_release_tools.py
new file mode 100644
index 0000000..f9b6db5
--- /dev/null
+++ b/releases/v2.1/tests/test_release_tools.py
@@ -0,0 +1,25 @@
+from pathlib import Path
+import hashlib,json
+from verify_release import verify
+from reference.check_web import audit
+
+def fixture(root):
+    (root/'release').mkdir();(root/'one.txt').write_text('one')
+    h=hashlib.sha256((root/'one.txt').read_bytes()).hexdigest()
+    (root/'release/MANIFEST.json').write_text(json.dumps({'files':[{'path':'one.txt','sha256':h,'bytes':3}]}))
+    mh=hashlib.sha256((root/'release/MANIFEST.json').read_bytes()).hexdigest()
+    (root/'release/SHA256SUMS.txt').write_text(f'{h}  one.txt\n{mh}  release/MANIFEST.json\n')
+
+def test_hash_inventory_matches(tmp_path):fixture(tmp_path);assert verify(tmp_path)['status']=='PASS'
+def test_tampered_file_rejected(tmp_path):fixture(tmp_path);(tmp_path/'one.txt').write_text('two');assert verify(tmp_path)['status']=='FAIL'
+def test_missing_file_rejected(tmp_path):fixture(tmp_path);(tmp_path/'one.txt').unlink();assert verify(tmp_path)['status']=='FAIL'
+def test_extra_file_rejected(tmp_path):fixture(tmp_path);(tmp_path/'two.txt').write_text('extra');assert verify(tmp_path)['status']=='FAIL'
+def test_parent_path_rejected(tmp_path):fixture(tmp_path);(tmp_path/'release/SHA256SUMS.txt').write_text('0'*64+'  ../outside\n');assert verify(tmp_path)['status']=='FAIL'
+def test_duplicate_hash_entry_rejected(tmp_path):
+    fixture(tmp_path);p=tmp_path/'release/SHA256SUMS.txt';p.write_text(p.read_text()+p.read_text());assert verify(tmp_path)['status']=='FAIL'
+def test_local_link_resolves(tmp_path):
+    (tmp_path/'index.html').write_text('<a href="other.html#head">go</a>');(tmp_path/'other.html').write_text('<h1 id="head">Hi</h1>');assert audit(tmp_path)['status']=='PASS'
+def test_missing_anchor_rejected(tmp_path):
+    (tmp_path/'index.html').write_text('<a href="#absent">go</a>');assert audit(tmp_path)['status']=='FAIL'
+def test_missing_local_file_rejected(tmp_path):
+    (tmp_path/'index.html').write_text('<a href="absent.html">go</a>');assert audit(tmp_path)['status']=='FAIL'
diff --git a/releases/v2.1/verify_all.py b/releases/v2.1/verify_all.py
new file mode 100644
index 0000000..352d97b
--- /dev/null
+++ b/releases/v2.1/verify_all.py
@@ -0,0 +1,56 @@
+#!/usr/bin/env python3
+"""Run the bounded MHIOS package checks and keep execution evidence outside the release."""
+from __future__ import annotations
+import argparse
+from datetime import datetime, timezone
+import hashlib
+import json
+import os
+from pathlib import Path
+import subprocess
+import sys
+import time
+ROOT=Path(__file__).resolve().parent
+
+def inventory():
+    return {p.relative_to(ROOT).as_posix():hashlib.sha256(p.read_bytes()).hexdigest()
+            for p in ROOT.rglob('*') if p.is_file()}
+
+def main():
+    p=argparse.ArgumentParser();p.add_argument('--output-dir',type=Path,required=True);a=p.parse_args()
+    out=a.output_dir.resolve()
+    if out.is_relative_to(ROOT):p.error('Output directory must be outside the immutable release.')
+    out.mkdir(parents=True,exist_ok=True)
+    before=inventory();env=dict(os.environ,PYTHONDONTWRITEBYTECODE='1')
+    py=sys.executable
+    commands=[('checksums',[py,'-B','verify_release.py','--output',str(out/'checksums.json')]),
+              ('unit_tests',[py,'-B','-m','pytest','-q','-p','no:cacheprovider','--disable-warnings','tests']),
+              ('artifact_and_Core_identity',[py,'-B','-m','reference.check_artifacts','--output',str(out/'artifacts.json')]),
+              ('static_reading_links',[py,'-B','-m','reference.check_web','--output',str(out/'reading_links.json')])]
+    for name in ['decisive_synthetic','nondecisive_authority','rights_blocked','quick_unassessed','recovery_mode_zero','scoped_authorization_simulation']:
+        commands.append(('example_'+name,[py,'-B','-m','reference.validate',f'examples/{name}.json','--at','2026-09-28T12:00:00Z','--verify-local-references']))
+    # Inspect the heavier document surface before running isolated mutation cases.
+    commands[1],commands[2]=commands[2],commands[1]
+    results=[]
+    for name,cmd in commands:
+        start=time.monotonic()
+        print('RUN',name,flush=True)
+        log_path=out/f'{name}.log'
+        with log_path.open('w',encoding='utf-8') as log:
+            try:
+                run=subprocess.run(cmd,cwd=ROOT,env=env,stdout=log,stderr=subprocess.STDOUT,text=True,timeout=180)
+                code=run.returncode
+            except subprocess.TimeoutExpired:
+                code=124;log.write('\nTIMEOUT\n')
+        results.append({'name':name,'command':cmd,'exit_code':code,'status':'PASS' if code==0 else 'FAIL','duration_seconds':round(time.monotonic()-start,3)})
+        print(name,results[-1]['status'],flush=True)
+    after=inventory();same=before==after
+    receipt={'status':'PASS' if same and all(x['status']=='PASS' for x in results) else 'FAIL',
+             'executed_at_utc':datetime.now(timezone.utc).isoformat(),
+             'build':'MG-MHIOS-2.1-20260928-CORE13.0','tests':results,
+             'release_files_unchanged_after_tests':same,'inventory_files':len(before),
+             'changed_paths':sorted(k for k in set(before)|set(after) if before.get(k)!=after.get(k)),
+             'scope':'Supplied local reference checks and immutable-file verification. No execution authority, empirical validation, full Core replay or native spreadsheet roundtrip.'}
+    (out/'receipt.json').write_text(json.dumps(receipt,indent=2)+'\n');print(receipt['status'])
+    return 0 if receipt['status']=='PASS' else 1
+if __name__=='__main__':raise SystemExit(main())
diff --git a/releases/v2.1/verify_release.py b/releases/v2.1/verify_release.py
new file mode 100644
index 0000000..9ee8787
--- /dev/null
+++ b/releases/v2.1/verify_release.py
@@ -0,0 +1,61 @@
+"""Verify this package against its locally trusted checksum inventory. No network or edits."""
+from __future__ import annotations
+import argparse
+import hashlib
+import json
+from pathlib import Path, PurePosixPath
+ROOT = Path(__file__).resolve().parent
+
+def digest(path: Path) -> str:
+    h = hashlib.sha256()
+    with path.open('rb') as stream:
+        for block in iter(lambda: stream.read(1024 * 1024), b''):
+            h.update(block)
+    return h.hexdigest()
+
+def verify(root: Path = ROOT) -> dict:
+    root = root.resolve()
+    errors = []
+    expected = {}
+    ledger = root / 'release/SHA256SUMS.txt'
+    try:
+        for line in ledger.read_text(encoding='utf-8').splitlines():
+            hash_value, name = line.split('  ', 1)
+            rel = PurePosixPath(name)
+            if len(hash_value) != 64 or any(c not in '0123456789abcdef' for c in hash_value):
+                raise ValueError('Invalid SHA-256 entry')
+            if rel.is_absolute() or '..' in rel.parts or name in expected:
+                raise ValueError('Unsafe or duplicate ledger path')
+            expected[name] = hash_value
+            target = root / name
+            if target.is_symlink() or not target.resolve().is_relative_to(root):
+                errors.append('PATH_ESCAPE_OR_SYMLINK: ' + name)
+            elif not target.is_file():
+                errors.append('MISSING: ' + name)
+            elif digest(target) != hash_value:
+                errors.append('HASH_MISMATCH: ' + name)
+        actual = {p.relative_to(root).as_posix() for p in root.rglob('*') if p.is_file()}
+        extra = actual - set(expected) - {'release/SHA256SUMS.txt'}
+        errors.extend('UNLISTED: ' + n for n in sorted(extra))
+        manifest = json.loads((root / 'release/MANIFEST.json').read_text())
+        for item in manifest['files']:
+            name = item['path']; target = root / name
+            if expected.get(name) != item['sha256'] or not target.is_file() or target.stat().st_size != item['bytes']:
+                errors.append('MANIFEST_MISMATCH: ' + name)
+    except (ValueError, OSError, KeyError, TypeError) as exc:
+        errors.append('INVALID_INVENTORY: ' + str(exc))
+    return {'status': 'PASS' if not errors else 'FAIL', 'verified_entries': len(expected), 'errors': errors,
+            'scope': 'Byte identity against the supplied trusted inventory; no authenticity, evidence-truth or conformance guarantee.'}
+
+def main() -> int:
+    parser = argparse.ArgumentParser(); parser.add_argument('--root', type=Path, default=ROOT)
+    parser.add_argument('--output', type=Path); args = parser.parse_args()
+    result = verify(args.root)
+    if args.output:
+        if args.output.resolve().is_relative_to(args.root.resolve()):
+            parser.error('Write verification evidence outside the immutable publication directory.')
+        args.output.parent.mkdir(parents=True, exist_ok=True)
+        args.output.write_text(json.dumps(result, indent=2) + '\n')
+    print(json.dumps(result, indent=2)); return 0 if result['status'] == 'PASS' else 1
+if __name__ == '__main__':
+    raise SystemExit(main())
diff --git a/releases/v2.1/web/reading.css b/releases/v2.1/web/reading.css
new file mode 100644
index 0000000..43ace26
--- /dev/null
+++ b/releases/v2.1/web/reading.css
@@ -0,0 +1 @@
+body{max-width:72rem;margin:auto;padding:2rem;font:1.05rem/1.6 system-ui,sans-serif;color:#192c3b;background:#fff}h1,h2,h3{line-height:1.2;color:#183f5e}a{color:#125489}a:focus-visible{outline:3px solid #986800;outline-offset:4px}table{border-collapse:collapse;width:100%;margin:1rem 0}th,td{border:1px solid #b8c7d1;text-align:left;vertical-align:top;padding:.6rem;overflow-wrap:anywhere}th{background:#e8f0f5}pre{overflow-x:auto;padding:1rem;background:#f1f5f7}code{overflow-wrap:anywhere}.note{border-left:.3rem solid #b8851f;padding:1rem;background:#fbf7ee}nav{border-block:1px solid #b8c7d1;padding:1rem}footer{border-top:1px solid #b8c7d1;margin-top:3rem;font-size:.9rem} .skip{position:absolute;left:-10000px}.skip:focus{position:static} @media(max-width:600px){body{padding:1rem;font-size:1rem}table{display:block;overflow-x:auto}h1{font-size:1.8rem}}
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..c2580d7
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,3 @@
+-r releases/v2.1/requirements.txt
+# Required by jsonschema's optional date-time FormatChecker support.
+rfc3339-validator==0.1.4
diff --git a/scripts/build_site.py b/scripts/build_site.py
new file mode 100644
index 0000000..3c0b18a
--- /dev/null
+++ b/scripts/build_site.py
@@ -0,0 +1,45 @@
+from pathlib import Path
+import shutil
+from lxml import html, etree
+root=Path(__file__).resolve().parents[1]
+out=root/'_site'
+out.mkdir(exist_ok=True)
+shutil.copytree(root/'site',out,dirs_exist_ok=True)
+shutil.copytree(root/'releases/v2.1',out/'releases/v2.1',dirs_exist_ok=True)
+# Generate an accessible reading projection without editing the frozen package.
+source=root/'releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.html'
+doc=html.fromstring(source.read_text(encoding='utf-8'))
+doc.set('lang','en');doc.set('xml:lang','en')
+head=doc.find('head');body=doc.find('body')
+for link in head.xpath('./link[@rel="stylesheet"]'):
+    link.set('href','../releases/v2.1/web/reading.css')
+head.find('title').text='Read MHIOS v2.1 | Complete standard'
+etree.SubElement(head,'link',rel='canonical',href='https://mathgov.github.io/mhios/read/')
+etree.SubElement(head,'meta',name='description',content='Complete MHIOS v2.1 reading projection, pinned to Core v13.0 Release I and SGP v8.8. Original source and editable downloads remain available.')
+style=etree.SubElement(head,'style')
+style.text='html{overflow-wrap:anywhere}body{box-sizing:border-box;width:100%;min-width:0}nav ul{padding-left:1.1rem}table{max-width:100%;table-layout:fixed}.table-scroll{overflow-x:auto;max-width:100%}.table-scroll table{display:table;min-width:36rem}main{min-width:0} .publication-note{padding:1rem;background:#fbf7ee;border-left:4px solid #b8851f} .table-scroll:focus-visible{outline:3px solid #986800}h1{overflow-wrap:anywhere}'
+notice=html.fragment_fromstring('<div class="publication-note"><a href="../">← MHIOS publication and downloads</a><p>Hosted reading projection of the unchanged v2.1 standard. Page language and responsive table presentation were improved; semantic text is unchanged. Tables scroll horizontally on small screens and can be focused with the keyboard.</p></div>')
+body.insert(0,notice)
+toc=body.find('nav')
+if toc is not None:
+    toc.set('aria-label','Standard contents')
+    details=etree.Element('details');summary=etree.SubElement(details,'summary');summary.text='Contents — jump to a section'
+    toc.addprevious(details);details.append(toc)
+main=etree.Element('main',id='standard-text')
+started=False
+for el in list(body):
+    if el.tag=='h1' and el.get('id')=='mathgov-human-interface-and-orchestration-standard':started=True
+    if started:main.append(el)
+body.append(main)
+skip=etree.Element('a',href='#standard-text',attrib={'class':'skip'});skip.text='Skip to standard';body.insert(0,skip)
+for i,table in enumerate(main.xpath('.//table'),1):
+    wrap=etree.Element('div',attrib={'class':'table-scroll','role':'region','aria-label':f'Table {i}, scroll horizontally if needed','tabindex':'0'})
+    table.addprevious(wrap);wrap.append(table)
+original=html.fromstring(source.read_text(encoding='utf-8')).find('body')
+first=original.xpath('./h1[@id="mathgov-human-interface-and-orchestration-standard"]')[0]
+nodes=list(original);start=nodes.index(first)
+def tokens(s):return s.split()
+assert tokens(' '.join(e.text_content() for e in nodes[start:]))==tokens(''.join(main.itertext()))
+(out/'read').mkdir(exist_ok=True)
+(out/'read/index.html').write_text('<!doctype html>\n'+html.tostring(doc,encoding='unicode'),encoding='utf-8')
+(out/'.nojekyll').write_text('')
diff --git a/site/index.html b/site/index.html
new file mode 100644
index 0000000..1966bfb
--- /dev/null
+++ b/site/index.html
@@ -0,0 +1,4 @@
+<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>MHIOS v2.1 | Human Interface and Orchestration</title><meta name="description" content="Read MHIOS v2.1, the human-interface companion to MathGov Core v13.0: standard, editable workbook, schemas, examples and bounded verification."><link rel="canonical" href="https://mathgov.github.io/mhios/"><meta property="og:title" content="MHIOS v2.1 | Human Interface and Orchestration"><meta property="og:description" content="Read the standard. Inspect the records. Keep decision, authority and execution distinct."><meta property="og:type" content="website"><meta property="og:url" content="https://mathgov.github.io/mhios/"><meta name="twitter:card" content="summary"><style>
+:root{color-scheme:light;font-family:system-ui,sans-serif;color:#182c3d;background:#fff}*{box-sizing:border-box}body{margin:0;line-height:1.65}header,main,footer{max-width:1080px;margin:auto;padding:2rem 1.4rem}header{padding-top:3rem}h1{font-size:clamp(2.3rem,6vw,4rem);line-height:1.12;max-width:850px;margin:.7em 0}h2{line-height:1.3}a{color:#08607e;text-underline-offset:.2em}a:hover{text-decoration-thickness:2px}a:focus-visible{outline:3px solid #955500;outline-offset:5px}.eyebrow{font-weight:700;letter-spacing:.06em;font-size:.9rem}.lead{font-size:1.2rem;max-width:830px}.actions{display:flex;gap:1rem;flex-wrap:wrap;margin:1.8rem 0}.button{display:inline-block;background:#085b77;color:#fff;padding:.8rem 1.1rem;border-radius:5px;font-weight:700}.secondary{background:#eaf2f5;color:#182c3d}.note{background:#fffae9;border-left:5px solid #d8a423;padding:1.2rem}.grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1.3rem}.card{border:1px solid #c8d5df;padding:1.4rem;border-radius:8px}.card h3{margin-top:0}section{margin-bottom:3rem}code{overflow-wrap:anywhere}pre{background:#edf3f6;padding:1rem;white-space:pre-wrap;overflow-wrap:anywhere}footer{border-top:1px solid #c8d5df}.skip{position:absolute;top:-80px;left:1rem;background:white;padding:.8rem}.skip:focus{top:0}@media(max-width:650px){.grid{grid-template-columns:1fr}header,main,footer{padding:1.4rem}h1{margin:.7em 0}}
+</style></head><body><a class="skip" href="#main">Skip to main content</a><header><a href="https://ripplelogic.org/">← RippleLogic research collections</a><p class="eyebrow">MHIOS v2.1 · CORE v13.0 RELEASE I · APACHE-2.0</p><h1>Make the decision process visible.</h1><p class="lead">The MathGov Human Interface and Orchestration Standard connects evidence, qualification, comparison and accountable handoffs—while keeping authority and execution separate.</p><p>James McGaughran · 28 September 2026 · SGP v8.8</p><div class="actions"><a class="button" href="read/">Read the complete standard</a><a class="button secondary" href="https://github.com/MathGov/mhios/releases/download/v2.1-core13.0/MathGov_MHIOS_v2.1_Core13.0_Publication_Edition_1.zip">Download the complete package</a></div><nav aria-label="Publication sections"><a href="#read">Read</a> · <a href="#use">Use the materials</a> · <a href="#verify">Verify</a> · <a href="#scope">Evidence and limits</a></nav></header><main id="main"><p class="note"><strong>Research and teaching companion.</strong> MHIOS v2.1 is pinned to all fifteen unchanged Core v13.0 Release I files. Its local checker tests declared record consistency. A successful check does not authorize an action or certify a deployment.</p><section id="read"><h2>Read, inspect and adapt</h2><div class="grid"><article class="card"><h3>The complete standard</h3><p>A 41-page specification with source ownership, roles, status presentation, qualification, uncertainty, authority, monitoring and migration.</p><p><a href="read/">Read online</a> · <a href="releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.pdf">PDF</a> · <a href="releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.docx">Editable Word</a> · <a href="https://github.com/MathGov/mhios/blob/main/releases/v2.1/docs/MathGov_Human_Interface_and_Orchestration_Standard_v2.1.md">Markdown source</a></p></article><article class="card"><h3>What changed and what was tested</h3><p>Examine the current Core crosswalk, exact repair locations, coverage register and stated verification boundaries.</p><p><a href="releases/v2.1/release/AUDIT_AND_IMPROVEMENTS.pdf">Audit PDF</a> · <a href="https://github.com/MathGov/mhios/blob/main/releases/v2.1/release/VERIFICATION_REPORT.md">Verification report</a> · <a href="https://github.com/MathGov/mhios/blob/main/PUBLICATION.md">Publication audit</a></p></article></div></section><section id="use"><h2>Work with the materials</h2><div class="grid"><article class="card"><h3>Prepare a session</h3><p>The fourteen-sheet workbook helps assemble records. Its token checks do not calculate Canon scores or validate the underlying evidence. The YAML draft is intentionally incomplete.</p><p><a href="releases/v2.1/templates/MHIOS_v2.1_Implementation_Workbook.xlsx">Download workbook</a> · <a href="https://github.com/MathGov/mhios/tree/main/releases/v2.1/templates">Templates</a></p></article><article class="card"><h3>Inspect the implementation</h3><p>Two local schemas, six synthetic examples and a read-only checker provide bounded implementation surfaces. They are not the full external Canon record system.</p><p><a href="https://github.com/MathGov/mhios/tree/main/releases/v2.1/schemas">Schemas</a> · <a href="https://github.com/MathGov/mhios/tree/main/releases/v2.1/examples">Examples</a> · <a href="https://github.com/MathGov/mhios/tree/main/releases/v2.1/tests">Tests</a></p></article></div></section><section id="verify"><h2>A fixed edition you can verify</h2><p>Publication edition 1 adds explicit date-time validation dependencies and an accessible hosted reader. The original publication ZIP is preserved unchanged. Its 86 files include all fifteen exact Core dependencies. The repeated local suite passed 133 tests, all six example checks and the source, document and checksum checks.</p><p><a href="https://github.com/MathGov/mhios/releases/tag/v2.1-core13.0">Release and checksum download</a> · <a href="https://github.com/MathGov/mhios/actions">Current CI results</a> · <a href="releases/v2.1/references/CORE_PIN_MANIFEST.json">Core pin manifest</a></p><p>From a repository checkout, use Python 3.10 or newer. On Windows, enable UTF-8 mode first with <code>$env:PYTHONUTF8='1'</code> in PowerShell.</p><pre>python -m pip install -r requirements.txt
+python -B releases/v2.1/verify_all.py --output-dir verification-output</pre><p>Synthetic fixtures use a declared replay time. Historical validity never restores live permission. Store new verification evidence outside the immutable package.</p></section><section id="scope"><h2>Evidence, reuse and version history</h2><p>MHIOS's semantic master is Markdown; Word, PDF and HTML are reading projections. The Core owns its governing semantics. The Apache-2.0 license permits use, modification and redistribution under its terms; retain notices and identify changes.</p><p><a href="https://github.com/MathGov/mhios/blob/main/LICENSE">License</a> · <a href="https://github.com/MathGov/mhios/blob/main/CITATION.cff">Citation</a> · <a href="https://github.com/MathGov/mhios/blob/main/CONTRIBUTING.md">Contribute</a></p><p>The prior public GitHub edition was v0.8. This supplied v2.1 edition records a v2.0 source baseline and requires explicit migration; old records cannot simply be relabeled. <a href="https://github.com/MathGov/mhios/releases/tag/v0.8">The historical release remains available.</a></p><p class="note">The package does not establish empirical effectiveness, M2/M3 deployed-interface conformance, complete external Canon integration, native Excel interoperability, lawful authority, physical safety or production readiness. Manual and implementation-specific obligations remain visible in its coverage register.</p></section></main><footer><p><a href="https://github.com/MathGov/mhios">MHIOS repository</a> · <a href="https://mathgov.github.io/ripple-logic/">Core readers</a> · <a href="https://ripplelogic.org/">RippleLogic</a> · <a href="https://mathgov.org/">MathGov foundation</a> · <a href="mailto:james@ripplelogic.org">james@ripplelogic.org</a></p><p>MG-MHIOS-2.1-20260928-CORE13.0 · A companion to MG-RL-13.0-20260926-RELEASE-I.</p></footer></body></html>
\ No newline at end of file
diff --git a/site/robots.txt b/site/robots.txt
new file mode 100644
index 0000000..c3d764f
--- /dev/null
+++ b/site/robots.txt
@@ -0,0 +1,3 @@
+User-agent: *
+Allow: /
+Sitemap: https://mathgov.github.io/mhios/sitemap.xml
diff --git a/site/sitemap.xml b/site/sitemap.xml
new file mode 100644
index 0000000..dfefb39
--- /dev/null
+++ b/site/sitemap.xml
@@ -0,0 +1 @@
+<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://mathgov.github.io/mhios/</loc></url><url><loc>https://mathgov.github.io/mhios/read/</loc></url></urlset>