[isomorphisms]

SUN IB-S10, existing owner #104 and continuation of PR #46.

Selected retained sources need to move between local stores without losing their origin, generation, exact bytes or privacy policy. This child branch adds a bounded inspectable directory bundle over the existing canonical intake; it does not recreate source IDs or decoders.

The native Grease adapter implements explicit source selection, export/import, unavailable-reference metadata and local assistant context preparation. It validates all supplied rows before mutation, freezes a bounded snapshot and calls the existing per-source intake. Repeated imports preserve IDs. Interrupted later-source publication leaves earlier sources usable and creates no complete bundle receipt.

Historical hosted synthetic acceptance passed fixed equal-byte/different-origin identity goldens, exact provenance/byte round trips, private/assistant refusal, unavailable references, malformed/tampered/schema/path/symlink/profile/size controls and actual intake-lock interruption/retry. A deliberately removed path guard is rejected by acceptance after it escapes into an isolated outside fixture. The real then-current Idriç compiler evaluated all ten policy cases True; its unsafe default-policy mutant yields False.

Evidence limits remain explicit: Grease orchestration is executed in native mode; original retain-source has inherited-shell compatibility debt (+O ysh:all). Idriç policy/compiler evaluation is separate from OS adapter wire checks; no qualified Idriç policy executable or ICK/NDK target delivery is claimed. No physical device, actual private corpus, network sharing or sync was used. Static path refusal does not prove kernel-enforced containment against concurrent topology replacement. Upstream retained-source classification must identify embedded credentials; this slice is not a content scanner.

Base remains the existing Pensieve branch at b4d93c4. This draft is bounded review work and does not claim all issue #104 acceptance complete. Publication and execution receipts follow in docs/portable-evidence-receipt.md.

One-off import publication repair

Import receipts now stage privately beneath the verified cauldron/imports parent before a same-filesystem, no-clobber rename. Frozen input scratch remains separate, so importing from a different filesystem cannot expose a partially copied receipt.

Executed native Grease checks preserve exact source identities/provenance, idempotent retries and committed sources. Independent tests exercised actual /tmp to /dev/shm input/target separation, complete reference inventory before rename, injected interruption, a competing complete receipt, and a mutant restoring the old staging location. The mutant failed specifically on filesystem-device mismatch. The existing adapter and policy/path mutation suites also passed. The published tree 373291ef967cd8122fdec0a722dbb800ba8aafbb exactly matches the locally tested tree.

These are host filesystem and semantic checks. LeakSanitizer required ASAN_OPTIONS=detect_leaks=0 because of this host's process-information restriction; leak analysis, fsync/power-loss durability, Android and physical-device acceptance remain separate. No merge or release.

Current one-off head: 52e8119ac5491201e748e1db3a0e18ea598e4649. Broader hosted qualification must be checked independently at this exact head; historical results above are not inherited as current-head PASS.