Complete sealed response candidate resource qualification #150

Outcome

Complete the remaining DTO, source/candidate and original-deadline qualification for the serving sealed-response decode path. One-shot receipt admission, limit freezing, the closed decoder and controlled-native bidder integration are already implemented; do not request or reopen those implementations.

Acceptance Criteria

• Reconcile the current aggregate source/candidate closure and retained, transient and cumulative DTO allocations, including bid-local failures, primitive-only bad candidates, whole-source rollback, malformed and duplicate keys, and cancellation.
• Establish applicable work, scratch, stack and allocator bounds, real owner lifetimes and installed prepayment before crediting complete qualification. Lexical scan credits and measured peaks alone are not instruction or worst-case proofs.
• Bind descriptors, source, features, artifact, ABI and limits to the actual shipped consumers and demonstrate remaining original-deadline acceptance on that path. Reuse completed controls and record precisely which evidence is still missing rather than asserting failure from an old prototype note.
• Preserve sealed-body ownership, exact bidder/alias attribution, sent-impression coverage, valid siblings and existing byte/node caps; do not expose arbitrary DTO/raw-body registration.

Relationships

Parent: #9. Coordinate closure and target acceptance with #33 and #72–#75. Related lexical-preflight audit is separate; no unrelated target is an unconditional blocker.

Source

Retired response-decode receipt ledger and serving response boundary.

Priority, Size and scheduling require triage; project Status is Backlog.

Resource Proof Responsibilities

Responsible technical role: bidder/runtime qualification maintainers.

Next verification action: complete the existing sealed source/candidate DTO allocation, work, stack, lifetime and original-deadline qualification across its current consumers. Verify retained completed candidates as well as active streams, including bid-local error, source rollback and cancellation. Preserve the implemented decoder, receipt admission and controlled-native integration.

Source: approved shared resource ownership contract, delivered for review in #162. This records responsibility and the next verification action, not completed proof, target qualification, changed workload limits or permission to close this issue.