Executed locally
Twenty-seven source-custody controls reject byte changes, path attacks, identity substitution, receipt fabrication, extra files, and post-install mutation.
Source custody
Source identity becomes runtime authority only through an authenticated custody chain.
The exact MATM archive is not in local evidence custody; the gate remains blocked while its negative controls are locally executed.
0.28.0-wipRoot domainEvidence-gated MATM root WIP
Answer first
The custody chain is implemented; the required upstream bytes are absent.
A repository address and Git metadata define the expected source. They do not substitute for a locally received archive. Concresca requires pre-install hashing, archive-path safety, exact Git-blob verification, atomic installation, installed-tree revalidation, and a typed non-circular activation receipt.
Still blocked
Archive digest, source prefix, installed-tree digest, source activation receipt, import, and upstream execution remain null.
No circular green state
The pre-existing lock authenticates source bytes. A generated receipt cannot authenticate itself or rewrite the expected manifest.
Judgment-free total cognitive freedom
NO JUDGMENT WHATSOEVER. Concresca coordinates without assigning moral worth, character, guilt, danger, trustworthiness, loyalty, purity, normality, or social standing. Questions, thoughts, identities, messages, content, and conduct are not objects of Concresca judgment.