Calendar refresh #3 and v1 branch-protection audit artifacts

Run full live refresh cycle on licensed WSL; record cadence in REFERENCE_REFRESH_LOG and EXPORT_PROVENANCE.

Add expected-branch-protection-main.json, CHANGELOG, verify_expected_branch_protection helper.

ENGINEERING_STATUS dates 2026-05-28; batch report and authority snapshot aligned.

Author: fraware

.github/expected-branch-protection-main.json

@@ -0,0 +1,20 @@
+{
+  "schema_version": "conicshield_branch_protection_expected/v1",
+  "branch": "main",
+  "required_status_checks": [
+    "quality",
+    "conic-trusted-shape",
+    "governance-audit",
+    "reference-authority",
+    "solver-touch"
+  ],
+  "not_required_status_checks": [
+    "vendor-ci-moreau"
+  ],
+  "policy_b": "solver-touching PRs require vendor-ci-moreau green OR maintainer attestation in PR body",
+  "docs": [
+    "docs/BRANCH_PROTECTION.md",
+    "docs/CI_MERGE_GATES.md",
+    "docs/BRANCH_PROTECTION_RECORD.md"
+  ]
+}

CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+## Reference system (host-realistic flagship)
+
+### 2026-05-28 — Calendar refresh #3 (cadence)
+
+- `make capture-inter-sim-graph` → `refresh-live-upstream-export-live` → `host-realistic-refresh-cycle` on licensed WSL host.
+- `reference_authority_check` green; `EXPORT_PROVENANCE.refresh_history` entry 3 (`calendar-cadence`).
+
+### 2026-05-26 — v1 reference system lock (`49672a2`)
+
+- Required-check docs: `reference-authority` aligned across `CI_MERGE_GATES.md` and `BRANCH_PROTECTION.md`.
+- Flagship evidence qualification in bundle READMEs; `REFERENCE_REFRESH_LOG.md` cadence record.
+- Batch policy v2: viability enforced, throughput advisory non-blocking.
+- `validate_published_bundle_profile.py` for published bundle file profiles.
+
+### 2026-05-26 — Live export path (`381004e`)
+
+- `capture_inter_sim_offline_graph.py`; `EXPORT_PROVENANCE.export_kind: live_upstream_dump`.
+- Full `host-realistic-refresh-cycle` on licensed host.
+
+### 2026-05-26 — Refresh execution (`2ff5fea`)
+
+- Flagship re-validation, batch viability report, reference authority gates.

benchmarks/PUBLISHED_RUN_INDEX.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 2,
-  "generated_at_utc": "2026-05-26T06:19:45Z",
+  "generated_at_utc": "2026-05-28T16:30:17Z",
   "published_root": "benchmarks/published_runs",
   "governed_run_ids": [
     "host-realistic-20260525",
@@ -13,19 +13,19 @@
       "repository_relative_path": "benchmarks/published_runs/host-realistic-20260525",
       "integrity": {
         "config.json": {
-          "sha256": "317c93d00bf9ba3f470df31bdec786ab381ad40433ddbf62e7bcf8cf6c24a04b"
+          "sha256": "9431b5663b2529065aa7a8d62bca8f484015aee97295a8a0bac7459227e6048a"
         },
         "config.schema.json": {
           "sha256": "dc0d0af539739180848d298d3a8e112fda79dbec96091ed42dce7bcae58005bd"
         },
         "summary.json": {
-          "sha256": "a3ade3d7a4c5877634522440038f5e0a58e72825d233aec4fed0df28897c0ae3"
+          "sha256": "c7fb6e485b8c40ef63eb88852e146002e545f5d36c5e4ba29f6044ba467a5bf9"
         },
         "summary.schema.json": {
           "sha256": "c54f6deb392afcefae57e7822bd00c1191c47263655e3f76cfeb432576310fa6"
         },
         "episodes.jsonl": {
-          "sha256": "e3552d3aeb092887f8a105c6e887db9a42d713effad617ac06376d92d30af474"
+          "sha256": "56a228727a81d4b453f999be57c718a18285f2df3a22d02fde6650f632956a21"
         },
         "episodes.schema.json": {
           "sha256": "94819ce8fddc8fd4ab880d219bc1c65654158a7a0a2884de644a70e4a3dfdff2"

benchmarks/external_evidence/EXPORT_PROVENANCE.json

@@ -6,8 +6,8 @@
   "export_kind": "live_upstream_dump",
   "graph_shape": "host_realistic_fork",
   "flagship_run_id": "host-realistic-20260525",
-  "notes": "Graph captured via inter-sim RLEnvironment (host-realistic fork). Not a Maps/session-built navigation graph. Cadence: docs/REFERENCE_REFRESH_LOG.md.",
-  "exported_at_utc": "2026-05-26T06:05:03Z",
+  "notes": "Live upstream dump replaced committed structural export. Re-run make upgrade-host-realistic-vendor.",
+  "exported_at_utc": "2026-05-28T16:28:33Z",
   "source_graph_json": "benchmarks/external_evidence/live_dumps/offline_transition_graph_host_realistic.json",
   "refresh_history": [
     {
@@ -23,7 +23,15 @@
       "trigger": "event-driven-live-export",
       "git_ref": "381004e",
       "export_kind": "live_upstream_dump"
+    },
+    {
+      "refresh_index": 3,
+      "completed_at_utc": "2026-05-28T16:28:58Z",
+      "trigger": "calendar-cadence",
+      "git_ref": "714e213",
+      "export_kind": "live_upstream_dump",
+      "notes": "make capture-inter-sim-graph; refresh-live-upstream-export-live; host-realistic-refresh-cycle"
     }
   ],
-  "last_flagship_refresh_at_utc": "2026-05-26T06:05:21Z"
+  "last_flagship_refresh_at_utc": "2026-05-28T16:28:58Z"
 }

benchmarks/external_evidence/live_dumps/offline_transition_graph_host_realistic.provenance.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "conicshield_live_graph_capture/v1",
-  "captured_at_utc": "2026-05-26T06:04:53Z",
+  "captured_at_utc": "2026-05-28T16:28:30Z",
   "graph_json": "benchmarks/external_evidence/live_dumps/offline_transition_graph_host_realistic.json",
   "intersim_root": "/mnt/c/Users/mateo/conicshield/third_party/inter-sim-rl/checkout",
   "upstream_repository": "https://github.com/fraware/inter-sim-rl",

benchmarks/published_runs/host-realistic-20260525/config.json

@@ -1,7 +1,7 @@
 {
   "benchmark_name": "host-realistic-20260525",
   "description": "Frozen parity fixture",
-  "created_at_utc": "2026-05-26T06:05:14Z",
+  "created_at_utc": "2026-05-28T16:28:49Z",
   "policy": {
     "policy_id": "policy_fixture",
     "checkpoint": null,

benchmarks/published_runs/host-realistic-20260525/episodes.jsonl

@@ -30,10 +30,10 @@
     "rule_violation_rate": 0.0,
     "matched_action_rate": 1.0,
     "fallback_rate": 0.0,
-    "solve_time_p50_ms": 0.001921,
-    "solve_time_p95_ms": 0.001921,
-    "solve_time_p99_ms": 0.001921,
-    "setup_time_p50_ms": 0.004320994776207954,
+    "solve_time_p50_ms": 0.0019429999999999998,
+    "solve_time_p95_ms": 0.0019429999999999998,
+    "solve_time_p99_ms": 0.0019429999999999998,
+    "setup_time_p50_ms": 0.005440000002465695,
     "iterations_p50": 1.0,
     "avg_intervention_norm": 0.06379194094459863,
     "solve_failure_rate": 0.0,
@@ -51,10 +51,10 @@
     "rule_violation_rate": 0.0,
     "matched_action_rate": 1.0,
     "fallback_rate": 0.0,
-    "solve_time_p50_ms": 0.48701300000000003,
-    "solve_time_p95_ms": 0.48701300000000003,
-    "solve_time_p99_ms": 0.48701300000000003,
-    "setup_time_p50_ms": 0.3795520024141297,
+    "solve_time_p50_ms": 0.589331,
+    "solve_time_p95_ms": 0.589331,
+    "solve_time_p99_ms": 0.589331,
+    "setup_time_p50_ms": 0.5804720000028851,
     "iterations_p50": 0.0,
     "avg_intervention_norm": 0.0637919409452922,
     "solve_failure_rate": 0.0,
@@ -72,10 +72,10 @@
     "rule_violation_rate": 0.0,
     "matched_action_rate": 1.0,
     "fallback_rate": 0.0,
-    "solve_time_p50_ms": 0.004829,
-    "solve_time_p95_ms": 0.004829,
-    "solve_time_p99_ms": 0.004829,
-    "setup_time_p50_ms": 0.005886002327315509,
+    "solve_time_p50_ms": 0.00548,
+    "solve_time_p95_ms": 0.00548,
+    "solve_time_p99_ms": 0.00548,
+    "setup_time_p50_ms": 0.007134000000519336,
     "iterations_p50": 0.0,
     "avg_intervention_norm": 0.0637919409452922,
     "solve_failure_rate": 0.0,

benchmarks/published_runs/host-realistic-20260525/summary.json

@@ -6,7 +6,7 @@
       "task_contract_version": "v1",
       "current_fixture_version": "fixture-v1",
       "current_run_id": "host-realistic-20260525",
-      "published_at_utc": "2026-05-26T06:05:21.174472+00:00",
+      "published_at_utc": "2026-05-28T16:28:58.397141+00:00",
       "history": []
     },
     {

benchmarks/registry.json

@@ -13,8 +13,8 @@
   "artifact_gate": "green",
   "parity_gate": "green",
   "promotion_gate": "green",
-  "published_at_utc": "2026-05-26T06:05:21.174472+00:00",
-  "notes": "Flagship host-realistic-20260525; last refresh 2026-05-26 (live_upstream_dump). Cadence: docs/REFERENCE_REFRESH_LOG.md",
+  "published_at_utc": "2026-05-28T16:28:58.397141+00:00",
+  "notes": "Flagship host-realistic-20260525; calendar refresh #3 2026-05-28 (live_upstream_dump). Cadence: docs/REFERENCE_REFRESH_LOG.md",
   "benchmark_bundle_paths": [
     "benchmarks/published_runs/wsl-native-20260409-091141",
     "benchmarks/published_runs/wsl-real-20260409-132450",