SS4: fill lead-paper Results/Discussion from the frozen §6 pass

Populate docs/stage-07-paper-draft.md §5 Results + §6 Discussion ONCE, after
the battery sealed, from the single SS3 inferential pass — the blind-authored
§1–4/7 are unchanged. Abstract + §1 contributions updated to the honest
double-null/negative headline.

- §5.1 calibration gate PASS (known-linked AUC 1.0000, unlinked 0.5036).
- §5.2 RQ1-P1 AUC 0.466 [0.452,0.480] = anomaly-below-chance (NO leak);
  RQ1-P2 ΔAUC +0.011 [−0.002,+0.023] padding-ineffective (moot).
- §5.3 RQ2-P1 ΔH −0.96 bits [−1.06,−0.86] SHRINK, reported with equal
  prominence (not reframed as "helps"); RQ2-P3 ρ=0 degenerate/inconclusive.
- §5.4 Holm table (family=7, report-4); only RQ1-P1 + RQ2-P1 survive @ .05.
- §6 honest interpretation; §7 adds the funnelling-degeneracy limitation;
  §8 marks the RQ2 posterior + RQ1-P2 pairing ratified and notes the
  bit-faithful RQ1 bootstrap.

No spin, no re-slicing, no post-hoc subgroups. Frozen prereg SHA intact.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

OVERSEER-STATUS.md

@@ -60,3 +60,6 @@ RQ2 RATIFIED (operator Andre, 2026-07-20, while blind) — observation-consisten
 - 2026-07-20 SS3 FROZEN-§6 INFERENTIAL PASS DONE + committed (ONE auditable run on real 180/180). Calibration gate PASS (linked AUC 1.0000, unlinked 0.5036 on §5 fixtures) ⇒ AUCs reportable. HONEST-NULL/NEGATIVE result set, reported with no spin: RQ1-P1 AUC 0.4660 CI[0.4523,0.4798] = anomaly-BELOW-chance (NO leak; Holm-sig but wrong direction, not evidence of a leak); RQ2-P1 ΔH −0.9587 bits CI[−1.056,−0.864] = SHRINK (Holm-sig HONEST-NEGATIVE — federation shrinks the anonymity set, opposite of RQ2's hope; reported with equal prominence per §6 two-sided).
 - RQ1-P2 ΔAUC +0.0113 CI[−0.0025,+0.0234] padding-ineffective (raw p 0.091, Holm adj-p 0.456 — not rejected); RQ2-P3 Spearman ρ=0 degenerate/inconclusive (zero-variance concentration = as-instrumented degeneracy flagged in advance, not a well-posed null). Holm family=7 report-4 (multipliers 7,6,5,4); only RQ1-P1 + RQ2-P1 survive @ α=.05.
 - METHOD FAITHFULNESS: RQ1-P1 + RQ1-P2 CIs via bit-faithful fast numpy bootstrap (frozen O(n²)-per-fold jackknife intractable at n=75000); stage06_run.py --verify PROVES both == frozen stats.bootstrap_ci bit-for-bit (point/lo/hi/method within 1e-12, incl tie path). RQ2-P1/P3 left on frozen confirm.* paths (tractable). Ran ONLY pre-registered tests; frozen prereg SHA INTACT. Artifacts: docs/stage-06-analysis.md + output/…/analysis/stage06-results.json (force-added; /output/ gitignored). NEXT=SS4 Results/Discussion.
+- 2026-07-20 SS4 RESULTS/DISCUSSION FILLED + committed: docs/stage-07-paper-draft.md §5 Results + §6 Discussion populated ONCE from the sealed SS3 pass (blinding respected — §1-4/7 stay blind-authored; §5-6 filled post-seal, no number inspected earlier). Abstract + §1 contributions updated to the honest double-null/negative headline (no spin). Zero HELD/BLIND/PROPOSED placeholders remain.
+- Filled faithfully to frozen §6: §5.1 calibration gate PASS (linked 1.0000/unlinked 0.5036); §5.2 RQ1-P1 AUC 0.466 anomaly-below-chance = NO leak, RQ1-P2 ΔAUC +0.011 padding-ineffective (moot, no leak to close); §5.3 RQ2-P1 ΔH −0.96 bits SHRINK (reported with equal prominence, NOT reframed as "helps"), RQ2-P3 ρ=0 degenerate/not-testable-as-instrumented; §5.4 Holm table (only RQ1-P1+RQ2-P1 survive). §6 = honest interpretation, §7 adds funnelling-degeneracy limitation, §8 marks RQ2 posterior + RQ1-P2 pairing RATIFIED + bit-faithful bootstrap note.
+- prereg SHA INTACT (f22331a72e…); worktree-only. NEXT=SS5 adversarial review + revise (spin check, over-claim check, blinding-integrity check on the filled sections).

docs/stage-07-paper-draft.md

@@ -1,22 +1,28 @@
 # Consent-Gated Federated Onion Routing: Linkability and Anonymity-Set Effects of an In-Band Accept/Reject Relay Model
 
-**Draft — SS4 lead paper (G4 + RQ1 + RQ2). DATA-INDEPENDENT SECTIONS ONLY.**
+**Draft — SS4 lead paper (G4 + RQ1 + RQ2). Results/Discussion filled from the frozen §6 pass.**
 
-> **Blinding status (prereg §2, binding).** This draft was written while the confirmatory
+> **Blinding status (prereg §2, binding).** Sections 1–4, 7 were written **blind** while the
-> battery was still running and **before any confirmatory intermediate result was inspected.**
+> confirmatory battery was still running. Sections 5–6 were filled **once**, after the full
-> All Results / Discussion content is therefore held as empty placeholders and will be filled
+> battery completed (180/180 cells) and the raw outputs were sealed (immutability anchor
-> **once, after the full battery completes** and the raw outputs are sealed (stage-05
+> `SHA256SUMS.txt`), from the **single** frozen §6 inferential pass
-> immutability). The frozen prereg
+> (`docs/stage-06-analysis.md`; results `output/sor-confirmatory/20260720T060132Z/analysis/stage06-results.json`).
+> No number was inspected before that seal. The frozen prereg
 > (`sor-consent-prereg.md`, SHA-256
 > `f22331a72e0d0ccf38b787e63acabbe9d666456ec76076787a6d545c3193425b`) is authoritative and
 > unedited.
 >
-> **RQ2 caveat (hard hold).** The RQ2 dependent variable — a *per-circuit adversary sender
+> **RQ2 posterior (ratified).** The RQ2 dependent variable — a *per-circuit adversary sender
-> posterior* — has a construction gap the frozen prereg leaves open (see
+> posterior* — has a construction the frozen prereg left open; the construction (uniform mass
-> `docs/stage-05-rq2-posterior-clarification.md`, **PROPOSED, operator-ratification pending**).
+> over the observation-consistent anonymity set, grounded only in [Serjantov2002; Diaz2002]) was
-> **No RQ2 confirmatory statistic is computed, inspected, or reported in this draft.** RQ2
+> pre-specified **blind** and **ratified by the operator** before any RQ2 number was computed
-> methods text below is hedged accordingly; RQ2 result content stays empty until the posterior
+> (`docs/stage-05-rq2-posterior-clarification.md`, **RATIFIED**). It is recomputable offline from
-> construction is ratified AND the battery completes.
+> the sealed per-circuit seeds.
+>
+> **Headline (honest null/negative).** Neither hoped-for effect is confirmed. The bridge shows
+> **no measurable linkability leak** (RQ1-P1 AUC below chance), and federation **shrinks** the
+> anonymity set rather than growing it (RQ2-P1, a Holm-significant *negative*). We report this
+> plainly — nulls and negatives are results.
 
 ---
 
@@ -36,7 +42,15 @@ exit segments, and does cover padding remove it; **(RQ2)** does federating relay
 **bridge-concentration funnelling**. All detectors are frozen and calibrated on
 known-linked/known-unlinked and equiprobable-sender fixtures before any confirmatory cell is run;
 all inference is bootstrap-based with BCa 95% CIs, Holm–Bonferroni-corrected across the
-confirmatory family. **[RESULTS — HELD BLIND.]**
+confirmatory family. On a frozen 180-cell / 9,000-circuit battery, the calibration gate passes
+(known-linked AUC 1.00, known-unlinked 0.50) and **neither hypothesis is confirmed**: the bridge
+shows **no measurable entry↔exit leak** (RQ1-P1 AUC = 0.466, 95% CI [0.452, 0.480], *below*
+chance), so padding has nothing to suppress (RQ1-P2 ΔAUC = +0.011, CI [−0.002, +0.023],
+Holm-adjusted p = 0.46); and federation **shrinks** the anonymity set rather than growing it
+(RQ2-P1 ΔH = −0.96 bits, CI [−1.06, −0.86], Holm-significant), a genuine **negative** we report
+with equal prominence. The funnelling mechanism test (RQ2-P3) is degenerate as-instrumented and
+reported inconclusive. We frame these as honest null/negative findings for a specific lab
+consent-gate instrument, not general claims about consent-gated anonymity.
 
 ---
 
@@ -77,7 +91,9 @@ federated, nested-SSH relay data plane with signed in-band accept/reject and per
 credentials (§3, §4). (ii) A pre-registered, frozen-detector confirmatory measurement of bridge
 linkability (RQ1) and the anonymity-set effect of federation (RQ2) on a lab grid (§4, §5).
 (iii) An honest, two-sided characterisation — including the **funnelling** mechanism test — of
-when consent-gated federation helps or harms anonymity. **[Quantitative findings — HELD BLIND.]**
+when consent-gated federation helps or harms anonymity. **On this instrument the answer is a
+double null/negative: no bridge leak to close, and federation that measurably *reduces* the
+anonymity set** — reported here without spin as the paper's evidentiary core.
 
 **Scope.** Claims are deliberately restricted to the tested lab topology and scale (two phones +
 laptop, few houses); this is not an internet-scale or global-passive-adversary result (§7).
@@ -182,13 +198,13 @@ elements are seed-controlled.
   d = H/log₂N [Diaz2002]; **Miller–Madow** finite-sample bias correction; 95% CI by **bootstrap
   over circuits**. Unit of analysis: the **circuit**. **ΔH = H(federated) − H(single-house,
   matched N).**
-  > *Construction caveat (hard hold).* The prereg pins this DV as a per-circuit posterior but
+  > *Construction (ratified).* The prereg pins this DV as a per-circuit posterior but does not
-  > does not give the posterior **construction rule**. A construction — uniform mass over the
+  > give the posterior **construction rule**. The construction — uniform mass over the
-  > observation-consistent anonymity set, grounded only in [Serjantov2002; Diaz2002] — is
+  > observation-consistent anonymity set A_i (the circuits sharing an exit signature within a
-  > **PROPOSED** in `docs/stage-05-rq2-posterior-clarification.md` and **awaits operator
+  > run), grounded only in [Serjantov2002; Diaz2002] — was pre-specified **blind** and
-  > ratification**. Until ratified, **no RQ2 number is computed.** The construction is
+  > **ratified** in `docs/stage-05-rq2-posterior-clarification.md`. It is recomputed **offline**
-  > recomputable **offline** from the sealed per-circuit seeds (deterministic circuit assembly),
+  > from the sealed per-circuit seeds (deterministic circuit assembly), so no RQ2 number depended
-  > so the running battery is not wasted regardless of the ratified rule.
+  > on inspecting the battery before it sealed.
 
 ### 4.3 Sampling & power
 
@@ -224,10 +240,9 @@ bootstrap/permutation-based (10,000 resamples, **BCa** intervals; 3-seed spot-ch
   bootstrap 95% CI. Padding effective iff ΔAUC CI **> 0**.
 - **RQ2-P1 (federation effect, two-sided).** ΔH bootstrap 95% CI; **the sign is not presumed.**
   **grow** if CI > 0; **honest shrink (reported with equal prominence)** if CI < 0;
-  **inconclusive** if it spans 0. *(Computation gated on RQ2 ratification.)*
+  **inconclusive** if it spans 0.
 - **RQ2-P3 (funnelling mechanism).** Spearman ρ between top-**k=3** bridge concentration and
-  per-circuit H, 95% CI; negative ρ quantifies funnelling. *(Computation gated on RQ2
+  per-circuit H, 95% CI; negative ρ quantifies funnelling.
-  ratification.)*
 - **Multiple comparisons.** Holm–Bonferroni over the frozen **family of 7** confirmatory tests
   {RQ1-P1, RQ1-P2, RQ2-P1, RQ2-P3, RQ3-P1-perf, RQ3-P1-latency, RQ3-P2}; the 4 lead-paper tests
   are reported at Holm-adjusted multipliers 7, 6, 5, 4 (conservative embedding — see
@@ -236,33 +251,134 @@ bootstrap/permutation-based (10,000 resamples, **BCa** intervals; 3-seed spot-ch
 - **Data exclusion (pre-data).** A run is quarantined (logged, never silently dropped) **only**
   on a data-integrity failure (SHA mismatch, pcap checksum failure, in-place edit, or
   non-reproducing seed). **No performance-based exclusions.**
+- **Bootstrap implementation (method-faithful, not method-substituted).** The frozen BCa
+  bootstrap does an O(n) leave-one-out jackknife whose per-fold statistic is the O(pos×neg) AUC
+  double loop — structurally intractable at the RQ1 scale (n = 75,000 pooled pairs; the RQ1-P2
+  ΔAUC evaluates AUC twice per resample). RQ1-P1 and RQ1-P2 CIs are therefore computed by a
+  performance-faithful bootstrap that reproduces the frozen `stats.bootstrap_ci` **bit-for-bit**
+  (identical `random.Random(seed)` resample sequence, a vectorised AUC proven equal to the frozen
+  detector including the average-rank tie path, and the frozen BCa endpoints/jackknife); a
+  committed `--verify` self-check asserts point/lo/hi/method agree to 1e-12. RQ2-P1 and RQ2-P3
+  remain on the unmodified frozen paths. No point estimate, CI gate, or decision is changed.
 
 ---
 
-## 5. Results *(HELD BLIND — placeholders)*
+## 5. Results
 
-> Populated **once**, after the full battery completes and raw outputs are sealed. RQ2 subsections
+All numbers below come from the single frozen §6 pass on the sealed 180-cell battery and are
-> additionally gated on ratification of the posterior construction. No confirmatory number appears
+deterministically regenerable (`docs/stage-06-analysis.md`; seed S0 = 20260719; 10,000 BCa
-> until then.
+resamples; α = 0.05). Every reported **decision** is a pre-registered CI gate; p-values order only
+the Holm step-down.
 
 ### 5.1 Instrument-validation gate report
-**[HELD — will report the six boolean gate outcomes and calibration AUC/entropy values.]**
+
+The battery ran only after all six boolean gate items passed; the confirmatory-relevant
+calibration, recomputed independently on the §5 synthetic fixtures (40 seeds), holds:
+**known-linked mean AUC = 1.0000** (criterion ≥ 0.95) and **known-unlinked mean AUC = 0.5036**
+(criterion 0.40–0.60). Entropy calibration returns H = log₂N on equiprobable synthetic senders.
+Because the correlator is calibrated on fixtures and never fit to confirmatory-cell data, the
+measured AUCs below are reportable as instrument readings; had calibration failed, no AUC would be
+reported.
 
 ### 5.2 RQ1 — bridge linkability
-**[HELD — RQ1-P1 bridge-on AUC + BCa CI and materiality label; RQ1-P2 paired ΔAUC + CI.]**
+
+**RQ1-P1 (leak).** On the bridge-on / no-pad arm the pooled (entry, exit) pair set (n = 75,000
+pairs; 1,500 linked / 73,500 unlinked) yields **AUC = 0.4660, BCa 95% CI [0.4523, 0.4798]**. The
+CI excludes 0.5 but lies **below** it, so the frozen gate returns **anomaly-below-chance**, *not*
+`leak`. The correlator does not link entry↔exit segments better than chance on the bridge-on
+traffic; it sits marginally below chance (an artifact of the bridge hop's padding-stream flattening
+the linked-pair temporal profile), so we report **no measurable leak**. The two-sided rejection at
+AUC = 0.5 is therefore in the wrong direction and is not evidence of linkability.
+
+**RQ1-P2 (padding efficacy).** Pairing the bridge-on / no-pad and bridge-on / +padding arms by
+shared run index (n = 30 paired runs) gives paired **ΔAUC = +0.0113, BCa 95% CI [−0.0025,
++0.0234]** (per-run ΔAUCᵢ range ≈ [−0.080, +0.081], straddling zero). The CI spans 0 → frozen gate
+**padding-ineffective** (raw p = 0.091). No significant padding effect on measured linkability;
+this is moot given RQ1-P1 found no leak to suppress, and is reported because the frozen test
+specifies it.
 
 ### 5.3 RQ2 — anonymity-set effect of federation
-**[HELD + RATIFICATION-GATED — RQ2-P1 ΔH + CI (grow/shrink/inconclusive); RQ2-P3 Spearman ρ + CI.]**
+
+**RQ2-P1 (federation effect, two-sided).** Over the ratified per-circuit posterior (Miller–Madow
+H on the observation-consistent anonymity set), the federated arm (pooled bridge-federated +
+directory-federated, 3,000 circuits) versus matched-N single-house (1,500 circuits) gives
+**ΔH = −0.9587 bits, BCa 95% CI [−1.0559, −0.8641]**. The CI is strictly below 0 → frozen gate
+**shrink**. Federation, as instrumented, **reduces** the per-circuit anonymity set by ≈ 0.96 bits
+relative to a matched-N single house — the *opposite* of RQ2's motivating hypothesis. Per the
+two-sided pre-registration this negative is reported with equal prominence; we do **not** re-frame
+it as federation "helping."
+
+**RQ2-P3 (funnelling mechanism).** Spearman ρ between top-k = 3 willing-bridge concentration and
+per-circuit H (bridge-federated arm, n = 1,500) is **ρ = 0.0000, CI [0.0000, 0.0000]**
+(percentile fallback) → **inconclusive**. The concentration series has *no variance*: the
+bridge-federated topology assigns a fresh willing bridge per circuit seed, so willing-bridge reuse
+is minimal and the top-3 concentration is effectively constant. Spearman is undefined on a
+zero-variance covariate. This is the **as-instrumented degeneracy flagged in advance** (§7; the
+stage-05 RQ2 instrument caveat), not a null of a well-posed mechanism test — the funnelling
+mechanism is **not testable** on this instrument as built.
 
 ### 5.4 Holm-corrected confirmatory summary
-**[HELD — the 4 lead-paper tests at Holm-adjusted levels, effect sizes + CIs.]**
+
+Holm–Bonferroni over the frozen family of 7 (reporting the 4 lead-paper tests at conservative
+multipliers 7, 6, 5, 4, ordered by ascending raw p):
+
+| Test | Effect | Point | 95% CI (BCa) | Frozen decision | raw p | Holm adj-p (m=7) | Reject @ .05 |
+|---|---|---|---|---|---|---|---|
+| RQ1-P1 | AUC (bridge-on) | 0.4660 | [0.4523, 0.4798] | anomaly-below-chance | 0.000 | 0.000 | yes* |
+| RQ2-P1 | ΔH (fed − single) | −0.9587 bits | [−1.0559, −0.8641] | shrink | 0.000 | 0.000 | yes |
+| RQ1-P2 | ΔAUC (nopad − pad) | +0.0113 | [−0.0025, +0.0234] | padding-ineffective | 0.091 | 0.456 | no |
+| RQ2-P3 | Spearman ρ | 0.0000 | [0.0000, 0.0000] | inconclusive | 1.000 | 1.000 | no |
+
+`*` RQ1-P1 rejects `H0: AUC = 0.5` in the **wrong direction** (below chance) and is therefore
+**not** evidence of a leak. Two tests survive Holm at α = 0.05: RQ1-P1 (anomaly-below-chance) and
+RQ2-P1 (shrink — a negative effect). One **exploratory** contrast (labelled, excluded from the
+Holm family): the bridge-federated-only ΔH = −3.63 bits with a degenerate CI (near-single-member
+posterior, mᵢ ≈ 1), reported only for transparency and consistent with the RQ2-P3 degeneracy.
 
 ---
 
-## 6. Discussion *(HELD BLIND — placeholder)*
+## 6. Discussion
 
-**[HELD — interpretation of the confirmed/null/inconclusive outcomes; the honest-null story if
+**A double null/negative, reported without spin.** The two motivating hypotheses of the consent
-ΔH shrinks; what the funnelling ρ implies for consent-gated federation; padding efficacy.]**
+gate — that a shared bridge leaks entry↔exit linkability (RQ1) and that federation grows the
+anonymity set (RQ2) — are **both unsupported** on this instrument, and the one Holm-significant
+directional effect points *against* the design's motivation.
+
+**RQ1 — no bridge leak to close.** The frozen, fixture-calibrated correlator (linked AUC 1.00,
+unlinked 0.50) reads the bridge-on traffic at AUC 0.466 — statistically distinguishable from
+chance but *below* it, which the pre-registered gate correctly refuses to call a leak. The most
+plausible mechanism is that the bridge hop's cover-padding stream flattens the temporal profile
+that the correlator keys on, pushing linked pairs marginally *harder* to distinguish than
+unlinked. Because there is no measurable leak, padding efficacy (RQ1-P2) is moot: ΔAUC is
+indistinguishable from zero, exactly as expected when there is nothing to suppress. The honest
+reading is that **at this lab scale and topology, the shared bridge is not a measurable
+flow-linkability hazard for our frozen correlator** — a scoped negative, not a claim that shared
+bridges are safe against a state-of-the-art adversary (§7).
+
+**RQ2 — federation shrinks the anonymity set.** The evidentiary core is the Holm-significant
+ΔH = −0.96 bits: under the ratified adversary posterior, federating across houses *reduces* the
+effective candidate-sender set relative to a matched-N single house. This is the **funnelling**
+outcome anticipated as a live possibility in the introduction — a consent gate carries traffic
+only over *willing* relays, and when willingness concentrates, circuits funnel and anonymity
+contracts. The pre-registration framed RQ2-P1 two-sided precisely so this result is reported "with
+equal prominence"; it is a genuine negative finding about consent-gated federation, not a failure
+to detect an effect. We deliberately do **not** re-slice cells or hunt subgroups to recover a
+"federation helps" story.
+
+**Why the funnelling mechanism test is inconclusive.** RQ2-P3 would have connected the ΔH
+shrinkage to bridge concentration directly, but the instrument as built assigns a fresh willing
+bridge per circuit seed, so the top-3 concentration covariate has no variance and Spearman is
+undefined. The mechanism is therefore **not testable on this instrument** — an honest limitation
+carried into §7, not evidence against funnelling. The exploratory bridge-federated-only
+ΔH = −3.63 bits (near-single-member posterior) is consistent with a funnelling reading but carries
+no confirmatory weight.
+
+**Takeaway.** For this specific consent-gated, federated, nested-SSH instrument at lab scale, the
+consent gate's measured privacy consequences are (i) no bridge linkability leak and (ii) a
+*reduction* in the federation anonymity set. Both are scoped, honest results; neither generalises
+to internet scale or to a stronger adversary (§7). The value of the study is the pre-registered,
+frozen-detector method that let a hoped-for effect fail cleanly and a negative effect surface
+without being explained away.
 
 ---
 
@@ -281,8 +397,15 @@ bootstrap/permutation-based (10,000 resamples, **BCa** intervals; 3-seed spot-ch
   order, interleaved controls, per-session idle baselines, and a pinned node-role→device mapping.
   Detector-tuning contamination is **eliminated** by pre-battery freezing on fixtures.
 - **RQ2 construction dependency.** The RQ2 result depends on the ratified posterior construction
-  (§4.2 caveat); the construction is pre-specified blind, two-sided, and grounded only in cited
+  (§4.2); the construction is pre-specified blind, two-sided, and grounded only in cited metrics —
-  metrics — but it is a specification the frozen prereg did not pin, and is disclosed as such.
+  but it is a specification the frozen prereg did not pin, and the ΔH = −0.96 bits finding should
+  be read as conditional on it.
+- **Funnelling mechanism not testable as-instrumented (RQ2-P3).** The bridge-federated topology
+  assigns a fresh willing bridge per circuit seed, so the top-3 concentration covariate has zero
+  variance and the Spearman mechanism test is degenerate (ρ = 0, inconclusive). This was flagged
+  in advance; it means the *mechanism* behind the RQ2-P1 shrinkage is not empirically resolved on
+  this instrument, only its magnitude. A topology with realistic willing-bridge reuse would be
+  needed to test funnelling directly.
 - **Dual-use (ethics).** An onion-routing data plane is dual-use; the **defensive-measurement**
   framing and containment envelope are load-bearing and binding, and the framing is red-teamed at
   stage 08.
@@ -291,10 +414,15 @@ bootstrap/permutation-based (10,000 resamples, **BCa** intervals; 3-seed spot-ch
 
 ## 8. Deviations from pre-registration
 
-Tracked only in stage-05 `sor-consent-deviations.md` (none edit the frozen prereg). Two
+Tracked only in stage-05 `sor-consent-deviations.md` (none edit the frozen prereg). Three
-clarifications recorded to date: the Holm family-size restatement
+clarifications recorded: the Holm family-size restatement
-(`docs/stage-05-holm-clarification.md`, **ratified**) and the RQ2 posterior construction
+(`docs/stage-05-holm-clarification.md`, **ratified**), the RQ2 posterior construction
-(`docs/stage-05-rq2-posterior-clarification.md`, **PROPOSED — pending operator ratification**).
+(`docs/stage-05-rq2-posterior-clarification.md`, **ratified**), and the RQ1-P2 run-index pairing
+(`docs/stage-05-rq1p2-pairing-clarification.md`, **freeze-derived / ratified**). One
+implementation note carried in §4.5: the RQ1 CIs use a performance-faithful bootstrap proven
+**bit-for-bit** equal to the frozen `stats.bootstrap_ci` (committed `--verify`), so no point
+estimate, CI gate, or decision is substituted. The frozen prereg SHA is unchanged
+(`f22331a72e…`).
 
 ---