[Brian Krabach (bkrabach)]

Scope

Opt-in safe-boundary maintenance pause, release and explicit resume for native Live roots and owned jobs. Preserve original input/generation/job/call identities, finite and persistent child ownership, pending steering, and completed results awaiting delivery. Provider-native opaque execution refuses unsupported suspension. Ordinary cancellation and evidence-only crash recovery remain separate; no scheduler, coroutine serialization, automatic replay, or remote-rollback guarantee is added.

Published successor: d52f0ecf17e47e9e88f6d4d5c029e75156255ca4

This publishes the previously retained local candidate 7c5e2d6c173762c0fbd2ca32184e8101aad7e731, including its accepted-main 76073827 cancellation/native-history integration. The only new repository change from that candidate is the one-line uv.lock update to accepted Streaming main 941806a4a42c84c7c239fd8e0f8ef1260f1ec32f.

Streaming #67 actually merged on October 25 at 08:18 PDT. Its accepted tree exactly matches reviewed 395594ad; this is no longer an unpublished branch dependency. The existing @main dependency declaration and normal CI workflow are unchanged. The resolver output was checked; unrelated package versions, artifact URLs/hashes and registry selection remain unchanged. uv lock --check passes against the retained registry.

The retained repairs validate envelope version/epoch and matching paused-job ledger before acknowledgment/remount, reject orphan paused ledger rows without an envelope, and preserve generation and parallel-group attribution. Ledger-free ordinary execution remains supported; durable background suspension requires live.jobs.

Evidence

Normal exact-head GitHub CI run 40789195441 passes all five jobs on d52f0ec: Ubuntu and macOS, Python 3.11 and 3.13, plus the offline native-adapter job. Each package job reports 143 passed / five skipped, builds the package and passes the separate installed-wheel import check. The native-adapter job reports 50 passed with the optional provider installed. The existing skips are not counted as coverage; no tests or workflow gates were removed. Logs identify Streaming 941806a4, Core 9614052f (2.0.2), context-simple db641363, and optional OpenAI provider 7ce77da9. The old 2e2de0d missing-Streaming-module failure is retained; it is not reused as evidence about this successor.

Earlier evidence retains its original identities:

• Local 7c5e2d6c with paired Streaming ccd958c: 105 focused checks passed / one existing compaction fixture skip; both wheels built, offline/no-deps Live installation and outside-source package-byte validation passed.
• Earlier aee0f437 recovery repairs: 85 focused checks passed / one existing skip, after retained test-first failures. Multi-job pause/release/remount preserved original calls and groups without duplicate dispatch.
• Independent Astra and Fable second-opinion source assessments were completed on the Live repairs and current-main integration. Final Live-repair reviewers were openai/gpt-6-astra (5697439cfc01483f_self) and fable/claude-fable-5-1 (cf525c90286c4d5b_self); integration assessments were 359dc215108f45a4_self and 0fb25d9f19e74218_self. Findings and dispositions remain retained. These are supplied-evidence source assessments, not eligible maintainer approvals; unchanged reviews were not rerun merely for publication.

Remaining acceptance boundaries

This is ready for independent review, not merge, release or host adoption. Normal maintainer approval remains required. Foundation #447, exact 5265d6cc, remains open with its normal maintainer request pending. The Live package does not import its unmerged delegate implementation; actual cooperative delegate completion still needs that accepted tool capability and host integration.

Main owns all ecosystem merge/release decisions and Unified #945's native-kernel frame transport, durable competing claims, crash-after-consumption handling, current Stop/permission/budget/session binding, and original child-result recovery. Module fixtures and CI do not prove those host guarantees. Historical failures, unknown outcomes and cleanup caveats are retained. No admin exception, protection change, live/shared-runtime update, or live-provider test is claimed.