Parent #66; follows #703. Native outcome storage and selected production controls are implemented in 719d636/aa8b9a5 and extended by 61670c72b. Related #723 (child lifetime/platform verification), #724 (full CI selection/setup/vendor execution), #202/#709. All published as Chris Breuer without coauthors on origin/main.
Implemented and verified on native macOS:
- Exclusive durable result directories; all selected paths flushed before execution; launch-attempt/completion/final records with executable/source hashes, exact argv/cwd/environment/deadlines and raw stream hashes. Interruptions, unstarted files, failed writes and overwrite attempts remain explicit failures/incomplete evidence.
- Native JUnit retained outside temporary storage for ordinary test-runner files; separate Node/script launch contracts. Hash/XML/case-counter validation rejects malformed or incomplete evidence. Schema 2 includes stream completeness; schema 1 remains readable with completeness unknown.
- Separate pass/fail/skip/TODO counters, plus distinct script/empty/platform and verified negative-fixture outcomes. ANSI presentation does not hide strict negative diagnostics; rejected negatives retain their actual failing cases.
- Original deadlines now cover child lifetime after pipe EOF, without losing ownership/exit status during observation. Real libc-FFI controls establish actual EOF, early success and the unchanged 20-second timeout. Native Linux/Windows execution remains pending in #723; compile-only checks are not execution credit.
Verification: 23/23 build steps; 12/12 native harness tests; 2/2 child-ownership units; 3/3 journal units; 9/9 validator units; targeted Pickier passed. All real CLI controls pass, including mixed cases, invalid negative contracts, continuing after failures, empty/scripts, overwrite refusal, open/closed-pipe timeouts, signal, interruption and failed writes.
Six unchanged original files validate: 402 passing registered cases, 1 platform skip, 10 TODOs, one successful Node script, one verified negative process contract and one comment-only file. The negative fixture keeps its original failing JUnit case and contributes no passing test. All six captures are complete; source/snapshot and executable hashes remain unchanged. Home SHA256 fd7c61bf96b18d6954687cd33eb95e429290007f5d199fb985d364e868eb98c4. Final evidence.
Still required before completion:
- Port/verify the complete pinned CI selection and setup contract, including the additional Elysia 1.4.28 vendor suite (#724); the 4,754 primary paths are pre-exclusion discovery.
- Execute the entire applicable primary and vendor suite with real prerequisites and original deadlines, retaining all failures for feature porting. No retry-based or reduced-workload passing claims.
- Preserve full-suite source/snapshot/executable integrity and complete native platform/ASAN verification. Runtime features, default CLI fallback removal and independent native build ownership remain in #66.