record blocked legacy model provenance migration

docs/CODEX_EXECUTION_LOG.md

@@ -12498,3 +12498,33 @@ Open:
 - The active model remains review-required and Kempen-scoped. The export gate
   prevents overstated results; it does not replace the missing independent,
   human-reviewed national accuracy corpus or improve model weights by itself.
+
+## 2026-08-09 - Reviewedexp6 provenance migration audit
+
+### Inspected
+
+- Recovered and checksummed the original challenger weights, training summary,
+  Ultralytics arguments, results, dataset YAML, 252-tile/79,192-label summary
+  and legacy dataset-quality audit.
+- Reproduced the recorded seed `0`, deterministic request, CPU device, twenty
+  epochs, active base-model hash and train/validation counts.
+- Ran the current human-review eligibility validator against the retained
+  audit; it failed on missing accepted review evidence, manifest immutability,
+  spatial-leakage status and incomplete review state.
+
+### Decision
+
+- Refused to invent the absent historical training commit, container digest,
+  runtime receipt, corpus/label/split manifests, reviewer decisions or source
+  registry UUIDs.
+- Created no runtime sidecar, database provenance row or production model
+  activation. The active scoped model and healthy GPU runtime remain unchanged.
+- Retained the complete fail-closed audit under
+  `artifacts/evidence/accuracy/model-training/20260809-reviewedexp6-provenance-migration-audit.json`.
+
+### Required next gate
+
+- Complete P2-00 through P2-07 and the governed Phase-4 blockers, obtain real
+  representative human review, freeze a new independent corpus and only then
+  train a pre-registered GPU candidate with provenance captured from process
+  start. The legacy checkpoint cannot be made compliant retroactively.

docs/TODO.md

@@ -1141,3 +1141,9 @@ This file now starts with the current implementation status. Older preparation/b
   image/model/config hashes, shadow evidence and tested rollback.
 - [ ] P2-12: monitor drift into a human reviewqueue without automatic
   self-training or silent promotion.
+- [x] Audit whether the July `reviewedexp6` checkpoint can be migrated into the
+  current runtime provenance contract without invented evidence; retain the
+  checksum-bound blocked report.
+- [ ] Do not generate a production sidecar for `reviewedexp6`: its exact
+  training commit/runtime, immutable corpus-label-split manifests and accepted
+  human-review ledger were not retained and cannot be reconstructed safely.

docs/reviews/2026-08-09-ai-assisted-checkpoint-review.md

@@ -62,3 +62,28 @@ the only safe production choice.
 
 Machine-readable hashes, metrics, paths and the exact decision are in
 `artifacts/evidence/accuracy/model-training/20260809-v68-checkpoint-and-threshold-review.json`.
+
+## Provenance migration follow-up
+
+The original July training directory was audited after the threshold review.
+It retains exact weights, Ultralytics arguments, result curves, dataset YAML,
+dataset summary and a structural quality audit. This recovers useful facts,
+including seed `0`, deterministic mode, the base-model hash and all dataset
+counts.
+
+It does not retain the complete evidence required to construct a current
+production sidecar truthfully. In particular, the exact training commit,
+container digest, dependency/runtime receipt, immutable corpus and label
+release manifests, independent split audit and accepted human-review ledger
+are absent. The current review validator reproduces four failures:
+
+- `accepted_human_review_evidence_missing`;
+- `review_audit_manifest_not_immutable`;
+- `review_audit_spatial_leakage_not_ok`; and
+- `review_complete_not_true`.
+
+No UUID, upstream checksum, historical runtime or reviewer decision was
+invented. Consequently no runtime sidecar or database source snapshot was
+created, and the challenger remains unavailable to production inference. The
+full machine-readable audit is retained in
+`artifacts/evidence/accuracy/model-training/20260809-reviewedexp6-provenance-migration-audit.json`.