docs(track-a): design worldmap extent mutation validation

[blakinio]

Track A world-map mutation design

Task: OTC-20260817-track-a-worldmap-mutation-design
Base: main@2ad6565f6f598b15acaeb3d182a3ffb70d187ba6
Execution: github_hosted, runtime_access:none.

This PR consumes the coordinator-accepted frozen static graph from merged #367/#437/#446 and closes the design-only stage.

Final design classification:

STATIC_PATCH_GRAPH_READY: true
MUTATION_DESIGN_READY: true
OFFLINE_PATCH_PLAN_READY: true
SAFE_MUTATION_PROVEN: false
PHYSICAL_VALIDATION_CONTRACT_READY: true
PHYSICAL_VALIDATION_EXECUTION_AUTHORIZED: false
client_byte_mutation_authorized: false
runtime_access: none

Exact anchor:

VA 0x01cdd958
preimage 12 00 00 00 0e 00 00 00 08 00 00 00 06 00 00 00

The future executor must derive VA→file offset from the fenced ELF's own PT_LOAD headers, verify exact size/SHA/preimage, patch only a task-owned copy, prove the whole-file diff is zero outside the first 8 bytes, and preserve the original exact source unchanged.

Recommended first causal canary is [19,14] (130000000e000000 for the first 8 bytes): one-axis, one-byte delta. It is explicitly not a final target or safety claim. No Viewport/RenderProvider/Picker/Camera second patch site is authorized; downstream writer/network/capacity/allocation/Camera unknowns remain explicit.

Fresh documentation audit record: docs/agents/evidence/OTC-20260817-track-a-worldmap-mutation-design/20260817-final-audit.md.

Audit result: PASS, 0 material findings open. WM-MD-AUD-001 (abbreviated SHA inside normative fail-closed steps) was remediated by using the complete exact hash and clarifying the conservative encoder/load-base boundaries.

No official client was executed or modified by this PR. No Synology static-analysis fallback, live process/session/X11/VNC, raw client upload, or owner-funded Codex/OpenAI API quota was used.

Physical E2E for this documentation/design PR is NOT_APPLICABLE. A patched runtime has a different SHA and must not be represented as the exact canonical client; actual mutation/launch/login/semantic validation requires a separately admitted future Track A task under then-current runtime/session authority.

At design/audit time coordinator PR #448 remains open/draft and is not treated as trusted-main runtime identity implementation.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.