[EHotwagner]

The Done-retention planner excluded live-blocker-protected cards before choosing the newest 200, shifting the retention cutoff. Rank every valid terminal Done card first, keep the newest 200, then protect older blockers. Prepare the guarded daily fdev writer while retaining the hosted counts-only observer.

Refs #5170

The sibling archive installer stages immutable scripts and two disabled user units. It preserves the existing tend installer/runtime-hash/XDG checks and never calls systemd or changes tend configuration. Exact private activation/reader/binding pins, Root's accepted first-real receipt, durable directory/custody anchoring, an unresolved-run latch and strict settled-effect grammar remain mandatory.

Validation and preparation:

• Original wider archive source/runtime controls and independent reviews remain retained. Nine archive files are byte-identical to reviewed 569c473f; all 10 registry PR chore: reconcile published coherent 0.114.4 #5260 paths and the accepted report are preserved. The only extra census change is the archiver script SHA. No src/ or tools/ diff. The archive external-route evidence now pins the same reviewed script SHA while preserving its predecessor identity, Root approval date and unresolved writer classification.
• Prior targeted composition controls passed 26 archive/ranking tests and 19 installer/kit/enable/staging tests. No repeated suite is claimed on this byte-identical replay; the maintained structural census check and final diff check pass.
• One freshly admitted maintained-source DRY RUN made 5 read requests and retained complete 3 Done pages (207 rows) plus 2 live pages (191 rows). It observed 398 items, 207 valid ranked Done, newest 200 kept, and 7 actual planned archives. No archive mutation was sent. Complete private pagination and selection evidence is retained; enrollment is Unknown because no binding or reader qualification was asserted. This plan is not archive admission.

The candidate is based on actual #5260 merge 07229d66, not its pending 7d709fe1 head; their trees match. Original archive candidates 85b003d/569c473f and pending-base ad735826 remain preserved. The source preparation performed no installation, activation or native write; original candidates and evidence remain retained.

The original CI cohort passed all 10 required contexts but its broader edge check failed on the stale archive external-route SHA. That first failure is retained. A narrow evidence-only repair passed the actual maintained Python structural subgates, all 66 validator selftest identities, and a stale-pin negative control; no CLR or workflow replay was used for the repair. Changed-source hosted qualification remains distinct.

Root retains source/requiredCI integration, current qualified reader/enrollment pairing, first guarded archive with independent readback, and scheduled activation/native proof. This merge continues the same Delivery and cannot claim full #5170 acceptance.

architecture-map: unaffected