docs(roadmap): preserve profile integrity and next eligible work

docs/direct-roadmap/FINDINGS.md

@@ -53,3 +53,5 @@ Import/conversion one-item wording resolved in44112c7c;50 overlapping tests and
 V47 Rules third-column/mobile-gap discrepancy resolved in99b144f4;final76 affected cases and12 configurations/84 scans passed. V45–V47 dispositions and route evidence are published in9f341750. Remaining full-route/native/security/release obligations unchanged.
 
 Submitted package CV metadata/render revision mismatch and disappearance reproduced/fixed (e161ea33; integratedf807d46f). Legacy0 compatibility failure corrected,22casespass. Backup permission double-failure falsely continued through actual conditional gates; fixed1c8761b1,19methods pass. Concurrent Career Profile render consistency and attachment cleanup ownership remain open investigations, not fixed claims.
+
+Canonical-profile metadata/render mismatch reproduced with the real save/render services and fixedb9c0b618 (integrated2cd561d7);26 targeted cases passed. Creation/removal and unchangedabsence covered. Legacy user-only fallback writes/whole-source atomicity/filesystem cleanup concern remain unqualified.

docs/direct-roadmap/LATEST_CHECKPOINT.md

@@ -1,6 +1,16 @@
 # Direct execution continuation
 
-Current published A3 ref:dbae196291cce2c3ecc4e35fee6e336328e00b53 (package sourcef807d46f/e161ea33); release4019569ab7cd03115371d3820898c324b4cc8252. Continuous directive preserved below. Root continues sequentially after delegate quota/C-drive capacity failures. Next: Career Profile snapshot/render coherence, CV library lifetime and connected workflows. Protected gates unchanged.
+Current published A3 ref:cef4540456d94708eb4703ee541356ad9f0b3f11; final backend source2cd561d7 (isolatedb9c0b618). Release4019569ab7cd03115371d3820898c324b4cc8252.26 targeted backend cases passed; branches/source/native receipts reconciled. Resume source-backed attachment ownership investigation or CV library lifetime, then connected workflows. Delegate quota/C-capacity/context constraints and all protected gates are recorded below.
+
+## 11 November canonical profile capture follow-up
+
+- Current A3 published/ref-readbackcef4540456d94708eb4703ee541356ad9f0b3f11. Source2cd561d7/evidencecef45404 are exact cherry-picks of isolatedb9c0b618/4ff80391f40464f2556eff4505c6c7cecaaa5fa9 on codex/frozen-document-integrity. Full API/test/config source equivalence passed after integration;16 historical source/native receipt bindings verified across both packages.
+- A second deterministic race changed the canonical profile with real CareerProfileService while rendering. RED1 failed; final26 passed/noskips across package/controller/export-revision/native SQLite suites (22 overlap earlier). Four added cases cover changed, created, removed and unchanged-absent profiles. Capture now rechecks canonical revision/projection after render, through the existing409conflict/review path. No canonical writer, nullinherit setting, schema, physical renderer/style or legacy-profile policy replaced. Report A3 docs/cv-integration-qa/PACKAGE_PROFILE_CAPTURE.md.
+- Release remains separately published4019569ab7cd03115371d3820898c324b4cc8252 (source1c8761b1),19 mocked backup methods/syntax passed. Two committed release source bindings verified; actual permission/restore/deploy gates remain open. Prior rollback6 is historical, not rerun.
+- Continuous directive remains authoritative and frozen under sources/CONTINUOUS_DEVELOPMENT_DIRECTIVE_b2425dc6.md. Delegate workers unavailable through usage limits; root continued sequentially. C: exhausted on the first build; generated outputs alone were safely cleared and all further .NET artifacts/temp/results use E. Do not retry unchanged C-output builds or delete unrelated files. Context/resource continuity is required before starting a new large UI increment.
+- Highest-priority next eligible tasks: (1) AttachmentStorage.SnapshotAsync destination-cleanup ownership concern:source-backed only, no deterministic race proof/fix yet; use existing StageAsync created-ownership pattern only with honest qualification. (2) CV library create/download/action completion after unmount/session boundary:candidate found by reading CvBuilderPage.tsx; no implementation or tests yet. (3) Native connected Career/document and application/follow-up journeys; remaining offline Gmail completion/Settings transient work. Protect established renderer metrics,34 routes/57 groups, RD21, frozen/import compatibility. Real MariaDB/browser capture, legacy-user-only profile fallback writes and whole-source atomic snapshot remain unqualified.
+- No owner decision is needed to resume those independent tasks. Existing decisions remain batched in OWNER_DECISIONS.md:Phase10 D02, final A3, homepage concept/design, GlobalJobs/provider/market rights, recovery/security/release targets/gates. Do not self-approve or infer acceptance. No orchestrator/main/production/model/provider activation.
+
 
 ## 11 November continuous directive: document and backup integrity
 

docs/direct-roadmap/NEXT_ACTIONS.md

@@ -3,7 +3,7 @@
 11 November 2026.
 
 1. Phase 10 candidate qualification and independent final-proposal review are complete. Owner decision D02 covers the concrete Conditional GO package published at `59fd674f`, retaining inherited qualifications. Keep it queued while independent work continues. Further removal requires its own proven candidate and approval.
-2. Continue approved A3-IM10 from9f341750 on codex/a3-ui-10. V45–V47 export/session, count wording and Rules density/recovery are qualified; do not repeat unchanged matrices solely to resume. Next complete connected Career/document and application/follow-up workflows, then unreviewed Gmail completion and remaining Settings/notification/backup transient paths with offline fixtures. Retain all34 routes/57 groups and final Gate F.
+2. Continue approved A3-IM10 fromcef45404 on codex/a3-ui-10. Backend CV/profile capture guards are integrated;26 cases passed with exact source equivalence. Next investigate source-backed attachment cleanup ownership, then CvBuilderPage action/download lifetime and connected document/application workflows. Use E build/temp/results and avoid retrying unchanged delegate/C-output failures. Retain34 routes/57 groups and final Gate F.
 3. Continue independently eligible localisation on its isolated branch. The 188 historical dynamic calls are accounted for. Prioritise contextual display coverage and automated locale checks. Native and additional locale publication gates remain open.
 4. Four desktop/mobile launch concept pairs are published at `ccb11494`. Retain owner selection before refinement and final approval before implementation. Release `3cca4418` includes RR-11/13 fixes and RR-12 post-rollback probes, with six offline rollback/twelve backup tests and corrected legacy-runbook scope. Actual recovery, integrated security and production remain separately gated.
 5. Keep Product Review findings provisional until Phase 10 acceptance. Reuse the published GJ-00 pack. GJ-01 awaits the accepted predecessors, implementation scope and provider rights.

docs/direct-roadmap/ROADMAP_STATUS.md

@@ -35,3 +35,5 @@ Implemented, tested, accepted, published and production-ready are separate. Prod
 EN/NB import/conversion singular feedback qualified through511b68a1:50 overlapping cases, two paired profiles/six native conversions/six scans. Broader localisation and native-language review remain open.
 
 11 November continuation: A3dbae1962 integrates submitted-CV revision integrity (22 scoped backend cases; legacy0 retained). Release4019569a closes mocked permission failure propagation (19 backup methods). Frontend76-case and UI matrices remain historical/source-bound; no new app-wide acceptance. Delegate quota and C-capacity limits documented; E build lane works.
+
+Latest canonical-profile package follow-up integrated/publishedcef45404, source2cd561d7;26 backend cases/noskips, source/native identity verified. This extends the earlier CV revision guard; it does not accept full document workflows, atomicity, security or release. Frontend76 and prior visual evidence remain historical.

docs/direct-roadmap/ROADMAP_TODO.md

@@ -31,6 +31,7 @@ Updated 11 November 2026. This is the cross-phase work list. The source prompts,
 - [ ] **Applications**. Title-first rows, explicit selection, preparation wording and compact keyboard row actions shipped through `1d733675`. Four server-backed EN/NB/theme density/action journeys passed after long-status wrapping and selected dark-link contrast fixes. Finish broader table/board/detail workflow and native/visual acceptance, including follow-up.
 - [ ] **Calendar**. Recorded closing dates and follow-ups are covered. Resolve genuine interview scheduling, original precision/timezone and provider/ICS qualification as applicable. Preserve agenda/month toggle and preference.
 - [x] **Submitted CV revision binding, bounded scope**.Integratedf807d46f/dbae1962;22 targeted backend cases passed, including legacy0/nativeSQLite/controller409. Canonical Profile concurrent rendering and remaining file/package races stay open.
+- [x] **Canonical Profile binding during CV capture, bounded scope**.Integrated2cd561d7/cef45404;26 targeted backend cases including changed/created/removed/absent profile controls. Legacy fallback/full-source atomicity and filesystem race qualification remain open.
 - [ ] **Career, CV, letter and documents**. Finish connected overview-to-document reuse and create/import-to-edit/preview/export evidence. Preserve revisions, null-as-inherit, canonical profile ownership, frozen packages, import review and RD21.
 - [ ] **Correspondence**. Read ordering/manual-note recovery qualified at1f3bdbcd (27 tests/eight journeys/40 scans); Pasted-email recovery also qualified at72be6144 (33 overlapping tests/eight pasted journeys/40 scans). V42–V44 recovery and decorative surfaces are qualified through214eb25f (latest12 note configurations/60 scans plus separate pasted canary). Remaining provider/completion-path, draft-navigation, native and final visual checks stay open. Improve inbox, mailbox state, relevant job context and review. Scope explicit consent, provider permissions, multi-mailbox storage and retention separately. Preserve conflict, attachment and confirmed-send flows.
 - [x] **Admin Users compact actions**. One keyboard menu retains existing role, reset and delete paths. Published `327d99df` with 14 tests and 72 controlled browser states.
@@ -182,3 +183,5 @@ Current development ref b9bb3c44 includes V40/V41 disposition and the explicit b
 I18N/PERF continuation: correspondence fallback errors now translate without another read or lost draft (red extra-request regression;27-case package). This is bounded duplicate-read prevention, not latency/load or European locale acceptance. Latest scoped visual source c6375876; do not rerun unchanged matrices merely to resume.
 
 Environment: delegate implementation quota unavailable; root sequential. C: capacity constrained; use E build/temp/results, preserve unrelated data. Next inspect concurrent canonical profile/render binding; attachment cleanup race source-only; CV library stale action/download checks still eligible.
+
+Next integrity investigation:AttachmentStorage snapshot cleanup ownership (source-backed/unreproduced); CV library stale create/download/action completion (read-only candidate, no fix yet). Native connected workflows remain open. Preserve E build/temp lane while C capacity/delegate limits persist.