# Replacement factory upgrade inspection

Prepared for review, not approved or executed. Devnet only; public launches remain disabled.

## Changes

- Shared release allowance: 1% per 181,440 seconds (2.1 days), unchanged 20% developer lifetime cap.
- Scoped project milestone agents with later human reviewer handover.
- Token descriptions and GitHub metadata; adopted-owner proposals and custody-governed corrections with permanent proposal history.
- Repository-role and evidence checks; UI and charting changes are separate web deployments.

## Artifact and targets

- Source commit: 427366932d233d57c6fc2a9e2f0e92ec5e269d2c
- Target: Ez288n8SpxVGkgGbkqHhzBmb1YoXZaAU83rPdsxmyZhU
- Guard: Xoxj3TWjiyB4893kdNG2L9ffxQHnwxwFuofX3JBJnLa
- Configuration: AxT2maEDRsrz2SuT3ATfhAcLpqiZYxZ7ZCAR1Pv8ASU7
- Buffer: 6SqM5GrWAVxJwBUCyAtjuvDeQUu7fxTrRbrYxBSpH2Fg
- Proposal: 6PLGnTzhmQweYuGx4PF1QCzENNmpAE4arsqH5xzkpNkq
- Nonce/generation: 0/0
- Code SHA-256: 2faaa11375b9cb9e912a7851477ca659f679c5ee0b18335586feeceacd034c1a
- Length: 325480
- Current allocated executable SHA-256: 6ecbe97678268824bd3b4d60c09354bb119800835bfeba86667fbe2d181d2bbc
- Refund treasury: 92DFCXk28gwHZLzKoBzKj7tCeLZk3EtEdi5WaLBARjHc

## Validation and limits

Same-host clean rebuild matches the candidate; dependency/input hashes and toolchain versions are in BUILD_PROVENANCE.json. Local validation: 87 unit checks, 18 venue checks and 66 browser checks passed for the candidate; metadata history/wallet checks were rerun after UI adjustments. Production web build passes. This is a first-party inspection, not independent certification. Live acceptance of these new instructions is still required after upgrade. No mainnet mode or activation is included. Existing custody notices and UTC settlement boundaries remain.

All three configured reviewer wallets are operated by the founder, as confirmed in this session. Two distinct reviewer signatures are required, but they do not provide independent review. Founder-controlled governance and upgrade risk must be disclosed.

The developer creates this exact proposal, two configured reviewer wallets attest, and a funded wallet executes with no Devnet governance countdown. No signatures have been supplied on their behalf. Inspect the exact code, report, target and refund treasury before signing.