# Actual immutable-generation physical evidence refusal controls

A portable SDK-free runner now mutates temporary copies of the completed SCAN
callback CORE and Philadelphia-fast physical tiny profiles. It first independently
replays each unchanged original, then requires every changed copy to be refused
by the existing cold reader. It deletes temporary copies even when qualification
fails and verifies the original inventory, including modes, remains unchanged.

Seventeen controls per engine cover a changed canonical body with matching
bilateral captures, missing frame, matching but wrong owner sink/fold claims,
original administration, tick end clock, both raw series, a zero primary sample,
runtime generation, endpoint CPU placement, launch identity, frozen source,
counter probe/polling, borrowed report grade and nonzero peer exit. The baseline
profile and all original failed or passing gates remain unchanged. These are
reader refusal checks, not new benchmark pairs or report promotion.

Both development invocations and independent stripped-archive invocations
refuse all 34 controls, with zero skips. The stripped archive contains 856 files,
no engine/internal/Git directory, and is invoked from an unrelated build directory
without PYTHONPATH. Its original 855 files equal the sealed producer inventory;
the sole source delta is the new refusal runner, retained with its SHA-256 and
the complete archive inventory. The original physical seal binds both input
manifests and the unchanged shared reader policy. No source file, runtime or
root helper used by the queued HP producer is changed.

An initial archive-preparation attempt missed the publisher's tools import path
and failed before source copying. Its subsequent missing-manifest refusal is
retained separately. The corrected archive uses the publisher's declared tools
path; its source inventory remains unchanged after both actual checks.

The separate seal retains 13 inputs totalling 595,479 bytes; SHA-256
`30020c940e33c25e3b724ea010988bf731e1b7e5c439736c69637796e35adf53`.
There is no new compile, socket pair or physical run. This qualification does not
admit the pending HP/two-rig comparison, Java comparison or whole-harness release.

[Reports, portable reader delta, source inventory, original physical bindings and logs](evidence/registered-generation-scan-refusal-controls-20261014/retention-seal.json)