{
  "receipt": "supersession-retention",
  "recorded_date": "2026-07-28",
  "store": "ax0s-memory 0.5.0, primary operator store, slug ax0s, LanceDB on the operator-controlled hub",
  "method": "Direct table reads against the live record table; one direct-id read of the oldest superseded record; one supersession-provenance chain walk; static audit of delete call sites in the current source snapshot.",
  "measurements": {
    "total_record_rows": 56316,
    "live_rows_not_superseded": 33284,
    "superseded_rows_retained": 23032,
    "note_on_counts": "23,032 superseded rows remain stored alongside 33,284 live rows. 102 superseded rows carry a pre-cutover sentinel timestamp; dated supersessions span 2026-04-04 through 2026-07-29."
  },
  "oldest_superseded_record_addressable": {
    "id": "record:r_24665265b875_1",
    "ts": "2026-04-04T18:54:56.994Z",
    "is_superseded": true,
    "superseded_by": "record:r_6eb1eacf00c9_2",
    "resolved_by": "direct id read on the recorded date"
  },
  "provenance_chain_walk": {
    "tool": "brain_why_current",
    "seed": "record:r_319c25aeccee_194",
    "resolved_current": "record:r_4c8d0252bbe9",
    "chain_length": 9,
    "retired_members_all_addressable": [
      "record:r_bf2339a28463_34",
      "record:r_c2e249d7f492_14",
      "record:r_319c25aeccee_194",
      "record:r_319c25aeccee_218",
      "record:r_709a96bec17a_243",
      "record:r_709a96bec17a_257",
      "record:r_709a96bec17a_262",
      "record:r_e5aa37da3fdd_116"
    ],
    "chain_span": "2026-04-08 to 2026-04-21, supersedes edges stamped 2026-04-28",
    "note": "Eight records retired in April 2026 all resolve with full text, timestamps, and dated supersedes edges pointing at the current record."
  },
  "code_path_audit": {
    "statement": "No code path in the ax0s-memory 0.5.0 source snapshot deletes rows where is_superseded is true. Task deletion is a soft status flip with the row retained; the product's own MCP surface documents 'soft-delete only — there is no delete surface.' Scheduled maintenance deletes storage-engine version snapshots and branch tags, not record rows.",
    "reviewed_call_sites": "All .delete( and delete-named call sites in the server, ingest, ops, app, claims, registry, task-state, and feed modules of the current snapshot.",
    "correction_2026_07_29": "Correction, 2026-07-29: the statement above was too broad as written. Independent review found one code path — merge_records_advanced(delete_orphans_where=...), an advanced merge helper with no product callers — that could hard-delete rows where is_superseded is true when invoked with a scope containing them, because its deletion rides a merge clause rather than a .delete( call and so was missed by the call-site sweep described below. The defect was reproduced and fixed the same day: the orphan-delete predicate now structurally excludes superseded rows (AND is_superseded IS NOT TRUE) in both the deletion clause and its protection pre-check, with regression tests proven to fail against the pre-fix code. The registry claim this receipt supports is unaffected: no product code path invokes the helper, scheduled or otherwise, and no superseded row was deleted from the store. This correction is retained alongside the original statement per the corrections-supersede discipline this receipt itself documents."
  },
  "limitations": "Application-level retention on one store on the recorded date. Operator-initiated deletion, host storage operations, and storage-engine compaction remain possible and are outside this receipt. Records from before 2026-04-04 were reduced to count-only skeleton history at the 2026-04-21 storage-engine cutover and are not addressable as full records. This is not a host-level immutability, backup, or tamper-evidence claim."
}