Custody prefix witness: final documentation re-pin03

Prospective documentation cells NOT RUN. C-085 requested the source-backed limit before the #67 push. The actual Spindle log_source.rs has MAX_LINE4096, skips oversized and invalidUTF8 lines with gaps, and can commit cursor-only oversized-line progress. Separate trust77d32ec adds exactly8 protocol lines stating the finite completeUTF8/newline source-fixture limit; no product, tool, oracle or test bytes changed from source158a5ec. S2 projected-query/ACK-only raw commitment wording remains in the prior trust609368a.

Original source plan was admitted by C-085. Its first cell already ran at158a5ec:30 install-subtree methods, exit0/stopped, scratch removed/absent, log SHA-2564b66d4c4ce7ad2473c1da2f3beed5303f662d0229c92a4d4705e59278e61d229, outer receipt1b88d1e775db05efd97371a50efe707c4997ad3696910c9a5dbe3f71c7b28637. Reader stays417/+120 and all executable controls/inputs remain byte-identical at final77d32ec. No redundant source run is proposed; the remaining three previously-unrun documentation cells are re-pinned here. The actual source receipt remains tied to158a5ec.

Three serial default-capped documentation commands, each fresh full DATA census/full1GiB reserve/95GB admission including reserve/100GB ceiling/16GiBhigh20GiBmax/no swap/1800seconds. Existing Bun1.4.0/106 individual ignored dependency links/cache only. Dirty/moved source or another project workload refuses. Stop/report any unexpected failure; inspect cleanup and read #59 after every cell. No guest, install, compiler, browser, simulator, smoke or FULL.

Pins

• /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-custody-reader-final-docs-03.py SHA-256 666d77f4cfde59ced0409467a16118588a8ec649268491deec410816ce619c3e.
• /run/media/kmosoti/data/FabricO11y/scratch/installation-custody-witness/tools/qualification/install/custody_witness.py SHA-256 2c500203cc26a474366d4b9daf13d63332fb6454fc94649a00f8dd43eb796ebf.
• /run/media/kmosoti/data/FabricO11y/scratch/installation-custody-witness/tools/qualification/install/test_custody_witness.py SHA-256 fa4782a9ff25e72d91546207681db8e9f96c4b771472bbbcacb60b41f85c4a61.
• /run/media/kmosoti/data/FabricO11y/scratch/installation-custody-witness/docs/experiments/formal/installation-release-protocol.md SHA-256 45dd30a898da5636001720335917eef908ddd4376fb9613263bdae41931e4749.

Exact commands

python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-custody-reader-final-docs-03.py installation-custody-docs-check-03 1073741824 env PATH=/run/media/kmosoti/data/FabricO11y/tools/bun-1.4.0:/usr/local/bin:/usr/bin:/bin BUN_INSTALL_CACHE_DIR=/run/media/kmosoti/data/FabricO11y/tools/docs-bun-cache /run/media/kmosoti/data/FabricO11y/tools/bun-1.4.0/bun tools/docs/check.mjs
python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-custody-reader-final-docs-03.py installation-custody-docs-tests-03 1073741824 env PATH=/run/media/kmosoti/data/FabricO11y/tools/bun-1.4.0:/usr/local/bin:/usr/bin:/bin BUN_INSTALL_CACHE_DIR=/run/media/kmosoti/data/FabricO11y/tools/docs-bun-cache /run/media/kmosoti/data/FabricO11y/tools/bun-1.4.0/bun tools/docs/check.test.mjs
python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-custody-reader-final-docs-03.py installation-custody-docs-hooks-03 1073741824 env PATH=/run/media/kmosoti/data/FabricO11y/tools/bun-1.4.0:/usr/local/bin:/usr/bin:/bin BUN_INSTALL_CACHE_DIR=/run/media/kmosoti/data/FabricO11y/tools/docs-bun-cache python3 -B tools/docs/test_hooks.py

Full final trust delta

diff --git a/docs/experiments/formal/installation-release-protocol.md b/docs/experiments/formal/installation-release-protocol.md
index 971d726..e1217a9 100644
--- a/docs/experiments/formal/installation-release-protocol.md
+++ b/docs/experiments/formal/installation-release-protocol.md
@@ -220,6 +220,14 @@ source order, with no gap, overlap or duplicate interval. Every interval must
 match the archived newline-terminated body bytes and source device/inode. The
 existing three-row lifecycle baseline and sentinel checks remain required;
 matching them alone cannot establish full archived-prefix conservation.
+This tiling witness is limited to the registered finite fixture of complete
+UTF-8 newline-terminated source lines. The actual
+[`log_source.rs`](../../../crates/fabric-adapter-linux/src/log_source.rs)
+collector skips oversized lines (more than 4,096 body bytes) and invalid UTF-8,
+reports collection gaps, and can commit cursor-only progress through a skipped
+oversized line. Such consumed bytes have no `body + '\n'` row interval, so this
+witness refuses that archive. It does not establish general source conservation
+for intentional skips, incomplete tails or arbitrary log-input histories.
 Keep every prior control, oracle and gate unchanged. Run the named fixture only
 through the registered serial default1800/full1GiB control cell and preserve its
 actual red before production correction. This amendment changes no product wire