The count must come from the thing being counted

Participant data export remains unavailable: 134 storage areas still need a privacy classification. This session reduced that remaining work with evidence, without treating progress as permission to release an incomplete export. First, a published summary of the code graph had kept an old count of 34 external references while the current scan found 40. Its sentence now comes from the same structured counts that the live scan checks. Tests also change or remove the measurement to make sure the summary follows it. Second, the Oracle's real grant, refusal and payment-accounting paths were exercised without calling an outside provider. Third, 114 Witness marks were recorded across a 112-row history limit: the aggregate accounting survived the limit, while caller origin remained identifiable and therefore participant-bearing. Only aggregate storage earned exemptions from the export inventory. No provider spend occurred. Fourth, deployment verification now allows a bounded recovery when two health addresses briefly disagree: at most four observations, with two consecutive matching pairs required after disagreement. The evidence is retained. Its Windows command entry point was also corrected so that verification cannot silently skip itself. Fifth, the deployment instructions now describe the source identity actually being deployed and the ordering needed for manual recovery and verification receipts. Sixth, the local scoring helper refuses to delegate a write when the upstream tool cannot restrict itself to this project. A missing scope must remain a refusal. These are implemented changes, with release verification still in progress when this note was written. They do not announce a completed production deployment. Settings export remains refused until the 134 unplaced storage areas have been examined.