# VRX-PACK-FOLDIN-TRACKER-001 — Corrective-Pack → Source Fold-In Status

| Field | Value |
|---|---|
| Purpose | Operationalizes PACK-COR-006. Tracks fold-in of each corrective artifact into the affected source URS, and states honestly what is done, what is blocked, and what is human-only. |
| Status | **DRAFT — live tracker.** Fold-in is **not** complete; pack is not freeze-ready. |
| Date | 2026-06-07 |
| Principle | A corrective artifact is **not** a corrected URS. "Done" = folded into the source under controlled change + signed. |

---

## Fold-in status

| # | Corrective item | Artifact (ready) | Folded into source? | Blocker to completion |
|---|---|---|---|---|
| PACK-COR-007 | URS-27 commitment-status bypass | `CR/VRX-CR-URS27-001_VERIFIED-Engineering-Patch` (exact diff + tests) | **Code change NOT applied** | Repo read-only here — engineer applies under CR + runs gate |
| PACK-COR-008 | URS-37 v1.3 (greenfield correction + FIX-37-010) | `VRX-URS37-v1.3-FOLDIN-CHANGESET` | **APPLIED (2026-06-07)** to canonical `Target_State_URS_Modules_1-41/URS-37…` — v1.2 promoted over the reorg-regressed v1.0; stale v1.0 backed up as `_superseded_URS-37_v1.0_*`; diff = 6 surgical changes verified (1486→1487 lines) | Approval signatures (human) |
| PACK-COR-009 | URS-38 → v1.1 peer-grade | `VRX-URS38-EXPANSION-001` | **AUTHORED + placed** at canonical `Target_State_URS_Modules_1-41/URS-38…v1.1.md` (E-1…E-10; v1.0 §0.4 GxP table preserved verbatim; v1.0 retained alongside) | Head of QA review |
| PACK-COR-001 | Baseline map | `VRX-PACK-BASELINE-001` | n/a (new controlled doc) | **Not signed**; live branch re-confirm pending (sandbox fetch rc=1) |
| PACK-COR-003 / 010 | Tenant-isolation | `VRX-PACK-ISO-001` (re-audit) | n/a (decision input) | **Decision not made** — Architect+Security/Privacy+DI+QA sign + OQ |
| PACK-COR-005 | Part 11 map | `VRX-PACK-PART11-MAP-001` (starter) | n/a (new controlled doc) | **Not signed** — Head of QA+DI+Legal + customer intended-use |
| ARCH-AI-001 | AI optionality ADR | `ARCH-AI-001_…v1.0-DRAFT` | n/a (new controlled doc) | **Not approved**; repoint URS-32/40/41 citations after approval |

## What is DONE this session (verified, in my power)
- URS-27 bypass **verified** in code (schema `status` field + `service.ts:615` write) and the **exact** engineering diff + acceptance tests produced.
- URS-37 v1.3 **deterministic change-set** produced (6 exact replacements, each anchor confirmed unique earlier).
- All five PACK-COR corrective artifacts + ARCH-AI-001 ADR delivered.

## What I CANNOT do here (hard boundaries — not deferral by choice)
1. **Apply/commit/test code** — the Verixa repo is read-only in this workbench. PACK-COR-007 must be applied by an engineer.
2. ~~Edit the source masters~~ **RESOLVED.** The earlier failures were a workspace **reorganization** (masters moved to `Target_State_URS_Modules_1-41/`; old structure → `_Source_Archives`), not a mount outage. URS-37 v1.3 and URS-38 v1.1 are now applied to the canonical folder. Code apply (PACK-COR-007) remains blocked by read-only repo.
3. **Sign anything** — baseline map, isolation decision, Part 11 map, ARCH-AI-001 approval are human Tier-3 actions.

## Ordered next actions (per the audit)
1. Engineer applies `VRX-CR-URS27-001` patch under CR + runs the gate (negative test: generic PATCH rejects `status`).
2. Apply the URS-37 v1.3 change-set to the master (when mount stable / by URS owner); verify diff = 6 changes only.
3. Author URS-38 v1.1 (preserve v1.0 + fold E-1…E-10).
4. Cut + sign the frozen pack baseline; re-pin URS-37/41 evidence at it; re-confirm branches against GitHub.
5. Architect+Security/Privacy+DI+QA close the tenant-isolation decision; author Tenant A/B OQ.
6. Head of QA+DI+Legal complete + sign the Part 11 map.
7. Rebuild the pack manifest to point at corrected URS versions.
8. Only then begin validation-package generation.

*No claim of validation, compliance, or approval. Verifications read-only against `verixaai/verixa dev-vimal-deploy @ d8ccdb97`. Repo not modified.*