# VRX-URS40-RECONCILIATION-001 — URS-40 v1.1 → v1.3 reconciliation

| Field | Value |
|---|---|
| Purpose | Reconcile the canonical URS-40 (Harness-Hardened **v1.3**, 1460 lines) against the v1.1 I reviewed (853 lines), after the workspace reorg surfaced the version change. |
| Status | DRAFT — read-only reconciliation. No approval implied. |
| Date | 2026-06-07 |
| Canonical files | `URS-40_…Harness-Hardened-v1.3.md` (URS), `…Build-Spec.Harness-Hardened-v0.4.md` (build spec), `URS-40_ARCH-AI-001…v1.0-DRAFT.md`, `URS-40_Final-URS-Bundle-Release-Report-v1.3.md`, `URS-40_MANIFEST.sha256` |

## Finding: v1.3 integrated my v1.1 QA review
URS-40 grew v1.1 (853) → **v1.3 (1460)** by adding sections that directly fold in my QA review (`URS-40_QA-Review_Harness-Hardened-v1.1`):
- **§H5** — CG-1…CG-8 corrective integration
- **§H6** — ratifiable DDL for the 16 harness registers (closes CG-3 at design grade)
- **§H7** — SV-REQ / RTM rows **SV-REQ-035…056** for SV-COR-030…051 (closes CG-2 traceability; SV-REQ count 34→56)
- **§H8** — implementation-grade PECRA for SV-COR-030…051 (closes CG-2 depth)
- **§H9** — QA defect closure register (CG-1…CG-8 dispositions)

## CG closure status (per §H9, verified)
| My finding | v1.3 disposition | Residual |
|---|---|---|
| CG-1 India scope | Conditionally in scope + jurisdiction/source gating; no India compliance claim | **Closed structurally**; source/legal confirmation pending |
| CG-2 SV-COR-030…051 summary-grade | Expanded to PECRA + SV-REQ/RTM (SV-REQ-035…056) | **Requires OQ execution** |
| CG-3 registers below design grade | Ratifiable DDL (RLS, attribution, rollback) added (§H6) | **Requires Architect + DI ratification** |
| CG-4 ARCH-AI-001 unpinned | Pinned to ARCH-AI-001 v1.0 DRAFT (AC-5/6/7) | **Freeze blocked until ARCH-AI-001 approved + filed** |
| CG-5 privacy/supplier ownership | Engine consumes crosswalk; Legal/Security/Supplier own determinations | Closed structurally |
| CG-6 external-signing owner | Added dependency **D-9** (key lifecycle + owner) | Execution pending |
| CG-7 version inconsistency | Corrected in v1.2/v0.3 release docs | Closed |
| CG-8 claim-scanner false-positive | Context-aware allowlist (owner/review/evidence) | Closed structurally; verify in OQ |

## Net disposition (unchanged in direction)
v1.3 is materially stronger and **acted on every CG finding**, but its own status is still **`1.3-harness-grade — Draft — not validation-ready`**. Freeze remains blocked by: ARCH-AI-001 approval (CG-4), OQ execution (CG-2/CG-8), Architect+DI DDL ratification (CG-3), India source/legal confirmation (CG-1), and dependencies D-1…D-9. My "Rejected for freeze; build-planning-grade" stance **holds** — now with the QA corrective content integrated.

## Note on copies
- Canonical ARCH-AI-001 here (`URS-40_ARCH-AI-001…v1.0-DRAFT.md`, 115 lines) differs in length from the ADR I authored (137 lines) — reconcile to one controlled ARCH-AI-001 v1.0 before approval.
- Build spec: canonical is **v0.4** (791 lines); I reviewed **v0.2**. A separate `URS-40_Engineering_Build_Specification_v0.1-DRAFT.md` (543 lines) also sits in the folder — confirm which build spec is current and retire the rest.

*Read-only reconciliation. No repo or master files modified by this note.*