# Audit scope and publication limits

Claude Opus 5 and Grok Heavy completed independent research, three prototype rounds and a first full-package static audit. Both first full-package verdicts were ACCEPT WITH LIMITS for a bounded reviewable draft. Actual inputs, complete responses and manifests are preserved at https://ver.cy/enterprise/research/em-xct-05/ when published.

This candidate incorporates concrete first-audit corrections: integer-only registrar rank; an isolated assessment/receipt negative; distinct synthetic snapshot times; coherent five-parent reference pins with retention deferred; supplied adjacent-model evidence; precise storage immutability and native-object lifecycle limits. The not-yet-created review.json will be post-audit release bookkeeping identifying the exact final audit freeze, actual subsequent dispositions and post-audit files. It is deliberately not evidence in this audit. This page does not claim a later pass before it exists.

Provider reviews are static text reviews. They did not execute tests, recompute hashes, inspect the external pinned toolchain, ratify all parent sources or validate real governance. Codex execution evidence is separate in test-results.json and acceptance-results.json. No review grants source serving, proves privacy, certifies standards conformance or delegates publication authority. See model-spec.md, bindings/native-v3.md and adoption-limits.md.