The receipt gate's sha pattern admits 7 to 64 hex digits, so an abbreviated receipts directory for the same commit ties with its full-sha twin and the derivation refuses. The reviews charter, the release protocol and the runbook all say the directory is named by the full sha; the pattern should require 40 or 64 hex digits.

The receipt gate's sha pattern admits 7 to 64 hex digits, so an abbreviated receipts directory for the same commit ties with its full-sha twin and the derivation refuses. The reviews charter, the release protocol and the runbook all say the directory is named by the full sha; the pattern should require 40 or 64 hex digits.

Grounds

• pursued: a full-sha directory derives beside its 12-hex twin (TestDeriveReleaseContentSha_IgnoresAnAbbreviatedReceiptsDir, review probe S9); a tie refusal would show it wrong.