[snarkipus]

Summary

• Reconcile Beads 1.3.2–1.3.4 against the adapter seams and advance beads.validated to 1.3.4, retaining minimum 1.3.1 and package 2.0.0.
• Complete the existing advisory upstream MAIN source monitor as an independent job in beads-contract. Ordinary source drift remains informational; unavailable comparison fails visibly without blocking the tagged CLI job.
• Reuse the existing collector and its JSON; preserve the reviewed source inventory, runtime, packaged guidance, CLI release-review gate and read-only workflow permissions.

Review and local verification

• Astra authored the bounded maintenance candidate; parent reviewed its scope and executed checks.
• Independent Claude Opus 5.5 implementation review and same-session finding-scoped recheck: Standards READY / Spec READY.
• Fixed confirmed CRLF handling in the literal workflow-shell test harness and added one regression. The reviewer withdrew its separate job-name-regex claim; no unnecessary correction was made there.
• 222 tests / 12,110 assertions, typecheck and whitespace pass. Workflow lint, strict canonical specs, disposable Beads 1.3.4 CLI contract and package smoke also passed in the retained source qualification.
• Source was frozen and verified byte-identical to the independently reviewed candidate before commit.

Hosted verification / remaining authority

The owner authorized this source publication, normal PR CI and one read-only manual maintenance run on this branch with version=1.3.4. Hosted results are reported by the linked checks/run, not presumed from local tests. Windows Git Bash/path behavior and real upstream comparison are verified only by those actual executions.

Merge requires a separate owner decision. No npm release, deployment or operator activation is included. CLI validation does not advance the reviewed source/inventory baseline.

Tracking: opencode-beads-tvf, opencode-beads-rou; independent review opencode-beads-gc9 completed.

Verified hosted results

• Exact reviewed head: 7e121c35bcbf98d05a5ff47729ddff92fe389d0f.
• PR CI 42677547811: Linux, Windows and zizmor all pass on attempt1. Both test jobs report222passingtests/12110assertions, including the actual-workflow CRLF regression.
• Authorized maintenance run42677543588: both independentjobs pass on attempt1. Installed exactbd1.3.4; CLI contract and release-review gate pass. Real upstream source collection and its summary step pass.
• The run completed on this branch; the default-branch schedule is not updated until merge. No new source/inventory baseline was adopted.
• Merge, npmrelease and operatoractivation remain separately gated.