## 1. Red fixed-profile model

- [x] 1.1 Add deterministic frame-count, frame-rate, bitrate, keyframe, byte-total, and boundary regressions
- [x] 1.2 Prove the current 1,179-byte one-frame model fails the required profiles

## 2. Production-path qualification

- [x] 2.1 Replace packet payload generation with bounded variable-size complete frame units
- [x] 2.2 Carry frame-level source, recovery, queue, QUIC, delivery, and loss attribution through the existing path
- [x] 2.3 Assert frame rate/count, bitrate bounds, exact bytes/boundaries, processing latency, and resource bounds

## 3. Verification

- [x] 3.1 Run short production-path smoke tests for all three profiles and affected impairment accounting
- [x] 3.2 Validate the active OpenSpec change strictly

## 4. Frozen qualification

- [x] 4.1 Run the earlier single normative Section 7 qualification after immutable Protocol consumer resolution; later audit findings superseded that candidate

## 5. Pinned Apollo source-fidelity remediation

- [x] 5.1 Retain the v6 qualification attempt and mark its passing result superseded by the tight-loop source defect
- [x] 5.2 Implement v8 post-first-write, non-collapsing complete-frame UDP pacing with persistent cross-frame carry and verify the focused, race, short-resource, and cross-platform compile checks that passed
- [x] 5.3 Preserve private Linux runs 123 and 124 as failed evidence, the passing local v8 Darwin sustained run as non-Linux and non-normative, and the un-retried failed Darwin non-sustained pre-CI invocation with its exact throughput evidence
- [ ] 5.4 Run private Linux full verification and retain deterministic Linux artifacts for the frozen v8 harness and video-ingress descendant
- [ ] 5.5 Run one separately approved replacement v8 normative Section 7 qualification

## 6. Native video ingress remediation

- [x] 6.1 Preserve run 125 and reproduce its pre-decrypt shortfall with a public 662-shard blocked-AEAD regression
- [x] 6.2 Add the video-only 2,195,456-byte socket-buffer request, fixed 2,048-slot drain, single processor, overflow accounting, and bounded cancellation tests
- [ ] 6.3 Freeze the reviewed production repair through the still-open private Linux full-verification and artifact gate before any replacement normative run

## 7. Fair-pacer schedule-debt remediation

- [x] 7.1 Preserve the consumed failed `55afea72` v8 attempt and its two partial files without retry, relabeling, or modification
- [x] 7.2 Reproduce repeated host-stall queue expiry through the public native path and add bounded one-flow/eight-flow debt, fairness, rolling-cap, and capacity-step regressions
- [x] 7.3 Retain the 5 ms instantaneous ceiling, carry valid debt within the 250 ms queue horizon, and repay it at no more than 5% above nominal fair share
- [ ] 7.4 Freeze and verify a new executable candidate on private Linux before any separately authorized replacement normative run