docs: record send sandbox evidence v2 intake

docs/current-status-card.md

@@ -58,7 +58,7 @@ N13/N14/N15 are pre-business validation results. They can help identify UI eleme
 
 ## Current loop
 
-Current loop: `R6j online sandbox-send recording package v2 complete; next R6k returned sandbox evidence intake v2`.
+Current loop: `R6k returned sandbox evidence intake v2 complete; next R6l send-message production path gate closure`.
 
 Active continuous execution plan: `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`.
 
@@ -239,8 +239,8 @@ Continuous execution plan R6f-R14 is approved and execution has started:
 - Plan file: `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`.
 - Scope: 15 ordered rounds covering send-message connector/gate hardening, send-file preview/idempotency/package, receive-file download preview, receive-message reconciliation, end-to-end business smoke, and release-candidate report.
 - Execution rule after approval: one round at a time, status-card update, verification, commit, push, then continue automatically until an evidence-only blocker requires user action.
-- Last completed round: R6j online sandbox-send recording package v2.
-- Next active round: R6k returned sandbox evidence intake v2.
+- Last completed round: R6k returned sandbox evidence intake v2.
+- Next active round: R6l send-message production path gate closure.
 
 R6g send audit and idempotency replay diagnostics is complete:
 
@@ -278,3 +278,12 @@ R6j online sandbox-send recording package v2 is complete:
 - `scripts\test-validate-returned-send-sandbox-package.ps1` proves the existing partial package remains `partial_use_only` and fails strict-v2.
 - Standard verification still reports 9 tools and `production_send_enabled=false`.
 - Next node: R6k returned sandbox evidence intake v2.
+
+R6k returned sandbox evidence intake v2 is complete:
+
+- Scanned `C:\Users\zhaoy\Downloads`; no new strict-v2 returned send package was found.
+- Re-validated `C:\Users\zhaoy\Downloads\1631.zip` with `-ZipPath` and `-StrictV2`; strict-v2 failed as expected.
+- Created `docs\source-discovery\2026-07-10-returned-send-sandbox-analysis-v2.md`.
+- Decision: `r6d_gate_pass=false`, `strict_v2_pass=false`, production `isphere_send_message` remains blocked.
+- Standard verification still reports 9 tools and `production_send_enabled=false`.
+- Next node: R6l send-message production path gate closure.

docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md

@@ -0,0 +1,67 @@
+# Returned Send Sandbox Analysis V2
+
+Date: 2026-07-10
+
+## Intake source
+
+Checked latest zip files under `C:\Users\zhaoy\Downloads`.
+
+No new strict-v2 returned send-sandbox package was found during this round.
+
+The only current send-return candidate remains:
+
+```text
+C:\Users\zhaoy\Downloads\1631.zip
+```
+
+## Validation command
+
+```powershell
+powershell -NoProfile -ExecutionPolicy Bypass -File scripts\validate-returned-send-sandbox-package.ps1 -ZipPath C:\Users\zhaoy\Downloads\1631.zip -StrictV2
+```
+
+## Sanitized validation result
+
+```json
+{
+  "partial_evidence_usable": true,
+  "r6d_gate_pass": false,
+  "strict_v2_pass": false,
+  "capability_test_ok": true,
+  "capability_tool_count": 9,
+  "production_send_enabled": false,
+  "has_before_probe": true,
+  "has_after_probe": false,
+  "operator_started_at_local_present": false,
+  "operator_clicked_send_at_local_present": false,
+  "operator_observed_success_at_local_present": false,
+  "before_recorder_present_flag": false,
+  "after_recorder_present_flag": false,
+  "success_ack_or_sent_record_present_flag": false,
+  "duplicate_second_send_attempted_false": false,
+  "decision": "partial_use_only"
+}
+```
+
+## Missing for strict-v2 full gate
+
+- `manual_send_started_at_local`
+- `manual_send_finished_at_local`
+- `after_recorder_output`
+- `operator_started_at_local`
+- `operator_clicked_send_at_local`
+- `operator_observed_success_at_local`
+- `before_recorder_present`
+- `after_recorder_present`
+- `success_ack_or_sent_record_present`
+- `duplicate_second_send_attempted=false`
+
+## Decision
+
+`r6d_gate_pass=false` and `strict_v2_pass=false`.
+
+Production `isphere_send_message` remains blocked. Continue with local-safe rounds. A future full production-send gate requires a returned package generated from the R6j strict-v2 package.
+
+## Next implementation node
+
+R6l must keep default production send blocked and make the blocked state machine-readable through the send gate behavior already introduced in R6h.

docs/source-discovery/capability-source-matrix.md

@@ -8,6 +8,7 @@ Returned live probe: `docs/source-discovery/2026-07-10-returned-live-probe-analy
 Send connector preflight: `docs/source-discovery/2026-07-10-send-connector-preflight.md`
 Send sandbox gate: `docs/source-discovery/2026-07-10-send-sandbox-gate.md`
 Returned send sandbox analysis: `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md`
+Returned send sandbox analysis v2: `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md`
 
 ## Source priority
 
@@ -26,7 +27,7 @@ Returned send sandbox analysis: `docs/source-discovery/2026-07-10-returned-send-
 | `isphere_search_contacts` | bare sender/receiver JIDs extracted from normalized log-backed messages loaded from configured PacketReader file or directory source | validated copied `MsgLib.db` tables: `TD_Roster`, `TD_CustomEffigy`, `tblRecent`, `tblChatLevel`, `tblPersonMsg`; decrypted roster/contact stanzas from `Smark.SendReceive`; UIA helper source if display names are still missing | `docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md`; `internal/isphere/contacts_test.go`; `internal/tools/isphere_contacts_test.go` | C34 documents optional MsgLib contact display enrichment; R2 adds deterministic exact-match-first ranking, case-insensitive de-duplication across log/MsgLib candidates, and preserves `source`/`raw_ref` | core contact search complete; optional richer fields later |
 | `isphere_search_groups` | decrypted `PacketReader.ProcessPacket` `type="groupchat"` stanzas and conference/MUC JIDs loaded from configured PacketReader file or directory source | validated copied `MsgLib.db` tables: `tblMsgGroupPersonMsg`, `TD_WorkGroupAuth`, `tblRecent`; UIA helper source if group display names are still missing | `docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md`; `internal/isphere/groups_test.go`; `internal/tools/isphere_groups_test.go`; C9 ignored-log scan: PacketReader 86 groupchat/86 conference hits; Smark 24 groupchat/658 conference/631 muc hits | C34 documents optional MsgLib group display enrichment; R2 adds deterministic exact-match-first ranking, case-insensitive de-duplication across log/MsgLib candidates, and preserves `source`/`raw_ref` | core group search complete; optional member/owner hierarchy later |
 | `isphere_receive_files` | decrypted `PacketReader.ProcessPacket` file-transfer message stanzas via `internal/isphere.ListFilesFromMessages` and `isphere_receive_files` list mode; configured PacketReader file or directory source; `zyl\importal\<hash>` cache entries remain unlinked | MsgLib `TD_ReceiveFileRecord` safe metadata through explicit copied-DB path; decrypted `Smark.SendReceive` and `SaveToDB` traces for file-reference reconciliation; future UIA/client connector for download | `docs/source-discovery/2026-07-09-n12-pre-zyl-schema-notes.md#c12-file-transfer-evidence-precheck`; `docs/source-discovery/2026-07-10-file-download-mapping-precheck.md`; `docs/source-discovery/2026-07-10-file-cache-mapping-diagnostic.md` | C22 verifies safe file-list contract args; R3 confirms list metadata is available; R3b diagnostic finds 0 current cache/archive matches, so R4 remains blocked | blocked pending better cache evidence or UI/client download connector |
-| `isphere_send_message` | B-route selected: running-client sidecar / in-process connector, preferring `AppContextManager.SendTxtMessageByJid(...)` or `MessageScheduling.SendChatMessage(...)` over the unimplemented `SendP2PMessage(...)` interface path; current MCP tool exposes preview/dry-run only | A-route fallback: constrained UI/RPA wrapper only if B cannot pass runtime probe, entrypoint availability, dynamic observation, and idempotent dry-run gates; network/protocol replay remains deferred | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md`; `internal/tools/isphere_send_message_test.go`; `cmd/isphere-capability-smoke/main.go` | R6e adds sandbox-only connector-shell metadata and JSONL-backed idempotency state. Duplicate same-key/same-target/same-content preview calls are detectable; conflicting key reuse is blocked. Production remains blocked because R6d was only partial evidence and no real connector has passed a controlled online sandbox test. | next: R6f fake/sandbox connector contract |
+| `isphere_send_message` | B-route selected: running-client sidecar / in-process connector, preferring `AppContextManager.SendTxtMessageByJid(...)` or `MessageScheduling.SendChatMessage(...)` over the unimplemented `SendP2PMessage(...)` interface path; current MCP tool exposes preview/dry-run only | A-route fallback: constrained UI/RPA wrapper only if B cannot pass runtime probe, entrypoint availability, dynamic observation, and idempotent dry-run gates; network/protocol replay remains deferred | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md`; `internal/tools/isphere_send_message_test.go`; `cmd/isphere-capability-smoke/main.go` | R6j adds strict-v2 package hardening; R6k finds no new strict-v2 returned package. Existing `1631.zip` remains `partial_use_only`, `r6d_gate_pass=false`, and `strict_v2_pass=false`. Production remains blocked because no real connector has passed a controlled online sandbox test. | next: R6l send-message production path gate closure |
 | `isphere_send_file` | B-route selected after send-message probe: managed offline-file path through `OffLineFileSend.sendFile()`, `IMPP.Service*.dll` `IFileTransfer.FileUpload(...)`, and `Chat.sendFileMessage(...)` | A-route fallback: constrained UI/RPA upload/send-file flow; native `TcpFileTransfer.dll` is a later candidate only after managed path is rejected | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md` | R6a/C31 metadata confirms `FileTransfer.FileUpload`, `FileTransfer.AsynFileUpload`, `OffLineFileSend.sendFile`, and `Chat.sendFileMessage` candidates. File-send remains blocked behind returned message-send sandbox evidence plus later upload/file-message dry-run evidence. | next: wait for R6d, then file-send upload preflight |
 
 ## Stage C entry rule
@@ -44,4 +45,4 @@ Start Stage C with a narrow log-backed `isphere_receive_messages` source abstrac
 
 ## Deferred source work
 
-`MsgLib.db` has a validated copied read-only open path through the bundled 32-bit `System.Data.SQLite.dll` and password `123`. C27 adds `MsgLibReadSidecar` as the bounded x86 .NET reader boundary, C28 adds the Go `internal/msglib` process client, C29 adds bounded `display_entities` extraction, C30 wires it as optional contact/group MCP enrichment, C31 proves real copied-DB MCP enrichment with sanitized output, C32 reuses it for receive-message display fields, C33 proves that receive display path through a real copied-DB MCP smoke without printing entity values, C34 documents the operator setup/verification path, C35 maps MsgLib message tables to receive-message contract fields without reading row values, C36 adds metadata-only `message_sources` readiness, C37 defines the bounded DB-backed receive-source design, C38 implements sidecar/Go-wrapper `list_messages` with sanitized verification, C39 adds a Go adapter from MsgLib list results to the receive-message domain model, C40 adds explicit tool-level `msglib_readonly` source selection, C41 wires env-configured explicit MsgLib receive with optional sanitized smoke, R1 documents source reconciliation keys, and R2 hardens contact/group search ranking and de-duplication. R6e has completed sandbox-only send connector shell and idempotency/audit hardening. The active roadmap is `docs/superpowers/plans/2026-07-10-core-business-capabilities-roadmap.md`; next step is R6f.
+`MsgLib.db` has a validated copied read-only open path through the bundled 32-bit `System.Data.SQLite.dll` and password `123`. C27 adds `MsgLibReadSidecar` as the bounded x86 .NET reader boundary, C28 adds the Go `internal/msglib` process client, C29 adds bounded `display_entities` extraction, C30 wires it as optional contact/group MCP enrichment, C31 proves real copied-DB MCP enrichment with sanitized output, C32 reuses it for receive-message display fields, C33 proves that receive display path through a real copied-DB MCP smoke without printing entity values, C34 documents the operator setup/verification path, C35 maps MsgLib message tables to receive-message contract fields without reading row values, C36 adds metadata-only `message_sources` readiness, C37 defines the bounded DB-backed receive-source design, C38 implements sidecar/Go-wrapper `list_messages` with sanitized verification, C39 adds a Go adapter from MsgLib list results to the receive-message domain model, C40 adds explicit tool-level `msglib_readonly` source selection, C41 wires env-configured explicit MsgLib receive with optional sanitized smoke, R1 documents source reconciliation keys, and R2 hardens contact/group search ranking and de-duplication. R6j/R6k confirm the send-message strict-v2 production gate is still not passed. The active continuous execution plan is `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`; next step is R6l.

docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md

@@ -419,7 +419,7 @@ git push gitea main
 - Modify: `docs/current-status-card.md`
 - Modify: `docs/source-discovery/capability-source-matrix.md`
 
-- [ ] **Step 1: Look for a new returned package**
+- [x] **Step 1: Look for a new returned package**
 
 ```powershell
 Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime -Descending | Select-Object -First 10 FullName,LastWriteTime,Length
@@ -427,7 +427,7 @@ Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime
 
 Prefer a zip whose contents include `SANDBOX-SEND-INPUTS.json`, after-recorder output, and return manifest.
 
-- [ ] **Step 2A: If a new candidate exists, validate strict v2**
+- [x] **Step 2A: If a new candidate exists, validate strict v2**
 
 ```powershell
 $candidate = Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime -Descending | Select-Object -First 1
@@ -436,11 +436,11 @@ powershell -NoProfile -ExecutionPolicy Bypass -File scripts\validate-returned-se
 
 Expected pass output must include `r6d_gate_pass=true` and `strict_v2_pass=true` before production send can move beyond blocked state.
 
-- [ ] **Step 2B: If no candidate exists, document no-intake state**
+- [x] **Step 2B: If no candidate exists, document no-intake state**
 
 Create `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md` stating no strict-v2 returned package was found, `r6d_gate_pass=false`, and production `isphere_send_message` remains blocked.
 
-- [ ] **Step 3: Verify and commit**
+- [x] **Step 3: Verify and commit**
 
 ```powershell
 git diff --check
@@ -454,6 +454,14 @@ git push gitea main
 
 **Acceptance gate:** The status card explicitly says whether production send is still blocked or evidence-gated for the next round.
 
+**R6k Result:**
+
+- Scanned `C:\Users\zhaoy\Downloads` for recent zip files.
+- No new strict-v2 returned send-sandbox package was found.
+- Re-validated `C:\Users\zhaoy\Downloads\1631.zip` with `-ZipPath` and `-StrictV2`; strict-v2 failed as expected.
+- Created `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md`.
+- Decision: `r6d_gate_pass=false`, `strict_v2_pass=false`; default production send remains blocked.
+
 ---
 
 ### R6l: Send-message production path gate closure