docs: register sealed dynamic confirmation

4 files changed, 11 insertions, 3 deletions

diff --git a/PAPER_PLAN.md b/PAPER_PLAN.md
index 80eacef..45ff8e5 100644
--- a/PAPER_PLAN.md
+++ b/PAPER_PLAN.md
@@ -76,7 +76,8 @@ not imply that no-traffic scaling establishes the necessity of residualization.
    boundary.
 5. **Standard scale.** Do not claim it yet: A3 failed and the dynamic
    projection branch currently has only one short validation endpoint. A
-   predeclared full D3 result plus independent confirmation is required.
+   predeclared full D3 result plus the already frozen paired five-seed D4
+   confirmation is required.
 
 ## Figure order in the manuscript
 
diff --git a/README.md b/README.md
index 14a0b12..60fd2d2 100644
--- a/README.md
+++ b/README.md
@@ -72,6 +72,8 @@ and scaling behavior. See `NOVELTY.md` for the exact prior-art boundary.
   clean KP's `82.66%` and the failed mixed-traffic controls' `10%`, at `1.3261x`
   BP MACs and zero task-loss queries. This is still one short validation seed;
   the predeclared 200-epoch D3 run is in progress and test remains untouched.
+  A paired five-seed clean-KP/dynamic D4 protocol is already frozen but remains
+  hard-gated on D3; no D4 test endpoint has been accessed.
 - Native author-code fidelity is complete. BurstCCN reaches `80.10%` at its
   validation-selected epoch versus published `82.97 +/- 0.21%`; Dual Prop
   reaches `92.46%` versus published `92.41 +/- 0.07%`. Their audited walls are
@@ -94,7 +96,7 @@ somatic statistic rather than arbitrary top-down context. `ROADMAP.md` and
 - `ROADMAP.md`: accept/oral evidence gates and their state;
 - `MIXED_TRAFFIC.md`: frozen standard-ResNet raw/matched/innovation accept gate;
 - `DYNAMIC_INNOVATION.md`: post-failure two-timescale stability theory and
-  frozen D1--D3 gates;
+  frozen D1--D4 gates;
 - `ORAL_A.md`: frozen standard CIFAR ResNet funnel;
 - `ORAL_A_V2.md`: frozen post-failure representable-subspace funnel;
 - `ORAL_A_V3.md`: frozen vectorizer-space causal-calibration funnel;
diff --git a/REVIEW_SCORECARD.md b/REVIEW_SCORECARD.md
index 4257ac3..96272ab 100644
--- a/REVIEW_SCORECARD.md
+++ b/REVIEW_SCORECARD.md
@@ -77,6 +77,7 @@ Every formal result report records:
 | Dynamic projection D1 | 5 | All 352 training-only steps remain finite while the fast neutral fit holds residual coupling near zero | Mechanics only; no held-out endpoint |
 | Dynamic projection D2 | 5 | One frozen 20-epoch record reaches 83.58%, above clean KP's 82.66%, with all stability and cost gates passing | Short single-seed validation cannot establish the full scaling claim |
 | Dynamic projection D3 | running | A predeclared 200-epoch near-BP validation gate is open | Only a complete pass can make 6/10 eligible and open confirmation |
+| Dynamic projection D4 | sealed | Before observing D3, a paired clean-KP/dynamic five-seed test protocol and executable gate were frozen | D3 must pass first; a complete D4 pass, with no seed replacement, is required for 7/10 |
 | Oral-A A4 | not opened | The prerequisite A3 gate failed | No oral-A confirmation claim is available |
 
 These are conditional reviewer forecasts, not promised scores. A failed stage leaves its negative
diff --git a/ROADMAP.md b/ROADMAP.md
index 57b6710..ac3914c 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -532,7 +532,11 @@ feedback cosine is `0.904056`, all projection certificates pass, cost is
 untouched. Because this is one short seed, the score stays 5/10. The
 predeclared 200-epoch D3 validation endpoint is now open; only a complete D3
 pass can make the 5-to-6 score update eligible and open independent test
-confirmation.
+confirmation. Before observing D3, `DYNAMIC_INNOVATION.md` and executable
+scripts freeze D4 as a five-seed paired clean-KP/dynamic test panel. D4 is
+hard-gated on a complete D3 pass, evaluates test exactly once per run, and can
+raise 6-to-7 only through its predeclared accuracy, paired noninferiority,
+alignment, leakage, query, and cost checks.
 
 Prepare convolutional local-update primitives and ResNet-20/32/56 protocols early. Queue frozen
 runs opportunistically on authorized idle GPUs. Because BurstCCN already reports CIFAR-10 and