# Astra gates — Helios on `cursor/astra-gates-0101`

Helios (Cursor on Icarus). 13 September 2026. **W0 freeze.**

Astra reviewed the handback. **Retain the engineering work. Do not accept this as a finished creator product. Do not authorize a release.** Packet receipts stay receipts. Passing unit/host tests is not Mitchell’s full-song solo MV.

No authorization to land `main`, overwrite trunk (`korgi.main.zip` / `korgi.git.tgz`), or Railway-redeploy KORGI. Paid Higgsfield/OpenAI demonstration runs stay frozen unless `KORGI_PAID_GENERATION=1` **and** composer spend-authorize — and even then they are not product art. Drive remains SSOT. Missing GitHub `origin` is by design.

Design lock: [`ASTRA_DESIGN.md`](ASTRA_DESIGN.md). Interfaces: [`ASTRA_INTERFACE_CONTRACT.md`](ASTRA_INTERFACE_CONTRACT.md). Orders: [`ASTRA_WORK_ORDERS.md`](ASTRA_WORK_ORDERS.md).

## What the packets proved (engineering, not ship)

| Packet | Engineering | Product |
|---|---|---|
| **A** one open project | In-process host + two-action grant + HTTP MCP list/call **passing**. `tools/list` still advertises the full registry (fake catalog vs grant). | Live Cursor Settings bind **unproven**. JS singleton ≠ cross-device. |
| **B** ingest/writer/host | Shared evaluator readers + local pack/reopen **passing** as reported. | Browser close/reopen remainder. Pointer not this packet. |
| **C** shops → cel | Job / prepare / accept plumbing **passing**. Spend freeze; cost unknown stays null. | Dest A2 stills **REJECTED** (horrible / not acetate). Auto-accept is not approval. Destination-render quality gate **open** (accepted-frame2 posterized/black). |
| **D** drawing desk | Mint/setCel/hold fixture **passing**. Store tool walk only. | Artist-complete **withdrawn**. Browser pointer recording **missing**. |
| **F** movie with sound | Clustered SimpleBlocks + PCM16 10s/34s **passing**. Cluster timestamp fix kept. No FFmpeg. | GUI still video-only. PCM is labeled Matroska, **not** the WebM VP9/Opus product target. 10s mux is **not** full-song acceptance. |

## Withhold release

- Equal-access signed-in instrument is **not shipped**.
- Better Auth is template-on / `dev-user` fallback; `/login` route **missing**.
- keep/guide/correct **missing**.
- Logic import matrix **missing** (WAV 48 kHz RIFF only).
- Wax Catch / Night Stamp are review/archive, not completed movies.

## Paid freeze

`assertPaidDispatchAllowed` on `/api/korgi/generate` and `runGeneration`. Default: frozen. Fixture `korgi.fixture` is local.

## Remaining (named, not “later”)

- Durable Project Host across processes (W1).
- User-delegated grants + honest catalog + fail-closed identity (W2).
- Destination-render quality gate (W2).
- Cursor desktop bind on the operator machine (still unproven).
- Pointer input on the paper (W4).
- In-app Responses operator (W3).
- Audio matrix + remix-without-slide (W5) — **starts with W1**.
- Valid WebM VP9/Opus export job (W6) — **starts with W1**.
- Four acceptances (W7), including Mitchell’s full-song solo MV.

Do not add historical test counts together. Run A/B/C/D/F cheap gates on **one** commit. Record SHA with pass/fail.