From b1f849b2d8e15cedcf4990d1a4aeabaa242036df Mon Sep 17 00:00:00 2001
From: "Mark E. DeYoung" <1854350+mark-e-deyoung@users.noreply.github.com>
Date: Mon, 14 Sep 2026 22:33:09 +0200
Subject: [PATCH 1/2] Extend sealed result retention to seven days

---
 .github/workflows/sealed-public-execution.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sealed-public-execution.yml b/.github/workflows/sealed-public-execution.yml
index b4200ce..510b9b4 100644
--- a/.github/workflows/sealed-public-execution.yml
+++ b/.github/workflows/sealed-public-execution.yml
@@ -75,7 +75,7 @@ jobs:
             .sealed/result.age
             .sealed/receipt.json
           if-no-files-found: error
-          retention-days: 1
+          retention-days: 7
           compression-level: 0
 
       - name: Preserve task verdict

From 507a275bad0eeb9bab6b907d2f09329181db4081 Mon Sep 17 00:00:00 2001
From: "Mark E. DeYoung" <1854350+mark-e-deyoung@users.noreply.github.com>
Date: Mon, 14 Sep 2026 22:33:24 +0200
Subject: [PATCH 2/2] Document seven-day sealed result pickup window

---
 docs/sealed-public-execution.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/sealed-public-execution.md b/docs/sealed-public-execution.md
index eee2937..3e9f62a 100644
--- a/docs/sealed-public-execution.md
+++ b/docs/sealed-public-execution.md
@@ -27,7 +27,7 @@ Public runner responsibilities:
 3. capture task stdout/stderr into the private result bundle rather than Actions logs;
 4. collect files written beneath `SEALED_RESULT_DIR`;
 5. package and encrypt the result to the supplied age recipient;
-6. upload only `result.age` plus a minimal `receipt.json` as a one-day Actions artifact;
+6. upload only `result.age` plus a minimal `receipt.json` as a seven-day Actions artifact;
 7. preserve task success/failure in the workflow verdict.
 
 ## Capsule contract
@@ -55,7 +55,7 @@ The public artifact contains only:
 - `result.age` — age-encrypted gzip tar containing execution metadata, captured stdout/stderr, and result files;
 - `receipt.json` — opaque assignment ID, completed/failed status, ciphertext SHA-256/size, public worker revision, and Actions run correlation.
 
-Retention is set to one day. Private reconciliation should normally delete the artifact sooner after successful pickup/decryption.
+Retention is set to seven days. This is a pickup/recovery window, not a durable evidence store. Trusted-side reconciliation should normally retrieve and delete the artifact sooner after successful pickup/decryption.
 
 The artifact is transport, not durable project authority. Durable conclusions, accepted evidence, negative results, or follow-on decisions belong back in the originating private/project-native authority.