Format works; default not flipped

Since 2026-08-30 the specification is a Candidate, no longer a draft: production models encode, verify, and execute through the format byte-identically, containers serve real inference, and the LQL surface reached full parity — execution, tracing, mutation, compile, diff, compact. But no byte freezes until the pre-registered gates pass, and the default extractor still writes the previous generation — the flip is a named decision (M4), made in exactly one place, not yet made. The Record keeps the whole ledger, dated.

SUPPORTED · 3.0-candidate · M1–M3 passed · M4 (the flip) open · G5 sealed