Add docker_reproduce_20260918/weights/ aliases for the sealed chujian:best image (server-side copies of handoff_20260918 weights; sha256 identical to WEIGHTS.json)
The upload exclusion list covered *.redacted.pt / *.redacted.pth / *.redaction.json but not the .sha256 suffix, so seven one-line checksum files for the local metadata-redacted copies were published alongside the weights. They contain nothing sensitive -- just a sha256 and a filename -- and the .pt/.pth files they point at are deliberately not published (project owner ruled the GPU UUIDs stay in, so the published checkpoints are the training originals). They are kept rather than deleted so that nothing already in the repo is destroyed; SCRUB_ERRATA_20260919.md and UPLOAD_RECEIPT.json now say so explicitly.
UPLOAD_RECEIPT.json records, for both repos, every file published under handoff_20260918/ with its size and LFS sha256, the commit list, and the verification pass: all 1,743 LFS files were re-read from the public API and their sha256 compared against the package MANIFEST.json (and, for the two crop tarballs, against the source checksums) -- 1,743 matched, 0 mismatched. It also lists what was deliberately not uploaded and why, and restates the QH04 governance override.
This file is written after MANIFEST.json was frozen, so it is not listed there by design.
handoff_20260918: refresh the model card for the sealed 2026-09-19 configuration
