Recover research pipelines after registry removal

[Techris93]

Summary

• prefer fresh official-registry intake but reuse exact prior quarantine evidence when a version is removed
• independently verify ecosystem, package, version, size, regular-file state, and SHA-256 before reuse
• record registry degradation and reuse provenance in the pipeline
• preserve static-only, no-execution boundaries

Live acceptance

• recovered retracted NuGet Braintree.Net@3.35.7 after registry 404
• hash-verified prior artifact and freshly collected reference package
• Gemini 3.6 completed all three analyses
• agent review recorded a likely verdict at 85% confidence
• sandbox, disclosure, and publication remained untouched

Verification

• 25 focused pipeline/intake tests passed
• strict MkDocs build passed
• diff check passed

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[cloudflare-workers-and-pages]

Deploying secopsai with    Cloudflare Pages

Latest commit:	7feb1e3
Status:	✅  Deploy successful!
Preview URL:	https://d26b90c0.secopsai.pages.dev
Branch Preview URL:	https://codex-retracted-package-cach.secopsai.pages.dev

View logs

[cloudflare-workers-and-pages]

Deploying website with    Cloudflare Pages

Latest commit:	7feb1e3
Status:	✅  Deploy successful!
Preview URL:	https://7a4f8817.website-bks.pages.dev
Branch Preview URL:	https://codex-retracted-package-cach.website-bks.pages.dev

View logs