# Access ledger — Fusion PPC system audit

Frontloaded access probes. All results are non-secret receipts. No credential value is recorded.

| # | Route | Probe | Result | Effect |
| --- | --- | --- | --- | --- |
| A-01 | Repo `/home/matt/mirror/Fusion` | `git log`, `git status` | OK, branch `round-13-takeover` @ `8351b59`, clean | primary review surface |
| A-02 | Fixed point `638e7524` | `git cat-file -t`, `merge-base --is-ancestor` | resolves; **not an ancestor** of the reviewed branch | ORCH-CORR-1 |
| A-03 | 8 child branches | `git rev-list --count`, `git log -1` | all resolve; only T1 carries child work | build-state truth |
| A-04 | `origin/codex/fusion-ppc-architecture-orchestrator` | `git ls-tree`, `git archive` | OK, 41 files absent from reviewed branch, extracted read-only | recovered the PPC evidence base |
| A-05 | Child session records `~/ops/sessions/fusion-ppc-*.json` | read | 8 files, branch + model only, no live status field | cannot prove liveness from these |
| A-06 | tmux | `tmux ls` | no architecture or child session running | run halted |
| A-07 | Model pin | read `~/.claude/.box-local.json`, `~/.claude/settings.json` | `claude-opus-5`, `effortLevel: xhigh` | model contract satisfied for the orchestrator |
| A-08 | Playwright | `which playwright`; `python3 -c "import playwright"`; `ls ~/.cache/ms-playwright` | binary at `/home/matt/.local/bin/playwright`, Python package present, `chromium-1234` installed | Lane 2 browser QA unblocked |
| A-09 | Mac-local handoff paths (`/Users/agency/...`, `/private/tmp/fusion-review-handoff-20260830/`) | path check | absent (devbox run) | requirements sourced from handoff verbatim quotes + accepted T1 gists instead |
| A-10 | `ads-control/reports/stage-3-*.html` | search all branches | **absent from git entirely**; only template + bundles committed | rendered KPC report unavailable; template reviewed instead |
| A-11 | Google Ads / Meta live APIs | not attempted | n/a | review is read-only inspection; no platform call was needed or made |
| A-12 | Mission Control | `~/ops/status.sh fusion ...` | accepted | run visibility published |

## Credentials

None read, none used, none required. No `.env`, key file, token or Notion secret was opened. No
credential-shaped value appears in any review artifact.