Trading catalog corrections: alpaca-py source pin and mirrors, alpacahq dispositions, IBKR forward note

blueprints/token-native-focus/saturation-audit.json

@@ -882,7 +882,7 @@
       },
       "remaining_install_gap": null,
       "remaining_install_gap_reason": "No additional useful installation gap identified for the selected role in this bounded evidence review; full lifecycle/optional-feature limits remain explicit.",
-      "source_pin": null,
+      "source_pin": "cc4cb3b7ba50ae250e621983c2779047fb16bb28",
       "lifecycle_stages": {
         "install": {
           "status": "observed_installed",

catalogs/landscape/upstream-snapshot.json

@@ -3248,7 +3248,7 @@
       "repository": "https://github.com/alpacahq/alpaca-py",
       "selected_repository_url": "https://github.com/alpacahq/alpaca-py",
       "selected_version": "0.44.0",
-      "selected_source_pin": null,
+      "selected_source_pin": "cc4cb3b7ba50ae250e621983c2779047fb16bb28",
       "checks": [
         {
           "endpoint": "repos/alpacahq/alpaca-py",
@@ -3297,7 +3297,7 @@
       },
       "status": "metadata_checked",
       "adoption_recommendation": "retain_selected_pending_capability_comparison",
-      "source_pin_kind": "version_only",
+      "source_pin_kind": "git_commit",
       "primary_repository": "https://github.com/alpacahq/alpaca-py",
       "release_relationship": "selected_version_matches_latest_stable"
     },

catalogs/us-equities/decision-index.json

@@ -284,6 +284,12 @@
       "repository_field": "repository",
       "kind": "research_supplement"
     },
+    {
+      "path": "catalogs/us-equities/convergence-20260926.json",
+      "collection": "/forward_notes/0/repository_decisions",
+      "repository_field": "repository",
+      "kind": "research_supplement"
+    },
     {
       "path": "catalogs/us-equities/convergence-program/foundation.json",
       "collection": "/discovery_only_leads",
@@ -404,7 +410,7 @@
     "repositories": 875,
     "public_star_repositories": 357,
     "beyond_public_stars": 518,
-    "references": 2051,
+    "references": 2054,
     "repositories_by_record_type": {
       "catalog_card": 148,
       "component_record": 69,
@@ -1447,6 +1453,16 @@
           "pointer": "/repositories/1",
           "decision": "conditional_separately_scoped_broker_access",
           "evidence_level": "selected_readme_source"
+        },
+        {
+          "kind": "research_supplement",
+          "path": "catalogs/us-equities/convergence-20260926.json",
+          "pointer": "/forward_notes/0/repository_decisions/0",
+          "id": "alpaca-mcp-server-research-boundary-20261005",
+          "decision": "accept_read_only_research_toolsets_reject_paper_order_path",
+          "disposition": "research_only",
+          "review_level": "source_review",
+          "evidence_level": "selected_primary_files"
         }
       ]
     },
@@ -1637,6 +1653,16 @@
           "pointer": "/candidates/17",
           "decision": "discovery_only",
           "evidence_depth": "Attributed documentary discovery; no runtime execution or controlled comparative acceptance"
+        },
+        {
+          "kind": "research_supplement",
+          "path": "catalogs/us-equities/convergence-20260926.json",
+          "pointer": "/forward_notes/0/repository_decisions/1",
+          "id": "alpaca-skills-research-boundary-20261005",
+          "decision": "research_only",
+          "disposition": "research_only",
+          "review_level": "source_review",
+          "evidence_level": "selected_primary_files"
         }
       ]
     },
@@ -1876,6 +1902,16 @@
           "pointer": "/candidates/29",
           "decision": "discovery_only",
           "evidence_depth": "Attributed documentary discovery; no runtime execution or controlled comparative acceptance"
+        },
+        {
+          "kind": "research_supplement",
+          "path": "catalogs/us-equities/convergence-20260926.json",
+          "pointer": "/forward_notes/0/repository_decisions/2",
+          "id": "alpaca-cli-reconciliation-disposition-20261005",
+          "decision": "retain_refuted_reconciliation_collector",
+          "disposition": "not_adopted",
+          "review_level": "source_review",
+          "evidence_level": "selected_primary_files"
         }
       ]
     },

catalogs/us-equities/runtime-target.json

@@ -149,7 +149,7 @@
     },
     {
       "id": "alpaca",
-      "selected_path": "Official alpaca-py0.44.0 for ingestion and separately qualified bounded deterministic paper lifecycle",
+      "selected_path": "Official alpaca-py 0.44.0 for bounded market-data ingestion (StockHistoricalDataClient, CorporateActionsClient and NewsClient; see local_data_acceptance) and the separately qualified bounded deterministic paper lifecycle (TradingClient order submission, lookup, cancellation and account/fill reconciliation; TradingStream trade updates; latest-quote and StockDataStream quote reads)",
       "upstream_nautilus_adapter_present": false,
       "local_data_acceptance": [
         "bounded AAPL SIP/raw daily bars and corporate actions",

manifests/evidence.json

@@ -10308,8 +10308,8 @@
     },
     {
       "path": "blueprints/token-native-focus/saturation-audit.json",
-      "sha256": "a0229ad6acc3b1d81857d606bbac02db43a25a8f774540fe826a5f132a2380f7",
-      "bytes": 484781
+      "sha256": "469a3121f6b68cfcadad8d130f01c62412b09a8cd7e4f0509f83f0e089b5242c",
+      "bytes": 484819
     },
     {
       "path": "blueprints/trials-20260926/README.md",
@@ -15693,8 +15693,8 @@
     },
     {
       "path": "catalogs/landscape/upstream-snapshot.json",
-      "sha256": "107c6176702bdc95c586762cf9521c1d91b79bbd4ce6ad9e92c3c08afe063f84",
-      "bytes": 255589
+      "sha256": "5db67d6ba8c7e0f14863661e25db8f8eebd8a2dbe32f6f62b173bc5fecff3a7c",
+      "bytes": 255625
     },
     {
       "path": "catalogs/landscape/us-equities.json",
@@ -15823,8 +15823,8 @@
     },
     {
       "path": "catalogs/us-equities/convergence-20260926.json",
-      "sha256": "d4e7d79f9b32c093632ae611bf5cdc13fb654907817137974e2987fd03202c73",
-      "bytes": 882688
+      "sha256": "acd7e784328701ef9b7123cc0f4f243437e3a353236f80e61ded6205faa65b40",
+      "bytes": 898431
     },
     {
       "path": "catalogs/us-equities/convergence-20260926.md",
@@ -15908,8 +15908,8 @@
     },
     {
       "path": "catalogs/us-equities/decision-index.json",
-      "sha256": "4b62678bee9f238e0df6179a44f88860ed5b3d4b96b3505fdcb82a539d6db004",
-      "bytes": 757289
+      "sha256": "15bcf02837853bad02026d7ff31395fa71e51a8be659e47cc4c6832620b81fe9",
+      "bytes": 758875
     },
     {
       "path": "catalogs/us-equities/engines-strategies.json",
@@ -16023,8 +16023,8 @@
     },
     {
       "path": "catalogs/us-equities/runtime-target.json",
-      "sha256": "6cdc57719ada786b46fe8c27d6d36ce162ffe66304b4e21d9e4e5131f6fa153d",
-      "bytes": 22531
+      "sha256": "9e9491592ca1ef4a1a1ba152b45c3b0a38afa4fa18f869eca9d92d30fc88d680",
+      "bytes": 22812
     },
     {
       "path": "catalogs/us-equities/security-identity-review.json",
@@ -52368,8 +52368,8 @@
     },
     {
       "path": "manifests/stack.json",
-      "sha256": "07a9ba1f192497808897040543ae605a1da686c7743b23df58503e927f453520",
-      "bytes": 102293
+      "sha256": "71224507e37ecac0125c8b81a5a46044632fa4a0d0b7ca7fad248ce130fb5238",
+      "bytes": 102331
     },
     {
       "path": "observability/README.md",
@@ -53973,8 +53973,8 @@
     },
     {
       "path": "tests/test_stack_lifecycle.py",
-      "sha256": "82d85e465b877e04f3eb746aa2c71ae398f2e9659c2fb2a2f1d07e6f49494e43",
-      "bytes": 6421
+      "sha256": "4a72cab5b32f906813adb28e9ec340519432a929daafcdd9526cc075f66d9285",
+      "bytes": 7192
     },
     {
       "path": "tests/test_supply_chain_scan.py",

manifests/stack.json

@@ -1447,7 +1447,7 @@
         "https://github.com/alpacahq/alpaca-py/tree/v0.44.0",
         "https://pypi.org/project/alpaca-py/0.44.0/"
       ],
-      "source_pin": null,
+      "source_pin": "cc4cb3b7ba50ae250e621983c2779047fb16bb28",
       "freshness": "Installed0.44.0 from accepted SDK lock; native read-only historical acquisition on2026-09-20. Exact scope and missing currency/PIT limits in receipt; no broker execution."
     },
     {

tests/test_stack_lifecycle.py

@@ -43,6 +43,17 @@ def test_catalog_partition_matches_canonical_union(self):
         self.assertEqual(sum(counts["exclusive_identity_groups"].values()), counts["catalog_identities"])
         self.assertEqual(counts["selected_components"] + counts["nonselected_catalog_identities"], counts["catalog_identities"])
 
+    def test_alpaca_source_pin_matches_both_selection_mirrors(self):
+        component = next(c for c in self.stack["components"] if c["id"] == "alpaca-py")
+        snapshot = json.loads((ROOT / "catalogs/landscape/upstream-snapshot.json").read_text())
+        freshness = next(row for row in snapshot["components"] if row["component_id"] == "alpaca-py")
+        self.assertRegex(component["source_pin"], r"^[0-9a-f]{40}$")
+        for name, pin in (("lifecycle audit", self.rows["alpaca-py"]["source_pin"]),
+                          ("freshness snapshot", freshness["selected_source_pin"])):
+            with self.subTest(mirror=name):
+                self.assertEqual(pin, component["source_pin"])
+        self.assertEqual(freshness["source_pin_kind"], "git_commit")
+
     def test_stage_states_require_scope_and_supported_local_references(self):
         stages = set(self.audit["stage_policy"]["stages"])
         statuses = set(self.audit["stage_policy"]["statuses"])