[JoyboyBrian]

The retained CRT mask/repair bridge hands each marked-hole address to a host-integer key function. This package replaces that seam with an actual finite-control tape service: all ten inverse shears, three current-state encoded ROM queries, the ideal switch, and direct 12-bit append at the original bad-stream port.

For the explicit u2,t2,y8 geometry (target 0, 1 or 2), the scoped proof covers every address and legal target-independent 32-bit ROM. Complete instructions are bounded by 3,287,110 per key through static charging, including descriptor/header construction, Boolean/carry work, ROM scans, erasure and head return. Sampled costs of 41,395–44,928 are reported separately.

The unchanged original producer→scanner→repair middle layer now calls this service at all 2,944 marked holes among 4,096 payloads. Its protected output equals the ideal layer, no good address is called and no hole is missed. Borrowed inputs and private/caller ownership are restored. The separate key instruction and cell ledgers identify the 229,632 interface actions already included in the repair invoice; the de-duplicated repair-plus-key cell total is 52,444,587.

Scope: this is a fixed-geometry program theorem and one actual full layer replay. Raw macro-S preparation, ROM construction/layout, outer producer/scanner/repair Boolean control, all-size parameter handling and total E(p,ell) remain external. No numerical binary lowering is claimed for the joined port's opaque payload alphabet.

Predecessors: #4637 at 60d0b09f13a9f9ebdd93d98d83d16ce6907d70b6 provides the original caller and host-word key premise; #4752 at e8bdf35809eecfb0b8db7b5e141cb1ba0f4f6a1c provides the unchanged encoded ROM query; #4739 at 26ccde014218f7d906d1251dc295fbc1437ede8a charged transported data-bit work in a different fixture. Their source files remain unchanged. The new package pins all 16 live dependencies at base 624de9dc66858af0945e5f8a0942488d62280d43 and leaves the selected result untouched.

Validation:

• Registered Python 3.12 hook and metadata/source pins.
• 376 accepted component cases across all five source ROMs plus parity; independent replay of 16,345,420 instructions and all three query epochs.
• Four malformed addresses, four behavioral faults and two incomplete event logs are detected.
• One actual original middle-layer replay, 128,507,264 complete key instructions, completed locally in 36.7 seconds with a 120-second cap.
• Committed-byte/source-history preflight passed for all 25 files at 4e4cf7e47f3fc1c40e775d84fb2e7cd2603658cd; declared base is an ancestor. Export and offline integrity checks passed. Fresh extracted, Git-free -O direct replay passed both components (12.9 s) and caller (35.6 s).

Canonical claim: #4709 (comment)

Prepared by JoyboyBrian with substantial OpenAI Codex assistance; Apache-2.0, preserving predecessor authorship and notices. Hosted CI has not yet been verified.

Submission overlap checkpoint: scoped offline search at 19:59:40 UTC used the complete cache of 316 open PRs (19:58:39) and 3,732 discussion records (19:59:26), plus 6,321 local notes at this commit. Its eight matches were the two predecessor packages, this package and its claim/hub pointers; no separate same-scope lead was found. Offline coverage is advisory and not proof of novelty. Live predecessor heads #4637, #4739 and #4752 were rechecked and remain exactly as listed above, all merged.

Final source: 4e4cf7e47f3fc1c40e775d84fb2e7cd2603658cd, branch brian/crt-paid-key-service; author and committer JoyboyBrian. Export SHA256 b8acedc3e72ada36335813d7af8d2fd9518e2e64110b01c3155423e39e14cb16. Local results are not hosted CI or scientific acceptance.