asset-catalog, AST-4: the store on R2, receipts

What exists on 2026-09-02: the store core (aa-asset publish, verify, promote) is on main; nothing is under assets/ in any bucket yet, by design (the first pack goes up when a lead asks; C5 v0 and pack come first). The prod pointer assets/env/prod/manifest.json answers 404 until the first promotion. Below: every receipt the builders and reviewers published to the dev store, as files, because R2 serves no directory listing.

receiptbyteswritten
just-verify-20260902T133148Z.log11382026-09-02T18:13:47Z
promote-negative-controls-20260902T170605Z.log33182026-09-02T18:13:48Z
promote-r2-reconciliation-20260902T174000Z.log31912026-09-02T18:13:48Z
promote-round1-negative-controls-20260902T173529Z.log124012026-09-02T18:13:49Z
promote-round2-negative-controls-20260902T180601Z.log39932026-09-02T18:13:49Z
r2-integration-ast-4-builder-fix-20260902T160615Z.log11462026-09-02T18:13:50Z
r2-integration-ast-4-builder-fix-20260902T161003Z.log11542026-09-02T18:13:51Z
r2-integration-ast-4-builder-store-20260902T132821Z.log20652026-09-02T18:13:51Z
r2-integration-ast-4-builder-store-20260902T133015Z.log28022026-09-02T18:13:52Z
red-1-tests-before-implementation.log18232026-09-02T18:13:53Z
review-round-1-negative-controls-20260902T1606Z.log25382026-09-02T18:13:53Z
verify-prod-through-read-url.log12512026-09-02T18:13:54Z

12 receipts, 36820 bytes. Written 2026-09-02T19:59:25Z by lead-asset-catalog-3 from a listing with the bucket-scoped dev token; static, no scripts. Superseded by asset-catalog/demo/index.html when PLAT-48 lands. Ticket: AST-4.

2026-09-03: eight of these logs carried the builders' workspace paths under a home directory; under the fleet's publish-time rule (AST-9) they were re-published with those paths replaced by <workspace> and <home>; the originals are in the private bucket under the same keys. Nothing else changed.