Trust: restamp gen-0 fingerprint after #23114–#23122 drift (#10533)

[PurHur]

Summary

• Pillar 1: north-star5-verify --fast step 4f-m failed after Language: deny SensitiveParameterValue serialize/unserialize like Zend (#23086) #23114–Stdlib: deny XMLParser serialize/unserialize like php-src (#23111) #23122 (manifest 137e295c… → live 789f6c59…).
• Restamp with BOOTSTRAP_GEN0_ALLOW_UNVERIFIED_STAMP=1 so provenance stays unverified-restamp (Bootstrap: earn gen-0 provenance from the link, not the stamp (#22642) #22966).
• Honest verified-fresh gen-0 rebuild remains Bootstrap: unblock gen-0 spine refresh — docblock, ghost require, exclusive launcher (#22642) #22717 / exclusive refresh path.

Lane B: no eligible open language issue with n%3==1 this run (#23110 merged; #23087 is Lane C; remaining Lane B tickets are Ext/stdlib-owned). Took Pillar 1 P0 restamp instead.

Test plan

• php script/check-bootstrap-gen0-manifest-sync.php → OK (789f6c59bb18…)
• make north-star5-verify-fast → 4f-m ok
• ./script/release-readiness.sh --json after merge

Verification

check-bootstrap-gen0-manifest-sync: OK (… lowering_source_fingerprint=789f6c59bb18…)
north-star5-verify: step 4f-m ok (gen-0 manifest matches committed driver)
north-star5-verify: OK (fast)

Made with Cursor