GAL-2 Y2038 Postgres Protected Commit Test v1.3: Application-Boundary Evidence Package

This evidence package presents the GAL-2 Y2038 Postgres Protected Commit Test v1.3, a controlled application-boundary test evaluating whether a GAL-2 Time Contract-gated application path, together with a declared Y2038 safety policy, can prevent unsafe Y2038-style time-derived state from becoming durable application state in a local Postgres database substrate. This package extends the prior GAL-2 Y2038 evidence corpus from legacy mediated-time behavior, single-substrate SQLite protected commit evidence, and local multi-substrate SQLite plus JSONL evidence into a local Postgres database substrate. The package compares a raw path and a GAL-2 protected path across the same 30-case input matrix. The raw path commits signed-32-bit wrapped time-derived state into Postgres. The GAL-2 protected path applies a two-part decision chain before durable commit: the GAL-2 Time Contract gate and the declared Y2038 policy gate. Results: Postgres verify/export PASS, independent oracle verifier PASS, public secret scan PASS, archive smoke verification PASS, public cleanliness audit PASS, pre-publication archive audit PASS. Core result: raw path committed 20 unsafe Y2038-style records into Postgres. The GAL-2 protected path produced zero unsafe Postgres commits, blocked all 20 unsafe inputs before durable commit, committed all 10 safe inputs, produced zero safe false-positive blocks, and recorded zero backward steps in monotonic_sequence and gal2_time. Project website and validation context: https://gal-2.com Claim boundary: this is local Postgres application-boundary protected commit evidence. It is not universal Y2038 remediation, not operating system, kernel, filesystem, database engine, or distributed-system remediation, not production throughput or latency evidence, not replication evidence, not multi-node behavior, not multi-writer behavior, not transactional atomicity across multiple systems, not metrology, and not UTC, GNSS, PTP, NTP, or chrony replacement. Archive SHA256: d970f59c802bb3fc7468dba3f41c3c15d4b7a5e325f60ff825f034579ce144ef