BLOCK — P0: 0, P1: 1, P2: 1

- **P1 — Owner-approved neutral cluster flow is unreachable through the shipped API/UI.**  
  `household_import.py:57-63,592-602` requires a valid server-secret HMAC approval token, but no API route or preview field mints one. `HouseholdImportsPage.vue:69-92,441-465` exposes only category-cluster decisions and row-level unmatched-transfer decisions; it never creates a neutral cluster decision. The positive test at `test_household_classification_v2_golden.py:1143-1172` bypasses the product boundary by importing and calling private `_owner_neutral_cluster_approval()` directly. Consequently, a real owner cannot approve a cluster through the delivered workflow, despite the backend accounting path correctly producing uncategorized `transfer` transactions with zero income/expense effect. Add an authenticated, explicit owner-approval boundary that returns an exact cluster/subset-bound token, or include such a token only on an appropriately authorized preview action, then exercise API/UI → preview → confirm in a synthetic test.

- **P2 — The exact working tree changed during review and now contains an unexpected untracked `uv.lock`.**  
  Initial scope contained five modified files; final `git status` additionally reports `?? uv.lock` (337,782 bytes). This breaks exact-candidate/scope certainty until the release owner explicitly includes or removes it and reruns the final gate.

**Verified evidence**
- Focused backend: **14 passed**, including concept-v2 boundaries, neutral clusters, safe-transfer dilution, card, and Migros cases.
- Frontend household UX: **20 passed**.
- Frontend typecheck: passed.
- Source tracing confirmed concept-v2 uses the ordinary-row partition, 90% plausible/10% unresolved thresholds; strict 95%/count/ratio/cluster metrics remain visible and nonblocking.
- Preview/input/baseline fingerprints, cluster/subset stale checks, confirm reconstruction, business-readiness enforcement, and under-write-lock baseline recheck are present.
- No production or private raw data inspected; no repository files intentionally modified.