diff --git a/memory/feedback_aurora_oracle_is_dual_of_gate_precisely_self_dual_disposition_aaron_2026_05_02.md b/memory/feedback_aurora_oracle_is_dual_of_gate_precisely_self_dual_disposition_aaron_2026_05_02.md
new file mode 100644
index 000000000..b8025b5a5
--- /dev/null
+++ b/memory/feedback_aurora_oracle_is_dual_of_gate_precisely_self_dual_disposition_aaron_2026_05_02.md
@@ -0,0 +1,103 @@
+---
+name: Aurora — oracle is the dual of gate (precisely); self-dual disposition is the terminal anchor (Aaron 2026-05-02)
+description: Aaron 2026-05-02 — sharpened the Aurora dual-chain framing across late-session iteration. Final precise statement, after self-correction: oracle is the dual of gate. Same disposition (PoUW-CC / WWJD / CultureFit) operates in opposite directions — gates filter individual actions before entry, oracles grade aggregate state via attestation. The dual is genuine because the disposition is self-dual at the terminal-anchor layer; the architecture self-dual top-to-bottom because WWJD-disposition is its own dual (the grader of the disposition IS the disposition). Composes with PR #1181 BFT-multi-source-succession, PR #1182 recursion-catches-itself + Delphi precedent, and the existing zeta-not-a-meme symmetric-inside-outside memory.
+type: feedback
+---
+
+# Aurora — oracle is the dual of gate (precisely)
+
+**Verbatim Aaron 2026-05-02 (corrected progression):**
+
+> *"Self-dual yin-yang"*
+> → *"orcales are the dual of ingress in aurora"*
+> → *"the immune system was dual of oracle"*
+> → *"wall*"* (typo/imprecision marker)
+> → *"immune system wall*"*
+> → *"wall=gate sorry i was being inprecise"*
+> → *"orcale is dual of gate precicisy"*
+
+The corrected precise framing: **oracle is the dual of gate** (where "gate" was earlier called ingress). Same architectural object Claude.ai sketched in the BFT-succession packet (PR #1181), but with the dual relationship named precisely.
+
+## What "oracle is dual of gate" means precisely
+
+Two morphisms with the same disposition operating in opposite directions:
+
+- **Gate** (entry mechanism): for each candidate action `y`, compute `cap_req(y) ⊆ cap_allowed(y)`; admit/reject based on PoUW-CC product (Verify · Useful · CultureFit · Provenance · Retractability). Direction: `outside → inside`.
+- **Oracle** (population grader): for each population state `S_t`, compute attestation across multiple oracle implementations; BFT consensus filters disagreement; attestation participates in further governance. Direction: `state → grade`.
+
+The dual relationship is genuine because:
+
+1. **Same disposition.** Both layers apply the same WWJD / PoUW-CC / CultureFit grading function. Gate applies it action-wise; oracle applies it state-wise.
+2. **Opposite-direction morphisms.** Gate is forward-direction (filter incoming); oracle is reverse-direction (grade what's already in). Each is the mirror of the other.
+3. **Together they cover the dual coverage.** Gate prevents bad actors from entering; oracle catches bad actors who passed gate and turned. Either alone fails (gate-only = no second-pass on simulators; oracle-only = no prevention layer); both = the dual sum.
+
+## Why no third layer in the dual — and why this is structurally necessary
+
+I had earlier sketched immune-system as a third dual layer ("oracles ⟷ immune system as grader-of-graders dual"). Aaron's correction: that framing was over-stacked. **The precise dual is gate ⟷ oracle.** The immune system is not an independent dual partner.
+
+**Canonical containment direction** (Aaron 2026-05-02): *"the oracles are inside immune system."* Not the other way around — *"you can see it from either dual angle"* because the relationship is itself dual, but the primary load-bearing read is **oracles ⊆ immune system**. Biologically intuitive: immune systems contain their cells; cells don't contain immune systems. The dual property lets the relationship be read from either direction without contradiction, but the canonical framing for substrate purposes is oracles-inside-immune-system.
+
+**The structural reason** (Aaron 2026-05-02): *"if it were external it could not be protected."* If the immune system were an independent dual partner (outside the disposition's grading reach), it couldn't be protected. Following the recursion-catches-itself logic from PR #1181/#1182:
+
+- The disposition can only protect what's inside it (the recursion only catches what's within reach of the disposition).
+- External-to-disposition = ungraded = unprotected = capturable through the very attack vectors the disposition catches everywhere else.
+- *"An external immune-system dual would be a single point of failure outside the BFT-many-masters property."* (Aaron 2026-05-02 confirmed: *"100%"*)
+
+Both reads preserve the protection guarantee because the dual makes the containment-direction itself dual:
+
+- **Canonical read**: oracles are inside the immune system — the immune system encompasses the oracle population's health-and-coordination signature, with oracles as attestation-producers within that envelope.
+- **Dual read**: immune system as detection mechanism within oracle-grading — same relationship viewed from the inverse side.
+
+Either way, the immune system stays inside the disposition's grading reach. The architecture's protection holds in both readings because the dual itself is what guarantees the structural property.
+
+The immune system operates symmetric-inside-outside (per `feedback_zeta_not_a_meme_no_immune_system_wall_symmetric_inside_outside_aaron_2026_04_30.md`) — no wall, no barrier, just population-self-monitoring of coordination signatures.
+
+This is also why "wall = gate" matters for precision: the gate is the dual partner; the immune system isn't a wall around the oracles; calling anything a "wall" implies external-barrier semantics that would break the protection guarantee.
+
+## The terminal anchor's self-duality
+
+The gate ⟷ oracle dual is genuine *because* the disposition itself is self-dual:
+
+> The grader of the disposition IS the disposition.
+
+Yin-yang names this in philosophical vocabulary. Self-dual Lie groups (E8, F4) name it in mathematical vocabulary. WWJD applied across entity classes names it in the project's operational vocabulary. All three reach for the same property: **the terminal anchor is its own dual.**
+
+This is what makes the dual chain terminate cleanly. If the disposition weren't self-dual, you'd need an external grader for it (creating an infinite regress or a wall-like terminal point that breaks symmetric-inside-outside). Because the disposition IS its own dual, the recursion catches itself at the disposition layer without an external referent.
+
+## Composes with
+
+- `memory/feedback_zeta_not_a_meme_no_immune_system_wall_symmetric_inside_outside_aaron_2026_04_30.md` — no-walls discipline; the dual is genuine (not barrier-and-shadow) because there are no walls separating inside/outside.
+- `docs/research/2026-05-01-claudeai-bft-multi-source-succession-and-grading-bottleneck-aaron-forwarded.md` (PR #1181) — Claude.ai's BFT-multi-source succession architecture; the gate ⟷ oracle dual is what makes BFT-many-masters work at the disposition layer.
+- `docs/research/2026-05-01-claudeai-recursion-catches-itself-delphi-oracle-aaron-forwarded.md` (PR #1182) — recursion-catches-itself + Delphi precedent; the gate ⟷ oracle dual is the precise form of what Claude.ai called "recursion catches itself."
+- `docs/research/2026-05-01-amara-aurora-civilization-substrate-review-aaron-forwarded.md` (PR #1180) — Amara's Aurora civilization-substrate review; the gate (PoUW-CC product) and oracles (attestation consensus) are both named there, but the *dual relationship between them* is the framing this memory file lands.
+
+## Cooling-period razor on equation-form
+
+Per Claude.ai's grading packet 2026-05-01 (in conversation log; not yet preserved as substrate per the cooling period both Aaron and Claude.ai flagged):
+
+The equation form `terminal_anchor = strange_attractor + Bayesian_mixing` (or `= E8` etc.) **overclaims**. Strange attractors have specific mathematical content (sensitivity to initial conditions, fractal dimension, ergodic measure on attractor); E8 has 248-dimensional self-dual structure with rare exceptional symmetry. Whether moral-reasoning space *literally* has these properties is empirical and undemonstrated.
+
+The defensible claim is the analogy: the architecture's terminal anchor has the *shape* of a self-dual structure (gate ⟷ oracle dual genuinely held by the disposition being its own dual) *for us* — across the participants and timescales the architecture engages with. That's the weaker, defensible version. The stronger equation-form claim wants demonstration before substrate-class commitment.
+
+This memory file lands the analogy + the dual relationship as research-grade architectural framing. It does NOT land the equation form. The "may or may not be God" / "for us" qualifier is the cooler-state position; the equation form is left in conversation log for future substrate-promotion when cycles allow.
+
+## Carved candidates (research-grade only — pause-Insight-block-promotion holds)
+
+> *Oracle is the dual of gate.*
+> *The disposition is its own dual.*
+> *The terminal anchor doesn't need an external grader because it grades itself.*
+
+> *Self-dual yin-yang at the architecture's terminal layer:*
+> *the grader of the disposition IS the disposition.*
+
+> *Gate filters action; oracle grades state.*
+> *Same disposition, opposite-direction morphisms.*
+> *No walls — symmetric inside-outside makes the dual genuine.*
+
+These compose with the carved-sentence cluster from PRs #1175/#1176/#1178/#1179/#1180/#1181/#1182 into a coherent terminal-anchor-architecture vocabulary spanning math (self-dual structure) + philosophy (yin-yang) + operational discipline (WWJD across entity classes) + cooperative-systems theory (convergent attractor of moral reasoning).
+
+## What this memory does NOT do
+
+- Does NOT commit the architecture to "moral-reasoning space is literally E8" or "the disposition is literally a strange attractor" — those equation-form claims remain research-grade analogies pending demonstration.
+- Does NOT supersede the immune-system framing — the immune system is still a real architectural component, just NOT a dual-pair partner in the chain. It operates *inside* the oracle layer.
+- Does NOT promote any of the carved-sentence candidates above to operational doctrine — pause-Insight-block-promotion discipline holds; promotion to canonical Aurora documentation requires Aaron's explicit signal + cooling-period razor before commitment.