Skip to content

B4.8: dissolve emit-helper file-marker bind selection in roundtrip fixture - #1069

Merged
briansrls merged 6 commits into
mainfrom
session/crisp-moth-844
Apr 28, 2026
Merged

briansrls merged 6 commits into
mainfrom
session/crisp-moth-844

Conversation

@briansrls

@briansrls briansrls commented Apr 27, 2026 •

Copy link
Copy Markdown
Contributor

B4.8 — Phase 2 emit-helper secondary-consumer dissolution

Closes B4.8 from docs/briefs/b4-phase-2-site-dissolution-queue.md (post-B4.3 #824 land).

Audit

Swept all span.file == / .ends_with sites in src/v3/compiler/src/ against the B4.3 carrier (BindEmitParticipation::UserCallable / BranchEmitParticipation):

Site B4.8 candidate?
bootstrap.rs:113 (BOOL_TYPES_FILE) No — B4.5 territory (DeclarationRef std-file marker)
emit_rust_roundtrip_fixtures.rs:166 (bind.span.file == "runtime_reflection.v3") Yes — selects user Bind by file marker; B4.3 carrier dissolves it
lens_testgen.rs:203, :520 (verification.dag/substrate.dag) No — std-decl selection, B4.5/B4.6 territory
test_runner.rs:1547, :2751 (decl.span.file == claim.file_name) No — variable-to-variable file relation, intrinsic to test-claim resolution; not a sentinel constant

Remaining span.file uses in emit.rs (lines 1083, 1095) pass decl.span.file into source_filtering.excludes(...), which is a structural path-collection filter, not a sentinel-string equality. No migration needed.

Change

src/v3/compiler/src/emit_rust_roundtrip_fixtures.rs:166 — MODULE_RESULT_PORT_IS_PARAM wrapper body migrated from

Behavior::Bind(bind) if !bind.params.is_empty() && bind.span.file == "runtime_reflection.v3"

to the structural carrier:

Behavior::Bind(bind) if bind.name == "id" && bind.emit_participation() == Some(BindEmitParticipation::UserCallable)

This mirrors the pattern B4.3 (#824) introduced for the in-tree emit-helper tests at emit.rs:3166-3220.

Carrier / delete-path note

  • Carrier: Bind::emit_participation() -> Option<BindEmitParticipation> (pub accessor on dag::Bind, pub enum dag::BindEmitParticipation), authored in B4.3.
  • Delete path: the file-name sentinel "runtime_reflection.v3" no longer participates in bind selection inside the wrapper; only the input-file argument passed to compile_to_dag retains it (intrinsic SourceSpan input, not a structural query target).
  • No replacement sentinel string introduced.

Regression

Existing boundary roundtrip test m1_3_emit_rust_test::rustc_roundtrip_emitted_module_compares_reflected_port_ids_in_list_contains exercises the migrated wrapper end-to-end (emit Rust → rustc → run → compare) and now witnesses the structural-dispatch path. Verified locally: passes.

DB-8 / fixed-point

This change touches only wrapper_body string contents in a fixture table consumed by host #[test] harnesses and the r1c_e_emit_gates ExecuteCommand bin; no generated/ratcheted file is regenerated by it. No DB-8 / fixed-point regen required.

Closes

  • B4.8 row in docs/briefs/b4-phase-2-site-dissolution-queue.md

🤖 Generated with Claude Code

@briansrls briansrls left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review metadata

  • Provider / model: codex / unknown
  • Commit: 488e44a7 · Trigger: schedule
  • Thinking: 140s wall

⚠️ Review blocked because gh pr diff 1069 --repo gunb-ai/gunbc cannot connect to api.github.com, so the required PR diff source of truth was unavailable.

@briansrls briansrls changed the title crisp-moth-844 B4.8: dissolve emit-helper file-marker bind selection in roundtrip fixture Apr 27, 2026
@briansrls
briansrls marked this pull request as ready for review April 27, 2026 23:38
@briansrls

Copy link
Copy Markdown
Contributor Author

Manager spot-check: B4.8 scope looks right. The PR removes the only live bind-selection file sentinel in and replaces it with the B4.3 structural carrier () plus the stable bind name. Residual hits in emit modules are source filtering or fixture input filenames, not the B4.8 sentinel-selection site.\n\nNo blocking feedback from this pass. Let CI/reviews finish; if they stay green this is ready to merge.

@briansrls

Copy link
Copy Markdown
Contributor Author

Review metadata

  • Provider / model: claude / claude-opus-4-7
  • Commit: d6591822 · Trigger: schedule
  • Thinking: 8.2s wall

Verdict: APPROVE — One-line fixture wrapper change replacing a file-marker + params heuristic with a name + emit_participation() predicate. Narrowly scoped, consistent with dissolving ad-hoc bind-selection markers, no invariant concerns.

@briansrls

Copy link
Copy Markdown
Contributor Author

Manager spot-check correction: previous comment was shell-mangled by inline backticks; this is the intended text.

B4.8 scope looks right. The PR removes the only live bind-selection file sentinel in emit_rust_roundtrip_fixtures.rs and replaces it with the B4.3 structural carrier (BindEmitParticipation::UserCallable) plus the stable bind name. Residual span.file hits in emit modules are source filtering or fixture input filenames, not the B4.8 sentinel-selection site.

No blocking feedback from this pass. Let CI/reviews finish; if they stay green this is ready to merge.

@briansrls

Copy link
Copy Markdown
Contributor Author

Triage of queued feedback:

  1. codex 488e44a7 schedule review — review blocked by api.github.com connectivity; no diff was read, so no finding to action. Not a code concern; needs a re-trigger when the runner has network. No code change.
  2. Manager spot-check (briansrls 23:39:28Z + correction 23:39:38Z) — non-blocking approval ("ready to merge if CI stays green"). No action.
  3. claude api-review d6591822 — APPROVE; no findings. No action.

No feedback is actionable as a code change on this PR; CI gates remain the merge criterion.

@briansrls

Copy link
Copy Markdown
Contributor Author

Review metadata

  • Provider / model: cursor / composer-2
  • Commit: 44886280 · Trigger: schedule
  • Thinking: 20s wall

Findings

None. The change replaces a fragile selector (span.file == "runtime_reflection.v3" plus non-empty params) with bind.name == "id" and emit_participation() == Some(UserCallable), which uses declared bind identity and participation instead of a file-marker heuristic. Nothing in this one-line fixture string conflicts with INVARIANTS, docs/modeling-discipline.md, CODING.md, or TESTING.md; it stays in the implementation/test-harness layer, not substrate modeling.

Verdict

APPROVE — Single, targeted update in emit_rust_roundtrip_fixtures.rs that dissolves the emit-helper bind selection in the obvious way; no rubric violations observed in the diff.

Exploratory (optional)

If emit_participation() ever returns None for this program while the bind remains user-callable, the fixture would fail loudly via .expect("function bind"); worth keeping an eye on if participation semantics evolve, but that is outside what this diff asserts.

@briansrls briansrls left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review metadata

  • Provider / model: codex / unknown
  • Commit: 44886280 · Trigger: schedule
  • Thinking: 84s wall

✅ No blocking concerns; this implementation-level fixture change replaces the source-file heuristic with the modeled emit-participation fact.

@briansrls

Copy link
Copy Markdown
Contributor Author

Review metadata

  • Provider / model: codex / codex-default
  • Commit: 528f35b5 · Trigger: schedule
  • Thinking: 198s wall

Verdict: APPROVE

This looks clean. The diff replaces a fixture-local file-marker heuristic with the declared BindEmitParticipation::UserCallable authority plus the bind name, so I don’t see a concrete violation of the pinned invariants or testing guidance.

Verified with cargo test -p v3-compiler rustc_roundtrip_emitted_module_compares_reflected_port_ids_in_list_contains after correcting the package name from v3_compiler to v3-compiler.

@briansrls

Copy link
Copy Markdown
Contributor Author

Review metadata

  • Provider / model: cursor / composer-2
  • Commit: 7bca60fe · Trigger: schedule
  • Thinking: 31s wall

Findings: None. The change replaces a file-span heuristic (bind.span.file == "runtime_reflection.v3" plus non-empty params) with the same structural signals the emitter already uses (bind.name == "id" and emit_participation() == Some(BindEmitParticipation::UserCallable)), which matches how emit.rs selects user-callable binds. That is consistent with boundary / single-authority thinking (read a declared fact, not a storage convention) and does not introduce fail-open paths beyond the existing .expect("function bind") on the fixture string. Nothing here touches substrate modeling in a new way; it is roundtrip fixture glue.

Verdict: APPROVE — One-line, narrowly scoped dissolution of the file-marker bind pick in emit_rust_roundtrip_fixtures.rs:166; no rubric violations observed in the diff.

@briansrls
briansrls merged commit 622cdd3 into main Apr 28, 2026
3 checks passed
briansrls added a commit that referenced this pull request Apr 28, 2026
Pre-spawn implementation work has progressed materially while #1078
was in flight; managers spawning today would otherwise dispatch
against work that's already landed. Refresh per-manager status
tables to reflect current main:

- **Substrate:** ValueBody::Map landed (#1017 + #1068 tightening);
  NominalOpacity fail-closed field-projection enforcement (#937);
  B4.8 Phase-2 site dissolution landed (#1069); B4.2 first-consumer
  wiring landed; T-Cost-Dimension fail-closed precedent (#1003).
- **Grounding:** Rust IntegerRangeFact mirror dissolved (#1005);
  Python primitives.dag landed (#1080); Go primitives tranche 1
  + additional (ac765ce + #1046); T-Ground-Engine Phase 2 slice 1
  (c0cc8b2) noted as pre-cascade footprint queued for cleanup
  wave per design-emission-model.md option (c).
- **Impossible-Bugs:** all 3 main implementations LANDED pre-spawn
  (nested-optional flatten #890 + #962 follow-ups; Int/Int totality-
  by-omission first slice #969; unenumerated effects lens landing
  #971). Day-1 work is class-close completion + sibling totalization
  dispatch (indexing/quotient/remainder), not initial implementation.
- **Pure Bootstrap:** kernel_algebra_profile substrate met via #1017
  + #1068 (consumer plumbing now the remaining R2 work, dispatchable
  Day-1); T-PB-Runtime ExecuteCommand typed-outcome hardening (#1049)
  + T-PB-B boundary coverage (#1082) advanced PB-Runtime foundation
  for R3 lens_apply.rs retirement gate.
- **Modeling:** Secret<T> producer side substantially advanced
  (#900 carrier + #937 fail-closed enforcement); tokenizer charclass
  scanner-order retype landed pre-cascade (242c65d); SourceFiltering
  canonical authority precedent (#1004).
- **Release:** initial closure-ledger snapshot now reflects all
  pre-spawn landings (Impossible-Bugs/Substrate/Ground/PB-Runtime).

Evaluator brief unchanged — new lane added 2026-04-28; nothing
landed yet (gated on PR-A through PR-E design lock cadence).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
briansrls added a commit that referenced this pull request Apr 29, 2026
…#1126)

* WIP: Gunbc PM

* WIP: Gunbc PM

* WIP: Gunbc PM

* WIP: Gunbc PM

* docs(briefs): refresh 6 R2 manager briefs post-#1078 merge

Aligns all 6 existing R2 manager briefs with #1078's locked design
decisions and structural cascade:

- Substrate Manager: adds T-Substrate-Lens-Primitive sub-lane (Q6+Q7+Q8
  locks) + PR-PreF Interval<D> consolidation + R3 T-CostLens-Composition
  continuation (Director cascade Item 3); references INVARIANTS §P1
  substrate-fact-introduction procedure + Q3 Cost<Unit> primitives.
- Grounding Manager: engine-reframe to 11 lanes (5 substrate-completion
  lanes replace prior single Engine: Coercion-Fold + LanguageSpec +
  Lifetime-Analyzer + Diagnostic + CrossTarget-Meta); consumes PR-F
  through PR-J cadence; PR #989 footprint queued for cleanup wave.
- Modeling Manager: int-lit item now consumes PR-PreF Interval<D> via
  Q1 lock; references INVARIANTS procedure for substrate-gap signaling.
- Pure Bootstrap Manager: adds R3 continuation lanes (T-LensProducer-
  Retirement XL with 3 internal sub-gates per Director cascade Item 8;
  T-FixedPoint; T-Tier3-Dissolution; 3 distributed bridge retirements
  per Director cascade Item 4 — distribute work, centralize ledger).
- Impossible-Bugs Manager: archives at R2 close per Director cascade;
  post-R2 emergent classes route to Substrate Manager continuation.
- Release Manager: 6→7 manager count; closure ledger spans all 6 other
  managers + sub-gate progress for T-LensProducer-Retirement; structural-
  acceptance-per-lane-close discipline (demo IS structural gate);
  thesis-claim mapping landed via #1078, refresh authority lives here;
  v2 release-doc-authority guardrail follow-up added as next narrow PR.

All 6 briefs now include: structural acceptance .dag TestClaim gates,
locked-design-decisions-consumed section, INVARIANTS §P1 procedure
references, and option-(c)-hybrid timing notes where R1-close-relevant.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* docs(briefs): R2 manager-brief status refresh against landed PRs

Pre-spawn implementation work has progressed materially while #1078
was in flight; managers spawning today would otherwise dispatch
against work that's already landed. Refresh per-manager status
tables to reflect current main:

- **Substrate:** ValueBody::Map landed (#1017 + #1068 tightening);
  NominalOpacity fail-closed field-projection enforcement (#937);
  B4.8 Phase-2 site dissolution landed (#1069); B4.2 first-consumer
  wiring landed; T-Cost-Dimension fail-closed precedent (#1003).
- **Grounding:** Rust IntegerRangeFact mirror dissolved (#1005);
  Python primitives.dag landed (#1080); Go primitives tranche 1
  + additional (ac765ce + #1046); T-Ground-Engine Phase 2 slice 1
  (c0cc8b2) noted as pre-cascade footprint queued for cleanup
  wave per design-emission-model.md option (c).
- **Impossible-Bugs:** all 3 main implementations LANDED pre-spawn
  (nested-optional flatten #890 + #962 follow-ups; Int/Int totality-
  by-omission first slice #969; unenumerated effects lens landing
  #971). Day-1 work is class-close completion + sibling totalization
  dispatch (indexing/quotient/remainder), not initial implementation.
- **Pure Bootstrap:** kernel_algebra_profile substrate met via #1017
  + #1068 (consumer plumbing now the remaining R2 work, dispatchable
  Day-1); T-PB-Runtime ExecuteCommand typed-outcome hardening (#1049)
  + T-PB-B boundary coverage (#1082) advanced PB-Runtime foundation
  for R3 lens_apply.rs retirement gate.
- **Modeling:** Secret<T> producer side substantially advanced
  (#900 carrier + #937 fail-closed enforcement); tokenizer charclass
  scanner-order retype landed pre-cascade (242c65d); SourceFiltering
  canonical authority precedent (#1004).
- **Release:** initial closure-ledger snapshot now reflects all
  pre-spawn landings (Impossible-Bugs/Substrate/Ground/PB-Runtime).

Evaluator brief unchanged — new lane added 2026-04-28; nothing
landed yet (gated on PR-A through PR-E design lock cadence).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* docs(briefs): align Substrate Produces + Release R2-close acceptance

Per gpt-5-5-pro REQUEST_CHANGES on PR #1126 (sha:a9285fce). Two valid
findings on coordination-contract internal consistency:

1. **Substrate Produces list omitted ValueBody::Map → PB signal.**
   The deliverables table at line 94 named ValueBody::Map as an R2
   unblocker for PB's kernel_algebra_profile mirror dissolution, but
   the cross-program "Produces" section listed 5 signals and did not
   include this one. Same dependency represented in two places with
   different authority.

   Fix: add ValueBody::Map carrier read-path/API + arrow-body
   evaluation as the 6th produced signal targeted at PB Manager;
   update count from 5 to 6 (also in Reporting-cadence line 150).
   Remove the "Adjacent territory" note about kernel_algebra_profile
   being a future sub-lane — substrate already landed via #1017+#1068.

2. **Release R2-close acceptance gate excluded PB from close criterion.**
   The brief's "Consumes" section correctly named all 6 other managers
   including PB, but the r2_close_signal_to_director_authored gate at
   line 103 used "5 R2-archiving managers" (Substrate-prereq /
   Modeling / Grounding / Impossible-Bugs / Evaluator) — could fire
   the R2-close signal while PB's R2-scope lanes (Tier 3 mirror
   dissolutions + kernel_algebra_profile consumer plumbing) are
   still open.

   Fix: gate becomes "all 6 other managers' R2-scope lanes complete"
   with explicit lane-set listed per manager. Distinguish R2-scope
   completion from manager-archives (Modeling/Impossible-Bugs archive;
   Substrate/PB continue into R3 with R3-scoped lanes — those don't
   gate R2 close).

Both are P2 single-authority alignments; no scope change.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* feat(scripts): manager-brief authority consumer + self-test

Per gpt-5-5-pro meta-review on PR #1126: dissolves the recurring
"non-live authority consumed as live" pattern that surfaced 5+ times
during PR #1078 + #1126 review loops (codex tooling false-positives
naming non-existent files / sections; cursor-flagged single-authority
drift on Goal numbering + R3 continuation count).

v1 covers 4 of gpt-5-5-pro's 5 questions:

- **Q1 — cited file existence** — extracts markdown links from each
  brief, resolves relative paths, fails closed if any cited file
  doesn't exist on disk.
- **Q2 — cited section anchor existence** — for `path#anchor` links,
  verifies the anchor matches a slugified heading in the target file.
- **Q4 — `LANDED via #N` reachability** — two-stage check: (a) fast
  `git log --grep="(#N)"` for normal merge subjects, (b) fall back to
  `gh pr view` for squash-merges that drop the suffix (caught a real
  case for PR #900). Verifies merge SHA is `git merge-base
  --is-ancestor HEAD`.
- **Q5 — cross-brief projection consistency** — extracts manager/lane
  counts and verifies all briefs that mention a projection agree both
  cross-brief AND with canonical values from r2-structure.md /
  r3-structure.md (7 standing managers, 6 other managers, 10 R3
  lanes, 7 of 10 Evaluator-gated). Catches drift like "5 R2-archiving
  managers" vs "all 6 other managers".

Q3 (controlled status vocabulary) deferred to v2 — too subjective for
a mechanical check; tracked in script header as next narrowing.

**Self-test** (`scripts/test-check-manager-brief-authority.sh`):
7 contract assertions — negative cases for each of Q1/Q2/Q4/Q5 (×2)
+ fail-closed-on-missing-brief + positive case. Mirrors the
`test-check-release-doc-authority.sh` pattern.

**Wiring:**
- Makefile: `manager-brief-authority-check` + `-test` targets;
  `verify` runs the check.
- CI workflow: both check + self-test wired as named steps; check
  receives `GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}` for the gh API
  fallback in Q4.

**SIGPIPE under pipefail caveat documented inline:** `grep -q .` on a
piped `git log` causes pipefail to report failure (grep exits early,
git log gets SIGPIPE 141). Workaround: capture output and test
`-z`/`-n`. Pinned in Q4 implementation comment.

Closes the convergence move gpt-5-5-pro proposed; future review loops
that hit the same "non-live authority" class get caught at CI rather
than reviewer-by-reviewer prose iteration.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief Q4 — gh-first for CI shallow-clone compat

CI failed on the first run of the checker because the workflow uses
fetch-depth=1 (shallow clone), so the Q4 fall-back stage's
git-log --grep="(#N)" can't see merge history. The two-stage check
worked locally because git log had full history; in CI it found
nothing on either stage.

Restructure Q4 to gh-first:

- **Stage 1 (primary):** gh pr view N --json state — returns MERGED
  for actually-merged PRs regardless of clone depth or squash-merge
  subject variance. CI passes GH_TOKEN automatically.
- **Stage 2 (fallback):** git log --grep — kept for offline dev /
  auth-blocked environments. In CI with fetch-depth=1 this stage
  finds nothing; that's why Stage 1 is primary.

Reasoning: "is this PR actually merged" is what we want to verify;
gh state=MERGED answers it directly. The previous git-log+ancestor
check was defense-in-depth, but actually fragile in shallow clones
which is the CI default.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief check — set -e + return interaction

Per claude-opus-4-7 review on PR #1126: three non-blocking findings
addressed.

1. **set -e + return non-zero**: the per-brief driver loop used
   `check_q1_file_existence "$brief"; rc=$?` — under set -euo
   pipefail, a function returning non-zero is treated as a failed
   command and exits the script before the accumulator runs. Result
   was "stop at first failing brief," not "report all violations in
   one pass" as intended.

   Fix: use `|| rc=$?` form (with explicit `rc=0` reset). This
   keeps set -e from firing on expected-non-zero returns while still
   capturing the count.

2. **Q2 doc/code mismatch**: header comment promised both
   `path#anchor` markdown form AND `§"section name"` prose form.
   Implementation only handled markdown. Trim the comment to
   match the code; track prose-form in v2 follow-up alongside
   Q3 status-vocabulary as next narrowing.

3. **Q5 pattern overlap (exploratory)**: claude-opus-4-7 flagged
   that "standing managers" might substring-match "standing R2
   managers". Empirical check shows it doesn't (POSIX regex
   requires the exact "standing managers" sequence; "R2 " breaks
   the match). Documented inline; no pattern change needed.

8-bit return-code truncation noted by reviewer is theoretical at
current scale (briefs typically have <10 violations) and is now
moot since the global `violations` accumulator is plain bash
arithmetic; only the per-function `return` is uint8-bounded.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief Q4 — explicit --repo for CI gh detection

CI failed Q4 even after gh-first restructure: actions/checkout@v4's
shallow clone exposes the remote in a form 'gh pr view' doesn't always
auto-detect, so the stage-1 gh call returned empty (no error message
in v1 because stderr was redirected to /dev/null) and the stage-2
git-log fallback also failed (shallow clone has no merge history).

Three fixes in this commit:

1. **Derive REPO_SLUG from `git config remote.origin.url`** at script
   start. Falls back to "gunb-ai/gunbc" if origin isn't readable
   (self-test runs in tmpdir with no remote).

2. **Pass `--repo "$REPO_SLUG"` explicitly to `gh pr view`** so it
   doesn't have to infer from the cwd's git remote.

3. **Capture gh stderr** to a temp file and surface it in the
   violation diagnostic. If gh is auth-failing or rate-limited,
   the violation message now shows why instead of looking like
   "PR doesn't exist."

Both checker + self-test still pass locally. CI should now succeed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(ci): grant pull-requests:read for manager-brief authority check

The check uses `gh pr view --json state` to verify "LANDED via #N"
claims map to MERGED PRs. Default GITHUB_TOKEN scopes only include
contents:read; pull-request access fails with:

  GraphQL: Resource not accessible by integration (repository.pullRequest)

Surfaced when the script's stderr-capture fix (ea33aeb) made the
actual error message visible — diagnostic improvement paid off
immediately.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* fix(scripts): manager-brief checker — markdown-bold + heading-strip + Q3 trigger

Per gpt-5-5-pro REQUEST_CHANGES on PR #1126 (sha:ea33aeb9). Three
findings — one BLOCKING (Q5 was ceremonial on its load-bearing
projection), one secondary (heading-strip glob bug), one coverage gap.

1. **Q5 markdown-bold mismatch (BLOCKING).** Live briefs use
   `Names this manager one of **7** standing R2 managers` — markdown
   emphasis around the count. The pre-fix regex `[0-9]+ standing R2
   managers` required a bare leading digit, so it matched zero claims
   on every brief. Counts_seen stayed empty → "0 counts seen → silent
   OK" branch fired → check passed ceremonially. A future drift to
   `**6** standing R2 managers` would have been invisible.

   Fix: regex now optionally accepts `**` before and after the digit:
   `\*?\*?[0-9]+\*?\*? standing R2 managers`. Extraction strips
   asterisks (`tr -d '*'`) before parsing. Verified on live briefs:

   $ grep -oE '\*?\*?[0-9]+\*?\*? standing R2 managers' docs/briefs/r2-*-manager.md
   docs/briefs/r2-evaluator-manager.md:**7** standing R2 managers
   docs/briefs/r2-grounding-manager.md:**7** standing R2 managers
   docs/briefs/r2-impossible-bugs-manager.md:**7** standing R2 managers
   docs/briefs/r2-modeling-manager.md:**7** standing R2 managers
   docs/briefs/r2-pure-bootstrap-manager.md:**7** standing R2 managers
   docs/briefs/r2-release-manager.md:**7** standing R2 managers
   docs/briefs/r2-substrate-manager.md:**7** standing R2 managers

   Now actually catches all 7 briefs' projections.

2. **Heading-strip glob bug (Q2 secondary).** `${heading##\#* }` is
   a Bash glob that strips through the LAST space, so
   "## Goal 7 — Evaluator XL" becomes "XL" instead of "Goal 7 —
   Evaluator XL". Multi-word heading anchors silently false-fail.

   Fix: introduced `strip_heading_marker()` helper using sed regex
   `^#{1,6}[[:space:]]+` for accurate prefix-only stripping.

3. **Self-test fixture format mismatch (coverage gap).** Self-test
   used bare-digit form ("7 standing R2 managers"); live briefs use
   markdown-bold ("**7** standing R2 managers"). Fixture proved Q5
   for a format the live docs don't use, masking finding 1.

   Fix: updated all clean + drift fixtures in self-test to use
   markdown-bold form. Verifies Q5 catches the actual format.

4. **Q3 dissolution trigger (per debt-tracking discipline).** Previous
   "v2; the next narrowing opportunity" was a future bucket without
   a checkable trigger. Replaced with concrete trigger: "first
   reviewer-flagged status-string drift class that Q1/Q2/Q4/Q5
   don't catch." Until that surfaces, status vocabulary is captured
   indirectly via Q5 count-projection consistency.

Local checker + self-test still pass after fixes; Q5 now actually
fires on live brief content rather than silently passing ceremonial.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts+briefs): manager-brief Q2 prose-form check + align 7 citations

Per gpt-5-5-pro BLOCKING on PR #1126 (sha:91b5274fc): Q2 explicitly
excluded prose §"section name" citations, but live briefs use those
for load-bearing INVARIANTS / r2-structure / design authority claims.
The exclusion left 12 real authority drifts uncheckable.

**Implements Q2-prose** (in addition to Q2-markdown-anchor):

For each `§"quoted section"` or `§AnchorToken` in a brief:

1. Compute the prefix BEFORE this citation (running prefix; the bug
   in v0 was using before-first-§ for every iteration, so subsequent
   citations on the same line resolved against the first link's
   target instead of their own).
2. Find the most recent markdown link `[text](path)` in the prefix —
   that's the cited file. Fall back to bare `<NAME>.md` token via
   `resolve_authority_file()` (tries `$ROOT/`, `$ROOT/docs/`,
   `$ROOT/docs/thesis/`, `$ROOT/docs/briefs/`).
3. `grep -F` for the section text in the cited file. Permissive
   substring match (vs Q2-markdown's slug match) — accepts
   paraphrased section names while still catching the load-bearing
   "section deleted" failure mode.

**Caught 12 real drifts on first run** — all now fixed:

- r2-evaluator-manager.md: §"Goal 7 — Evaluator XL" + §"Evaluator
  Manager (added 2026-04-28 as Goal 7)" → §"Evaluator Manager
  (added 2026-04-28 amendment)" (matches r2-structure.md:159 actual
  heading)
- r2-grounding-manager.md: §"Tier 1 — Structural correctness —
  Grounding completeness" → §"Tier 1 — Structural correctness"
  (matches THESIS.md:168 actual prose)
- r2-impossible-bugs-manager.md (×2): §"R2 manager continuation"
  → §"Manager structure" (matches r3-structure.md:103 actual heading)
- r2-impossible-bugs-manager.md: §Q1-Q3 + §Q6 → §Q1, §Q2, §Q3 + §Q6
  (range citation didn't match anything literal; expand to discrete)
- r2-release-manager.md (×2): §"R2 manager continuation"
  → §"Manager structure"
- r2-release-manager.md (×2): §v2-guardrail-requirement-3
  → §"v2 guardrail requirements" (matches r2-structure.md:490 body)
- r2-substrate-manager.md: §"R3 lane structure" → §"Lane structure"
  (matches r3-structure.md:86 actual heading)

Local checker + self-test still pass after fixes.

Reinforces gpt-5-5-pro's earlier meta-observation: a checker that
names a discipline but doesn't enforce it on the live format is
documented cheating. Q2-prose closes that gap; the briefs' authority
citations now have to match section text that actually exists.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(scripts): manager-brief — mktemp gh-stderr + Q1 false-pos trigger

Per claude-opus-4-7 APPROVE-with-exploratory-observations on PR #1126
(sha:91b5274f). Two non-blocking cleanups landed.

1. **gh-stderr capture: $$ → mktemp.** Previous form used
   `/tmp/gh-stderr-$$` which is fine in CI but a crashed run on a
   shared dev box could leak the file. `mktemp` gives a unique path
   + paired cleanup in scope.

2. **Q1 false-positive trigger documented.** Q1 currently treats
   every `](path)` as a filesystem reference. Markdown reference-
   style link definitions and code-block examples containing
   `](foo)` would false-positive. No briefs use either form today;
   added DISSOLUTION TRIGGER comment naming the condition that
   would force context-aware extraction (skip fenced code blocks
   + reference definitions).

The third observation (squash-merge for the WIP: Gunbc PM commits)
is a merge-time decision; PR-level chore.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* fix(scripts): manager-brief Q4 case-insensitive + title-case test

Per gpt-5-5-pro APPROVE_WITH_COMMENTS on PR #1126 (sha:91b5274f →
6dafaec): Q4 silently missed title-case "Landed via #N" claims.

**Finding 1 (Q4 case sensitivity):** live briefs use three case forms
of "landed via #N":
  - UPPERCASE — emphasized status-table claims (most common)
  - lowercase — inline prose ("landed via #900", "landed via #937", ...)
  - title-case — sentence-leading headings (r2-release-manager.md:113
    "Landed via #1078:")
The pre-fix regex `(LANDED|landed) via` missed the title-case form,
silently passing any future unique `Landed via #N` claim. Fix:
`grep -oEi 'landed via #[0-9]+'` (case-insensitive flag).

**Finding 2 (Q4 self-test gap):** Q4 negative fixture used UPPERCASE
"LANDED via #88888888"; positive fixture had no landed-PR claim at
all. Title-case wasn't covered. Fixes:

- Added `test_negative_q4_unreachable_pr_titlecase` using "Landed via
  #88888887" — verifies case-insensitive Q4 catches title-case.
- Updated `write_clean_briefs` clean fixture to include
  "Substrate landed via #999" (lowercase, matching real brief
  format). Q4 positive path is now non-vacuous: tmp git repo seeds
  "(#999)" merge subject so this resolves cleanly.

**Finding 3 (Q2 prose deferral note)**: STALE — Q2-prose was
implemented in 97affdb (2 commits before this review). The reviewer
cited line numbers from before the implementation; current code at
`scripts/check-manager-brief-authority.sh:121` says "Two forms covered"
not "v2 candidate". No action needed.

Self-test now: 8 contract assertions (6 negative + 1 positive +
1 fail-closed-on-missing-brief).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(briefs): strip trailing whitespace at r2-evaluator-manager.md:46

Per codex review on PR #1126 (sha:3ba4f2c1): `git diff --check
origin/main...HEAD` flagged trailing whitespace inside the
PR-A-through-PR-E dependency-graph ASCII art. Removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
briansrls added a commit that referenced this pull request Apr 29, 2026
…1156)

* WIP: Gunbc PM

* WIP: Gunbc PM

* WIP: Gunbc PM

* WIP: Gunbc PM

* docs(briefs): refresh 6 R2 manager briefs post-#1078 merge

Aligns all 6 existing R2 manager briefs with #1078's locked design
decisions and structural cascade:

- Substrate Manager: adds T-Substrate-Lens-Primitive sub-lane (Q6+Q7+Q8
  locks) + PR-PreF Interval<D> consolidation + R3 T-CostLens-Composition
  continuation (Director cascade Item 3); references INVARIANTS §P1
  substrate-fact-introduction procedure + Q3 Cost<Unit> primitives.
- Grounding Manager: engine-reframe to 11 lanes (5 substrate-completion
  lanes replace prior single Engine: Coercion-Fold + LanguageSpec +
  Lifetime-Analyzer + Diagnostic + CrossTarget-Meta); consumes PR-F
  through PR-J cadence; PR #989 footprint queued for cleanup wave.
- Modeling Manager: int-lit item now consumes PR-PreF Interval<D> via
  Q1 lock; references INVARIANTS procedure for substrate-gap signaling.
- Pure Bootstrap Manager: adds R3 continuation lanes (T-LensProducer-
  Retirement XL with 3 internal sub-gates per Director cascade Item 8;
  T-FixedPoint; T-Tier3-Dissolution; 3 distributed bridge retirements
  per Director cascade Item 4 — distribute work, centralize ledger).
- Impossible-Bugs Manager: archives at R2 close per Director cascade;
  post-R2 emergent classes route to Substrate Manager continuation.
- Release Manager: 6→7 manager count; closure ledger spans all 6 other
  managers + sub-gate progress for T-LensProducer-Retirement; structural-
  acceptance-per-lane-close discipline (demo IS structural gate);
  thesis-claim mapping landed via #1078, refresh authority lives here;
  v2 release-doc-authority guardrail follow-up added as next narrow PR.

All 6 briefs now include: structural acceptance .dag TestClaim gates,
locked-design-decisions-consumed section, INVARIANTS §P1 procedure
references, and option-(c)-hybrid timing notes where R1-close-relevant.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* docs(briefs): R2 manager-brief status refresh against landed PRs

Pre-spawn implementation work has progressed materially while #1078
was in flight; managers spawning today would otherwise dispatch
against work that's already landed. Refresh per-manager status
tables to reflect current main:

- **Substrate:** ValueBody::Map landed (#1017 + #1068 tightening);
  NominalOpacity fail-closed field-projection enforcement (#937);
  B4.8 Phase-2 site dissolution landed (#1069); B4.2 first-consumer
  wiring landed; T-Cost-Dimension fail-closed precedent (#1003).
- **Grounding:** Rust IntegerRangeFact mirror dissolved (#1005);
  Python primitives.dag landed (#1080); Go primitives tranche 1
  + additional (ac765ce + #1046); T-Ground-Engine Phase 2 slice 1
  (c0cc8b2) noted as pre-cascade footprint queued for cleanup
  wave per design-emission-model.md option (c).
- **Impossible-Bugs:** all 3 main implementations LANDED pre-spawn
  (nested-optional flatten #890 + #962 follow-ups; Int/Int totality-
  by-omission first slice #969; unenumerated effects lens landing
  #971). Day-1 work is class-close completion + sibling totalization
  dispatch (indexing/quotient/remainder), not initial implementation.
- **Pure Bootstrap:** kernel_algebra_profile substrate met via #1017
  + #1068 (consumer plumbing now the remaining R2 work, dispatchable
  Day-1); T-PB-Runtime ExecuteCommand typed-outcome hardening (#1049)
  + T-PB-B boundary coverage (#1082) advanced PB-Runtime foundation
  for R3 lens_apply.rs retirement gate.
- **Modeling:** Secret<T> producer side substantially advanced
  (#900 carrier + #937 fail-closed enforcement); tokenizer charclass
  scanner-order retype landed pre-cascade (242c65d); SourceFiltering
  canonical authority precedent (#1004).
- **Release:** initial closure-ledger snapshot now reflects all
  pre-spawn landings (Impossible-Bugs/Substrate/Ground/PB-Runtime).

Evaluator brief unchanged — new lane added 2026-04-28; nothing
landed yet (gated on PR-A through PR-E design lock cadence).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* docs(briefs): align Substrate Produces + Release R2-close acceptance

Per gpt-5-5-pro REQUEST_CHANGES on PR #1126 (sha:a9285fce). Two valid
findings on coordination-contract internal consistency:

1. **Substrate Produces list omitted ValueBody::Map → PB signal.**
   The deliverables table at line 94 named ValueBody::Map as an R2
   unblocker for PB's kernel_algebra_profile mirror dissolution, but
   the cross-program "Produces" section listed 5 signals and did not
   include this one. Same dependency represented in two places with
   different authority.

   Fix: add ValueBody::Map carrier read-path/API + arrow-body
   evaluation as the 6th produced signal targeted at PB Manager;
   update count from 5 to 6 (also in Reporting-cadence line 150).
   Remove the "Adjacent territory" note about kernel_algebra_profile
   being a future sub-lane — substrate already landed via #1017+#1068.

2. **Release R2-close acceptance gate excluded PB from close criterion.**
   The brief's "Consumes" section correctly named all 6 other managers
   including PB, but the r2_close_signal_to_director_authored gate at
   line 103 used "5 R2-archiving managers" (Substrate-prereq /
   Modeling / Grounding / Impossible-Bugs / Evaluator) — could fire
   the R2-close signal while PB's R2-scope lanes (Tier 3 mirror
   dissolutions + kernel_algebra_profile consumer plumbing) are
   still open.

   Fix: gate becomes "all 6 other managers' R2-scope lanes complete"
   with explicit lane-set listed per manager. Distinguish R2-scope
   completion from manager-archives (Modeling/Impossible-Bugs archive;
   Substrate/PB continue into R3 with R3-scoped lanes — those don't
   gate R2 close).

Both are P2 single-authority alignments; no scope change.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* feat(scripts): manager-brief authority consumer + self-test

Per gpt-5-5-pro meta-review on PR #1126: dissolves the recurring
"non-live authority consumed as live" pattern that surfaced 5+ times
during PR #1078 + #1126 review loops (codex tooling false-positives
naming non-existent files / sections; cursor-flagged single-authority
drift on Goal numbering + R3 continuation count).

v1 covers 4 of gpt-5-5-pro's 5 questions:

- **Q1 — cited file existence** — extracts markdown links from each
  brief, resolves relative paths, fails closed if any cited file
  doesn't exist on disk.
- **Q2 — cited section anchor existence** — for `path#anchor` links,
  verifies the anchor matches a slugified heading in the target file.
- **Q4 — `LANDED via #N` reachability** — two-stage check: (a) fast
  `git log --grep="(#N)"` for normal merge subjects, (b) fall back to
  `gh pr view` for squash-merges that drop the suffix (caught a real
  case for PR #900). Verifies merge SHA is `git merge-base
  --is-ancestor HEAD`.
- **Q5 — cross-brief projection consistency** — extracts manager/lane
  counts and verifies all briefs that mention a projection agree both
  cross-brief AND with canonical values from r2-structure.md /
  r3-structure.md (7 standing managers, 6 other managers, 10 R3
  lanes, 7 of 10 Evaluator-gated). Catches drift like "5 R2-archiving
  managers" vs "all 6 other managers".

Q3 (controlled status vocabulary) deferred to v2 — too subjective for
a mechanical check; tracked in script header as next narrowing.

**Self-test** (`scripts/test-check-manager-brief-authority.sh`):
7 contract assertions — negative cases for each of Q1/Q2/Q4/Q5 (×2)
+ fail-closed-on-missing-brief + positive case. Mirrors the
`test-check-release-doc-authority.sh` pattern.

**Wiring:**
- Makefile: `manager-brief-authority-check` + `-test` targets;
  `verify` runs the check.
- CI workflow: both check + self-test wired as named steps; check
  receives `GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}` for the gh API
  fallback in Q4.

**SIGPIPE under pipefail caveat documented inline:** `grep -q .` on a
piped `git log` causes pipefail to report failure (grep exits early,
git log gets SIGPIPE 141). Workaround: capture output and test
`-z`/`-n`. Pinned in Q4 implementation comment.

Closes the convergence move gpt-5-5-pro proposed; future review loops
that hit the same "non-live authority" class get caught at CI rather
than reviewer-by-reviewer prose iteration.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief Q4 — gh-first for CI shallow-clone compat

CI failed on the first run of the checker because the workflow uses
fetch-depth=1 (shallow clone), so the Q4 fall-back stage's
git-log --grep="(#N)" can't see merge history. The two-stage check
worked locally because git log had full history; in CI it found
nothing on either stage.

Restructure Q4 to gh-first:

- **Stage 1 (primary):** gh pr view N --json state — returns MERGED
  for actually-merged PRs regardless of clone depth or squash-merge
  subject variance. CI passes GH_TOKEN automatically.
- **Stage 2 (fallback):** git log --grep — kept for offline dev /
  auth-blocked environments. In CI with fetch-depth=1 this stage
  finds nothing; that's why Stage 1 is primary.

Reasoning: "is this PR actually merged" is what we want to verify;
gh state=MERGED answers it directly. The previous git-log+ancestor
check was defense-in-depth, but actually fragile in shallow clones
which is the CI default.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief check — set -e + return interaction

Per claude-opus-4-7 review on PR #1126: three non-blocking findings
addressed.

1. **set -e + return non-zero**: the per-brief driver loop used
   `check_q1_file_existence "$brief"; rc=$?` — under set -euo
   pipefail, a function returning non-zero is treated as a failed
   command and exits the script before the accumulator runs. Result
   was "stop at first failing brief," not "report all violations in
   one pass" as intended.

   Fix: use `|| rc=$?` form (with explicit `rc=0` reset). This
   keeps set -e from firing on expected-non-zero returns while still
   capturing the count.

2. **Q2 doc/code mismatch**: header comment promised both
   `path#anchor` markdown form AND `§"section name"` prose form.
   Implementation only handled markdown. Trim the comment to
   match the code; track prose-form in v2 follow-up alongside
   Q3 status-vocabulary as next narrowing.

3. **Q5 pattern overlap (exploratory)**: claude-opus-4-7 flagged
   that "standing managers" might substring-match "standing R2
   managers". Empirical check shows it doesn't (POSIX regex
   requires the exact "standing managers" sequence; "R2 " breaks
   the match). Documented inline; no pattern change needed.

8-bit return-code truncation noted by reviewer is theoretical at
current scale (briefs typically have <10 violations) and is now
moot since the global `violations` accumulator is plain bash
arithmetic; only the per-function `return` is uint8-bounded.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief Q4 — explicit --repo for CI gh detection

CI failed Q4 even after gh-first restructure: actions/checkout@v4's
shallow clone exposes the remote in a form 'gh pr view' doesn't always
auto-detect, so the stage-1 gh call returned empty (no error message
in v1 because stderr was redirected to /dev/null) and the stage-2
git-log fallback also failed (shallow clone has no merge history).

Three fixes in this commit:

1. **Derive REPO_SLUG from `git config remote.origin.url`** at script
   start. Falls back to "gunb-ai/gunbc" if origin isn't readable
   (self-test runs in tmpdir with no remote).

2. **Pass `--repo "$REPO_SLUG"` explicitly to `gh pr view`** so it
   doesn't have to infer from the cwd's git remote.

3. **Capture gh stderr** to a temp file and surface it in the
   violation diagnostic. If gh is auth-failing or rate-limited,
   the violation message now shows why instead of looking like
   "PR doesn't exist."

Both checker + self-test still pass locally. CI should now succeed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(ci): grant pull-requests:read for manager-brief authority check

The check uses `gh pr view --json state` to verify "LANDED via #N"
claims map to MERGED PRs. Default GITHUB_TOKEN scopes only include
contents:read; pull-request access fails with:

  GraphQL: Resource not accessible by integration (repository.pullRequest)

Surfaced when the script's stderr-capture fix (ea33aeb) made the
actual error message visible — diagnostic improvement paid off
immediately.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* fix(scripts): manager-brief checker — markdown-bold + heading-strip + Q3 trigger

Per gpt-5-5-pro REQUEST_CHANGES on PR #1126 (sha:ea33aeb9). Three
findings — one BLOCKING (Q5 was ceremonial on its load-bearing
projection), one secondary (heading-strip glob bug), one coverage gap.

1. **Q5 markdown-bold mismatch (BLOCKING).** Live briefs use
   `Names this manager one of **7** standing R2 managers` — markdown
   emphasis around the count. The pre-fix regex `[0-9]+ standing R2
   managers` required a bare leading digit, so it matched zero claims
   on every brief. Counts_seen stayed empty → "0 counts seen → silent
   OK" branch fired → check passed ceremonially. A future drift to
   `**6** standing R2 managers` would have been invisible.

   Fix: regex now optionally accepts `**` before and after the digit:
   `\*?\*?[0-9]+\*?\*? standing R2 managers`. Extraction strips
   asterisks (`tr -d '*'`) before parsing. Verified on live briefs:

   $ grep -oE '\*?\*?[0-9]+\*?\*? standing R2 managers' docs/briefs/r2-*-manager.md
   docs/briefs/r2-evaluator-manager.md:**7** standing R2 managers
   docs/briefs/r2-grounding-manager.md:**7** standing R2 managers
   docs/briefs/r2-impossible-bugs-manager.md:**7** standing R2 managers
   docs/briefs/r2-modeling-manager.md:**7** standing R2 managers
   docs/briefs/r2-pure-bootstrap-manager.md:**7** standing R2 managers
   docs/briefs/r2-release-manager.md:**7** standing R2 managers
   docs/briefs/r2-substrate-manager.md:**7** standing R2 managers

   Now actually catches all 7 briefs' projections.

2. **Heading-strip glob bug (Q2 secondary).** `${heading##\#* }` is
   a Bash glob that strips through the LAST space, so
   "## Goal 7 — Evaluator XL" becomes "XL" instead of "Goal 7 —
   Evaluator XL". Multi-word heading anchors silently false-fail.

   Fix: introduced `strip_heading_marker()` helper using sed regex
   `^#{1,6}[[:space:]]+` for accurate prefix-only stripping.

3. **Self-test fixture format mismatch (coverage gap).** Self-test
   used bare-digit form ("7 standing R2 managers"); live briefs use
   markdown-bold ("**7** standing R2 managers"). Fixture proved Q5
   for a format the live docs don't use, masking finding 1.

   Fix: updated all clean + drift fixtures in self-test to use
   markdown-bold form. Verifies Q5 catches the actual format.

4. **Q3 dissolution trigger (per debt-tracking discipline).** Previous
   "v2; the next narrowing opportunity" was a future bucket without
   a checkable trigger. Replaced with concrete trigger: "first
   reviewer-flagged status-string drift class that Q1/Q2/Q4/Q5
   don't catch." Until that surfaces, status vocabulary is captured
   indirectly via Q5 count-projection consistency.

Local checker + self-test still pass after fixes; Q5 now actually
fires on live brief content rather than silently passing ceremonial.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts+briefs): manager-brief Q2 prose-form check + align 7 citations

Per gpt-5-5-pro BLOCKING on PR #1126 (sha:91b5274fc): Q2 explicitly
excluded prose §"section name" citations, but live briefs use those
for load-bearing INVARIANTS / r2-structure / design authority claims.
The exclusion left 12 real authority drifts uncheckable.

**Implements Q2-prose** (in addition to Q2-markdown-anchor):

For each `§"quoted section"` or `§AnchorToken` in a brief:

1. Compute the prefix BEFORE this citation (running prefix; the bug
   in v0 was using before-first-§ for every iteration, so subsequent
   citations on the same line resolved against the first link's
   target instead of their own).
2. Find the most recent markdown link `[text](path)` in the prefix —
   that's the cited file. Fall back to bare `<NAME>.md` token via
   `resolve_authority_file()` (tries `$ROOT/`, `$ROOT/docs/`,
   `$ROOT/docs/thesis/`, `$ROOT/docs/briefs/`).
3. `grep -F` for the section text in the cited file. Permissive
   substring match (vs Q2-markdown's slug match) — accepts
   paraphrased section names while still catching the load-bearing
   "section deleted" failure mode.

**Caught 12 real drifts on first run** — all now fixed:

- r2-evaluator-manager.md: §"Goal 7 — Evaluator XL" + §"Evaluator
  Manager (added 2026-04-28 as Goal 7)" → §"Evaluator Manager
  (added 2026-04-28 amendment)" (matches r2-structure.md:159 actual
  heading)
- r2-grounding-manager.md: §"Tier 1 — Structural correctness —
  Grounding completeness" → §"Tier 1 — Structural correctness"
  (matches THESIS.md:168 actual prose)
- r2-impossible-bugs-manager.md (×2): §"R2 manager continuation"
  → §"Manager structure" (matches r3-structure.md:103 actual heading)
- r2-impossible-bugs-manager.md: §Q1-Q3 + §Q6 → §Q1, §Q2, §Q3 + §Q6
  (range citation didn't match anything literal; expand to discrete)
- r2-release-manager.md (×2): §"R2 manager continuation"
  → §"Manager structure"
- r2-release-manager.md (×2): §v2-guardrail-requirement-3
  → §"v2 guardrail requirements" (matches r2-structure.md:490 body)
- r2-substrate-manager.md: §"R3 lane structure" → §"Lane structure"
  (matches r3-structure.md:86 actual heading)

Local checker + self-test still pass after fixes.

Reinforces gpt-5-5-pro's earlier meta-observation: a checker that
names a discipline but doesn't enforce it on the live format is
documented cheating. Q2-prose closes that gap; the briefs' authority
citations now have to match section text that actually exists.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(scripts): manager-brief — mktemp gh-stderr + Q1 false-pos trigger

Per claude-opus-4-7 APPROVE-with-exploratory-observations on PR #1126
(sha:91b5274f). Two non-blocking cleanups landed.

1. **gh-stderr capture: $$ → mktemp.** Previous form used
   `/tmp/gh-stderr-$$` which is fine in CI but a crashed run on a
   shared dev box could leak the file. `mktemp` gives a unique path
   + paired cleanup in scope.

2. **Q1 false-positive trigger documented.** Q1 currently treats
   every `](path)` as a filesystem reference. Markdown reference-
   style link definitions and code-block examples containing
   `](foo)` would false-positive. No briefs use either form today;
   added DISSOLUTION TRIGGER comment naming the condition that
   would force context-aware extraction (skip fenced code blocks
   + reference definitions).

The third observation (squash-merge for the WIP: Gunbc PM commits)
is a merge-time decision; PR-level chore.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

* fix(scripts): manager-brief Q4 case-insensitive + title-case test

Per gpt-5-5-pro APPROVE_WITH_COMMENTS on PR #1126 (sha:91b5274f →
6dafaec): Q4 silently missed title-case "Landed via #N" claims.

**Finding 1 (Q4 case sensitivity):** live briefs use three case forms
of "landed via #N":
  - UPPERCASE — emphasized status-table claims (most common)
  - lowercase — inline prose ("landed via #900", "landed via #937", ...)
  - title-case — sentence-leading headings (r2-release-manager.md:113
    "Landed via #1078:")
The pre-fix regex `(LANDED|landed) via` missed the title-case form,
silently passing any future unique `Landed via #N` claim. Fix:
`grep -oEi 'landed via #[0-9]+'` (case-insensitive flag).

**Finding 2 (Q4 self-test gap):** Q4 negative fixture used UPPERCASE
"LANDED via #88888888"; positive fixture had no landed-PR claim at
all. Title-case wasn't covered. Fixes:

- Added `test_negative_q4_unreachable_pr_titlecase` using "Landed via
  #88888887" — verifies case-insensitive Q4 catches title-case.
- Updated `write_clean_briefs` clean fixture to include
  "Substrate landed via #999" (lowercase, matching real brief
  format). Q4 positive path is now non-vacuous: tmp git repo seeds
  "(#999)" merge subject so this resolves cleanly.

**Finding 3 (Q2 prose deferral note)**: STALE — Q2-prose was
implemented in 97affdb (2 commits before this review). The reviewer
cited line numbers from before the implementation; current code at
`scripts/check-manager-brief-authority.sh:121` says "Two forms covered"
not "v2 candidate". No action needed.

Self-test now: 8 contract assertions (6 negative + 1 positive +
1 fail-closed-on-missing-brief).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(briefs): strip trailing whitespace at r2-evaluator-manager.md:46

Per codex review on PR #1126 (sha:3ba4f2c1): `git diff --check
origin/main...HEAD` flagged trailing whitespace inside the
PR-A-through-PR-E dependency-graph ASCII art. Removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(scripts): manager-brief Q2-prose digit-leading + negative test

Per gpt-5-5-pro REQUEST_CHANGES on PR #1126 (sha:b9f7a1c1): Q2-prose
extractor required §-followed-by-letter, silently skipping the
digit-leading citation forms used in the same diff.

Live brief usage caught:
  §4   — r2-evaluator/grounding/impossible-bugs/modeling/pure-bootstrap
  §6a  — r2-modeling-manager.md (cite of design-substrate-carrier-port-program §6a)
  §0.7 — r2-pure-bootstrap-manager.md (cite of debt-paydown-synthesis §0.7)
  §5   — r2-release-manager.md

All previously skipped → "Q2 (prose §) resolved" was vacuously true
on those lines.

Fix: regex `§[A-Za-z][A-Za-z0-9._-]*[A-Za-z0-9]|§[A-Za-z]`
     →    `§[A-Za-z0-9][A-Za-z0-9._-]*[A-Za-z0-9]|§[A-Za-z0-9]`
(extends [A-Za-z]-leading to [A-Za-z0-9]-leading; quoted form
unchanged).

Documented limitation: short digit-only tokens like §4 resolve
permissively because grep -F "4" matches anywhere; multi-character
tokens like §6a are discriminating.

Self-test gap (also flagged): added
`test_negative_q2_missing_prose_numeric_section` using §99zzz
(digit-leading, multi-char so substring match doesn't trivially
pass). Verifies regex extraction triggers Q2-prose violation on
digit-leading citation drift.

Self-test now: 9 contract assertions (7 negative + 1 positive +
1 fail-closed-on-missing-brief).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(briefs): consume Tier 1 design locks 1+2+3 from #1129

Director landed Items 1+2+3 design locks together via #1129
(`e1afabe47`):
- Item 1 (Q1 asymmetric bound algebra) — `docs/design-emission-model.md`
  §"Q1 — `BoundDeclaration` substrate type"
- Item 2 (reflection completeness) — NEW
  `docs/design-reflection-completeness.md`
- Item 3 (Q6.5 two-layer diagnostic-kind) — `docs/design-lens-framework.md`
  §"Q6.5 — Two-layer authority for diagnostic kinds"

Per agreed PM role on inbox #828: as each design-lock doc lands, PM
consumes the lock into worker brief updates (statuses move from
PENDING/gated → LIVE; cited authority anchors verified by the
manager-brief authority checker). Mostly mechanical.

Brief updates:

- **Substrate** (3 sites): T-Substrate-Lens-Primitive flips from
  "gated on PR-K" to "Q6/Q6.5/Q7/Q8 LANDED via #1129; ready to
  dispatch"; "Diagnostic-kind extensibility (Q6 lock)" replaced
  with the locked Q6.5 two-layer authority cite (Layer 1 closed sum
  Substrate-owned; Layer 2 lens-instance via inhabitance; additive
  widening of `Diagnostic.kind` named).
- **Evaluator** (5 sites): "Lens application gated on PR-C" → cites
  the landed reflection-completeness doc; PR-C row in cadence table
  flips to LANDED; Q6 disposition becomes Q6+Q6.5 with explicit
  cite to design-lens-framework.md §Q6.5; "Reflection completeness
  lives in PR-C" → "lives in design-reflection-completeness.md
  (LANDED via #1129)"; PR-C worker brief in pending list crossed
  out as superseded.
- **Modeling** (1 site): status header now cites Q1 lock landing
  with explicit anchor; int-lit item already references Interval<D>
  via PR-PreF.
- **Grounding** (2 sites): T-Ground-Diagnostic lane and Substrate-
  Manager-cross-program-dependency cite Q6.5 — clarifies lane is
  Layer-1 consumer (not Layer-2 author), no cross-manager handoff.
- **Pure Bootstrap** (1 site): Q6 disposition becomes Q6+Q6.5 +
  reflection-completeness cite added (load-bearing for R3-T-
  LensProducer-Retirement per design-reflection-completeness.md
  §"Cascade and gates" §7.3).
- **Impossible-Bugs** (1 site): Q6 cite becomes Q6+Q6.5; classes
  consume Layer 1, not author Layer 2.

Verified: `bash scripts/check-manager-brief-authority.sh` passes
all 7 briefs (Q1/Q2-md/Q2-prose/Q4/Q5); 9 contract assertions in
self-test still pass.

Note: one brief edit required restructuring (modeling-manager.md:3)
because the original cite put §"section" inside the markdown link's
display text, while the heuristic finds the rightmost `](path)` BEFORE
the §. Moved cite outside the link to align: `[file.md](path) §"section"`.
Same pattern as other landed cites; the checker enforces it
structurally.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* chore(scripts): manager-brief — concrete dissolution trigger for short-digit § limitation

Per codex APPROVE_WITH_COMMENTS on PR #1156 (sha:00540f36): the
short digit-only § resolve-permissively limitation was documented
and bounded but lacked a concrete dissolution trigger.

Updated to match Q3 dissolution-trigger discipline: trigger fires
on first reviewer-flagged stale `§N` (single-digit) citation that
survives the substring check because the digit appears elsewhere
in the target file. At that point the check tightens to require
structural context — match `§N` only if the target has a heading
`## N`, `### N`, etc. or numbered-list item at column 0.

Until that surfaces, multi-character disambiguation is the
load-bearing discriminator (and live briefs predominantly use
multi-char forms — §P1, §Q6, §Q6.5, §"Lane structure" — so
single-digit `§4` citations are uncommon).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(design): consume Q6.5 lock in worked examples + r2-structure Q6 row

Per Director (zesty-bear-812) endorsement on inbox #828: fold the
design-doc Q6.5-consumption edits originally drafted in PR #1137
(jolly-ram-908) into the canonical consumption PR. Single-sourced
consumption story; #1137 ends up as a clean no-op redirect.

8 lens-framework worked-example reframes + 1 r2-structure Q6 row
update. All consume the Q6.5 two-layer authority disposition
landed via #1129:

**design-lens-framework.md (8 sites):**
- §"Lens<TenantFlow>" `validate(dag, set)`: "new
  CompilerDiagnosticKind variant" → "lens-local diagnostic-kind
  declaration"
- §"Lens<IFC>" `validate(dag, label)`: same reframe for
  IFCDowngradeViolation
- §"D5 Failure modes": "appropriate CompilerDiagnosticKind variant
  (lens instances may extend CompilerDiagnosticKind...)" →
  "appropriate lens-local diagnostic-kind declaration"
- §Q6 alternative (d): "pushes structural failure data into
  Diagnostic.kind (which is CompilerDiagnosticKind sum type —
  already extends per-instance per
  feedback_state_space_vs_behavioral_invariants)" → "pushes
  structural failure data into lens-local Diagnostic.kind
  declarations"
- §Q6 anti-bridge claim renaming `no_string_parsing_in_witness_consumers`
  description: "Diagnostic.kind extensions" → "lens-local
  Diagnostic.kind declarations"
- §Q6 Recommendation (d): "encode into Diagnostic.kind sum-type
  variants. Lens instances ... extend CompilerDiagnosticKind
  with their own variants" → "encode into lens-local Diagnostic.kind
  declarations. Lens instances ... declare their own kinds beside
  the lens instance"
- §Q6 DECISION line: "(c)/(d) hybrid — Witness<C> stays as-is;
  rich structural validation failures encode into Diagnostic.kind
  extensions via the lens-framework's structural inhabitance" →
  same with "lens-local Diagnostic.kind declarations"; date stamp
  augmented with "refined 2026-04-29"
- §Q6 Director's framing #1: "CapabilityViolation as a
  CompilerDiagnosticKind variant is uniform" →
  "CapabilityViolation as a lens-local diagnostic-kind declaration
  is uniform"

**r2-structure.md (1 site):** §"Q1-Q8 disposition" Q6 row updated
to match design-lens-framework's locked language: "encode into
Diagnostic.kind extensions via lens-framework's structural
inhabitance" → "encode into lens-local Diagnostic.kind declarations
via lens-framework structural inhabitance, not into the closed
compiler-core CompilerDiagnosticKind sum".

These edits are *editorial* — the Q6.5 lock at design-lens-framework.md
§"Q6.5 — Two-layer authority for diagnostic kinds" remains the
canonical authority; this just aligns the worked examples + r2-
structure summary row with that canonical phrasing so future
readers don't see the older "extends CompilerDiagnosticKind"
framing in worked examples and assume it survived.

Verified: manager-brief authority check passes (7 briefs / 0
violations); 9 contract assertions in self-test pass; release-doc
authority check passes.

Per inbox #828 + #1130 coordination: jolly-ram-908 confirmed PR
#1137 will close as redundant once #1156 lands (the brief edits
were already absorbed by my prior consumption pass; these
design-doc edits are the residual that's now folded in).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* WIP: Gunbc PM

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
briansrls added a commit that referenced this pull request Apr 29, 2026
Non-blocking follow-ups from PR #1166 review:
- Gate-string convention note: descriptive placeholders until ROADMAP
  alignment pass; lane-owning manager is canonical-name authority.
- in-flight vs not-started convention: requires active worker PR or
  cited substrate landings; "worker brief authored" alone stays
  not-started. Flips Impossible-Bugs nested-optional + unhandled-
  diagnostic-paths rows back to not-started.
- T-Ground-Pilot row: gate corrected to pilot_inhabitance_routing_
  stability_landed; last signal cites #765 (per r2-grounding-manager).
- B4 narrative: split #1069 onto Phase 2 row; Phase 1 row keeps only
  B4.2 first-consumer wiring as last signal.
- R2-close clause: explicit that R3-continuation rows do NOT gate
  r2_close_signal_to_director_authored.
- Replace line-136 anchor in r2-structure.md citation with section
  + quoted phrase (rot-resistant per code-reviewer exploratory note).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
briansrls added a commit that referenced this pull request Apr 29, 2026
* docs(r2): land R2 closure ledger + signal-receiver protocol

Adds docs/r2-closure-ledger.md as the standing artifact satisfying
r2_closure_ledger_landed acceptance gate from the R2 Release Manager
brief. Carries:
- Per-manager rows (Substrate / Modeling / Grounding / Impossible-Bugs /
  Pure Bootstrap / Evaluator) at lane / sub-lane / item / class
  granularity matching each manager's brief.
- T-LensProducer-Retirement as one row with 3 internal sub-gates
  (Director cascade Item 8 — sub-progress, not three lanes).
- Reserved "R1 Residual (absorbed)" surface so R1C-B strict-receipt
  rows (sleek-pike #1164 / bold-wolf #1163) and R1 residual sweep rows
  merge in without table reshape.
- Signal-receiver protocol: cross-manager queue channel; receipt =
  ledger row update + queue ack; cadence touchpoints with
  velocity-tripwire ≥3:1 surfacing to Director per INVARIANTS §P5(c).
  Release Manager remains single ledger owner; lane-level structural
  gates stay with lane-owning managers.

Wires the brief: r2-release-manager.md owned deliverable #9 and the
r2_closure_ledger_landed acceptance gate now point to the new doc.
Minimal blast radius — no edits to docs/r2-structure.md per dispatch
guidance.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(r2): address RM review on closure ledger

Non-blocking follow-ups from PR #1166 review:
- Gate-string convention note: descriptive placeholders until ROADMAP
  alignment pass; lane-owning manager is canonical-name authority.
- in-flight vs not-started convention: requires active worker PR or
  cited substrate landings; "worker brief authored" alone stays
  not-started. Flips Impossible-Bugs nested-optional + unhandled-
  diagnostic-paths rows back to not-started.
- T-Ground-Pilot row: gate corrected to pilot_inhabitance_routing_
  stability_landed; last signal cites #765 (per r2-grounding-manager).
- B4 narrative: split #1069 onto Phase 2 row; Phase 1 row keeps only
  B4.2 first-consumer wiring as last signal.
- R2-close clause: explicit that R3-continuation rows do NOT gate
  r2_close_signal_to_director_authored.
- Replace line-136 anchor in r2-structure.md citation with section
  + quoted phrase (rot-resistant per code-reviewer exploratory note).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* docs(r2): align v2-retirement timing with r2-structure authority

Two surface mentions in r2-release-manager.md said v2 retirement
operates post-R2; r2-structure.md §"R2 Release Manager" is single
authority and locks it as post-R3 (moved with the R3 structured-
program reframe). Inline review on PR #1166 flagged the dual-
authority risk. Aligns both spots; no edits to r2-structure.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant