Delete the workflow function concept: compiler_pipeline_entry is the entry authority

[gunbai-bot]

Implements D12 (operator, 2026-09-17), which supersedes the earlier marker/FunctionRole direction and its migration of the legacy workflow population.

What was wrong

"Workflow" was never a semantic kind. It was one emitter predicate — v1.compiler.emit_rust is_workflow_item, true when a function carried uses, when the registry held a service or resource name for it, or when the registry held nothing at all — and its only product was the clap subcommands emit_main_rs rendered. Three effect facts and one fail-open standing in for an entry role nobody authored: the meaning fork DESIGN §3 forbids, one name over the effect axis and the entry axis at once.

Why deletion, measured before cutting

emit_main_rs routes on compiler_pipeline_entry before it consults workflow functions, so every built binary is single-entry and pulls none in: v1.compile is RetainedHostCliKernel (clap from the generated dispatch), v2.compiler.compile is SourceRootEvalDriver, v2.cli.compile_cli is NativeCliDriver. gunbc build offers only the seed's own bins (gunbc.devboot.program offered_programs). A closure with no entry already rendered the typed exit-2 emit_entry_point_absent_main_rs. v1.compiler.infer gates no resource operation on workflow — admissibility is the uses clause binding the resource into body scope — and is_async, set from uses > 0, had no reader anywhere in the tree.

So the derived CLI reached no production binary, and no rename to an entry-point concept is required by any consumer.

The cut

Deleted: is_workflow_item, collect_workflow_funcs, WorkflowFunc, to_workflow_func, validate_workflow_param_defaults, the emit_main_rs workflow arm (cli struct, subcommand enum, main fn, its module/resource/service imports), the imported-data-reference constant folding that only that arm consumed (its visibility walk, DataDeclIndex, ConstantFold, and the two diagnostic variants left with no producer), and the dead is_async field. renders_clap_cli collapses to the pipeline dispatch, the one thing that still renders use clap.

Kept: compiler_pipeline_entry as the sole entry authority — an executable declares exactly one, a library none, more than one or an unmodeled driver each refuse with their own typed main — the entry-absent refusal, and uses with its one meaning as an effect requirement. No function is marked; the legacy workflow population is untouched, which is what D11 wants.

Executed evidence

test.claim.entry_authority_witness_test, six arms, all green:

arm	establishes
pure library	entry-absent refusal, no Subcommand
library + uses	regression control: an effect requirement creates no entry
library + service call	regression control: a service call creates no entry
one declared entry + an effect	that driver's main is the sole root
two declarations	typed ambiguity refusal
unmodeled driver	typed unknown-driver refusal

Reintroducing uses > 0, a service name or a registry miss as entry identity turns the two regression controls red, because the emitted main would carry a Subcommand instead of the refusal. The pure library alone could not catch that: it has no effect to misread.

Both rooted closures still emit and build, run locally with this seed:

• //gunbc/instruments:v2-native-cli — exit_status=0 warning_count=0
• //gunbc/instruments:self-host — emitted its closure and built it

Coverage that moved rather than disappeared

• The three witnesses whose subject was folding an imported data reference into a CLI default are deleted with the path: that folding had no other consumer, so no capability is left uncovered. (Checked before deleting, as the ruling required.)
• A rust unit test asserted a non-gunbc program's CLI carries no GUNBC_BUILD_IDENTITY. That struct is gone and the fact is now structural, so the case is rehomed as an exclusion on all three library arms of the witness.
• gunbc.emit_stage_blocking_population_census keeps its WorkflowParameterDefaultGate arm: a recorded reading stopped on that gate at its own revision, and deleting the arm would make that receipt unrepresentable rather than retire it. The row now says the gate is gone.

Plan authority

D12 is recorded in gunbc.plans.demand_engine_program (status line, section 7 roster, the exit block, a clause on D11, and the new D12 row) and its committed markdown projection regenerated. @fierce-seal-607 owns the plan text and should review that wording before merge.

Seed growth

No hand-Rust declaration is added. The hand-Rust changes are deletions: two stale diagnostic variants in cli_run/compile_clean.rs, the retired unit test, and one is_async field construction each in declaration_index.rs and cli_run.rs. So no SeedGrowthJustification row is owed.

🤖 Generated with Claude Code