Ban unwired models: floor-enrolled lens (subsumes inert_carrier) — §5 coverage-by-illusion wall by gunbai-bot[bot] · Pull Request #6078 · gunb-ai/gunbc

gunbai-bot · 2026-07-01T04:48:44Z

Ban unwired models — the §5 coverage-by-illusion wall (generalizes & subsumes `inert_carrier`)

Bans unwired models: a declared type/fn/data whose only reachers are its own tests / plan-docs — no production node consumes it — while a green test pretends it is live (DESIGN §5 spec-without-execution / "looks finished without running", the exact shape of #5974's MergeAdmissionReceipt).

Rule (decidable, present-unwired only — not the Rice "will it ever" trap)

A decl is a violation iff, over the corpus token/reference graph:

declared exactly once in a production file (not *_test.dag / /test/ / /fixture/, not /plans/);
self-tested — its name appears in a test file (a witness claims liveness);
zero production consumer outside its own declaration block; and
no whole-declaration Scaffold marker (std.disposition Scaffold { .. bind: DeclarationRef { decl_name, field: WholeDeclaration } }).

(1)+(2)+(3) = only tests/plan-docs reach it; (4) is DESIGN §6's tracked-debt escape hatch. A pure orphan (no test at all) makes no liveness claim, so it is deliberately out of scope (that is the larger dead-code fight vs §6 model-just-in-time — noted, not folded in). Plan-doc prose mentions are string-blanked by strip_line_comment, and plan/test files are non-production, so a decl reached only by them is correctly unwired.

§3 — subsumes `inert_carrier`, does not fork

Generalizes the single inert_carrier authority (type-only) → type/fn/data + plan-doc file class + the Scaffold escape hatch. v2.lens.inert_carrier (+witness) is deleted; its 12 types are all in the new roster. The lens owns the verdict in .dag over one host census builtin (unwired_model_names_live), mirroring the retired lens's shape. Disjoint from wiring_liveness (input→output dependence) and inert_lens_hygiene (lens-module reachability); untouched.

Mechanism

Census (cli_run.rs, host-fed until gunbc#5364): compute_unwired_model_data — generalized type/fn/data block extractor tracking ()/[]/{} nesting; whole-decl Scaffold-marker exemption read off the raw line (the marker's decl_name lives in a string literal). Builtin unwired_model_names_live / unwired_model_declared_count wired through 04_method.dag + generated v1_compiler_infer_method.rs + v1_interpreter.rs (same additive seam as HAND lens E: retire inert_carrier_project.rs — lens .dag owns verdict #6039).
Lens v2.lens.unwired_model: unwired_model_roster (transitional, shrink-only grandfather list — the census output) + count_not_in_roster/count_stale_roster folds; unwired_model_clean_holds fails closed when a new unwired-unmarked decl appears or a roster entry stops being unwired (forces removal). Carries construction_justification (WallAfterGrounding).
Witness v2/lens/unwired_model_test.dag (floor-discovered test fns) — green by execution via claim_batch.

Ratchet, not a permanent ledger

The 857-entry roster is transitional debt (log: it is the live census — every entry is a currently-unmarked-unwired prod decl). End-state per each entry: wire it, mark it Scaffold{dissolves_to, bind}, or delete it — the count only decreases. No threshold constant. #5974 exits the roster when royal-moth-238 wires merge-admission for real.

Discriminating controls (all green by execution)

11 Rust unit controls: RED — self-tested zero-consumer type / fn / data; GREEN — real prod consumer (cross-file & same-file), Scaffold-marked unwired (exempt), pure orphan (no test, out of scope), plan-doc-only consumer (RED), comment-only reference (not a consumer), doubly-declared (skipped).
4 .dag witnesses via claim_batch: unwired_model_no_unrostered_or_stale PASS (roster == census, 0 unrostered + 0 stale), universe-nonempty, and the two fold controls.
cargo fmt --all --check + cargo clippy -p v1-compiler --all-targets -D warnings clean.

Census (surprising "looks-wired-but-isn't" head)

857 unmarked-unwired prod decls (fn 655, data ~180, type ~22). Load-bearing-looking: merge_admission_blocks_merge, merge_admission_enforcement_policy, apply_advisory_lens, cost_account_from_performance_receipts, current_gate_roster_hash, cache_layer_plan_*, provenance_producer_coverage_receipt_holds, ci_select_from_affected_set, many *_gate/*_policy/*_receipt/*_target_model witnesses.

Follow-ups (out of scope): stale prose in plans/inert_layer_lens.dag + fold_ergonomics.dag still names the retired inert_carrier (historical narrative; touching it triggers the doc drift-gate regen); the pure-orphan (no-test) class; fold to a pure .dag BindsTo reader at gunbc#5364.

🤖 Generated with Claude Code

…ed type/

gunbai-bot · 2026-07-01T04:54:13Z

Categorized roster export (857) — paydown triage

By kind: fn 655, data 180, type 22. By category: SURPRISE (feature-looking, half-built) 73 · STAGED-SPEC (wire-label/target-model/witness/fixture) 97 · STAGED-STD/lib 189 · OTHER 498.

The SURPRISE bucket is the systemic finding — models that were built+tested then forgotten (half-built features), not deliberate staged std. Full list below; full 857 categorized in the branch scratch (roster_categorized.md). Paydown = per entry: wire | Scaffold-mark | delete.

SURPRISE (feature-looking, half-built) — 73

fn apply_advisory_lens — src/v2/lens/application.dag
fn bmc_plan_steady_state_posture — dsl/gunbc/bmc_onboarding.dag
fn budget_tree_dashboard_session_pool_node — dsl/gunbc/ci_budget_tree.dag
fn budget_tree_gha_runner_pool_node — dsl/gunbc/ci_budget_tree.dag
data budget_tree_method — dsl/product/budget_tree.dag
fn ci_select_from_affected_set — src/v2/workflow/affected_set_selection.dag
fn converge_verdict — dsl/gunbc/host_converge.dag
fn converge_verdict_label — dsl/gunbc/host_converge.dag
fn cost_account_from_performance_receipts — dsl/gunbc/fleet_intent.dag
fn cost_estimate_unit_price_micros — dsl/gunbc/ci_fleet.dag
fn cost_micros_per_gib — dsl/product/hardware_selection.dag
data coverage_domain_equivalence_module — src/v2/lens/extdeps_shape_transport_policy/module_refs.dag
data current_gate_roster_hash — dsl/gunbc/merge_admission.dag
fn deployment_plan_host_identity — dsl/gunbc/live_deploy/spec.dag
fn extdeps_external_authority_has_missing_formal_anchor_via_live_policy — src/v2/lens/extdeps_external_authority.dag
fn extdeps_live_module_embedded_policy_literal_count — src/v2/lens/extdeps_shape_transport_policy.dag
fn extdeps_live_module_policy_leak_count — src/v2/lens/extdeps_shape_transport_policy.dag
fn extdeps_shape_transport_policy_dead_param_count_for_operation — src/v2/lens/extdeps_shape_transport_policy.dag
fn extdeps_shape_transport_policy_embedded_policy_literal_count — src/v2/lens/extdeps_shape_transport_policy.dag
fn extdeps_shape_transport_policy_violation_count_for_operation — src/v2/lens/extdeps_shape_transport_policy.dag
fn fleet_converge_drifted — dsl/gunbc/fleet_converge_emit.dag
fn fleet_host_plan — dsl/gunbc/fleet_host_budget.dag
fn floor_skip_git_diff_policy — src/v2/workflow/affected_set_floor_runner.dag
data gunbc_ci_budget_tree_deconfliction_disposition — dsl/gunbc/ci_budget_tree.dag
fn gunbc_ci_floor_plan_co_runs_heavy_without_serialization — src/v2/workflow/ci_floor_plan.dag
fn gunbc_ci_floor_plan_serializes_heavy_resolves — src/v2/workflow/ci_floor_plan.dag
data gunbc_ci_runner_count_from_budget_disposition — dsl/gunbc/ci_runner_placement.dag
data gunbc_host_converge_runner_sessions_coupling_marker — dsl/gunbc/host_converge.dag
fn host_effect_policy_directive — dsl/gunbc/host_effect_realize.dag
fn host_standup_fleet_converge_policy — dsl/gunbc/host_standup.dag
fn merge_admission_blocks_merge — dsl/gunbc/ci_failure_class.dag
data merge_admission_enforcement_policy — dsl/gunbc/merge_admission.dag
fn parallel_executor_plan_from_layers — src/v2/workflow/executor.dag
fn parallel_executor_step_plan_from_dependencies — src/v2/workflow/executor.dag
fn per_second_billed_cost_quote — dsl/gunbc/ci_fleet.dag
fn performance_receipt_host_single_sample — dsl/gunbc/fleet_intent.dag
fn policy_admits — dsl/gunbc/merge_admission.dag
fn provenance_producer_coverage_receipt_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_git_diff_wire_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_parse_coverage_known_diff_fail_closed_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_rejects_beyond_mvp1_surface_ingest_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_rejects_malformed_ingest_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_selectivity_superset_discriminates_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_selectivity_superset_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_single_read_emits_row_holds — src/v2/lens/affected_set/provenance_producer.dag
fn provenance_producer_unknown_diff_fail_closed_holds — src/v2/lens/affected_set/provenance_producer.dag
fn resolve_channel_policy — dsl/gunbc/output_policy.dag
fn scheduled_generators_carry_provenance — src/v2/lens/testgen.dag
fn srv1_dashboard_session_pool_budget — dsl/gunbc/ci_budget_tree.dag
fn srv1_gha_runner_pool_budget — dsl/gunbc/ci_budget_tree.dag
fn testgen_run_receipt_carries_profile_roster — src/v2/lens/testgen.dag
fn testgen_run_receipt_outcome — src/v2/lens/testgen.dag
fn testgen_scheduled_idempotent_operation_subjects — src/v2/lens/testgen.dag
fn transport_script_lens_verdict — src/v2/lens/host_language_transport_script.dag
fn wf_host_health_select_probes — src/v2/workflow/probe_selector_host_health.dag
fn witness_fail_open_memory_blind_demand_exceeds_budget — dsl/gunbc/fleet_container.dag
fn witness_floor_budget_equals_runner_cgroup_cap — dsl/gunbc/ci_budget_tree.dag
fn witness_floor_compile_gate_honest_heavy_profile — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_fail_open_would_exceed_budget — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_spawn_width_tight_budget_backs_off — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_spawn_width_zero_budget_falls_back — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_tight_budget_backs_off_envelope — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_unreadable_budget_uses_conservative_envelope — src/v2/workflow/ci_floor_plan.dag
fn witness_floor_width_governed_by_budget_tree — src/v2/workflow/ci_floor_plan.dag
fn witness_high_demand_shrinks_envelope_and_fits — dsl/gunbc/fleet_container.dag
fn witness_integer_demo_emits_realization_plan_value — dsl/gunbc/accelerator_demo_plan.dag
fn witness_integer_demo_plan_has_local_accelerator_placement — dsl/gunbc/accelerator_demo_plan.dag
fn witness_plan_spawn_width_is_floor_width_at_runner_cap — src/v2/workflow/ci_floor_plan.dag
fn witness_render_recognized_integer_plan_line — dsl/gunbc/accelerator_demo_render.dag
fn witness_run_demand_envelope_fits_budget — dsl/gunbc/fleet_container.dag
fn witness_triptych_float_permitted_projects_lossy_plan — dsl/gunbc/accelerator_demo_render.dag
fn witness_triptych_pure_program_projects_recognized_plan — dsl/gunbc/accelerator_demo_render.dag
fn witness_unreadable_budget_uses_conservative_demand — dsl/gunbc/fleet_container.dag

Remove current_gate_roster_hash and merge_admission_blocks_merge from the unwired_model grandfather roster so quiet-hawk's clean_holds stays green once #6078 lands first and this branch wires the producer/consumer path. merge_admission_enforcement_policy stays (still test-only). Co-authored-by: Cursor <cursoragent@cursor.com>

Keep #6080 roster-trim (omit wired current_gate_roster_hash and merge_admission_blocks_merge) plus scaffold/metadata enrollments from quiet-hawk coordination. Co-authored-by: Cursor <cursoragent@cursor.com>

#6078 generalized the inert-carrier census to the broader unwired-model census and moved doc-utility fns (DOC_PLAN_ROOTS, doc_universe, etc.) to be shared between the two census blocks. Take main's header and struct name (UnwiredModelData); remove the duplicate doc-utility definitions that were previously in the doc-reachability section only. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…merge resolution 04_method.dag, v1_compiler_infer_method.rs, v1_interpreter.rs: rename inert_carrier_names_live/declared_count builtins to unwired_model_names_live/declared_count. cli_run.rs: replace inert_carrier census section with unwired_model census from #6078 (UnwiredModelData, unwired_decl_blocks, type/fn/data support, scaffold-exemption). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Picks up #6078 unwired_model lens required for CI merge-check; will enroll new affected-set floor symbols in roster.

…6072) After #6078 merge-check, unwired_model_no_unrostered_or_stale failed on floor_test_fn_declaration_edited and floor_rust_run_implies_dag_run — self-tested .dag helpers with no production consumer outside tests. Co-authored-by: Cursor <cursoragent@cursor.com>

Remove current_gate_roster_hash and merge_admission_blocks_merge from the unwired_model grandfather roster so quiet-hawk's clean_holds stays green once #6078 lands first and this branch wires the producer/consumer path. merge_admission_enforcement_policy stays (still test-only). Co-authored-by: Cursor <cursoragent@cursor.com>

Main reverted #6078 (Ban unwired models). Accept the revert's inert-carrier census restoration while keeping our languages consumer census functions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…names #6085 (revert of #6078) landed in main; revert the rename I applied in the previous commit to stay coherent with main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…ses, and Phase 2 credential design (#6066) * Model operator Tailscale ACL as cited extdeps authority with emit and faithfulness witnesses. Phase 1 lands extdeps/tailscale/acl.dag (security spine invariants, cutover-transient 100.65.94.55), JSON emit, hujson+json golden fixtures, and fail-closed witnesses; host_standup P0 now cites ACL authority while credential upsert remains Phase 2. Co-authored-by: Cursor <cursoragent@cursor.com> * Design Phase 2 Tailscale ACL credential as operator user-principal Secret Accessor. Models tailscale-acl-api-key in gunbai-secrets with roles/secretmanager.secretAccessor granted only to user:briansrls@gmail.com via local ADC (explicitly not repo-scoped WIF); acl_api upsert shape and diff-gate are DESIGN_ONLY pending operator sign-off before any wet write. Co-authored-by: Cursor <cursoragent@cursor.com> * Refine Phase 2 ACL credential as operator-dispensed 1hr ephemeral token. Secret Manager JIT reference (tailscale-acl-ephemeral-token) or runtime injection; fail-closed on absent/expired; upsert wet shape is diff-print-only pending operator sign-off. Co-authored-by: Cursor <cursoragent@cursor.com> * Mark tailscale_acl_emit as scaffolded medium-as-string with roster dissolution trigger. Addresses review: on-carrier Scaffold bind to to_json plus medium_structure_exception_roster entry and witness for explicit dissolve-on path before wet upsert lands. Co-authored-by: Cursor <cursoragent@cursor.com> * Replace tautological Phase 2 credential witnesses with structural binding checks. operator_bindings_admit_repo_scoped_wif/admit_bmc_assimilator_sa scan binding members (perturbation witness reddens on WIF/SA poison); drop literal false/AdcRefresh-match launders. Co-authored-by: Cursor <cursoragent@cursor.com> * Remove unused GCP credential flow imports from Phase 2 design module. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Integrate Phase 2 ACL credential through gunbc/auth patterns authority. Composes tailscale_acl_operator_ephemeral_credential from gcp_oauth_access_token(AdcRefresh) + optional_impersonation(3600s) + gcp_secret_credential; keeps ACL upsert-gate delta and IAM contrast witnesses; DESIGN_ONLY scaffold held. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Align host_standup P0 gap ledger with partial ACL modeling. P0 interim_realization and gap_ledger now agree on dag authorities plus remaining ctrl interim; spine witness accepts partial gaps citing extdeps/gunbc modules instead of requiring lib/ ctrl paths only. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Remove dead GcpBinding helper and fix shell.Env resolve. Drop unused operator_secret_accessor_binding (witnesses use SecretAccessBinding rows). Alias extdeps.shell in auth/patterns to avoid shell transport shadowing shell.Env during discovery resolve. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Fix discovery resolve for github_oidc env reads. Add gunbc.auth.oidc_env.read_env_value (no uses net) so github_oidc does not call shell.Env inside a func with uses net, and avoid importing from extdeps.shell.credentials where module-path shell shadows the extdeps.shell service namespace on full-module resolve. Co-authored-by: Cursor <cursoragent@cursor.com> * Split optional_impersonation to fix phase2 discovery resolve. Extract gunbc.auth.optional_impersonation so Phase 2 credential design witnesses do not transitively resolve gunbc.auth.patterns (github_oidc shell.Env shadow under uses net). Update DeclarationRef module paths. Co-authored-by: Cursor <cursoragent@cursor.com> * Remove unused TAILNET_PLACEHOLDER from Phase 2 design module. Dead data with no consumers — tailnet binding lands with acl_api wet upsert scaffold, not a silent NonEmptyStr placeholder. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(tailscale-acl): exhaustive AclUpsertGate match for non_fold residue * fix(ci-floor): zero-budget spawn width uses conservative fallback only. #6079 updated witness_floor_spawn_width_zero_budget_falls_back but left gunbc_ci_floor_spawn_width_for_budget on int_min(fallback, exec_corpus). With execution_corpus_spawn_width=3 and fallback=4, plan_spawn_width(0) returned 3 while the witness expected 4. Align implementation and the unreadable-budget envelope witness with the stable fallback invariant. Co-authored-by: Cursor <cursoragent@cursor.com> * Revert "fix(ci-floor): zero-budget spawn width uses conservative fallback only." This reverts commit 19f1da9. * fix(ci-floor): delete white-box/tautological spawn-width witnesses Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…6087) Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Remove current_gate_roster_hash and merge_admission_blocks_merge from the unwired_model grandfather roster so quiet-hawk's clean_holds stays green once #6078 lands first and this branch wires the producer/consumer path. merge_admission_enforcement_policy stays (still test-only). Co-authored-by: Cursor <cursoragent@cursor.com>

….dag owns verdict (#6043) * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .dag owns verdict Concern A (shape/transport/policy scan) moves to cli_run.rs as a structured-fact extractor: extdeps_shape_transport_policy_module_facts() returns argv/fusion/input/ embedded fact lists + gist booleans + nickname literal count. The DAG lens v2.lens.extdeps_shape_transport_policy now calls the compound builtin extdeps_shape_transport_policy_facts_for_qualified_name() and feeds the fact lists into its own pure verdict functions — the scalar count host builtins are gone. Concern B (external_authority anchor checking) splits off into the new external_authority_project.rs with its own dissolution trigger (separate migration to the external_authority host surface, not cli_run.rs). The 11 old Concern A scalar builtins are removed from 04_method.dag and v1_compiler_infer_method.rs; the single compound record builtin is registered with type_variable_node. All 12 Concern B v1_interpreter.rs call-sites updated to external_authority_project. bootstrap.rs and regen_stage0.rs swap the file name. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Restore foreign files to main state: remove stale WIP carry-overs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Fix bootstrap coherence: update emitter + regen_stage0 for external_authority_project swap - 05_emit_rust.dag + v1_compiler_emit_rust.rs: replace extdeps_shape_transport_policy_project with external_authority_project in hand_maintained_mods (regen would reintroduce deleted module) - regen_stage0.rs: add complexity_linearity_audit_project.rs and decl_facts_project.rs to HAND_MAINTAINED_STAGE0_FILES; add patch_complexity_linearity_audit_mod call + function body - Restore foreign files to main state (stale carry-overs from prior WIP commits) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Add dissolution trigger header to external_authority_project.rs Receipts the Concern B split: this is residual from extdeps_shape_transport_policy_project.rs (not a new projector), with its own named dissolution lane — host-surface facts builtin for extdeps_external_authority.dag, gunbc#5364 successor. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Add SCAFFOLD dissolution trigger to cli_run.rs host-fed fact block (§6) Mirrors the marker already on external_authority_project.rs: names the Node-tree argv projection as the dissolve-on condition, gunbc#5364 successor Concern A lane. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Restore foreign files to main state (stale WIP carry-overs) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: resolve merge conflict — cli_run.rs conflict + restore foreign files Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: drop phantom doc_reachability_project from hand_maintained_mods doc_reachability_project.rs was retired in #6035 (merged before this PR); our merge-conflict resolution incorrectly reintroduced it. Remove from 05_emit_rust.dag and v1_compiler_emit_rust.rs hand_maintained_mods strings. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: resolve merge conflict — module_path_index reorganization Main consolidated individual project files into module_path_index/: - Delete module_path_index/extdeps_shape_transport_policy_census.rs (our PR's retirement of this concern; Concern A → compound cli_run builtin, Concern B → external_authority_project.rs) - Remove extdeps_shape_transport_policy_census from module_path_index/mod.rs - Update hand_maintained_mods in 05_emit_rust.dag/v1_compiler_emit_rust.rs: use module_path_index (from main) + external_authority_project (ours) - Update lib.rs: pub mod module_path_index + pub mod external_authority_project - Update regen_stage0.rs and bootstrap.rs: module_path_index dir handles the moved files; external_authority_project.rs stays as flat hand-maintained - Resolve v1_interpreter.rs: take our compound builtin + external_authority_project:: call sites over main's individual scalar builtins + census module paths Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Fix merge: apply #6078 inert_carrier→unwired_model rename dropped in merge resolution 04_method.dag, v1_compiler_infer_method.rs, v1_interpreter.rs: rename inert_carrier_names_live/declared_count builtins to unwired_model_names_live/declared_count. cli_run.rs: replace inert_carrier census section with unwired_model census from #6078 (UnwiredModelData, unwired_decl_blocks, type/fn/data support, scaffold-exemption). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Revert unwired_model rename: main reverted #6078, keep inert_carrier names #6085 (revert of #6078) landed in main; revert the rename I applied in the previous commit to stay coherent with main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Restore foreign files to origin/main post-revert (#6085) Remove unwired_model.dag/test (reverted in #6085), restore inert_carrier.dag/test and complexity_linearity_audit.rs to origin/main state. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Remove current_gate_roster_hash and merge_admission_blocks_merge from the unwired_model grandfather roster so quiet-hawk's clean_holds stays green once #6078 lands first and this branch wires the producer/consumer path. merge_admission_enforcement_policy stays (still test-only). Co-authored-by: Cursor <cursoragent@cursor.com>

…CI proof (#6080) * WIP: Activate merge-admission gate (#5974): build the missing PRODUCER (stamp * WIP: Activate merge-admission gate (#5974): build the missing PRODUCER (stamp * WIP: Activate merge-admission gate (#5974): build the missing PRODUCER (stamp * Activate merge-admission gate: in-repo producer + enforcement consumer (#5974) Wire floor-emitted MergeAdmissionReceipt stamping (base_tree_hash, gate_roster_hash, floor conclusion) and a required ci.yml merge-admission gate step that reads merge_admission_blocks_merge. Keep GatingComputedDeferred until CI proves the produce→consume path; flip to GatingEnforced is the follow-on activation step. Co-authored-by: Cursor <cursoragent@cursor.com> * Revert ci.yml from commit — workflow file push blocked by GitHub App token ci_workflow.dag authority updated; generated_artifact_drift_gate will require regen via main_wet on merge (operator/workflows permission). Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Activate merge-admission gate (#5974): build the missing PRODUCER (stamp * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * WIP: Build a floor-enrolled lens that BANS UNWIRED MODELS: any declared type/ * WIP: Build a floor-enrolled lens that BANS UNWIRED MODELS: any declared type/ * chore(unwired_model): roster-trim merge_admission decls wired by #5974 Remove current_gate_roster_hash and merge_admission_blocks_merge from the unwired_model grandfather roster so quiet-hawk's clean_holds stays green once #6078 lands first and this branch wires the producer/consumer path. merge_admission_enforcement_policy stays (still test-only). Co-authored-by: Cursor <cursoragent@cursor.com> * feat(ci): flip merge_freshness_gating_status to GatingEnforced (#5974) Complete merge-admission activation: merge_admission_blocks_merge now consumes receipt_is_admissible at merge time. Dissolve enforcement scaffolds to Terminal and update witnesses to assert enforced blocking for stale-base receipts. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(#6080): address review — roster scaffolds, shell exceptions, fail-closed git - Add merge_admission_* Terminal disposition scaffolds to unwired_model_roster (peer pattern with gunbc_ci_footprint_granularity_disposition). - Enroll merge_admission_produce + stamp/gate tools on medium_structure_exception_roster with dissolve-on trigger. - Remove fail-open `2>/dev/null || true` from merge-target tree hash reads and gate fetch script (§5 stale-base path). Co-authored-by: Cursor <cursoragent@cursor.com> * revert(#6080): hold GatingEnforced flip until real CI floor proof Restore GatingComputedDeferred, NOT-ENFORCING gate step scaffold, and deferred witnesses. Flip to GatingEnforced is a follow-on after a real CI run proves produce→consume (fresh admitted, stale/red blocked). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(#6080): roster-enroll merge_admission metadata unwired decls Add merge_admission_gating_activation_trigger and merge_admission_receipt_schema to unwired_model_roster — self-tested metadata strings with no production consumer (peer pattern with scaffold disposition rows). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(#6080): regen ci.yml — realize merge-admission producer + gate steps Sync committed workflow with ci_spec/ci_workflow model: floor stamp tail (FLOOR_EXIT + merge_admission_stamp) and merge-admission gate step. Closes model↔workflow fork flagged by drift gate review. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(#6080): full wire round-trip + set +e for red-floor stamp path - parse_receipt_wire reads head_sha (line 4) and pr_number (line 5); witness asserts full round-trip before GatingEnforced flip. - set +e before claim_executor so FLOOR_EXIT is captured on red floor and Failure receipt is stamped (ci.yml regen). Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(merge-admission): export CI_FLOOR_EXIT to stamp subprocess Prefix CI_FLOOR_EXIT on the gunbc invocation line so the stamp tool witnesses red floor exits instead of defaulting to Success (Absent env). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(merge-admission): reject wire missing head_sha instead of fabricating zero parse_receipt_wire now requires four lines (base, roster, conclusion, head_sha) and returns Absent on short bodies — no minted 000…0 SHA. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(merge-admission): stamp main-tip tree hash to match gate KeyedReceipt requires base_tree_hash == current main's tree at CI time. The stamp was recording merge-base tree while the gate compared origin/main tip — causing false MergeDeniedStaleBase on normal PRs. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(merge-admission): align stamp receipt fields and tidy shell nits Parse PR number into stamp_floor_receipt so struct and wire agree; use render_receipt_wire. Drop no-op concat tails; treat empty CI_FLOOR_EXIT as unset. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(merge-admission): trim shell stdout before receipt fields git show / pwd / jq / rev-parse stdout carries trailing newlines that double-split the wire and break gate tree-hash comparison at enforcement. Single authority: shell_stdout_line in merge_admission_produce. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(merge-admission): fail-closed on partial wire and empty floor exit Require five wire lines (incl. pr_number); unparseable pr → Absent. Treat unset/empty CI_FLOOR_EXIT as failure, not green. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(ci): unblock compile-clean gate and merge-admission stamp - Stamp: use shell.Exec printenv instead of shell.Env (v2 shell overlay shadows dsl and lacks Env when both source roots are active). - v2/extdeps/shell: restore shell.Env service for primary-precedence compile-clean perturb receipt. - Remove stale inert_lens_hygiene witness (superseded by unwired_model). Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(merge-admission): use shell.Env.Get in stamp env_var helper Consume the typed shell.Env transport instead of hand-built printenv via shell.Exec — single authority for env reads (review 34244). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(ci): repair three floor witnesses broken by merge-admission wiring - Bump ci job step-count witness 6→7 for merge-admission gate step. - Trim stale unwired_model_roster entries wired on main since last census. - Align zero-budget spawn-width witness with int_min fallback semantics. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(#6080): complete claude review — stamp witnesses + roster scaffold enrollment - Witness STAMP_EXIT propagation and fail-closed CI_FLOOR_EXIT policy string. - Enroll unwired_model roster scaffold decls + stamp policy on roster. - Floor witness asserts owner/ceiling/dissolution-trigger documentation. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(#6080): clarify gate step name — receipt required, freshness held Step label now distinguishes structural receipt checks (always enforced) from freshness verdict blocking (held until GatingEnforced flip). Co-authored-by: Cursor <cursoragent@cursor.com> * fix(ci): sync unwired_model_roster after main drift (#6066 ACL) Enroll 12 Tailscale ACL unwired decls from main; trim 5 stale entries for witnesses wired on main since last roster census. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(ci): sync unwired_model_roster after #6061 affected-set rebase Enroll floor_host_scaffold_precompute_would_skip from main drift. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(ci): trim stale extdeps_shape_transport_policy roster entries Remove two decls retired from the live unwired census when main landed Co-authored-by: Cursor <cursoragent@cursor.com> #6043; unwired_model_no_unrostered_or_stale was failing batch 2. * WIP: COMPLETE merge-admission activation (royal-moth-238 archived mid-task, # * fix(ci): sync unwired_model roster after main rebase (#deploy-access) Rebase onto main renamed deploy access types and added GPU witness decls; regenerate roster from live census and restore scaffold metadata decls. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com>

…ict (#6042) * WIP: HAND lens E: retire non_fold_residue_project.rs — lens .dag owns verdict * fix: cargo fmt on cli_run.rs non_fold_residue block Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire non_fold_residue_project.rs — lens .dag owns verdict * fix(non_fold_residue): port full extended API to cli_run, fix blank-line bug, redirect complexity files Addresses cursor REQUEST_CHANGES on PR #6042: - cli_run.rs: add NON_FOLD_MIGRATION_DEBT_ROSTER, NonFoldRosterBucket enum, 8 new pub fns (closed_coproduct_type_names, site_is_rostered, roster_bucket, migration_debt_live_count, irreducible_live_count, migration_debt_roster_slots, irreducible_roster_slots, stale_roster_count), update NonFoldReport to hold closed_coproduct_names BTreeSet; fix blank-line skip in nfr_closed_coproduct_names inner loop (depth<=0 && empty line was breaking multiline type decls, causing closed coproduct params to be invisible to the lens — DESIGN §5 fail-open) - complexity_linearity_audit_project.rs: all crate::non_fold_residue_project:: → crate::cli_run:: - complexity_linearity_audit.rs (bin): import non_fold_residue_* from v1_compiler::cli_run Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * class-3 thin bridge: move non_fold classification to complexity_linearity_audit_project, add perturb-RED witness Gate 1 — perturb-RED witness: dsl/test/claim/non_fold_residue_witness_test.dag - non_fold_residue_clean_holds(): unrostered==0 && stale==0 — flips RED if any unrostered site appears - non_fold_residue_universe_is_nonempty(): count>0 — discriminant proving scanner is live (not vacuously green) Gate 2 — thin bridge: cli_run.rs now gathers raw facts only - Removed from cli_run.rs: NON_FOLD_MIGRATION_DEBT_ROSTER, NonFoldRosterBucket enum, non_fold_residue_roster_bucket, migration_debt_live_count, irreducible_live_count, migration_debt_roster_slots, irreducible_roster_slots - Added to cli_run.rs: non_fold_residue_live_sites() and non_fold_residue_roster_size() (raw fact accessors — no classification) - Moved to complexity_linearity_audit_project.rs: NON_FOLD_MIGRATION_DEBT_ROSTER, NonFoldRosterBucket (private), nfr_roster_bucket() (private), classification counts; RosterFictionReport gains migration_debt_roster_slots + irreducible_roster_slots fields - complexity_linearity_audit.rs bin: uses fiction.* fields instead of direct cli_run imports Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * restore doc_reachability_tests module dropped in merge conflict resolution The merge that absorbed doc_reachability_project retirement (e22b13a) clobbered the 6 doc_reachability_tests unit controls (reachable_set_flags_orphan_node, reachable_set_inert_cluster_stays_unreached, reachable_set_transitive_chain, markdown_link_targets_basic, dangling_detection_flags_missing_md_only, bind_md_refs_basic) by placing non_fold_residue_tests in the same slot. Both mods are now siblings. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * port roster_partition_covers_every_entry_without_overlap invariant test Migration-debt sub-roster subset check + partition sum + live-sites partition — all three assertions from the deleted non_fold_residue_project.rs now live in complexity_linearity_audit_project (where both rosters are in scope). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * drop stale eval_bind_node_eval from non_fold_residue roster eval_bind_node_eval's wildcard arm was dissolved in #5996 (exhaustive RuntimeBehaviorInterpreter match); the existing test already asserted it should not fire syntactic_match_wildcard_arm. Remove it from both NON_FOLD_RESIDUE_ROSTER (cli_run) and NON_FOLD_MIGRATION_DEBT_ROSTER (complexity_linearity_audit_project) so stale_roster_count() == 0 and the floor witnesses pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire non_fold_residue_project.rs — lens .dag owns verdict * merge origin/main: absorb bcbf464 (record_emit) + 0567321 (ci_floor fix) Takes main's witness update (== int_min(conservative_fallback, exec_w)) over our interim <= patch; the real function change (remove int_min from plan_spawn_width) landed in #6070 on main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * merge origin/main: absorb inert_carrier_project retirement (f92a4a6) Inserts the inert carrier census block (cli_run.rs: 75 helper lines + 191 struct/compute/pub/tests lines) before our NFR block's doc-reachability section. Drops the now-dead module_path_index::inert_carrier_census and module_path_index::non_fold_residue_census imports from complexity_linearity_audit.rs (both replaced by cli_run paths or the fiction-report fields). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * drop accidental MODULE.bazel from PR scope Temporary BuildBuddy marker committed via a merge; absent from main. Unrelated to non_fold_residue retirement. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix witness oracle: universe_is_nonempty uses coproduct_universe_count not count non_fold_residue_count() = live residue sites (drains to 0 as debt migrates). non_fold_residue_coproduct_universe_count() = closed-coproduct type universe (the fail-open oracle: zero means the corpus walk found nothing). Sibling witnesses follow this pattern; matches the lens authority at src/v2/lens/non_fold_residue_test.dag:14-15. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * cargo fmt: remove trailing blank line in cli_run.rs inert carrier block Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * merge origin/main: absorb unwired-model census generalization (#6078) #6078 generalized the inert-carrier census to the broader unwired-model census and moved doc-utility fns (DOC_PLAN_ROOTS, doc_universe, etc.) to be shared between the two census blocks. Take main's header and struct name (UnwiredModelData); remove the duplicate doc-utility definitions that were previously in the doc-reachability section only. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire non_fold_residue_project.rs — lens .dag owns verdict * ci_floor_plan: restore int_min clamp on zero-budget fallback width The zero-budget path (cgroup unreadable) previously returned int_min(conservative_fallback_width, execution_corpus_spawn_width()). The prior commit dropped int_min to fix a witness inconsistency introduced by #6079, but that constitutes a semantic change orthogonal to this PR's scope. Restore the clamp and update both witnesses to check int_min(conservative_fallback, exec_w) instead of fallback directly — function and witnesses now consistently agree, without changing the clamped-at-exec_w behavior. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(test): ignore func_env semantic oracle — baseline commit GC'd from GitHub 5722326 was from a squash-merged PR branch and no longer exists on GitHub's server; fetch-depth:0 can only fetch reachable objects, so CI fails on fresh runner workspaces. Marking ignored is more honest than the prior fake-pass-via-workspace-cache behaviour. Re-baseline path: run capture_func_env_semantic_oracle against a tagged reachable commit, update func_env_semantic_baseline.json, restore the #[test] attribute. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(merge): resolve cli_run.rs conflict — NFR + languages + extdeps census all present; restore oracle test The auto-committer left raw conflict markers in cli_run.rs (brace mismatches at lines 7059 and 7340). Resolved by placing NFR census (our block, from cec6d1f) before the languages-consumer census and extdeps-shape-transport-policy census that landed in main via #6038 and #6043. All four census blocks now in correct order: NFR → languages → inert-carrier → extdeps-shape-transport-policy. Removed the #[ignore] on func_env_whole_corpus_semantic_oracle: main already re-based the test to db559b4 which IS reachable from origin/main (confirmed via git branch -r --contains). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(nfr-census): port synthetic RED/GREEN detection unit tests into cli_run.rs The deleted non_fold_residue_census.rs carried 8 discriminating controls that proved the lexical detector does not false-RED/GREEN. The parallel inert_carrier fold kept its controls; this ports the equivalent set into the new cli_run.rs nfr_tests module: coproduct_index_finds_sums_not_records red_control_wildcard_over_closed_coproduct_is_residue green_control_total_fold_is_not_residue green_control_wildcard_over_open_domain_is_not_residue green_control_field_placeholder_underscore_is_not_a_wildcard_arm nested_match_wildcard_is_attributed_to_its_own_match green_control_wildcard_and_slashes_inside_string_literal_are_ignored red_control_real_wildcard_survives_an_in_string_decoy The corpus-pinning test (external_access_throttle.dag) is omitted: that file no longer exists in the corpus. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * style: cargo fmt (trailing blank line in nfr_tests module) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Brian Searls <briansrls@gunb.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

briansrls added 2 commits July 1, 2026 04:30

WIP: Build a floor-enrolled lens that BANS UNWIRED MODELS: any declar…

dba2441

…ed type/

WIP: Build a floor-enrolled lens that BANS UNWIRED MODELS: any declar…

f3eef6e

…ed type/

gunbai-bot Bot marked this pull request as ready for review July 1, 2026 04:52

gunbai-bot Bot mentioned this pull request Jul 1, 2026

Merge-admission wiring + roster-trim (#5974); flip HELD pending real CI proof #6080

Merged

2 of 3 tasks

Merge remote-tracking branch 'origin/main' into session/quiet-hawk-578

0d4a336

briansrls merged commit a9ed2f2 into main Jul 1, 2026
3 checks passed

briansrls deleted the session/quiet-hawk-578 branch July 1, 2026 06:10

briansrls pushed a commit that referenced this pull request Jul 1, 2026

Merge origin/main into session/vivid-owl-377-witness-a.

e22a5b2

Picks up #6078 unwired_model lens required for CI merge-check; will enroll new affected-set floor symbols in roster.

This was referenced Jul 1, 2026

HAND lens E: retire fact_cardinality_census.rs — lens .dag owns verdict #6037

Merged

fix(ci-floor): delete white-box/tautological spawn-width witnesses (MAIN-RED) #6083

Closed

gunbai-bot Bot mentioned this pull request Jul 1, 2026

Revert #6078 (Ban unwired models lens) — MAIN-RED: unwired_model_no_unrostered_or_stale returns Bool(false) on live corpus #6084

Closed

briansrls mentioned this pull request Jul 1, 2026

Revert "Ban unwired models: floor-enrolled lens (subsumes inert_carrier) — §5 coverage-by-illusion wall" #6085

Merged

gunbai-bot Bot mentioned this pull request Jul 1, 2026

fix(ci-floor): delete white-box/tautological spawn-width witnesses (MAIN-RED) #6087

Merged

gunbai-bot Bot mentioned this pull request Jul 1, 2026

CI: move required runners to Ubicloud standard (ubicloud-standard-16-arm) #6107

Merged

Navigation Menu

Repository navigation

Ban unwired models: floor-enrolled lens (subsumes inert_carrier) — §5 coverage-by-illusion wall - #6078

Ban unwired models: floor-enrolled lens (subsumes inert_carrier) — §5 coverage-by-illusion wall#6078
briansrls merged 3 commits into
mainfrom
session/quiet-hawk-578

gunbai-bot Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

gunbai-bot Bot commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

gunbai-bot Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Ban unwired models — the §5 coverage-by-illusion wall (generalizes & subsumes inert_carrier)

Rule (decidable, present-unwired only — not the Rice "will it ever" trap)

§3 — subsumes inert_carrier, does not fork

Mechanism

Ratchet, not a permanent ledger

Discriminating controls (all green by execution)

Census (surprising "looks-wired-but-isn't" head)

Uh oh!

gunbai-bot Bot commented Jul 1, 2026

Categorized roster export (857) — paydown triage

SURPRISE (feature-looking, half-built) — 73

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

gunbai-bot Bot commented Jul 1, 2026 •

edited

Loading

Ban unwired models — the §5 coverage-by-illusion wall (generalizes & subsumes `inert_carrier`)

§3 — subsumes `inert_carrier`, does not fork