Roadmap: three-way diff as fold instance (construction steer) + operational acceptance tiers, per-node Accept lines, runner-allocation-v0 milestone

[briansrls]

Encodes two operator directives into the roadmap authority (dsl/gunbc/roadmap_authority.dag); ROADMAP.md, docs/plans/fleet-acceptance-criteria.md, and .githooks/pre-push are the main_wet regens of it.

1. Three-way diff = fold instance, not a bespoke differ (operator, 2026-07-01)

The converge re-land brief said "the three-way-diff carrier does not exist yet" — with nothing stopping a worker from hand-rolling a differ, reinventing the core mechanism. New node 2-keyed-delta-fold (parent of 2-converge-reland) carries the construction steer:

• diff = keyed fold over aligned rows into a codomain with identity = Unchanged — unchanged rows vanish by the monoid law, never by filtering (that is the "for free")
• structural equality (v2.std.exact_structural_equality_zip_fold) is the degenerate consumer — an equality verdict is a diff with the hunks discarded (accurately described: its internals are canonicalize-then-compare, not a lockstep zip)
• three-way = the same fold into a join-semilattice: Conflict = join of two incomparable changes, and a plan that reads Conflict has no apply arm — no-mutation-on-conflict becomes structural, not a runtime guard. Safety caveat encoded: bottom here is the benign Unchanged (the inverse of the DescentEvidence precedent), so the codomain must carry NO Unknown element
• inverse laws as free RED controls: diff(A,A)=identity · apply(diff(A,B),A)=B · retract = inverse patch — a groupoid, not a total Group (apply is partial: refuses off-base; Conflict has no inverse)
• §3 grounding: attach to v2.std.change (ChangeKind/ChangeSet, already feeding the affected-set lens), never mint a parallel Hunk/Patch; the algebra anchor picks ONE std authority per the standing de-fork ruling
• layering: generic fold = std; gunbc.host_converge supplies only the six-variant ConvergeTarget leaf algebra (one string-equality flattens apply-vs-effective splits, byte normalization, verify-only, pin-coherence); live read/apply stays workflow-layer

Every cited name was adversarially verified against the live tree by a 6-agent refutation workflow; the three mischaracterizations it found (zip-fold internals, Group totality, phantom ConvergeKnobs plural) are corrected in the landed text.

2. Operational acceptance — tiers + per-node Accept lines (operator, 2026-07-02)

A roadmap item is not complete because its algebra exists. It is complete only when a named consumer uses it on the live path and produces a receipt.

• §2 prose now carries the rule + completion tiers T0 modeled · T1 fixture witness · T2 wired to consumer · T3 live dry-run receipt · T4 live apply + independent read-back · T5 periodic/CI keeps it alive; control-plane items close at T4/T5
• Accept (tier) lines added to: 2-keyed-delta-fold (T2), 2-converge-reland (T4 — the full srv1/srv2 reallocation bar: model-edit → delta plan → apply → systemctl show read-back → hand-edit reds → retract), 2-live-read-seam, 2-host-admission, 2-periodic-actuation (T5), 2-service-receipt (T4), 2-compile-clean-shard-b, 2-strictlease, 2-admission-model, 1-g2-runner
• New milestone node 2-runner-allocation-v0 — srv1/srv2 as StrictLease runner capacity, hand-config retired: the operational milestone the control plane exists for; added to the §2 milestone spine
• New modeled plan doc docs/plans/fleet-acceptance-criteria.md (generated from dsl/gunbc/plans/fleet_acceptance_criteria.dag, registered in plan_registry_batch_g) carries the full per-node checklists incl. the 12-step converge-reland flow and the dispatch-brief acceptance block; nodes link to it — node = summary, doc = checklist, no dual representation

Receipts

• drift gate run_generated_artifact_drift_gate_body: RED before regen, GREEN after (discriminating consumer, by execution)
• roadmap_authority/emit/document/status/page/frontier/spawner witnesses: PASS
• generated_artifact_drift_witnesses, plan_lens (dissolution-trigger walls incl. RED controls), doc_reachability (no orphan, no dangling), githooks_pre_push_emit: PASS

🤖 Generated with Claude Code