briansrls · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026 · Jul 4, 2026
diff --git a/ROADMAP.md b/ROADMAP.md
@@ -28,7 +28,7 @@ Ground truth (2026-07-01): `src/v1` = ~174k hand-written `.rs` LOC (the ~154k fi
 
 ## 2. Compute fabric — own the infra (CI · deploy · control plane)
 
-State (2026-07-01): required CI is back on the fleet after the Ubicloud detour (#6107, reverted #6111). The detour was the **diagnostic and emergency valve, not a failure**: it proved raw VM isolation alone does not solve a serial floor (same ~50min wall on both runner types), and it stays the **break-glass/burst option**, just not the active required path. So the active work is (1) reduce floor recompute, (2) make fleet admission/caps safe — the dominant wall-clock is inside the floor, not host placement alone. The fleet — srv1/srv2 (128c/125GiB Ampere) + srv3 (greenfield, OpenBMC) — carries agent sessions, the dashboard, and all runners, with live cgroup caps, runner registration, sudoers, and tailscale-ACL actuation still **hand-managed**; the fleet-era OOM/sccache exposure returned with the traffic (operator-accepted interim). #6096 (fleet converge control plane) was **closed unmerged**; its review gap-list is the re-land spec, and the findings apply to the committed `.github/fleet-converge.sh` too (mutate-then-read, `|| true` swallowing, no hostname dispatch) — the re-land is an architecture change, not a rebase. → [CI humming](docs/plans/ci-humming.md) · [host-effect orchestration](docs/plans/host-effect-orchestration.md) · [compute envelope](docs/plans/compute-envelope-model.md) · [charter](docs/plans/ci-process-end-to-end.md)
+State (2026-07-01): required CI is back on the fleet after the Ubicloud detour (#6107, reverted #6111). The detour was the **diagnostic and emergency valve, not a failure**: it proved raw VM isolation alone does not solve a serial floor (same ~50min wall on both runner types), and it stays the **break-glass/burst option**, just not the active required path. So the active work is (1) reduce floor recompute, (2) make fleet admission/caps safe — the dominant wall-clock is inside the floor, not host placement alone. The fleet — srv1/srv2 (128c/125GiB Ampere) + srv3 (greenfield, OpenBMC) — carries agent sessions, the dashboard, and all runners, with live cgroup caps, runner registration, sudoers, and tailscale-ACL actuation still **hand-managed**; the fleet-era OOM/sccache exposure returned with the traffic (operator-accepted interim). #6096 (fleet converge control plane) was **closed unmerged**; its review gap-list is the re-land spec, and the findings apply to the committed `.github/fleet-converge.sh` too (mutate-then-read, `|| true` swallowing, no hostname dispatch) — the re-land is an architecture change, not a rebase. → [CI humming](docs/plans/ci-humming.md) · [host-effect orchestration](docs/plans/host-effect-orchestration.md) · [compute envelope](docs/plans/compute-envelope-model.md) · [charter](docs/plans/ci-process-end-to-end.md) · [host-converge inventory](docs/plans/host-converge-inventory.md)
 
 **The core design rule (operator-signed, 2026-07-01):** provider-specific power is earned behind a `ProviderOffer` adapter; the core fabric only knows `RunShape → Allocation → Receipt`; default allocation is **strict/ephemeral**; oversubscription is an optimization proven by receipts, never assumed by placement. Not "Ubicloud vs fleet" — GitHub Actions asks for a RunShape, the fabric chooses a ProviderOffer (srv1/srv2 fixed-host slice, Ubicloud ephemeral VM, or later others). srv1/srv2 are modeled as little Ubiclouds first (N strict slots, hard caps, read-back receipts); their richer allocation opportunity (stranded cores, burst, co-residency) is Phase 2, earned by receipts.
 
@@ -65,7 +65,7 @@ State (2026-07-01): required CI is back on the fleet after the Ubicloud detour (
 - [ ] **resolve-cache default-on** — purity proven (616/616) but opt-in: whole-file JSON IO buffers ~11× the packed graph and OOMed the concurrent floor (#5789 reverted); gated on a streaming IO realization. The warm ~18% lever, downstream of incrementality.
 - [ ] **G4 dispatch dup** — `workflow_dispatch`+PR fire two same-SHA runs; the concurrency fallback won't collapse them → wasted runners and OOM risk (live instance: #6110's draft-attach + ready-flip fired two runs, the cancelled one reporting as a failing check). Superseded runs also linger `in_progress` for 12–37min — audit cancel-in-progress coverage; leaked runner minutes. [decision record](docs/plans/ci-merge-freshness.md)
 
-Receipts + adjacent levers: [fractal Gantt](docs/plans/ci-floor-fractal-gantt.md) · [memory chronicle](docs/plans/interpreter-memory-chronicle.md) · [resolver pathology profile](docs/plans/resolver-pathology-profile-receipt.md) · [representation minimization](docs/plans/representation-minimization.md) · [shared-compute memoization](docs/plans/floor-shared-compute-memoization.md) *(M1 ✓ #6008; M2 gated on determinism #5941)* · [OOM reclassification](docs/plans/ci-oom-reclassification.md).
+Receipts + adjacent levers: [fractal Gantt](docs/plans/ci-floor-fractal-gantt.md) · [memory chronicle](docs/plans/interpreter-memory-chronicle.md) · [resolver pathology profile](docs/plans/resolver-pathology-profile-receipt.md) · [representation minimization](docs/plans/representation-minimization.md) · [shared-compute memoization](docs/plans/floor-shared-compute-memoization.md) *(M1 ✓ #6008; M2 gated on determinism #5941)* · [OOM reclassification](docs/plans/ci-oom-reclassification.md) · [post-engine deferred ledger + algorithm audit](docs/plans/post-engine-pr-roadmap.md).
 
 **Control plane — the #6096 re-land, done right (G2/G3):**
 
@@ -157,4 +157,3 @@ Every lane below was live roadmap before the reset. Shelved = plan docs and carr
 - **privacy / isolation model for the compute fabric** — trust boundaries, tenant isolation, what the fabric may observe about a workload; was compute-fabric downstream work pre-reset, parked here so it is not lost (`trust_class` on `RunShape` is its active §2 seam). Includes committed-secret references (operator 2026-07-02, not urgent): a typed `SecretRef` — GCP Secret Manager resource name + version/content-hash — so sensitive facts (router serial, WAN MAC, public prefixes, credentials) commit as model-legible references while values stay in Secret Manager; redaction by construction (public shapes carry no raw-value field); first consumer: the network-identity observation fixtures.
 - **structural correctness walls (standing, not active)** — generated-output gate · coproduct exhaustiveness · cross-representation equality · oracle-method map; they keep gating, no expansion work dispatches from here
 - **design sketches without an active lane** [orchestration-as-intent](docs/plans/orchestration-as-intent-design.md) [model-grounding extract](docs/plans/model-grounding-lens-extract.md) [node-minimal representation](docs/plans/node-minimal-representation-sketch.md) [func-env sigs](docs/plans/func-env-sigs-single-authority.md) [resolved-graph minimization](docs/plans/resolved-graph-representation-minimization.md) [emit-host batch isolation](docs/plans/emit-host-batch-isolation.md) [accelerator roundtrip](docs/plans/accelerator-demo-roundtrip.md) [commit workflow](docs/plans/commit-workflow.md) [input envelope](docs/plans/input-envelope-roadmap.md) [seed-debt bundle 2](docs/plans/seed-debt-bundle-item-2.md) [resolver collision wall](docs/plans/resolver-type-name-collision-wall.md) [regime-2 shared emission](docs/plans/regime2-shared-emission-fold.md)
-
diff --git a/dag/ctrl/review_verdict.dag b/dag/ctrl/review_verdict.dag
@@ -15,7 +15,7 @@ type ReviewProvider
   | ProviderOther { name: NonEmptyStr }
 
 type ReviewSource
-  = Llm
+  = LlmSource
   | Human
   | Policy
   | Unattributed
@@ -33,7 +33,7 @@ type Reviewer
 
 fn reviewer_source(reviewer: Reviewer) -> ReviewSource {
   match reviewer {
-    AgentReviewer { provider: _ } => Llm
+    AgentReviewer { provider: _ } => LlmSource
     HumanSeatReviewer => Human
     PolicyReviewer { policy: _ } => Policy
     UnattributedReviewer { provider_name: _ } => Unattributed

diff --git a/dag/extdeps/cache/buildbuddy.dag b/dag/extdeps/cache/buildbuddy.dag
@@ -1,9 +1,8 @@
 module extdeps.cache.buildbuddy
 
-import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed }
+import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed, CatalogCasContentEncoding }
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  CasContentEncoding,
   ContentAddressLookup,
   WriteOnce,
   MissThenCreate,
@@ -34,7 +33,7 @@ data buildbuddy_cas_id: CacheInterfaceId = "buildbuddy_cas"
 data buildbuddy_cas_facts: CacheInterfaceCatalogFacts = {
   identity: buildbuddy_cas_id
   backing_surface: "buildbuddy-remote-cas"
-  transport_encoding: CasContentEncoding
+  transport_encoding: CatalogCasContentEncoding
   key_derivation: {
 
     key_inputs: ContentAddressed

diff --git a/dag/extdeps/cache/cache.dag b/dag/extdeps/cache/cache.dag
@@ -20,6 +20,10 @@ import extdeps.cache.types {
   CargoFingerprint,
   SccacheInternalEncoding,
   CargoFingerprintEncoding,
+  CatalogOpaqueStringEncoding,
+  CatalogCasContentEncoding,
+  CatalogOpaqueStringKey,
+  CatalogCasContentDigest,
 }
 import extdeps.realization.parse_table_memo { parse_table_memo_facts, parse_table_memo_id }
 import extdeps.realization.reconcile_in_process {
@@ -38,8 +42,6 @@ import std.cache_interface {
   OpaqueStringEncoding,
   CasContentEncoding,
   NativeInternalEncoding,
-  OpaqueStringKey,
-  CasContentDigest,
 }
 import std.types { ContentHash }
 import std.list { List }
@@ -68,8 +70,8 @@ fn cache_interface_facts_from_catalog(row: CacheInterfaceCatalogFacts) -> CacheI
     identity: row.identity
     backing_surface: row.backing_surface
     transport_encoding: match row.transport_encoding {
-      OpaqueStringEncoding => OpaqueStringEncoding
-      CasContentEncoding => CasContentEncoding
+      CatalogOpaqueStringEncoding => OpaqueStringEncoding
+      CatalogCasContentEncoding => CasContentEncoding
       SccacheInternalEncoding => NativeInternalEncoding
       CargoFingerprintEncoding => CasContentEncoding
     }
@@ -102,9 +104,9 @@ fn cache_key_projection_provider_key<T>(
   backend: CacheInterfaceCatalogFacts,
 ) -> CatalogProviderKey {
   match backend.transport_encoding {
-    OpaqueStringEncoding => OpaqueStringKey { key: artifact.subject_digest }
+    CatalogOpaqueStringEncoding => CatalogOpaqueStringKey { key: artifact.subject_digest }
     SccacheInternalEncoding => SccacheInternalHash { digest: artifact.subject_digest }
-    CasContentEncoding => CasContentDigest { digest: artifact.subject_digest }
+    CatalogCasContentEncoding => CatalogCasContentDigest { digest: artifact.subject_digest }
     CargoFingerprintEncoding => CargoFingerprint { digest: artifact.subject_digest }
   }
 }

diff --git a/dag/extdeps/cache/github_actions.dag b/dag/extdeps/cache/github_actions.dag
@@ -5,10 +5,10 @@ import extdeps.cache.types {
   HandAuthored,
   UpsertSubject,
   FilePaths,
+  CatalogOpaqueStringEncoding,
 }
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  OpaqueStringEncoding,
   PrefixFallback,
   OverwriteAllowed,
   WriteThenCommit,
@@ -41,7 +41,7 @@ data gha_actions_cache_id: CacheInterfaceId = "gha_actions_cache"
 data gha_actions_cache_facts: CacheInterfaceCatalogFacts = {
   identity: gha_actions_cache_id
   backing_surface: "github-actions-cache-api"
-  transport_encoding: OpaqueStringEncoding
+  transport_encoding: CatalogOpaqueStringEncoding
   key_derivation: {
 
     key_inputs: HandAuthored { cited_inputs: [UpsertSubject, FilePaths] }

diff --git a/dag/extdeps/cache/rustup.dag b/dag/extdeps/cache/rustup.dag
@@ -1,9 +1,13 @@
 module extdeps.cache.rustup
 
-import extdeps.cache.types { CacheInterfaceCatalogFacts, NativeInternal, ToolchainSpec }
+import extdeps.cache.types {
+  CacheInterfaceCatalogFacts,
+  NativeInternal,
+  ToolchainSpec,
+  CatalogOpaqueStringEncoding,
+}
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  OpaqueStringEncoding,
   NativeInternalLookup,
   ProviderInternal,
   MissThenCreate,
@@ -35,7 +39,7 @@ data rustup_toolchain_store_id: CacheInterfaceId = "rustup_toolchain_store"
 data rustup_toolchain_store_facts: CacheInterfaceCatalogFacts = {
   identity: rustup_toolchain_store_id
   backing_surface: "rustup-toolchains-dir"
-  transport_encoding: OpaqueStringEncoding
+  transport_encoding: CatalogOpaqueStringEncoding
   key_derivation: {
 
     key_inputs: NativeInternal { cited_inputs: [ToolchainSpec] }

diff --git a/dag/extdeps/cache/types.dag b/dag/extdeps/cache/types.dag
@@ -19,10 +19,6 @@ import std.cache_interface {
   ManualPurge,
   DependencyChange,
   CacheEvidence,
-  OpaqueStringEncoding,
-  CasContentEncoding,
-  OpaqueStringKey,
-  CasContentDigest,
   ArtifactIdentity,
   ProducerReceipt,
 }
@@ -43,15 +39,15 @@ type CatalogInputSurface
   | ToolchainSpec
 
 type CatalogProviderKeyEncoding
-  = OpaqueStringEncoding
-  | CasContentEncoding
+  = CatalogOpaqueStringEncoding
+  | CatalogCasContentEncoding
   | SccacheInternalEncoding
   | CargoFingerprintEncoding
 
 type CatalogProviderKey
-  = OpaqueStringKey { key: NonEmptyStr }
+  = CatalogOpaqueStringKey { key: NonEmptyStr }
   | SccacheInternalHash { digest: ContentHash }
-  | CasContentDigest { digest: ContentHash }
+  | CatalogCasContentDigest { digest: ContentHash }
   | CargoFingerprint { digest: ContentHash }
 
 type CatalogBackendCacheKey {
@@ -134,8 +130,8 @@ fn catalog_has_vendor_only_key_inputs(inputs: List<CatalogInputSurface>) -> Bool
 
 fn catalog_transport_encoding_collapsed_in_std_projection(encoding: CatalogProviderKeyEncoding) -> Bool {
   match encoding {
-    OpaqueStringEncoding => false
-    CasContentEncoding => false
+    CatalogOpaqueStringEncoding => false
+    CatalogCasContentEncoding => false
     SccacheInternalEncoding => false
     CargoFingerprintEncoding => true
   }

diff --git a/dag/extdeps/github/pulls.dag b/dag/extdeps/github/pulls.dag
@@ -25,7 +25,7 @@ type PullRequestState = Open | Closed
 
 type ReviewState = Pending | Commented | Approved | ChangesRequested | Dismissed
 
-type ReviewEvent = Approve | RequestChanges | Comment | Pending
+type ReviewEvent = Approve | RequestChanges | Comment | PendingEvent
 
 type PullRequestRef {
   ref: GitRef

diff --git a/dag/extdeps/languages/markdown.dag b/dag/extdeps/languages/markdown.dag
@@ -16,7 +16,7 @@ import std.decl_ref { DeclarationRef, WholeDeclaration }
 import std.markup {
   Fragment,
   Element,
-  TextNode,
+  FragmentText,
   RawNode,
   MarkupMedium,
   TagDelimiter,
@@ -155,13 +155,13 @@ fn markdown_markup_medium(sp: MarkdownSpellings) -> MarkupMedium {
 fn md_inline_to_fragment(inline: MarkdownInline, sp: MarkdownSpellings) -> Fragment {
   match inline {
     TextInline { text } =>
-      TextNode { content: text }
+      FragmentText { content: text }
     EmphasisInline { inlines } =>
       Element { tag: "em", attributes: [], children: md_inlines_to_fragments(inlines: inlines, sp: sp) }
     StrongInline { inlines } =>
       Element { tag: "strong", attributes: [], children: md_inlines_to_fragments(inlines: inlines, sp: sp) }
     CodeInline { text } =>
-      Element { tag: "code", attributes: [], children: [ TextNode { content: text } ] }
+      Element { tag: "code", attributes: [], children: [ FragmentText { content: text } ] }
     LinkInline { inlines, url } =>
       RawNode { content: md_link_form(text: md_render_inlines(inlines: inlines, sp: sp), url: url, sp: sp) }
     ImageInline { alt, url } =>

diff --git a/dag/extdeps/llm/openai.dag b/dag/extdeps/llm/openai.dag
@@ -127,7 +127,7 @@ type OpenAiChatCompletion200UrlCitation {
 }
 
 type OpenAiChatCompletion200Annotation
-  = UrlCitation { url_citation: OpenAiChatCompletion200UrlCitation }
+  = ChatUrlCitation { url_citation: OpenAiChatCompletion200UrlCitation }
 
 type OpenAiChatCompletion200Message {
   role: String
@@ -335,7 +335,7 @@ data structural_coverage_gap_openai_responses_200_residual: List<CoverageClosure
 
 type OpenAiResponses200Annotation
   = FileCitation { file_id: String, filename: String, index: Int }
-  | UrlCitation { start_index: Int, end_index: Int, title: String, url: String }
+  | ResponsesUrlCitation { start_index: Int, end_index: Int, title: String, url: String }
   | ContainerFileCitation { container_id: String, file_id: String, filename: String, start_index: Int, end_index: Int }
   | FilePath { file_id: String, index: Int }
 

diff --git a/dag/extdeps/memory/sk_hynix.dag b/dag/extdeps/memory/sk_hynix.dag
@@ -1,7 +1,7 @@
 module extdeps.memory.sk_hynix
 
 import std.measure { ByteSize, byte_size, bit_width }
-import extdeps.memory.types { DramModuleCatalogRow, dram_generation_ddr4 }
+import extdeps.memory.types { DramModuleCatalogRow, DimmBuffering, dram_generation_ddr4 }
 import extdeps.vendor.sk_hynix { sk_hynix }
 import extdeps.external_authority { ExternalAuthority }
 import extdeps.uri { Uri, Https }

diff --git a/dag/extdeps/realization/hermetic_fixture.dag b/dag/extdeps/realization/hermetic_fixture.dag
@@ -3,10 +3,9 @@ module extdeps.realization.hermetic_fixture
 import extdeps.external_authority { ExternalAuthority }
 import extdeps.uri { Uri, Https }
 
-import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed }
+import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed, CatalogCasContentEncoding }
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  CasContentEncoding,
   ContentAddressLookup,
   ExactKeyOnly,
   WriteOnce,
@@ -43,7 +42,7 @@ data hermetic_fixture_in_process_id: CacheInterfaceId = "hermetic_fixture_in_pro
 data hermetic_fixture_file_facts: CacheInterfaceCatalogFacts = {
   identity: hermetic_fixture_file_store_id
   backing_surface: "gunbc-recorded-fixture-on-disk"
-  transport_encoding: CasContentEncoding
+  transport_encoding: CatalogCasContentEncoding
   key_derivation: {
 
     key_inputs: ContentAddressed
@@ -88,7 +87,7 @@ data hermetic_fixture_file_facts: CacheInterfaceCatalogFacts = {
 data hermetic_fixture_in_process_facts: CacheInterfaceCatalogFacts = {
   identity: hermetic_fixture_in_process_id
   backing_surface: "gunbc-effect-io-fixture-in-memory"
-  transport_encoding: CasContentEncoding
+  transport_encoding: CatalogCasContentEncoding
   key_derivation: {
 
     key_inputs: ContentAddressed

diff --git a/dag/extdeps/realization/parse_table_memo.dag b/dag/extdeps/realization/parse_table_memo.dag
@@ -3,10 +3,9 @@ module extdeps.realization.parse_table_memo
 import extdeps.external_authority { ExternalAuthority }
 import extdeps.uri { Uri, Https }
 
-import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed }
+import extdeps.cache.types { CacheInterfaceCatalogFacts, ContentAddressed, CatalogCasContentEncoding }
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  CasContentEncoding,
   ContentAddressLookup,
   OverwriteAllowed,
   MissThenCreate,
@@ -34,7 +33,7 @@ data parse_table_memo_id: CacheInterfaceId = "parse_table_memo_cache"
 data parse_table_memo_facts: CacheInterfaceCatalogFacts = {
   identity: parse_table_memo_id
   backing_surface: "gunbc-parse-table-in-process"
-  transport_encoding: CasContentEncoding
+  transport_encoding: CatalogCasContentEncoding
   key_derivation: {
 
     key_inputs: ContentAddressed

diff --git a/dag/extdeps/realization/reconcile_in_process.dag b/dag/extdeps/realization/reconcile_in_process.dag
@@ -3,10 +3,15 @@ module extdeps.realization.reconcile_in_process
 import extdeps.external_authority { ExternalAuthority }
 import extdeps.uri { Uri, Https }
 
-import extdeps.cache.types { CacheInterfaceCatalogFacts, HandAuthored, FilePaths, UpsertSubject }
+import extdeps.cache.types {
+  CacheInterfaceCatalogFacts,
+  HandAuthored,
+  FilePaths,
+  UpsertSubject,
+  CatalogOpaqueStringEncoding,
+}
 import std.cache_identity { CacheInterfaceId }
 import std.cache_interface {
-  OpaqueStringEncoding,
   ExactKeyOnly,
   OverwriteAllowed,
   MissThenCreate,
@@ -35,7 +40,7 @@ data typed_module_cache_id: CacheInterfaceId = "typed_module_cache"
 data parse_cache_facts: CacheInterfaceCatalogFacts = {
   identity: parse_cache_id
   backing_surface: "gunbc-cli-run-parse-in-process"
-  transport_encoding: OpaqueStringEncoding
+  transport_encoding: CatalogOpaqueStringEncoding
   key_derivation: {
 
     key_inputs: HandAuthored { cited_inputs: [FilePaths] }
@@ -80,7 +85,7 @@ data parse_cache_facts: CacheInterfaceCatalogFacts = {
 data typed_module_cache_facts: CacheInterfaceCatalogFacts = {
   identity: typed_module_cache_id
   backing_surface: "gunbc-cli-run-typed-module-in-process"
-  transport_encoding: OpaqueStringEncoding
+  transport_encoding: CatalogOpaqueStringEncoding
   key_derivation: {
 
     key_inputs: HandAuthored { cited_inputs: [UpsertSubject] }