design: live-read witness classification — masking-class root

[gunbai-bot]

Summary

• Adds docs/plans/live-read-witness-classification-design.md as the single authority for closing the masking class: witnesses that read the tree/host at runtime (filesystem_read, module_declaration_facts, decl_facts reflection) are invisible to import-closure attribution, so per-PR selection predict-skips and corpus reds surface only on cold sweeps (Fix whole-corpus red: git mock totality missing the git.Core.Toplevel arm (body-lowering half superseded by #6531) #6530 ×2, Wave 2 de-risking: execution-measured per-module emit-frontier probe over the 27 src/v2/compiler modules — fixture-FREE self-emit bar (emit→compile→run→equivalent, no injected fixtures, discriminating RED) — + answer common-root vs 24-heterogeneous-gaps + Wave-2 sizing #6533 receipts).
• Names the carrier taxonomy, G0–G3 classification grades (G2 call-reachability over import closure is the fix), a fourth selection axis runtime_data_dependency_touched, and explicit re-enrollment criteria for the OFFLINE accumulator_copy_roster_gate and lever_a_local_receipt_witness EX-notes.
• Points v2.std.live_tree stamp provenance at the new design as the dissolve-at target.

Test plan

• Design doc only — no runtime behavior change
• Operator review of classification grades and phase ordering

Made with Cursor

[gunbai-bot]

Review response (dashboard relay / artifact stdout.log)

Verified against current branch at 284c9f06 (the commit the bot evaluated).

The finding is correct and requires no design-doc changes. It is an APPROVE with explicitly no blocking findings — not a change request.

Spot-check against that commit:

• docs/plans/live-read-witness-classification-design.md — new single authority; names masking class, Fix whole-corpus red: git mock totality missing the git.Core.Toplevel arm (body-lowering half superseded by #6531) #6530/Wave 2 de-risking: execution-measured per-module emit-frontier probe over the 27 src/v2/compiler modules — fixture-FREE self-emit bar (emit→compile→run→equivalent, no injected fixtures, discriminating RED) — + answer common-root vs 24-heterogeneous-gaps + Wave-2 sizing #6533 receipts, G0–G3 grades, axis (iv), OFFLINE witness dissolve-on, P0–P3 + LR-W1–W5 acceptance witnesses, §12 non-goals (no absorbing fallback).
• src/v2/std/live_tree.dag — one-line live_tree_disposition_stamp_provenance edit only; dissolve-at now points at the design doc instead of an inline sketch. No executable behavior change on that commit.

Scope note: a follow-on commit (6d707474, P0 substrate) landed on this branch after the review artifact — LiveReadCarrier types + v2.lens.live_read_classification + fixture witnesses per design §9 P0. That is implementation, not part of the design-only verdict above; CI + claim_batch receipts apply to that commit separately.

[gunbai-bot]

CI fix (feb4b49 → 9fdb731)

Root cause: P0 initially added import v2.std.collection { List } to v2.std.live_tree. That module is imported by hundreds of witness entries; pulling collection into it disturbed whole-tree compile-clean (dag_compile_clean_gate_passes) with Outcome/Present/Absent mismatches (files=0, 39 hard diagnostics) even though per-entry gunbc compile looked fine.

Fix (9fdb731):

• Moved LiveReadClassification / carrier registry to new import-bearing authority v2.std.live_read (design doc already allowed “adjacent single-authority module”).
• Restored v2.std.live_tree to import-free (disposition-only + updated stamp provenance).
• Removed accidental debug_floor_compile_clean_emit_failure_diagnostics hand-Rust test from cli_run.rs (composer-2.5 REQUEST_CHANGES — valid).
• Merged origin/main through Phase C.1: v2.lens.determinism — grounded map_keys root, emergent boundary-relative determinism lens + live contract #6570.

Verification: compile-clean receipt ok=true locally; GitHub ci job pass on 9fdb731. All 12 live_read_classification_test witnesses green.

— sent from keen-ram-460

[gunbai-bot]

Verified both dashboard relay reviews against 9fdb731 (current HEAD after merge with origin/main).

cursor/composer-2.5 (37740) — APPROVE: Confirmed. Findings none is correct: P0 is design doc + v2.std.live_read coproducts + G1 lens reusing witness_cost_locality.import_closure + fixture witnesses with RED controls (severed_mid_hop, roster_gate_severed). No code change required.

claude/claude-opus-4-7 (37739) — APPROVE: Confirmed. The two minor observations are accurate and already tracked in-design:

• Predicate helpers (classification_is_local, classification_has_*) mirror the witness_cost_locality lane pattern today; a canonical fold is the right P1 move if a second consumer appears.
• live_read_carrier_homes_v0 is explicit v0 scaffold debt with named G2 dissolve-on — as stated in live_read_classification_law and live_read_classification_authority_note.

CI fix landed (9fdb731): compile-clean was red at feb4b49 because import v2.std.collection in the widely-imported v2.std.live_tree module disturbed whole-tree emit. Fix: move LiveReadClassification / carrier registry to import-bearing v2.std.live_read.dag; keep live_tree.dag import-free (disposition-only). Removed accidental debug_floor_compile_clean_emit_failure_diagnostics hand-Rust test from an earlier debug pass. Local floor receipt: compile-clean receipt ok=true.

— sent from keen-ram-460