Falsification record: behavioral comparison ceiling (can-climb-after-one-capability) by briansrls · Pull Request #7792 · gunb-ai/gunbc

briansrls · 2026-08-04T15:46:40Z

Auto-opened by session-dashboard for session royal-crab-235. Base: main (#7761 merged at 4c497bdf48).

What this PR is

Executed falsification record — not a wall attempt. This branch documents by execution that unforgeable execution evidence for fixture behavioral qualification is not reachable under today's language without a new capability. Operator ruling (msg_6701c04d): do NOT merge under a title or terminal value claiming FixtureBehaviorallyEquivalent — caller-authored stdout/status/rows can still mint the evidence.

Derived ceiling: can-climb-after-one-capability. Next trigger: ConstructorReferenceAdmission (constructor DeclarationRef + permitted caller DeclarationRefs; compiler refuses unlisted call edges) — preferred narrow capability; opaque host-effect return or function visibility also suffice.

Stays DRAFT as a readable falsification record until reference-edge admission lands or the terminal value is recut to CallerSuppliedBehaviorObservation.

Executed probes (specimen: BehavioralComparisonObservation)

Construction form	Verdict
Cross-module record literal	REFUSED (`SoleConstructorViolation`)
Cross-module exported mint with caller stdout	LEAKS (`fully_matching_derived_seal_forgery_advance_succeeds_red` greens via real forge)
Opaque host-effect process result (`WitnessBin.Run`)	NEGATIVE — returns forgeable Strings
Process-output `sole_constructor` carrier (#7794)	DECORATIVE — forge still open

Legitimate wet transport requires access to the exported constructor — the leak is not accidental.

Guarantee rung (honest)

Mechanically preventive against field-binding drift on the written artifact. Not preventive against authored observation. Permanent real-forge RED enrolled (never optional_absent()).

Roadmap

gunbc.roadmap_authority unforgeable-construction-capability row updated: derived ceiling + named trigger per ladder no-untracked-stall rule.

Test plan

Hermetic: 6 witnesses on direct_rust_door_qualification_witness_test.dag
PR1 containment preserved (fixture_lane_tag 15, 0 deletions vs main on fixture_synthetic_emission.dag)

CI disposition

Branch targets main. CI is informational on a draft falsification record — merge is blocked by operator ruling, not by CI status.

…design note. Parked disposition for #7792/#7794, #7806 model-only scaffold custody, and the seven-step enforcement sequence so the horn-pick packet matches the operator's ruling. Co-authored-by: Cursor <cursoragent@cursor.com>

FixtureBehaviorallyEquivalent via executed stdout parsing, fixture-scoped stdout parser, wet transport with independent head binding. Documents admission_seal ceiling (checksum not execution witness) with derived-seal forgery RED. No production-carrier edits. Stacks on PR1 containment (#7761). Co-authored-by: Cursor <cursoragent@cursor.com>

…eiling. Cross-module record literals refuse SoleConstructorViolation; mint export with caller-supplied stdout remains the forge path. Ceiling note records executed probe outcome and routes next trigger to host-effect-only mint input at the wet transport boundary. Co-authored-by: Cursor <cursoragent@cursor.com>

Record literal refused and exported mint call leaking on BehavioralComparisonObservation in gunbc.roadmap_authority unforgeable-construction-capability. Ceiling note routes next step to buildable sole_constructor process-output wall at wet transport (next PR), not parked reference-edge admission. Co-authored-by: Cursor <cursoragent@cursor.com>

Bounded probe (msg_00cc6fd9): WitnessBin.Run returns forgeable Strings; sole_constructor + exported mint does not equal unforgeable execution evidence. Update roadmap receipt and ceiling note; PR2 stays draft until export control or opaque effect return lands. Co-authored-by: Cursor <cursoragent@cursor.com>

…avioralE

…tions. Checkout main as base for fixture_synthetic_emission.dag; add behavioral fields and extension mints without removing fixture_lane_tag or synthetic_emitted_artifact_has_fixture_source_produced_only. Co-authored-by: Cursor <cursoragent@cursor.com>

…avioralE

Draft design for reference-edge admission closing the measured sole_constructor mint-call leak. Documents carrier shape, first slice, open infer-stage placement decision, and composition with sole_constructor. No code — operator sign-off required before implementation. Co-authored-by: Cursor <cursoragent@cursor.com>

Reframe fork as which-compiler (v1 infer has sole_constructor; v2 04_infer has zero). Reject separate pass; one construction-admission authority. Document alias residual risk, decl_ref import rule, and both v1/v2 horns for operator sequencing decision. Co-authored-by: Cursor <cursoragent@cursor.com>

Per msg_039d171e: third row derived from gunbc#7804 operator ruling (seed growth counted with explicit disposition). Dissolution trigger named exactly: compiler_frontier_row_04_infer migration_trigger ^migrate_when_closure_self_emits_cargo_green. still-bat-561 recommends this row; session does not pick. Co-authored-by: Cursor <cursoragent@cursor.com>

Per msg_4ad6bf45: compiler_frontier_row_04_infer already seed-retained via execution_measured_seed_retained_row — no new row obligation. Cite located_reason ^parse_grammar_choice_overlap_residue, latency while blocker stands (7767/7762), trigger cuts both ways. Co-authored-by: Cursor <cursoragent@cursor.com>

…avioralE

§4.3: 110-line .dag floor vs 424-line regen_stage0 realization (~4:1). Module-grain over-admission, opt-in ceiling, three conforming deltas. §5.3: two independent derivations for constructor-side placement. Co-authored-by: Cursor <cursoragent@cursor.com>

Fold tidy-fox-81 writeup phrasing: structural asymmetry at check site, module-grain precision degrading over time. Co-authored-by: Cursor <cursoragent@cursor.com>

§1.1 orthogonal WHO vs WHAT mechanisms; bound on capability scope. A-prime v2 uncovered path; census taxonomy §5.5; origin coproduct split. Credit v2 zero sole_constructor rung correction. Co-authored-by: Cursor <cursoragent@cursor.com>

Disposition table for origin probe @ 27e516c; confirm A-prime scope split vs sole_constructor literal census. Co-authored-by: Cursor <cursoragent@cursor.com>

…design note. Parked disposition for #7792/#7794, #7806 model-only scaffold custody, and the seven-step enforcement sequence so the horn-pick packet matches the operator's ruling. Co-authored-by: Cursor <cursoragent@cursor.com>

…avioralE

The four witnesses in long/roadmap_program_view_live_witness_test.dag were UnclassifiedPathDeferral — enrolled in discovery with no executing cadence. Live integration is covered by roadmap_program_view_live_corpus_receipt_test. Co-authored-by: Cursor <cursoragent@cursor.com>

…avioralE

Declare dead_code allow in the fixture Cargo.toml so lib-only cargo green builds pass with -D warnings, and bind executable_identity from src/lib.rs because Filesystem.Read is UTF-8 text-only and cannot read witness ELF bytes. Co-authored-by: Cursor <cursoragent@cursor.com>

gunbai-bot · 2026-08-07T18:43:36Z

Closing as superseded experiment (operator wind-down, still-bat-561 msg_a11c7953).

What was established (executed on branch `session/royal-crab-235-fixture-behavioral`)

Construction form	Verdict
Cross-module record literal on `BehavioralComparisonObservation`	REFUSED (`SoleConstructorViolation`)
Cross-module exported mint with caller-supplied stdout	LEAKS — `fully_matching_derived_seal_forgery_advance_succeeds_red` performs real forge and greens
Opaque `WitnessBin.Run` output	NEGATIVE — returns forgeable String primitives
Process-output `sole_constructor` carrier (#7794)	DECORATIVE — forge unchanged

Derived ceiling: can-climb-after-one-capability.
Next trigger: ConstructorReferenceAdmission (exported constructor + permitted caller DeclarationRefs; compiler refuses unlisted call edges).
Operator ruling (msg_6701c04d): do NOT merge under a title claiming FixtureBehaviorallyEquivalent until admission lands or terminal recuts to CallerSuppliedBehaviorObservation.
Lane 4 fixture ladder (CargoGreen → executed comparison → FixtureBehaviorallyEquivalent) implemented and wet-verified on stacked branch; not promoted here.

What was not landed

No construction wall. This was always a falsification record, not merge-bound work.
Permanent forge RED not extracted to main (blocked on admission capability landing).

Cold-start for a future session

Merge or re-land ConstructorReferenceAdmission (De-fork ConstructorReferenceAdmission onto one exact-identity authority (+ full control envelope) #7902).
Extract fully_matching_derived_seal_forgery_advance_succeeds_red + positive controls to main; enroll on named cadence.
Open clean behavioral-qualification PR from main (not this 21-commit experiment).
Update unforgeable-construction-capability roadmap row when wall executes.

Sibling #7794 closed with parallel receipt. Evidence in branch history; do not reopen.

gunbai-bot · 2026-08-07T18:44:35Z

Supplement (operator wind-down msg_dd4e21d3): Record literals were blocked; exported constructor calls remained forgeable; the process-output carrier (#7794) did not change that conclusion — a genuine negative result and why the constructor-admission lane exists. The can-climb-after-one-capability ceiling here was measured against the OLD forked admission; it will need re-measuring against the de-forked authority (#7902) if anyone resumes.

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch from 54d4d04 to a635c06 Compare August 4, 2026 15:51

gunbai-bot Bot changed the title ~~Lane 4: direct-door behavioral qualification — CargoGreen to BehavioralEquivalent by executed receipt~~ PR2: fixture-scoped direct-door behavioral comparison (FixtureBehaviorallyEquivalent) Aug 4, 2026

gunbai-bot Bot changed the base branch from main to session/royal-crab-235 August 4, 2026 15:51

This was referenced Aug 4, 2026

PR1: direct-door fixture containment (SyntheticEmittedArtifact) #7761

Merged

Falsification record: process-output carrier does not close forge hole #7794

Closed

Base automatically changed from session/royal-crab-235 to main August 4, 2026 16:53

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch 2 times, most recently from 12d8687 to 4d39743 Compare August 4, 2026 17:09

gunbai-bot Bot changed the title ~~PR2: fixture-scoped direct-door behavioral comparison (FixtureBehaviorallyEquivalent)~~ Falsification record: behavioral comparison ceiling (can-climb-after-one-capability) Aug 4, 2026

gunbai-bot Bot mentioned this pull request Aug 4, 2026

ConstructorReferenceAdmission: refuse unlisted call edges to a sealed constructor #7806

Closed

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch from aa24912 to 573586e Compare August 5, 2026 15:03

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch from 573586e to 591360a Compare August 5, 2026 16:51

gunbai-bot Bot mentioned this pull request Aug 5, 2026

ConstructorCallAdmission: refuse cross-module calls not listed in admit_callers #7860

Merged

2 of 3 tasks

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch from 7e9c005 to 7f1f7cf Compare August 6, 2026 03:16

Brian Searls and others added 12 commits August 6, 2026 16:54

WIP: Lane 4: direct-door behavioral qualification — CargoGreen to Beh…

bbbb1a2

…avioralE

WIP: Lane 4: direct-door behavioral qualification — CargoGreen to Beh…

3ecb580

…avioralE

WIP: Lane 4: direct-door behavioral qualification — CargoGreen to Beh…

8c496e7

…avioralE

Brian Searls and others added 9 commits August 6, 2026 16:54

Cite func_sig_from_global_bare in placement and over-admission text.

d9b7702

Fold tidy-fox-81 writeup phrasing: structural asymmetry at check site, module-grain precision degrading over time. Co-authored-by: Cursor <cursoragent@cursor.com>

Tag keen-lark-681 draft census rows in design note §5.5.

c5517e1

Disposition table for origin probe @ 27e516c; confirm A-prime scope split vs sole_constructor literal census. Co-authored-by: Cursor <cursoragent@cursor.com>

WIP: Lane 4: direct-door behavioral qualification — CargoGreen to Beh…

5e401b5

…avioralE

WIP: Lane 4: direct-door behavioral qualification — CargoGreen to Beh…

7cfe975

…avioralE

gunbai-bot Bot force-pushed the session/royal-crab-235-fixture-behavioral branch from 81b3a1f to c8c98a9 Compare August 6, 2026 16:54

chore: regenerate drifted generated artifacts (ci auto-heal)

e49c936

gunbai-bot Bot closed this Aug 7, 2026

gunbai-bot Bot mentioned this pull request Aug 7, 2026

Lane 4: direct-door behavioral qualification — CargoGreen to BehavioralEquivalent by executed receipt #8005

Closed

6 tasks

Navigation Menu

Repository navigation

Falsification record: behavioral comparison ceiling (can-climb-after-one-capability) - #7792

Falsification record: behavioral comparison ceiling (can-climb-after-one-capability)#7792
briansrls wants to merge 22 commits into
mainfrom
session/royal-crab-235-fixture-behavioral

briansrls commented Aug 4, 2026 •

edited by gunbai-bot Bot

Loading

Uh oh!

gunbai-bot Bot commented Aug 7, 2026

Uh oh!

gunbai-bot Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

briansrls commented Aug 4, 2026 • edited by gunbai-bot Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What this PR is

Executed probes (specimen: BehavioralComparisonObservation)

Guarantee rung (honest)

Roadmap

Test plan

CI disposition

Uh oh!

gunbai-bot Bot commented Aug 7, 2026

What was established (executed on branch session/royal-crab-235-fixture-behavioral)

What was not landed

Cold-start for a future session

Uh oh!

gunbai-bot Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

briansrls commented Aug 4, 2026 •

edited by gunbai-bot Bot

Loading

What was established (executed on branch `session/royal-crab-235-fixture-behavioral`)