Falsifier execution topology: four-job split + ColdCorpusExecution

[gunbai-bot]

Summary

• Splits affected-set-falsifier into four jobs per operator ruling (proud-bear-834 / adhoc-8b992195-d13): falsifier-build (artifacts only), selection-control, cold-corpus (needs: [falsifier-build] alone — not selection-control), and aggregate-verdict (always() && !cancelled()).
• Adds narrow carrier gunbc.falsifier_cold_corpus_execution with ColdCorpusExecution = CorpusExecuted | CorpusNotRun { cause } so a workflow failure is never read as “falsifier found a regression.” Cites the pre-authorized follow-up in gunbc.falsifier_run_control falsifier_control_prerequisite_note.
• aggregate-verdict writes target/falsifier-cold-corpus-execution.json and fails red if either arm is red; CorpusNotRun arms name infrastructure (build unavailable, corpus skipped/cancelled).

Ownership: falsifier_workflow.dag only (confirmed with calm-fox-748). No changes to falsifier-alert.yml, claim_executor.rs, or floor_component_receipt.dag.

Specimen: run 31181460723 — selection control failed in falsifier-build and the entire falsifier job was skipped.

Test plan

• Witness updates in falsifier_workflow_witness_test.dag (topology order, cold-corpus needs build-only, selection-control placement, ColdCorpusExecution classification fixtures)
• CI: falsifier_workflow_witness_test + generated-artifact drift on falsifier.yml
• Acceptance bar (post-merge): first scheduled falsifier run shows cold-corpus executed (non-skipped) even when selection-control is red; compile-clean and native-cache cold controls non-skipped per falsifier_control_prerequisite_execution_proof_note; target/falsifier-cold-corpus-execution.json reads corpus-executed when build succeeded

Made with Cursor

[gunbai-bot]

Addressed review 50231 (REQUEST_CHANGES) in cdc54b50d0d.

Scaffold discipline — falsifier_aggregate_verdict_shell_emit_scaffold (Disposition = Scaffold, dissolves_to: SingleAuthority) now binds falsifier_aggregate_verdict_script. The emitted script carries the 🟡 dissolve-on: header from falsifier_aggregate_verdict_shell_emit_dissolution_trigger. Witness: aggregate_verdict_shell_has_dissolve_on_marker.

Single receipt authority — Removed the hand-written JSON literals from the inline shell string. Production run: is built from falsifier_aggregate_verdict_script(), which calls aggregate_shell_receipt_*() helpers; each helper is cold_corpus_execution_receipt_json(classify_cold_corpus_execution(...)). Build arms now distinguish cancelled/skipped/failed (separate shell branches + BuildJobCancelled / BuildJobSkipped tags). Witnesses: aggregate_verdict_shell_receipt_literals_match_model (emitted YAML embeds each builder JSON), aggregate_verdict_shell_distinguishes_build_cancelled_from_failed, and aggregate_shell_receipt_builders_are_receipt_json_authority (identity join at model grain, not substring-only).

v2 resolve — Shell ${VAR} references in concat literals escaped as $\{VAR} per string_brace_escape_witness_test (fixes regen/heal undefined-variable refusal on BUILD_RESULT et al.).

Transport remains concat-built bash (scaffold, not wall) — dissolve trigger names bash-emit / shell→intent Phase 2.

— sent from royal-ferret-75

[gunbai-bot]

Acknowledging review 50252 (REQUEST_CHANGES) — deliberately unaddressed on this HEAD per lane STOP-PUSH (parent proud-bear-834, 2026-08-07).

Finding is correct: .github/workflows/falsifier.yml at cdc54b50d still carries the pre-scaffold aggregate-verdict shell (any non-success build → hand-written build-job-failed JSON). The .dag model on this HEAD routes through falsifier_aggregate_verdict_script() / aggregate_shell_receipt_* rooted in classify_cold_corpus_execution / cold_corpus_execution_receipt_json, with witnesses on expected_falsifier_yml(). Committed YAML is parallel representation until regen.

CI on this HEAD (run 31208438888): build + regen green; heal_generated_artifacts red with HealAuthorCommitRequired author_commit_paths=.github/workflows/falsifier.yml (heal ran main_wet, detected drift, could not author-commit workflow path from Actions); ci red as upstream-heal failure only.

Intended fix (not pushed): gunbc run --source-root dag --source-root src/v2 --entry dag/tools/generated_artifact_gate.dag --function main_wet → commit regenerated .github/workflows/falsifier.yml.

No further commits on this PR until freeze lifts; follow-up can land as a separate PR if needed.

— sent from royal-ferret-75