FLOOR-ROUTE-GAP-SELF-HOST: publish the executing route family that discharges the self-host behavioral witnesses from route_gap_held (49 required / 112 full)

.github/workflows/witnesses.yml

@@ -8,6 +8,8 @@ on:
         description: Immutable healed commit required by an auto-heal revalidation run
         required: false
         type: string
+  schedule:
+    - cron: 17 9 * * *
   merge_group:
   push:
     branches: [main]
@@ -31,6 +33,7 @@ jobs:
   required-witnesses-build:
     runs-on: [self-hosted, linux, arm64]
     timeout-minutes: 90
+    if: github.event_name != 'schedule'
     steps:
       - name: Record runner filesystem at job start
         run: |
@@ -114,6 +117,7 @@ jobs:
   required-witnesses-floor:
     runs-on: [self-hosted, linux, arm64]
     timeout-minutes: 180
+    if: github.event_name != 'schedule'
     steps:
       - name: Record runner filesystem at job start
         run: |
@@ -236,6 +240,7 @@ jobs:
   rust-unit-tests:
     runs-on: [self-hosted, linux, arm64]
     timeout-minutes: 60
+    if: github.event_name != 'schedule'
     steps:
       - name: Record runner filesystem at job start
         run: |
@@ -313,6 +318,7 @@ jobs:
   fabric-evidence:
     runs-on: [self-hosted, linux, arm64]
     timeout-minutes: 70
+    if: github.event_name != 'schedule'
     steps:
       - name: Record runner filesystem at job start
         run: |
@@ -594,11 +600,89 @@ jobs:
           if-no-files-found: error
           retention-days: 14
         if: always() && steps.heal_commit_push.outputs.heal_author_commit_required == '1'
+  wet-receipts:
+    runs-on: [self-hosted, linux, arm64]
+    timeout-minutes: 360
+    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Record runner filesystem at job start
+        run: |
+          # dissolve-on: toolchain_filesystem_probe -- delete the start/end runner-filesystem instrument after its joined readings identify and the fleet fixes the toolchain deleter, OR after per-job runner microVMs make the shared filesystem eviction class impossible
+          GUNBC_TOOLCHAIN_FS_PREFIX='GUNBC_TOOLCHAIN_FS phase=start'
+          echo "$GUNBC_TOOLCHAIN_FS_PREFIX time_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || echo unavailable) host=$(hostname 2>/dev/null || echo unavailable) runner=${RUNNER_NAME:-unset}"
+          echo "$GUNBC_TOOLCHAIN_FS_PREFIX runner_temp=${RUNNER_TEMP:-unset} rustup_home=${RUSTUP_HOME:-unset} cargo_home=${CARGO_HOME:-unset} uptime_seconds=$(cut -d' ' -f1 /proc/uptime 2>/dev/null || echo unavailable)"
+          echo "$GUNBC_TOOLCHAIN_FS_PREFIX loadavg=$(tr ' ' ',' < /proc/loadavg 2>/dev/null || echo unavailable)"
+          df -Pk "${RUNNER_TEMP:-/path-that-does-not-exist}" 2>&1 | while IFS= read -r GUNBC_TOOLCHAIN_FS_LINE; do echo "$GUNBC_TOOLCHAIN_FS_PREFIX df_blocks=$GUNBC_TOOLCHAIN_FS_LINE"; done
+          df -Pik "${RUNNER_TEMP:-/path-that-does-not-exist}" 2>&1 | while IFS= read -r GUNBC_TOOLCHAIN_FS_LINE; do echo "$GUNBC_TOOLCHAIN_FS_PREFIX df_inodes=$GUNBC_TOOLCHAIN_FS_LINE"; done
+          for GUNBC_TOOLCHAIN_FS_PATH in "${RUNNER_TEMP:-/path-that-does-not-exist}"/rustup/toolchains/*/bin/rustc "${RUNNER_TEMP:-/path-that-does-not-exist}"/rustup/toolchains/*/bin/rustfmt "${RUNNER_TEMP:-/path-that-does-not-exist}"/cargo/bin/cargo; do if [ -e "$GUNBC_TOOLCHAIN_FS_PATH" ]; then GUNBC_TOOLCHAIN_FS_STAT=$(stat -c 'size=%s mtime_epoch=%Y mtime=%y inode=%i' "$GUNBC_TOOLCHAIN_FS_PATH" 2>&1 || echo stat-unavailable); echo "$GUNBC_TOOLCHAIN_FS_PREFIX kind=file path=$GUNBC_TOOLCHAIN_FS_PATH exists=yes $GUNBC_TOOLCHAIN_FS_STAT"; else echo "$GUNBC_TOOLCHAIN_FS_PREFIX kind=file path=$GUNBC_TOOLCHAIN_FS_PATH exists=no size=unavailable mtime_epoch=unavailable mtime=unavailable inode=unavailable"; fi; done
+          for GUNBC_TOOLCHAIN_FS_PATH in "${RUNNER_TEMP:-/path-that-does-not-exist}"/rustup/toolchains/*/bin "${RUNNER_TEMP:-/path-that-does-not-exist}"/rustup/toolchains "${RUNNER_TEMP:-/path-that-does-not-exist}"/cargo/bin; do if [ -d "$GUNBC_TOOLCHAIN_FS_PATH" ]; then GUNBC_TOOLCHAIN_FS_STAT=$(stat -c 'mtime_epoch=%Y mtime=%y inode=%i' "$GUNBC_TOOLCHAIN_FS_PATH" 2>&1 || echo stat-unavailable); echo "$GUNBC_TOOLCHAIN_FS_PREFIX kind=directory path=$GUNBC_TOOLCHAIN_FS_PATH exists=yes $GUNBC_TOOLCHAIN_FS_STAT"; else echo "$GUNBC_TOOLCHAIN_FS_PREFIX kind=directory path=$GUNBC_TOOLCHAIN_FS_PATH exists=no mtime_epoch=unavailable mtime=unavailable inode=unavailable"; fi; done
+        if: always()
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          ref: ${{ inputs.expected_healed_sha || github.sha }}
+      - name: Refuse a heal revalidation whose run subject or checkout does not name the expected healed SHA
+        run: |
+          EXPECTED_HEALED_SHA="${{ inputs.expected_healed_sha }}"
+          RUN_SUBJECT_HEAD="${{ github.sha }}"
+          if [ -n "$EXPECTED_HEALED_SHA" ]; then
+          ACTUAL_HEAD="$(git rev-parse HEAD)"
+          if ! [ "$RUN_SUBJECT_HEAD" = "$EXPECTED_HEALED_SHA" ]; then
+          echo "::error::heal revalidation refused: workflow run subject $RUN_SUBJECT_HEAD does not equal expected healed head $EXPECTED_HEALED_SHA"
+          exit 1
+          fi
+          if ! [ "$ACTUAL_HEAD" = "$EXPECTED_HEALED_SHA" ]; then
+          echo "::error::heal revalidation refused: checkout head $ACTUAL_HEAD does not equal expected healed head $EXPECTED_HEALED_SHA"
+          exit 1
+          fi
+          echo "heal revalidation preflight: checkout names expected healed head $EXPECTED_HEALED_SHA"
+          fi
+      - name: Isolate toolchain homes
+        run: |
+          # dissolve-on: ci_toolchain_home_isolation_script -- orch-emitted foreign-executor prelude step wiping and setting HOME/CARGO_HOME/RUSTUP_HOME under RUNNER_TEMP so concurrent runner slots stop sharing one toolchain; leaf rm/echo strings remain until a typed per-job filesystem-and-environment effect lands on host_effect_apply (shell-to-intent Phase 2). This obligation covers THIS carrier and ci_isolate_toolchain_script, which share that terminal construction; ci_pin_rustup_default_script carries its own obligation because it does not
+          rm -rf "$RUNNER_TEMP/rustup" "$RUNNER_TEMP/cargo"
+          echo "HOME=$RUNNER_TEMP" >> "$GITHUB_ENV"
+          echo "CARGO_HOME=$RUNNER_TEMP/cargo" >> "$GITHUB_ENV"
+          echo "RUSTUP_HOME=$RUNNER_TEMP/rustup" >> "$GITHUB_ENV"
+      - name: Install Rust toolchain
+        uses: actions-rust-lang/setup-rust-toolchain@v1.16.0
+        with:
+          components: rustfmt
+          cache: false
+      - name: Pin rustup default (isolated RUSTUP_HOME has no default toolchain)
+        run: |
+          # dissolve-on: ci_pin_rustup_default_script -- orch-emitted foreign-executor step selecting a rustup default toolchain inside an isolated RUSTUP_HOME, which starts with none, and resolving the cargo binary that selection implies. The leaf rustup/command/echo strings remain until a typed TOOLCHAIN-SELECTION effect lands on host_effect_apply -- NOT the filesystem-and-environment effect ci_toolchain_home_isolation_script waits on, which is why this is a separate obligation: that effect landing alone would leave this carrier standing
+          rustup default "$(rustup show active-toolchain | awk '{print $1; exit}')"
+          if [ -x "$CARGO_HOME/bin/cargo" ]; then CARGO_BIN="$CARGO_HOME/bin/cargo"; else CARGO_BIN="$(command -v cargo || true)"; fi
+          if [ -z "$CARGO_BIN" ]; then echo "::error::no cargo binary: neither the isolated $CARGO_HOME/bin/cargo shim nor PATH carries one"; exit 1; fi
+          echo "CARGO_BIN=$CARGO_BIN" >> "$GITHUB_ENV"
+      - name: Build the witness fold
+        id: build_witness_fold
+        run: |
+          cargo build --release -p v1-compiler --bin claim_batch --bin gunbc --bin cssl_assemble
+      - name: Wet receipts lane (rows named by the run, not by this label)
+        id: wet_receipts_run
+        run: |
+          ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+          cd "$ROOT"
+          'target/release/claim_batch' '--wet-route' '--source-root' 'dag' '--source-root' 'src/v2' '--receipt-out' 'dag/gunbc/witness/wet_lane/latest-attempt.json' '--receipt-tsv-out' 'dag/gunbc/witness/wet_lane/latest-attempt.tsv'
+      - name: Upload the receipt artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: wet-lane-receipt
+          path: dag/gunbc/witness/wet_lane
+          if-no-files-found: error
+          retention-days: 14
+        if: "!cancelled() && steps.wet_receipts_run.outcome != 'skipped'"
   witnesses:
     runs-on: [self-hosted, linux, arm64]
     needs: [required-witnesses-build, required-witnesses-floor, rust-unit-tests]
     timeout-minutes: 5
-    if: always()
+    if: always() && github.event_name != 'schedule'
     steps:
       - name: Every required lane must have succeeded
         run: |

dag/extdeps/exec/command.dag

@@ -110,6 +110,7 @@ fn argv_command(program: NonEmptyStr, arguments: List<String>) -> ArgvCommand
     decl_ref(module_path: "extdeps.tools.mkdir", decl_name: "mkdir_parents_command_at"),
     decl_ref(module_path: "extdeps.tools.mkdir", decl_name: "mkdir_exact_command_at"),
     decl_ref(module_path: "gunbc.claim_executor_cli", decl_name: "claim_executor_command"),
+    decl_ref(module_path: "gunbc.claim_executor_cli", decl_name: "claim_batch_command"),
     decl_ref(module_path: "gunbc.repo_local_git_config", decl_name: "reconcile_install_command"),
   ]
   = ArgvCommand { program: program, arguments: arguments }

dag/gunbc/claim_executor_cli.dag

@@ -26,3 +26,14 @@ fn claim_executor_command(mode_flag: String, operands: List<String>) -> ArgvComm
     arguments: append([mode_flag], items: operands),
   )
 }
+
+// The sibling batch binary, same reasoning and same shape: built from this tree, flags owned
+// here, path relative to the checkout the job stands in.
+data claim_batch_release_path: NonEmptyStr = "target/release/claim_batch"
+
+fn claim_batch_command(mode_flag: String, operands: List<String>) -> ArgvCommand {
+  argv_command(
+    program: claim_batch_release_path,
+    arguments: append([mode_flag], items: operands),
+  )
+}

dag/gunbc/discovery_census.dag

@@ -14,6 +14,7 @@ import v2.workflow.required_floor {
   RequiredFloorDisposition,
   Planned, PlannedAsChangedWitness, DeclinedLongModule, DeclinedFixtureMember, DeclinedCostDebt,
   DeclinedOutsideRequiredGate, DeclinedOutsideGateClosure, DeclinedDiscoveryExcluded,
+  DeclinedRoutedToWetLane,
   required_floor_site_disposition,
 }
 import v2.std.live_tree { LiveTreeDisposition }
@@ -265,6 +266,8 @@ fn census_partition_step(acc: CensusPartition, row: CensusRow) -> CensusPartitio
       CensusPartition { planned: acc.planned, declined: concat([row], acc.declined) }
     DeclinedDiscoveryExcluded { matched_substring: _ } =>
       CensusPartition { planned: acc.planned, declined: concat([row], acc.declined) }
+    DeclinedRoutedToWetLane =>
+      CensusPartition { planned: acc.planned, declined: concat([row], acc.declined) }
   }
 }
 
@@ -338,6 +341,7 @@ type CensusCounts {
   declined_outside_required_gate: Int
   declined_outside_gate_closure: Int
   declined_discovery_excluded: Int
+  declined_routed_to_wet_lane: Int
 }
 
 fn census_counts_zero() -> CensusCounts {
@@ -349,7 +353,8 @@ fn census_counts_zero() -> CensusCounts {
     declined_cost_debt: 0,
     declined_outside_required_gate: 0,
     declined_outside_gate_closure: 0,
-    declined_discovery_excluded: 0
+    declined_discovery_excluded: 0,
+    declined_routed_to_wet_lane: 0
   }
 }
 
@@ -364,7 +369,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     PlannedAsChangedWitness =>
       CensusCounts {
@@ -375,7 +381,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedLongModule { matched_prefix: _ } =>
       CensusCounts {
@@ -386,7 +393,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedFixtureMember { matched_prefix: _ } =>
       CensusCounts {
@@ -397,7 +405,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedCostDebt =>
       CensusCounts {
@@ -408,7 +417,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt + 1,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedOutsideRequiredGate =>
       CensusCounts {
@@ -419,7 +429,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate + 1,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedOutsideGateClosure =>
       CensusCounts {
@@ -430,7 +441,8 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure + 1,
-        declined_discovery_excluded: counts.declined_discovery_excluded
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
       }
     DeclinedDiscoveryExcluded { matched_substring: _ } =>
       CensusCounts {
@@ -441,7 +453,20 @@ fn census_counts_add(counts: CensusCounts, d: RequiredFloorDisposition) -> Censu
         declined_cost_debt: counts.declined_cost_debt,
         declined_outside_required_gate: counts.declined_outside_required_gate,
         declined_outside_gate_closure: counts.declined_outside_gate_closure,
-        declined_discovery_excluded: counts.declined_discovery_excluded + 1
+        declined_discovery_excluded: counts.declined_discovery_excluded + 1,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane
+      }
+    DeclinedRoutedToWetLane =>
+      CensusCounts {
+        offered: counts.offered + 1,
+        planned: counts.planned,
+        declined_long_module: counts.declined_long_module,
+        declined_fixture_member: counts.declined_fixture_member,
+        declined_cost_debt: counts.declined_cost_debt,
+        declined_outside_required_gate: counts.declined_outside_required_gate,
+        declined_outside_gate_closure: counts.declined_outside_gate_closure,
+        declined_discovery_excluded: counts.declined_discovery_excluded,
+        declined_routed_to_wet_lane: counts.declined_routed_to_wet_lane + 1
       }
   }
 }