feat(local-pages): add architecture layers with receipt evidence and deferred detail

[seathatflowsinourveins]

Scope

Architecture now presents source-bound landscape choices, reviewed local inventory and separate native evidence while keeping unapproved user discoveries private. Unapproved entries become counts by root and kind before public inventory, custody or detail rendering; their lexical names stay only in the cache signature outside the serving root. Successful publication and cache reuse remove obsolete generated detail HTML, while ordinary unapproved discoveries continue to leave the other pages available without accessing their targets.

• Base and merge base: 3c01bdddc66896f8e36f9f21d452710808a9557e.
• Current head: 911d11f390f824f2e98254493a98429fffbe51c0.
• Lane: lane:foundation.
• This correction is ONE commit on the reviewed 42362768dab19800f7c932a4ea36f3f801ac6628, without rebasing.
• Owned paths: Architecture source/inventory/view/builder modules and independent source policy, the local-pages publication adapter, their tests, README and dated inventory-boundary decision. Existing Fleet and sanitization behavior remain covered by the complete local-pages suite.

The independent reader authorizes exact content and metadata roles before observation, excludes protected and frozen inputs, and never turns runtime discoveries into grants. Current repository inventory has 90 reviewed selectors. The 4648 receipt permissions reproduce the union reviewed at c945ea1f011e4c7e69a0b5f19052717b2af9d46e; the current 4725-path proposal does not add permissions. Reviewed user bindings point to reachable 994ab9b279c8915cbdb637e1786aaa41d1306e57, and regression tests compare them with the pinned snapshot apart from its provenance field.

SOTA sources

• Native repository tools/local-pages/source_policy.py, architecture_builder.py, architecture_inventory.py, architecture_view.py and build_pages.py, source 42362768dab19800f7c932a4ea36f3f801ac6628: reuse the existing independent reader, synthetic fixture harness, deferred detail documents, staged publisher and cache boundary.
• CPython 3.13.16 descriptor APIs, pathlib and buffered I/O, pin cbc944f4bc59639a444dd971c737788ba2283a91: native no-follow reads, bounded descriptor capture, file unlink and replacement. Installed Python 3.13.16 source was inspected; no new filesystem walker or dependency is introduced.
• Native Git 2.53.0 ls-tree, show, cat-file and merge-base --is-ancestor; repository scripts/local_pages_policy_grants.py: derive exact proposals from pinned registration metadata and verify genuine Git ancestry, without opening referenced artifact bodies.
• Existing frozen-input eligibility declaration in tests/test_frozen_macos_variant_no_use.py, plus reviewed native metadata at c945ea1f011e4c7e69a0b5f19052717b2af9d46e: keep the independently reviewed receipt union distinct from the later proposal.
• Landed repository Check private host names in files, commit diffs and identities #934 3c01bdddc66896f8e36f9f21d452710808a9557e, scripts/git-hooks/pre-push, scripts/validate.py and scripts/host_name_scan.py: real-host immutable-tip, outgoing-history and identity scan, with the repository registry gate.

Evidence-class table

Claim	Evidence class	Command / receipt
Ungranted unit, skill and Codex agent names are absent from every served output while denied operations remain zero	local_integration	Identical PublishedNamePrivacy test/harness bytes: immutable 4236276 gives rc 1, three failures and zero errors; corrected 911d11f gives rc 0, three tests passed
Stale generated details stop being served during rebuild and cache reuse	local_integration	Two full-builder regression cases; unrelated operator output and current detail outputs survive
N1/N2 checks discriminate the earlier wrong provenance and orphaned pin	local_integration	Six isolated wrong-value replays each give rc 1 with one assertion failure; all 20 genuine-worktree policy-grant tests pass
Final committed head builds with approved native sources and removes a seeded obsolete detail	native_proven	Native build and maintained privacy proof at 911d11f: 44 outputs, 42 HTML, 17794509 HTML bytes; zero identity, raw/leaf privacy or stale-HTML failures; seeded detail removed
Host receipt establishes platform or provider acceptance	source_review	Not claimed; source scope, organic observations and gate acceptance remain separate

Local commands run

python3 -B -m unittest tests.test_local_pages_architecture_public_names.PublishedNamePrivacy
Immutable parent 42362768: rc 1; 3 tests, 3 failures, 0 errors
Committed fix 911d11f3: rc 0; 3 tests passed in 0.848s

python3 -B -m unittest discover -s tests -p 'test_local_pages*.py'
rc 0; all 386 tests passed in 29.088s

python3 scripts/validate.py
FULL rc 0; 70 components, 11283 hashed files, 239 receipts, 4 profiles

python3 -B replay-pr913-policy-provenance.py <genuine-task-worktree>
rc 0; six expected red cases, corrected module 20 tests passed, all_expected true

python3 tools/local-pages/build_pages.py --root <task-checkout> --state-root <native-state> --output-dir <isolated-site> --receipt <native-receipt>
rc 0 at committed head 911d11f3

python3 pr913-cc972-privacy-proof.py --root <task-checkout> --site <isolated-site> --receipt <native-receipt>
rc 0; receipt SHA-256 8671a44e65c27c8d959e231f90b63619737d691a5f51ae7caf9e9577eed3a61d

All current tests ran normally under the corrected memory policy. The immutable-parent replay overlaid only the identical new publication test and its necessary test harness; production tools/local-pages bytes remained unchanged before and after the run. The supplied canonical verdict directory contains the full GPT verdict but lacks its external review_checks.py; the repository regression reproduces the same six synthetic-name occurrences and both stale-detail failures through the actual builder.

Decision record

Architecture inventory input custody. The selected change extends the maintained native reader/publisher rather than replacing it or widening permissions. A reproduced counterexample against the complete-builder fixtures would overturn the claimed boundary.

Host evidence

No evidence/hosts files or platform-status declarations change. Native proof uses an isolated output root; it does not promote a live site, provider or platform gate. Browser acceptance is not inferred.

Checklist

• Required SOTA sources are named and pinned.
• No GitHub Actions change in this correction.
• No credentials, real user-level fixture names or raw client/unit/agent bodies were added.
• No new paid hosting, subscription or billing surface.
• Peer-owned files, services and worktrees preserved.
• Native repository hooks remain enabled; no --no-verify or scanner override.
• Co-op GPT micro, then CC micro and landing.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.