Retain the 2026-09-26 sweep's 32 layer inputs (SHA256SUMS) for the verdict wave's GPT-6 re-votes

[seathatflowsinourveins]

Adds evidence/artifacts/landscape-sweep-20260926/inputs/: the 32 layer-input files exactly as the 2026-09-26 sweep read them. They were written 2026-09-25 21:30–22:44 local, before the run. inputs/SHA256SUMS (sha256 c026bdf6…d251) lists names relative to its own directory, so cd inputs && sha256sum -c SHA256SUMS works.

The verdict wave re-runs 27 missing GPT-6 fit votes, and it cites these originals rather than rebuilt inputs, which would differ in lane limit 2's truncated slugs.

• code-navigation.json names Sourcegraph (the SCIP index) and holds catalog pin commit ids. The existing anchored "pin"-line gitleaks exemption now also covers that one exact file. test_d5 checks that other 40-hex fields in it, and the same pin lines in sibling files, are still detected.
• The evidence README's Files section describes the directory.

Checks: validate.py passed, and tests.test_gitleaks_config ran 28, OK. gitleaks finds no leaks in inputs/.

CI timeout fix (2026-09-26, workstation coordinator). The first validate run (36265075411) failed because the job limit cancelled it ("The job has exceeded the maximum execution time of 10m0s"). Its 6257-test suite had already printed OK in 534s, and every evidence and manifest step had passed, so the PR's content was not the cause. The limit is exhausted repo-wide: main's validate job took 598s in run 36263674462, and runs 36265091632 and 36269293122 hit the same limit. .github/workflows/validate.yml now gives the validate job timeout-minutes: 20, and its registration is refreshed in the hot-file commit. Local checks at 08926673 all exited 0: validate.py, evidence_manifest.py --check, component_matrix.py --check, new_host_grand_list.py --check, build_ecosystem.py --check, zizmor 1.30.1 --offline (no findings), and main's verdict_review_gate.py against this head. Eleven related test modules (workflow hardening/security, verdict gate and vendoring, gitleaks config, release pins, freshness pins, saturation ledger, promotion gate) ran 395 tests, OK.

Lane consolidation: on 2026-09-26 the user shut down the other lane sessions and assigned this work to the workstation coordinator ("no other peers live, i shut them with the token save repos install into our native workflow and github workflow , harness update and sota foundation of our session as main task"); this quote stands in for the trading lane's ack.

SOTA sources

The files are the run's own inputs, built by the prototype build_inputs.py from the catalog layer files. There are no new external sources.

• The timeout change: GitHub Actions workflow syntax, jobs.<job_id>.timeout-minutes: "The maximum number of minutes to let a job run before GitHub automatically cancels it. Default: 360". The job keeps an explicit limit (tests/test_workflow_hardening.py requires one on every job), now set above the measured run time.

🤖 Generated with Claude Code

[seathatflowsinourveins]

Trading-lane ack (native-agent-stack-f5) at head 3e5a9e6.

• The .gitleaks.toml change only adds the exact path evidence/artifacts/landscape-sweep-20260926/inputs/code-navigation.json to the existing anchored pin-line exemption. test_d5_retained_sweep_input_pin_lines_only shows that another 40-hex field in that file, and the same pin lines in a sibling input, are still detected.
• The retained inputs include trading layers' sweep inputs as read. No catalogs/us-equities or blueprints/us-equities path changes.
• OK to merge from the trading side.

[seathatflowsinourveins]

Handoff for A6 (landscape-sweep-20260926 manifest rebuild): GPT-6 fit re-votes for the 27 proposals refuted only by a missing vote

• Retained at: the workstation coordinator's scratchpad, verdict-wave/revotes/.
• REVOTES.json sha256: 1752d27f640dec3ffe84e73d2c120c5f02de07410504448cb2515ecc80035bff (REVOTES.md is beside it; per-layer last.json and job.json are in revotes//).
• Jobs: all 9 layer jobs completed and pass strict validation against votes.json.
  • They used the sweep's ORIGINAL layer inputs (the inputs-sha256 list c026bdf6…, now PR Retain the 2026-09-26 sweep's 32 layer inputs (SHA256SUMS) for the verdict wave's GPT-6 re-votes #363) and the frozen templates (prompts_sha256 3adfbed7…).
  • The argv is GPT-6 live web search, Claude WebSearch session budget, and GPT-6/Claude family names in the blind-adjudication leak checks #352's, with -c web_search="live", and the event streams show live web_search.
• Result: of the 27 decisive proposals, 19 survive and 8 are refuted on the recorded votes.
  • workers: openai/codex, sipyourdrink-ltd/bernstein
  • isolation: superradcompany/microsandbox, boxlite-ai/boxlite
  • code-navigation: anthropics/claude-plugins-official, abhigyanpatwari/gitnexus
  • document-retrieval: docling-project/docling, cinnamon/kotaemon, arabold/docs-mcp-server
  • semantic-rag: osu-nlp-group/hipporag, lightonai/next-plaid, minishlab/semble, giancarloerra/socraticode
  • durable-memory: mempalace/mempalace, vshulcz/deja-vu, vbcherepanov/total-agent-memory
  • web-research: exa-labs/exa-mcp-server, adbar/trafilatura, openai/codex
• License directive (user, 2026-09-26): licenses are information only and never a refutation or selection criterion. The frozen fit template still carries a license gate. 18 of the 71 votes mention license, and in these the license was the deciding reason. Flag each license_based_refutation: true for re-decision on merit, and don't flip the votes:
  • durable-memory rohitg00/agentmemory: refuted by the "custom-restrictive-license gate" even though the vote concedes "the measured retrieval advantage survives scrutiny". This is the D2 0.821 vs C3 0.570 candidate.
  • document-retrieval opendatalab/MinerU: refuted on license terms.
  • document-retrieval huggingface/sentence-transformers: refuted because the ColQwen backbone is research-licensed.
  • web-research firecrawl/cli: "provisionally refuted", licensing unresolved.
  • code-navigation abhigyanpatwari/GitNexus: its not_adopted label held on PolyForm Noncommercial alone.
  • durable-memory campfirein/byterover-cli: its reasoning mentions license; check it.
• Other directives the same day:
  • No Tavily in sweep lanes; use free, native search and fetch.
  • No upstream issue filing.
  • No unnecessary gates. Decide on quality and SOTA-ness against the field's candidates.