Preserve convergence lessons and use native sweep gateway and stdin transport

[seathatflowsinourveins]

Scope

This retained chain carries #718, #763, #764 and #766, preserves their historical records, and extends the sweep harness with layer-specific discovery memory, twelve source-bound requirements, host-resolved gateway guards, upstream stdin prompt transport and additive frozen requirement snapshots through publication.

• Base: e28d0eec112527ac02659ac23753533b8ed39a73; content folds only, no rebase.
• Lane: lane:shared; draft. The other lane's acknowledgment remains the original owner's own, never substituted.
• Owned paths: sweep input/runner/converter/prompts/tests/README; convergence and cooperation/storage/lane instructions; the existing anti-pattern log; retained and new evidence.
• Review convergence practice and measure keyless research search #718: 36/40 files byte-identical; merged log, harness test, README and input builder preserve the Alpaca source-projection repair and its fixture alongside the extensions.
• Document source-scoped cooperation checks #763: 1/1 identical; Clarify namespace and cached-observation contracts #764: 2/2 identical; docs: retain source-supported coordination lessons #766: 1/1 identical.
• Main's entire anti-pattern log at 3d7d4a4 stays a byte-identical prefix; original Alpaca, seven discovery lessons and dated corrections are appended.
• Existing V2 launch guards, legacy scope hashes, installed selections and historical observations are preserved. This PR installs nothing.

SOTA sources

• Native inventory and source binding, retained twelve requirements, declared jobs and parents: seven direct identities and five source-cited crosswalks; no component-verdict inference.
• Native history and absence policy, input seam: K-derived discovery history remains distinct from saturation.
• Codex rust-v0.160.1 stdin reader, official command reference, original payload normalization: supported exec -, exact prior bytes, explicit per-run apps disable and endpoint pin; no invented content cap.
• Existing gateway integration seam: copied reviewed resolver block SHA e63090a57a5a58078fd019428fccdba75ffddbf5a1decc52d893e4848dbf4af3; canonical source/host-record predecessors remain required.
• GitHub redirects, rename caveat, release semantics, tag-prefix references: native/vendor first, canonical identity, train-specific currency and explicit young/model uncertainty.
• The retained October5 convergence review and cooperation/storage/lane sections keep their original pinned upstream citations and overturn conditions.
• Ledger owner's binding contract, conditional V2 field digest: reuse exact captured-text/identity validation and retain the legacy alias; declared snapshots fail closed until this dependency is integrated.

Evidence-class table

Claim	Class	Evidence
Native transport/flag behavior and input mapping	source_review	Installed0.160.1 help, tagged source, native inventory/source binding and dated decision addenda
Gateway refusal/reuse, byte equality, timeout cleanup, annotations and snapshot propagation	synthetic/integration	Current harness331tests/10skips;15snapshot cases pass against the unchanged pinned owner helper; earlier460-test evidence retained separately
Repository integrity and changed-source scanner	local_integration	Native validate.py, register_file, report generators and Gitleaks8.30.1; registry committed last
Complete-prompt stdin transport	native_execution	Real native observation-inference job exit0;169925 delivered bytes equal the bound normalized payload; native usage retained, proposal/adoption truth unqualified
Qualification plans and remaining conditions	source_review	Landing-head hosted validation, integrated ledger helper and separate project-config precedence/T17p receipts remain required

Local commands run

Heavy checks are serialized at nice19/ionicec3. Failed phases and usage remain retained.

python3 -m unittest tests.test_landscape_sweep_harness tests.test_landscape_sweep_slot_inputs tests.test_codex_worker_lane -q
exit0:460 tests,15 skips,146.506s
Earlier phase:445 tests,1 stale staged-apps expectation,15 skips; corrected BuildArgsTests4pass
Pre-stdin phase:452 tests/15skips pass; endpoint-specific17 and slot21 controls pass
Native32-layer source pack:input/stage exit0,all12requirements;169926-byte complete prompt retained
gitleaks git --staged --redact --no-banner
exit0:approximately1002189 source bytes,no findings

Final validator exits0:69components,10402hashedfiles,4profiles,214receipts;54changedfiles registered natively. Final staged source scan exits0 over993718bytes and the hot-files/registry scan exits0 over22479bytes. Source71c1fb8 precedes final shared-instructions/registry d466be1. These are local/source checks, not upstream acceptance.

Decision record

docs/decisions/2026-10-06-sweep-discovery-memory-and-source-order.md, with appended2026-10-07 mapping/gateway/stdin addenda. Retained October5 records are byte-identical.

Host evidence

No host acceptance or installed/runtime status change. Source-tool availability inside isolated routes and actual native/gateway qualification are still conditional.

Checklist and landing path

• Four originals are named and historical bytes/observations retained.
• Source classes, failed phases and unknown provider usage/cost are kept distinct.
• Delta GPT exact-head read, then command-center acknowledgment.
• Original other-lane acknowledgment, gateway A/S/GW-01 predecessors and passing candidate T17p at the reviewed head.
• Native observation-inference stdin job completed after the P2 push; merged-code T17p remains separate.
• Landing path: exact-head GPT read and CC ACK; canonical gateway/host-record predecessors; candidate qualification; CC queues with5f before the gateway F PR. One rebase only on the explicit landing cue. This lane never merges.

P2 repair — 2026-10-07

At d580631, an owned detached gateway refusal now uses the existing inputs_changed terminal path before releasing its inherited lock. Initial/hand-run refusals stay write-free. The existing race fixture now covers a malformed post-binding gateway, unchanged bound bytes and archived attempts, exit2/cause/finished/done, and no probe/model spawn.

Before-fix regression:1test/exit1, uncaughtGatewayRefused; focused repaired26tests/exit0; harness316tests/3skips/exit0(84.363s). Finalvalidate0:69components/10403files/4profiles/214receipts. Native4pathregistration0; source/hotredactedscans0(10164/22712bytes); diff0. The earlier460-test/15-skip phase is retained, not relabeled as this rerun. New verification-p2-detached-gateway-20261007.json and an appended dated decision amendment preserve historical observations. Source dedd932 precedes final shared-files/registry d580631; one contentpush/no rebase on currentbase. Independent source critic ACCEPT.

Hostedvalidate was not run at d466/d580 because the PR was DIRTY; local checks are not hosted acceptance. The P2 delta read at d580 is ACK_AFTER, conditioned on registry order and landing-head hosted validation. The new producer content requires a fresh exact-head read and CC ACK before its landing turn.

Frozen producer binding and native transport evidence

Current head64b038d00f7601d61995c0939b094445f494b1d1 reuses the ledger owner's binding_version2 snapshot without changing legacy hashes. Inputs deliver captured text; V2 neutralization stays separate and its runner stays unavailable. Staging rejects scope/input inconsistencies before writes; V1/V2 conversion retains the snapshot. RESULT placeholder expansion preserves it, and converter privacy processing refuses any binding rewrite before publication. Completed sweeps are untouched. The owner's migration remains a dependency: declared snapshots are refused by a legacy-only ledger.

Current checks: harness331tests/10skips/exit0(86.565s); unchanged pinned owner-helper integration15tests/0skips/exit0; final privacy-fixture check1test/exit0. Seven of the full suite's skips await the ledger helper, three are existing optional checks. Native register_file covers changed tracked files and both new carriers; validate0(69components/10405files/4profiles/214receipts), source/hot redactedscans0(36392/23378bytes), diff checks0. Source commit74885c9 precedes final shared-files/registry64b038d0; one content push, no rebase. Failed fixture/validation conditions remain recorded; no scanner allowance or dependency-owner edit.

The real native transport check ran codex-cli0.160.1/gpt-6-astra/max with apps explicitly off, read-only/skip-git-check and non-git cwd. It delivered the complete169925-byte LF-rstripped prompt, equal to the bound payload, and returned valid discover JSON with exit0. Exact native usage is retained as one terminal event with subset counters kept separate; cost unknown. New verification-native-stdin and verification-producer-binding carriers distinguish native transport, synthetic controls, source review and pending host qualification. This neither adopts its five proposals nor establishes gateway project precedence.

Follow-ups

• Qualify gateway project precedence and host behavior with the supported native harness; the retained stdin transport result proves payload delivery only.
• Complete the ledger-owner V2 migration and its seven gated checks through the owner’s supported helper; retain the existing dependency gate for CC adjudication.

Review disposition follows the CC PR-wave ruling: in-scope reproduced P1/P2 defects or false claims at the head are blockers; other findings stay in this list. P1 safety/privacy/money/order findings always block. Subsequent fixes wait for Claude, GPT and Codex on the same head, or an explicit CC release; open items after the second fix round go to CC adjudication. Candidate changes return to the research queue, and #1009 has queue priority.