fix(render): repair particle CYpt preparation

Retain the GfxObj-authored SortCenter independently from the rendered AABB center and use its scaled, oriented world point for billboard/mode-2-5 CYpt. Keep the visual center unchanged.

Reserve prepared source payload only at Append, roll back the exact tail once on false or exception, cap retained preparation at 3000 CLIP plus 3000 ALPHA, preserve immediate duplicates, account the bounded scratch, and correct the static-record ordering comment. The lead-authorized plan edit records candidate 44e2bc227b's retail FAIL and this section 19 result.

Gates: Release solution build 0 warnings/0 errors; focused particle/driver/queue/order/bounds 95/95; register boundary/count 1/1; real allocations 2/2 at 0 B; shader/manifest 32/32; one-shot hermetic 16751/16751; InstalledDat 385 pass/10 documented fail/1 skip; diff-check pass. No graphical client.

Mutations: rendered pos first failed distance expected 40 actual 116; AABB center expected 40 actual 116; dropped size expected 40 actual 65; dropped orientation expected 40 actual 160; eager reservation first failed Assert.Empty with one payload; omitted false rollback first failed Assert.Single with two payloads; omitted exception rollback first failed Assert.Empty with one payload; removed caps first failed prepared count expected 6000 actual 6002.

Evidence note: the first ordinary InstalledDat filter produced 385 pass/2 expected fail/1 skip but excluded the eight required KnownFailure rows; the separate inclusive no-retry artifact produced the exact documented 10-failure set. Initial test fixture compilation/analyzer setup failures are recorded in packet section 19.5.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

docs/plans/2026-09-01-campaign-overhaul-world-solidity.md

@@ -678,7 +678,7 @@ Update immediately when a slice changes state. Chat is not the ledger.
 | S4-c2 stop | **STOPPED UNLANDED 2026-09-04** — lead final-round contract `ac74fbd84`; evidence commit `c4cbc1d0d` in `s4-c2-impl` on `cc8e5677a`/`048d5b12f`; campaign renderer remains S4-c1 `766f9e749` | G3/G4 UNPASSED | Both sequential final lenses FAIL, so the required repair is the forbidden THIRD round. EnvCell transparent/ClipMap batches still draw in the opaque pass before FIFO submission and then redraw; CLIP/detail-immediate replay binds StraightAlpha with depth-write off rather than retail clip-test/depth-writing state; tests omit the preceding opaque call and pipeline descriptors. Source-owned EnvCell lists are unbounded under queue rejection, the claimed scan/filter/RHI 0-B evidence bypasses those paths, and AP-238/AP-240/result truth is false. Full file:line and gate record: S4 packet §13. No chunk cherry-pick, graphical gate, or soak. Resume only on explicit owner process change. |
 | S4-c2 owner repair | **STOPPED UNLANDED 2026-09-04** — owner-authorized implementation `a094bf2b7` is clean in `s4-c2-impl`; packet §15 is the review record | G3/G4 UNPASSED | The repaired renderer behavior passed the retail lens: exact whole-leaf pass membership, `0x08`/`0x09` CLIP, row-3 override, blend/reference/depth state, sentinel separation, detail state, rollback, allocation, AP-238/AP-240. The lens still returned FAIL: commit body omitted the required per-mutation first failures, packet mutation 5 names the wrong first assertion/address, and four source/test comments are stale. Sequential production lens therefore did not run. Correcting those items is a post-review fourth repair, which §14 does not authorize. Nothing landed or graphically gated; resume only by explicit owner process decision. |
 | S4-c2 attempts 1–5 | **ATTEMPT 1/5 CONSUMED; ATTEMPT 2/5 PASSED AND LANDED 2026-09-04** — reviewed implementation `daaeab0ba`; campaign stack `89f1e2676` → `9ccb61a8e` → `0aa166aa0` → `252886e84`; packet §17 | G3/G4 UNPASSED | Sequential retail/evidence then production/gate-honesty PASS. Fresh: Release 0W/0E; shader 32/32; affected 37/37; real allocation 2/2 at 0 B; production 239/239. Official no-retry hermetic 16,734/1: sole unchanged global `Console.Out` capture race, exact theory 2/2 isolated. InstalledDat 255/10 documented/1. Validation routes `selfgate-20260904-115818-s4c2-landed-route` and `selfgate-20260904-120025-s4c2-landed-g3b` PASS provisional. First soak failed on known #461/#462; retry and S4-c1 control both 9/9 graceful; stationary averages CPU p95 −0.01 ms, GPU p95 +0.16 ms, alloc p50 +1.2 KiB, update p95 −0.12 ms. Three attempts remain unused. |
-| S4-c3a | **STOPPED UNLANDED 2026-09-04 — owner attempts 3–5 exhausted; packet §19.** Scratch stack `44e2bc227b` → `b6bf6c131` → `eea5793d2` → `14397b14c` → `359061b82`; campaign renderer remains S4-c2 through `252886e84` and only c3a's contract `5c9da6fc2` is landed | G3/G4 UNPASSED | Attempt 3 retail FAIL: billboard particles used rendered/AABB center, plus stale prose. Attempt 4 retail re-review FAIL: real GfxObj with no Surface lost SortCenter. Attempt 5 retail PASS and production behavior/lifecycle/allocation/scope all clean, but gate-honesty FAIL: mutation #9 falsely says missing AP-241 first fails `Assert.Single`; the earlier AP-boundary `Assert.True` fails first. Correcting it is the forbidden third c3a fix round. No landing, graphical gate, c3b, or G3; resume only after explicit owner process change. |
+| S4-c3a | **ATTEMPT 3 RETAIL FAIL; §19 FIX ROUND 1 IMPLEMENTED — REVIEW PENDING.** Candidate `44e2bc227b` used the billboard's rendered/AABB-derived center instead of GfxObj's authored sort center, reserved prepared payload before queue visibility, did not bound the new retained preparation list, and misstated static-record ordering. The §19 repair now keeps authored and visual centers distinct, applies scale/orientation to the authored CYpt point, reserves and exactly rolls back at Append, caps preparation at 3,000 CLIP + 3,000 ALPHA, preserves immediate duplicates, and corrects the comment. Return gates: Release 0W/0E; focused 95/95; register pin 1/1; real allocation 2/2 at 0 B; shader/manifest 32/32; hermetic 16,751/16,751; InstalledDat 385 pass / 10 expected fail / 1 skip with the exact documented set; eight discriminating mutations recorded in packet §19.5. | G3/G4 UNPASSED | Retail re-review F1/paired bytes/F3 and unchanged S4-c2 behavior, then production/gate-honesty review of the full c3a stack with special attention to F2. One bounded fix round remains after §19; a further finding stops the chunk. c3b remains locked. |
 | S5 | — | G4 | fill |
 
 ---

docs/research/2026-09-01-overhaul/s4-depth-alpha-packet.md

@@ -1546,3 +1546,86 @@ unchanged S4-c2 behavior first. Only a retail PASS unlocks the sequential
 production/gate-honesty lens over the entire c3a stack, with special attention
 to F2. A failed re-review gets the one remaining bounded fix round; a further
 finding after that would require a third round and stops the chunk.
+
+### 19.5 Fix-round-1 implementation result (Sonnet, 2026-09-04)
+
+**IMPLEMENTED — RETAIL RE-REVIEW REQUIRED.** This fix commit retains the
+GfxObj-authored `SortCenter` separately from the rendered AABB-derived
+`CenterOffset`. Billboard/mode-2–5 CYpt now uses the authored point after the
+particle's scale and orientation, while the captured draw center remains the
+existing visual center. The prepared-cell seam now reserves source payload
+only from `Append`, rolls back the exact tail once on either a false return or
+an exception, retains at most the first 3,000 CLIP and 3,000 ALPHA candidates,
+and accounts for the bounded scratch list in its retained-byte diagnostic.
+The row-2 immediate duplicate remains independent of delayed retention. The
+static-record comment now describes the later ordinary-cell combined CYpt
+sort.
+
+The lead separately authorized one plan-ledger edit so the S4-c3a row records
+candidate `44e2bc227b`'s retail FAIL and this §19 fix result. That file is
+ledger currency only; it does not widen production scope. AP-241/AP-242/AP-243,
+the active physical count of 162, both retail queues and their capacities,
+router decisions, FIFO order, CLIP-then-ALPHA drain, row-5 immediate state,
+pipelines, shaders, manifest, Content model, serializer, package format,
+building shells, EnvCells, and PView behavior remain unchanged.
+
+Automated return:
+
+- `dotnet build AcDream.slnx -c Release --no-restore --nologo` — PASS, 0
+  warnings / 0 errors.
+- focused `ParticleRendererRouteTests|WalkFrameDriverTests|RetailAlphaQueueTests|RetailParticleGeometryClassifierTests`
+  lane — PASS, 95/95, 0 skipped.
+- `WorldAlphaCyptDocumentationAndRegister_PinPerCellTruthAndThreeResiduals`
+  — PASS, 1/1; all three residual rows remain unique inside the AP section and
+  the physical count remains 162.
+- real warmed `ProductionCellObjectParticleMerge_WarmedPathAllocatesZeroBytes|ProductionImmediateMesh_WarmedDrawImmediateParticleSubmissionRhiDoesNotAllocate`
+  lane — PASS, 2/2; both production-path pins observed 0 managed bytes.
+- `VulkanShaderDescriptorContractTests|VulkanShaderManifestTests|RenderPackSpirvValidatorTests`
+  — PASS, 32/32, 0 skipped.
+- official one-shot 14-assembly hermetic gate — PASS, 16,751 passed / 0
+  skipped / 0 failed. Evidence:
+  `%TEMP%/acdream-s4-c3a-fix1-20260904-2215`.
+- InstalledDat with explicit `C:\Turbine\Asheron's Call` and the documented
+  ordinary set plus TowerAscent, #458 `Oh_doorway_still_first_frame_diff`, and
+  the six retained `AlphaFlushCounts_*` — 385 passed / 10 expected failed / 1
+  skipped. The failures are exactly TowerAscent, the two #383 layout sweeps,
+  #458, and the six count rows; no new failure appeared. Evidence:
+  `%TEMP%/acdream-s4-c3a-fix1-installed-inclusive-20260904-2222`.
+- `git diff --check` — PASS (only the repository's LF-to-CRLF working-copy
+  notices).
+
+Mutation ledger (each mutation was applied alone, its named test was run once,
+and the production source was restored before the next mutation):
+
+1. Use rendered `pos` for billboard CYpt: `CellTurn_GfxObjBillboardUsesScaledOrientedAuthoredSortCenterButKeepsVisualCenter`
+   first failed its distance assertion, expected `40`, actual `116`.
+2. Use the AABB-derived `CenterOffset`: the same test first failed its distance
+   assertion, expected `40`, actual `116`.
+3. Drop particle size from authored SortCenter: the same test first failed its
+   distance assertion, expected `40`, actual `65`.
+4. Drop particle orientation from authored SortCenter: the same test first
+   failed its distance assertion, expected `40`, actual `160`.
+5. Restore eager source-payload reservation during preparation:
+   `PreparedCellAlpha_ImmediateExceptionAfterDelayedCandidateDoesNotReservePayload`
+   first failed `Assert.Empty`; the collection contained one
+   `DeferredParticleDraw`.
+6. Omit rollback after `TryAppend` returns false:
+   `PreparedCellAlpha_AcceptsStableTokenAndRollsBackRejectedTailOnAbort` first
+   failed `Assert.Single`; the collection contained two payloads.
+7. Omit rollback after `TryAppend` throws:
+   `PreparedCellAlpha_AppendExceptionRollsBackExactTailToken` first failed
+   `Assert.Empty`; the collection contained one payload.
+8. Remove the two per-list preparation caps:
+   `PreparedCellAlpha_CapsBothListsAndRejectStormRetainsNoPayloadOrUnboundedScratch`
+   first failed the prepared-count assertion, expected `6000`, actual `6002`.
+
+Before the return matrix, fixture construction exposed and corrected two
+test-only setup issues: missing `DatReaderWriter.Lib`/`Types` imports plus a
+nonexistent vector comparer caused the first compile attempt to fail, and
+xUnit2013 rejected two count-shaped assertions. Neither failure reached a
+production positive assertion. The first InstalledDat invocation used the
+release guide's ordinary `Status!=KnownFailure` filter and honestly returned
+385 passed / 2 expected failed / 1 skipped; that was incomplete §18.6 evidence
+because it excluded TowerAscent, #458, and the six count rows. It was not
+retried or rewritten: the separate inclusive artifact above is the required
+documented-set gate. No graphical client was launched.