docs(overhaul): bind #475 caller-test reconciliation

docs/plans/2026-09-01-campaign-overhaul-world-solidity.md

@@ -713,7 +713,7 @@ Update immediately when a slice changes state. Chat is not the ledger.
 | S5-#470 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL A/B PROVISIONAL PASS.** Campaign implementation stack `15a796c3a` -> `7506e5f14` -> `b333edb4f`; route `19b44e5e3`; reviewed scratch `51f974da4` -> `2cad9c84` -> `98c004aa7`; packet §§27–30. | G4 UNPASSED | Retail/behavior pass 2/10 and production pass 4/10 closed the two evidence-only findings. Fresh campaign Release 0W/0E and focused 48/48; exact scratch hermetic 16,976/16,976 and canonical InstalledDat 386/10/1, manifests 30/30. Pinned gate `logs/selfgate-20260905-032132-s5-470-pinned-shadow-ab-r1`: retail/off -> High -> retail/off, 3/3 PNGs, exit 0, graceful, no client; visual PASS provisional. The stale recipe-8 pre-route launch is excluded and recorded in §30. |
 | S5-#469 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL TRANSITION PROVISIONAL PASS.** Contract `809887524`; reviewed scratch `c09b6cf0f`; campaign implementation `94ddde69a`; route `62efc72cb`; packet §§31–32. | G4 UNPASSED | Retail/deviation pass 1/10 and production pass 2/10 both PASS with no finding. The two atmospheric vertex receivers keep retail's authored unnormalized `uLights` direction across every shadow gate; celestial direction remains for opt-in shadow/volumetric projection; IA-24 corrected in the same commit. Exact scratch: Release 0W/0E, focused 126/126, Vulkan 2/2, hermetic 16,983/16,983, InstalledDat 386/10/1. Fresh campaign Release 0W/0E, focused 82/82, Vulkan 2/2. Gate `logs/selfgate-20260905-040449-s5-469-lighting-transition-r1`: five PNGs, active 2,500-caster/four-cascade High rows, no near-black relight, exit 0/graceful, no client; visual PASS provisional. |
 | S5-c5 | **CLOSED + LANDED 2026-09-05; LEAD GRAPHICAL SMOKE PROVISIONAL PASS.** Contract `b77989c32`; campaign `bf53e2ad6` -> `e625dc4e6` -> `1b7ee4e58`; reviewed scratch tip `158656f0d`; packet §§33–35. | G4 UNPASSED | Retail/deletion pass 1/10 PASS. Production pass 2/10 found one static-field hole in the owner guard; fix round 1 reproduced both static-owner mutations, and production pass 3/10 PASS. Exact scratch hermetic 16,921/16,921, canonical InstalledDat 368/9/1, manifests 30/30. Fresh campaign Release 0W/0E, App 146/146, Core 8/8. A stale recipe-8 preflight is excluded; a non-destructive recipe-10 bake produced 2,237,865 keys with zero failures. Corrected gate `logs/selfgate-20260905-052130-s5-c5-landed-v10`: five PNGs, exit 0/graceful, no fatal/deleted-prefix match, no client left; geometry matches S5-c4, visual PASS provisional. |
-| S5 | **#473 EXTERIOR REPAIR OWNER-ACCEPTED `bf23673f3`; portal-reveal repair #474 LANDED + REVIEW-CLOSED, nine-hop convergence verified; latency475 in bounded repair (2026-09-05).** c1–c5 plus #470/#469 landed; C1c test/doc correction REVIEW-CLOSED, pending landing. | G4 UNPASSED | Packet §§7 and12–48 bind. §42 repaired opaque detail alpha-to-coverage, with both reviews PASS, Release0W/0E, affected158/158, mutation12/12 and all52 affected prepared payloads matching fresh extraction. §42.6 sampled exterior PNGs were provisional; the owner now accepts the repaired exteriors. §43 C1c retail/production reviews are closed; nine-file test/doc return remains unlanded, lead scoped68/68 only, no canonical full-lane claim. §44 manual owner session PID16892 ran unchanged bf23673f3. §45 geometry witness contract remains not dispatched. §46/new diagnosis474 proves a destination publication/placement acknowledgement cycle at3031FFFF: engine committed, exact valid Place into30310014 at global FIFO head, spatial backend absent and publication waiting on that acknowledgement. #474 round0 is integrated at220bda797 (reviewed scratch774a2cd1c), contract31960039b plus correctionfc1a24b6d: real reset/recenter converges publication before cancellation, so no new cancellation API. Retail pass1 found only a stale test comment, corrected directly; production/lifetime pass2 PASS. Lead Release0W/0E, App135/135 and Runtime42/42; three discriminating mutations with controller single-cycle byte restoration independently repeated. 474-round0-verification.md carries exact commands/hashes. Both clients are now absent; retail exited externally, never closed/attached by lead. Last privileged ACE check: UDP9000 PID13340 up. Clean c76f43c2f nine-hop run reached all destinations/occurrences with zero reveal failures, exit0/graceful; three30310005 visits revealed. Overall FAIL: adjacent86–89s, final1838retirements, first post-resize PNG corrupt476; six later PNGs coherent, settled cue check owed. 474-graphical-regression-r1.md records timings/PNGs/hashes. 475-debt-free-retirement-contract.md removes only synthetic no-debt frame waits while preserving exact callbacks/ACKs/meter/FIFO; implementation active in the exact-base s5-475-openai-impl scratch. Both clients absent after run; ACE9000 PID13340 rechecked. #476 source defect is confirmed in476-capture-lifetime-diagnosis.md: pre-submit screenshot readback can consume a newly allocated buffer before its first GPU copy. No476 code changed; its bounded repair follows475. Repair475/review/re-gate and476 capture repair precede C1c landing, real geometry/membership hash, full-lane closure, C2 and owner G4. Never merge main before G4. |
+| S5 | **#473 EXTERIOR REPAIR OWNER-ACCEPTED `bf23673f3`; portal-reveal repair #474 LANDED + REVIEW-CLOSED, nine-hop convergence verified; latency475 in bounded repair (2026-09-05).** c1–c5 plus #470/#469 landed; C1c test/doc correction REVIEW-CLOSED, pending landing. | G4 UNPASSED | Packet §§7 and12–48 bind. §42 repaired opaque detail alpha-to-coverage, with both reviews PASS, Release0W/0E, affected158/158, mutation12/12 and all52 affected prepared payloads matching fresh extraction. §42.6 sampled exterior PNGs were provisional; the owner now accepts the repaired exteriors. §43 C1c retail/production reviews are closed; nine-file test/doc return remains unlanded, lead scoped68/68 only, no canonical full-lane claim. §44 manual owner session PID16892 ran unchanged bf23673f3. §45 geometry witness contract remains not dispatched. §46/new diagnosis474 proves a destination publication/placement acknowledgement cycle at3031FFFF: engine committed, exact valid Place into30310014 at global FIFO head, spatial backend absent and publication waiting on that acknowledgement. #474 round0 is integrated at220bda797 (reviewed scratch774a2cd1c), contract31960039b plus correctionfc1a24b6d: real reset/recenter converges publication before cancellation, so no new cancellation API. Retail pass1 found only a stale test comment, corrected directly; production/lifetime pass2 PASS. Lead Release0W/0E, App135/135 and Runtime42/42; three discriminating mutations with controller single-cycle byte restoration independently repeated. 474-round0-verification.md carries exact commands/hashes. Both clients are now absent; retail exited externally, never closed/attached by lead. Last privileged ACE check: UDP9000 PID13340 up. Clean c76f43c2f nine-hop run reached all destinations/occurrences with zero reveal failures, exit0/graceful; three30310005 visits revealed. Overall FAIL: adjacent86–89s, final1838retirements, first post-resize PNG corrupt476; six later PNGs coherent, settled cue check owed. 474-graphical-regression-r1.md records timings/PNGs/hashes. 475-debt-free-retirement-contract.md removes only synthetic no-debt frame waits while preserving exact callbacks/ACKs/meter/FIFO; nine-file implementation frozen in exact-base s5-475-openai-impl. Lead independently passes Release0W0E/Runtime122/App130 and all four mutation categories with byte-identical restoration. Wider caller census: Runtime296/300 and Headless47/48 expose five obsolete-poll test failures; App167/167 passes. Contract§6 binds measurement-preserving test reconciliation; retail/behavior review1 underway. Not integration-ready. Both clients absent after run; ACE9000 PID13340 rechecked. #476 source defect is confirmed in476-capture-lifetime-diagnosis.md: pre-submit screenshot readback can consume a newly allocated buffer before its first GPU copy. No476 code changed; its bounded repair follows475. Repair475/review/re-gate and476 capture repair precede C1c landing, real geometry/membership hash, full-lane closure, C2 and owner G4. Never merge main before G4. |
 
 ---
 

docs/research/2026-09-01-overhaul/475-debt-free-retirement-contract.md

@@ -158,3 +158,43 @@ Sequential review lenses, owner's ten-pass ceiling, direct lead docs-only
 corrections; lead commits only after verification. No destructive cleanup,
 reset/checkout/clean/stash. No merge main before owner G4. Stop on a broader
 required change instead of silently expanding this contract.
+
+## 6. Lead caller-census correction (2026-09-05)
+
+The frozen nine-file return passes its selected Runtime122/App130 tests,
+and the lead independently repeated those passes, Release0W0E, and all four
+mutation categories with byte-identical source restoration. A wider direct-
+caller census then found five obsolete-poll test failures, so the candidate
+is NOT integration-ready. Artifacts are in the implementation scratch under
+`artifacts/475-lead/`: Runtime callers296/300 (four failures), Headless47/48
+(one failure), App callers167/167. No new production defect is established.
+
+The next bounded correction additionally permits these two test files only:
+
+- `tests/AcDream.Runtime.Tests/Physics/RuntimePhysicsStateTests.cs`:
+  `DenseReplacementSealsOneWorkUnitPerStepAndActivatesWithoutAllocation`,
+  `FirstLoadWithNewStaticBucketActivatesWithZeroAllocation`,
+  `ChangedEnvCellsBuildingsAndStaticBucketActivateWithZeroAllocation`, and
+  `ConcurrentPreparedLandblocksRebaseBeforeSecondActivation`.
+  Their old pre-measurement commit now performs the real activation instead
+  of yielding. Do NOT flip that call to an expected success and measure an
+  idempotent second call. Measure the first real activation; preserve every
+  capture/seal work bound, facade identity, payload/owner/removal result,
+  notification count and allocation bound, including the real second-prefix
+  rebase. The historical ZeroAllocation names are stale: the existing O2
+  assertions already allow target-payload allocations (1MiB/4MiB); do not
+  advertise a zero-allocation result or weaken those bounds.
+- `tests/AcDream.Headless.Tests/HeadlessSessionHostTests.cs`:
+  the empty `CollisionTransactionYieldsTheFirstNonterminalRuntimePoll`
+  scenario must now assert completion without an invented yield, stopping
+  at completion rather than polling its completed transaction. Keep its
+  staging/ownership assertions. Preserve explicit yield/ACK discrimination
+  on the adjacent real held-Withdraw/Place scenario; do not replace the empty
+  fixture with fake debt just to preserve its old expected pause.
+
+No Headless or additional Runtime production behavior change is authorized.
+Rerun the original affected classes and the exact additional caller classes
+listed in the lead's TRX files, plus Release0W0E. Final evidence must supersede
+the narrower green return rather than claim that it covered these callers.
+Retail/behavior review1 is in progress; reconcile its actual findings in the
+same bounded correction before the sequential production/lifetime lens.

docs/research/2026-09-01-overhaul/s5-consumers-material-closeout-packet.md

@@ -4545,3 +4545,20 @@ independently records this cell and repeated materialization at
 This is a starter/training dungeon, not a combat-dungeon proof. The selected
 pair exercises independent sealed dungeon geometry; Tusker retains the
 separate dense combat/casting requirement. No current-binary gate ran here.
+
+#475 verification checkpoint: the nine-file return is frozen. Lead independent
+Release0W0E, Runtime122/122 and App130/130 pass, including all four mutation
+categories (old first-park return fails both progress tests; removing each of
+the three exact-owner guards fails its stale-permission test). Every mutation
+restores raw RuntimeSetPositionState SHA256
+15405FB4176EBE13D39C07EE809DA4940DF57EB058EE779FF4E8728CA6F614A9.
+All nine frozen source hashes match the implementer report.
+
+The wider direct-caller census is NOT green: Runtime296/300 and Headless47/48
+expose five obsolete mandatory-poll expectations; App callers167/167 pass.
+Contract§6 now binds their narrow test reconciliation. Measure the first
+actual activation, never an idempotent second call, and retain the existing
+target-payload allocation bounds plus real Headless held-receipt yield/ACK
+proof. No new production defect or broader production change is established.
+Artifacts: scratch `artifacts/475-lead/`; retail/behavior review1 is underway.
+The narrower return is not integration-ready and no graphical475 PASS exists.