docs(overhaul): contract s5 closeout offline gate

docs/plans/2026-09-01-campaign-overhaul-world-solidity.md

@@ -696,7 +696,7 @@ Update immediately when a slice changes state. Chat is not the ledger.
 | S5-#470 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL A/B PROVISIONAL PASS.** Campaign implementation stack `15a796c3a` -> `7506e5f14` -> `b333edb4f`; route `19b44e5e3`; reviewed scratch `51f974da4` -> `2cad9c84` -> `98c004aa7`; packet §§27–30. | G4 UNPASSED | Retail/behavior pass 2/10 and production pass 4/10 closed the two evidence-only findings. Fresh campaign Release 0W/0E and focused 48/48; exact scratch hermetic 16,976/16,976 and canonical InstalledDat 386/10/1, manifests 30/30. Pinned gate `logs/selfgate-20260905-032132-s5-470-pinned-shadow-ab-r1`: retail/off -> High -> retail/off, 3/3 PNGs, exit 0, graceful, no client; visual PASS provisional. The stale recipe-8 pre-route launch is excluded and recorded in §30. |
 | S5-#469 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL TRANSITION PROVISIONAL PASS.** Contract `809887524`; reviewed scratch `c09b6cf0f`; campaign implementation `94ddde69a`; route `62efc72cb`; packet §§31–32. | G4 UNPASSED | Retail/deviation pass 1/10 and production pass 2/10 both PASS with no finding. The two atmospheric vertex receivers keep retail's authored unnormalized `uLights` direction across every shadow gate; celestial direction remains for opt-in shadow/volumetric projection; IA-24 corrected in the same commit. Exact scratch: Release 0W/0E, focused 126/126, Vulkan 2/2, hermetic 16,983/16,983, InstalledDat 386/10/1. Fresh campaign Release 0W/0E, focused 82/82, Vulkan 2/2. Gate `logs/selfgate-20260905-040449-s5-469-lighting-transition-r1`: five PNGs, active 2,500-caster/four-cascade High rows, no near-black relight, exit 0/graceful, no client; visual PASS provisional. |
 | S5-c5 | **CLOSED + LANDED 2026-09-05; LEAD GRAPHICAL SMOKE PROVISIONAL PASS.** Contract `b77989c32`; campaign `bf53e2ad6` -> `e625dc4e6` -> `1b7ee4e58`; reviewed scratch tip `158656f0d`; packet §§33–35. | G4 UNPASSED | Retail/deletion pass 1/10 PASS. Production pass 2/10 found one static-field hole in the owner guard; fix round 1 reproduced both static-owner mutations, and production pass 3/10 PASS. Exact scratch hermetic 16,921/16,921, canonical InstalledDat 368/9/1, manifests 30/30. Fresh campaign Release 0W/0E, App 146/146, Core 8/8. A stale recipe-8 preflight is excluded; a non-destructive recipe-10 bake produced 2,237,865 keys with zero failures. Corrected gate `logs/selfgate-20260905-052130-s5-c5-landed-v10`: five PNGs, exit 0/graceful, no fatal/deleted-prefix match, no client left; geometry matches S5-c4, visual PASS provisional. |
-| S5 | IN FLIGHT — c1–c5 plus #470/#469 landed, review-closed, and provisionally self-gated; automated/performance closeout and G4 remain | G4 | Packet §§7 and 12–35 are binding. Next: execute the full closeout, then G4. Never merge main before G4. |
+| S5 | IN FLIGHT — c1–c5 plus #470/#469 landed, review-closed, and provisionally self-gated; closeout C1 contracted; connected/performance C2 and G4 remain | G4 | Packet §§7 and 12–36 are binding. C1 runs the literal offline correctness/evidence matrix and may expose a missing deterministic-product-hash witness; then C2 runs lifecycle/performance and G4 follows. Never merge main before G4. |
 
 ---
 

docs/research/2026-09-01-overhaul/s5-consumers-material-closeout-packet.md

@@ -3263,3 +3263,52 @@ cathedral, Facility, house-portal, and outdoor-terrain geometry; only authored
 time/weather changed. Verdict: **PASS, provisional until the owner inspects
 the PNGs.** S5-c5 is closed. S5 automated/performance closeout and G4 remain;
 never merge to `main` before G4.
+
+## 36. S5 closeout C1 contract — offline correctness and evidence map
+
+Base is clean campaign commit
+`29c05e48c8379678603efb8715f86ede04c775ea`. This is an evidence-only
+closeout chunk: it changes no production, test, fixture, register, shader,
+prepared package, or gate script. One OpenAI implementer runs the bounded
+matrix below and returns artifacts plus an exact coverage map; the lead
+independently verifies every count, nonpassing identity, manifest, and claimed
+fixture. The lead alone writes and commits the result.
+
+1. Run `tools/run-release-gate.ps1` once to a new, absent artifact directory
+   with the plan's literal filter
+   `Lane!=InstalledDat&Lane!=Linux&Lane!=Manual&Lane!=Timing&Lane!=Live&Lane!=PreparedPackage`.
+   Do not silently substitute the narrower ordinary release-gate default. A
+   nonpassing test is evidence to classify, not permission to retry or edit.
+2. Run one canonical InstalledDat artifact with
+   `ACDREAM_RUN_INSTALLED_DAT_TESTS=1`, explicit installed DAT directory, and
+   `Lane=InstalledDat&Purpose!=Diagnostic`. Preserve the accepted nine
+   failures plus one look-in skip only if the exact identities match c5; any
+   new or missing identity is a finding.
+3. Produce an exact test-to-requirement map for the focused App, Content,
+   Core, Runtime, and Launcher coverage; all committed OH walk/parts/
+   alpha-depth fixtures; `BeginWalkFrame`/outside-view reassembly; per-cell
+   geometry and membership; FIFO/barrier/order; material; building degrade;
+   visibility consumers; reset/abort/dispose; architecture guards; and real
+   warmed allocation pins. Reuse already-executed tests from items 1--2 where
+   their TRX identity proves coverage; run only a genuinely missing focused
+   class once.
+4. Identify the existing executable witness, if any, for the plan's “two
+   deterministic geometry/membership runs with equal hashes” requirement.
+   Run it exactly twice from the same clean commit and compare its declared
+   product hash. A hash of source files, TRX files, logs, or the prepared pak
+   is not this witness. If no current gate emits a canonical runtime
+   geometry/membership product hash, stop this item and report that contract
+   gap; do not invent a surrogate or modify code without a new lead contract.
+5. Verify `git diff --check`, exact HEAD/branch, zero tracked or untracked
+   source change, and every artifact SHA manifest. No graphical client launch,
+   connected route, package rebake, commit, cleanup, retry, or mutation is
+   authorized in C1.
+
+Return the exact commands, artifact paths, pass/fail/skip counts and
+identities, manifest verification, fixture list and the requirement map. The
+retail/transcript lens reviews fixture completeness and whether the purported
+deterministic witness proves the retail products. Only after that PASS does the
+production/gate-honesty lens review filters, provenance, manifests, negative
+results, and absence of retries. Any missing witness becomes a separately
+contracted narrow harness chunk; otherwise C1 closes and C2 runs the connected
+lifecycle/performance program.