docs(overhaul): close S4 c3a landing

docs/plans/2026-09-01-campaign-overhaul-world-solidity.md

@@ -678,7 +678,7 @@ Update immediately when a slice changes state. Chat is not the ledger.
 | S4-c2 stop | **STOPPED UNLANDED 2026-09-04** — lead final-round contract `ac74fbd84`; evidence commit `c4cbc1d0d` in `s4-c2-impl` on `cc8e5677a`/`048d5b12f`; campaign renderer remains S4-c1 `766f9e749` | G3/G4 UNPASSED | Both sequential final lenses FAIL, so the required repair is the forbidden THIRD round. EnvCell transparent/ClipMap batches still draw in the opaque pass before FIFO submission and then redraw; CLIP/detail-immediate replay binds StraightAlpha with depth-write off rather than retail clip-test/depth-writing state; tests omit the preceding opaque call and pipeline descriptors. Source-owned EnvCell lists are unbounded under queue rejection, the claimed scan/filter/RHI 0-B evidence bypasses those paths, and AP-238/AP-240/result truth is false. Full file:line and gate record: S4 packet §13. No chunk cherry-pick, graphical gate, or soak. Resume only on explicit owner process change. |
 | S4-c2 owner repair | **STOPPED UNLANDED 2026-09-04** — owner-authorized implementation `a094bf2b7` is clean in `s4-c2-impl`; packet §15 is the review record | G3/G4 UNPASSED | The repaired renderer behavior passed the retail lens: exact whole-leaf pass membership, `0x08`/`0x09` CLIP, row-3 override, blend/reference/depth state, sentinel separation, detail state, rollback, allocation, AP-238/AP-240. The lens still returned FAIL: commit body omitted the required per-mutation first failures, packet mutation 5 names the wrong first assertion/address, and four source/test comments are stale. Sequential production lens therefore did not run. Correcting those items is a post-review fourth repair, which §14 does not authorize. Nothing landed or graphically gated; resume only by explicit owner process decision. |
 | S4-c2 attempts 1–5 | **ATTEMPT 1/5 CONSUMED; ATTEMPT 2/5 PASSED AND LANDED 2026-09-04** — reviewed implementation `daaeab0ba`; campaign stack `89f1e2676` → `9ccb61a8e` → `0aa166aa0` → `252886e84`; packet §17 | G3/G4 UNPASSED | Sequential retail/evidence then production/gate-honesty PASS. Fresh: Release 0W/0E; shader 32/32; affected 37/37; real allocation 2/2 at 0 B; production 239/239. Official no-retry hermetic 16,734/1: sole unchanged global `Console.Out` capture race, exact theory 2/2 isolated. InstalledDat 255/10 documented/1. Validation routes `selfgate-20260904-115818-s4c2-landed-route` and `selfgate-20260904-120025-s4c2-landed-g3b` PASS provisional. First soak failed on known #461/#462; retry and S4-c1 control both 9/9 graceful; stationary averages CPU p95 −0.01 ms, GPU p95 +0.16 ms, alloc p50 +1.2 KiB, update p95 −0.12 ms. Three attempts remain unused. |
-| S4-c3a | **§21 EVIDENCE EXCEPTION CORRECTED — NARROW REVIEW PENDING.** The §20 final renderer and production reviews found no other correction-worthy item, but §18.7 mutation 9 misstated its first failure. The owner-authorized evidence-only correction now records the actual AP-table-boundary `Assert.True` (`rowIndex=-1`); the later `Assert.Single` is not reached. The AP-241 row was restored exactly and the isolated pin passed 1/1. Renderer implementation, prior gates, AP rows/count, and G3/G4 status are unchanged. | G3/G4 UNPASSED | One independent narrow gate-honesty review of the packet/plan-only exception diff. Narrow PASS unlocks landing the already-reviewed c3a stack; narrow FAIL returns to STOPPED UNLANDED. c3b remains locked until landing. |
+| S4-c3a | **LANDED 2026-09-04 after the owner-authorized §21 evidence exception.** Reviewed scratch stack `44e2bc227b` → `b6bf6c131` → `eea5793d2` → `14397b14c` → `359061b82` → `255194e90` → `9cfddf301`; campaign cherry-picks `a86ec73ec` → `8e0c6fb14` → `01674bcc7` → `8bd75ba31` → `b6b015604` → `316193043` → `67c76026e`. The earlier stop remains in history at `06b986622`. | G3/G4 UNPASSED | Final retail lens PASS; production behavior/lifecycle/allocation/scope clean. The narrow independent gate-honesty re-review PASS reproduced the exact first failure (AP-table-boundary `Assert.True`, `rowIndex=-1`, before `Assert.Single`), restored AP-241 byte-identically, and passed the pin 1/1. Fresh campaign: Release 0W/0E; focused class lane 96/96; no-surface 1/1; AP pin 1/1; real allocation 2/2 at 0 B; shader 32/32; `git diff --check` clean. No client launched. NEXT: write c3b's deletion-only contract from the landed code; G3 stays locked until c3b lands. |
 | S5 | — | G4 | fill |
 
 ---

docs/research/2026-09-01-overhaul/2026-09-04-s4-handoff.md

@@ -1,10 +1,10 @@
-# Campaign OVERHAUL v2 — hand-off after S4-c3a stop (2026-09-04)
+# Campaign OVERHAUL v2 — hand-off after S4-c3a landing (2026-09-04)
 
-**2026-09-04 current state:** S4-c2 remains LANDED through `252886e84`.
-S4-c3a exhausted owner attempts 3–5 and is **STOPPED UNLANDED** by the mandatory
-third-round rule; packet §19 is the exact record. The clean scratch candidate
-is `359061b82`, but nothing from it lands. c3b is locked and G3/G4 remain
-unpassed. Resume only after an explicit owner process change.
+**2026-09-04 current state:** S4-c2 remains LANDED through `252886e84` and
+S4-c3a is **LANDED** through `67c76026e`. The owner explicitly authorized the
+packet §21 evidence-only exception after the §19 stop; its narrow independent
+review passed and history remains intact at `06b986622`. c3b is now the next
+deletion-only chunk. G3 stays locked until c3b lands; G4 remains unpassed.
 
 ## 0. Read order
 
@@ -21,8 +21,9 @@ unpassed. Resume only after an explicit owner process change.
    `feedback_every_new_pin_must_be_shown_to_fail`,
    `feedback_skip_ab_before_theorizing`, `feedback_verify_subagent_claims_against_source`,
    `feedback_agent_worktree_base`, `feedback_soak_numbers_need_same_session_type`).
-4. `docs/research/2026-09-01-overhaul/s4-depth-alpha-packet.md` — **§19 = the
-   binding S4-c3a stop record**; §18 = its contract; **§8 = the
+4. `docs/research/2026-09-01-overhaul/s4-depth-alpha-packet.md` — §19/§20 =
+   S4-c3a fix/review history and **§21 = its binding exception + landing**;
+   §18 = its contract; **§8 = the
    S4-c2 contract; §11 + §11.1 = the fix round 1 contract (M1–M8, A1–A8)**;
    §10 (the implementer's landing note) lives only in the chunk commit in
    worktree `s4-c2-impl` until the cherry-pick; §1–§4 what remains of S4.
@@ -44,10 +45,10 @@ unpassed. Resume only after an explicit owner process change.
 | Item | Value |
 |---|---|
 | Worktree | `C:\Users\erikn\source\repos\acdream\.claude\worktrees\peaceful-blackburn-5333f0` |
-| Branch | `claude/campaign-w-retail-frame-walk`; S4-c2 renderer stack LANDED as `89f1e2676`, `9ccb61a8e`, `0aa166aa0`, `252886e84`; clean before this ledger update. |
+| Branch | `claude/campaign-w-retail-frame-walk`; S4-c2 landed through `252886e84`; S4-c3a landed through `67c76026e`; clean before this ledger update. |
 | Base | `origin/main` `e102fb36` (2026-08-29); ~275 commits ahead; **nothing merges to main before G4** |
 | Dev pak | `%USERPROFILE%\Documents\Asheron's Call\acdream.pak`, bake recipe 8 |
-| Release binary | `src\AcDream.App\bin\Release\net10.0\AcDream.App.exe` built and graphically gated at `252886e84` |
+| Release binary | `src\AcDream.App\bin\Release\net10.0\AcDream.App.exe` built at the S4-c3a landing stack; last graphical gate remains S4-c2 `252886e84` |
 | ACE | `127.0.0.1:9000`, `testaccount` / `testpassword`, character `+Acdream`; was UP from ~08:00 on 2026-09-04 (the owner started it). Check `netstat -an -p UDP \| grep 9000` before assuming. Only the owner starts it. |
 | Retail client for captures | `C:\Users\erikn\Downloads\acclient.exe` (2013 v11.4186, pairs with `refs/acclient.pdb`); the Turbine folder's exe (2015) does NOT pair |
 
@@ -56,7 +57,7 @@ Scratch worktrees (detached):
 | Worktree | At | Purpose |
 |---|---|---|
 | `s4-c2-impl` | `daaeab0ba` on `c4cbc1d0d` / `cc8e5677a` / `048d5b12f`; clean | retained immutable review source for landed attempt 2; both sequential lenses PASS |
-| `s4-c3a-impl` | `359061b82` on the five-commit scratch stack; clean | **STOPPED UNLANDED** after final retail PASS / production gate-honesty FAIL; immutable audit source, do not cherry-pick |
+| `s4-c3a-impl` | `9cfddf301` on the seven-commit scratch stack; clean | immutable reviewed source for landed c3a; narrow exception review PASS |
 | `s4-c1-impl` | `9ba8f013e` | retained S4-c1 baseline binary and same-session stationary-soak evidence |
 | `s2-final-ab` | `78068b2c` | S2-final binary for same-session perf A/B (keep) |
 | `s3-review-fix` | `6575cfcee` | pre-S4 control build; stalls at the foundry login (#462) — not usable as a control |
@@ -106,8 +107,9 @@ The reviewed implementation is `daaeab0ba`; the complete campaign stack is
 `89f1e2676` → `9ccb61a8e` → `0aa166aa0` → `252886e84`. Retail/evidence PASS
 preceded production/gate-honesty PASS. Fresh campaign build, focused, shader,
 allocation, graphical, and same-session stationary A/B gates pass as recorded
-below and in packet §17. S4-c2 is closed. The remaining three owner attempts
-were consumed by S4-c3a and its two fix rounds; packet §19 is the binding stop.
+below and in packet §17. S4-c2 is closed. Attempts 3–5 and their stop remain
+historical; the owner's packet §21 evidence-only exception passed and c3a is
+now landed.
 
 **Historical state before the final round (kept for audit; do not execute its
 landing procedure):**
@@ -157,12 +159,10 @@ memory −17.7 MiB. G3/G4 remain unpassed.
 
 ## 4. After chunk 2
 
-1. **S4-c3a is STOPPED UNLANDED; c3b is locked.** Attempts 3–5 produced a
-   retail-correct, production-green scratch renderer, but the final production
-   lens caught one false mutation-first-failure sentence. Correcting it is the
-   forbidden third c3a fix round. Packet §19 has the commits, review history,
-   gates, and exact stop reason. Do not cherry-pick `359061b82`, write c3b, or
-   start G3 without an explicit owner process change.
+1. **S4-c3a is LANDED; c3b is unlocked.** Packet §21 records the owner's
+   evidence-only exception, the exact mutation correction, narrow independent
+   PASS, campaign commit mapping, and fresh build/focused gates. Write c3b's
+   deletion-only contract from the landed code. Do not start G3 until c3b lands.
 2. **G3 — S4's owner gate:** the lead runs `route-g3.txt` (13 matrix shots),
    `route-g3b.txt` (the capture poses; pose 15 now outdoors), `route-g3c.txt`
    (Nanto ×3, 300 s waits) with `pwsh -File tools/overhaul-selfgate/run-selfgate.ps1 -Label <l> -Route <file>`

docs/research/2026-09-01-overhaul/s4-depth-alpha-packet.md

@@ -1815,3 +1815,39 @@ plan-ledger row changed. No production, test, register, shader, manifest, or
 package file remains modified; no graphical client was launched. This text
 supersedes only §18.7 mutation 9 and the corresponding historical claim in
 candidate `44e2bc227b`; it changes no other c3a evidence.
+
+### 21.2 Narrow review and campaign landing result (2026-09-04)
+
+**PASS — LANDED.** The independent narrow gate-honesty re-review found no
+blocking, major, or minor issue. It reproduced an in-memory AP-241 rename and
+the exact first boundary failure (`rowIndex=-1`, AP range
+`[275116,751256)`), confirmed that the later `Assert.Single` was not reached,
+then confirmed the restored isolated pin at 1/1. The AP-register Git blob is
+byte-identical at the exception base, correction commit, and clean scratch
+worktree: `bf8758705a17b9415888b1a437e673826b6777e2`. The exception diff is
+exactly this packet plus the plan row; `git diff --check` passed. Commit
+`9cfddf301` explicitly supersedes the false sentence in historical
+`44e2bc227b` without rewriting it.
+
+The reviewed scratch stack landed on the campaign branch as:
+
+1. `a86ec73ec` (`44e2bc227b`) — stable authored per-cell object/particle order;
+2. `8e0c6fb14` (`b6bf6c131`) — bounded fix-round-1 contract;
+3. `01674bcc7` (`eea5793d2`) — authored particle CYpt preparation and bounds;
+4. `8bd75ba31` (`14397b14c`) — bounded final fix contract;
+5. `b6b015604` (`359061b82`) — surfaceless Gfx metadata preservation;
+6. `316193043` (`255194e90`) — owner-authorized narrow exception contract;
+7. `67c76026e` (`9cfddf301`) — corrected mutation evidence.
+
+The stop commit `06b986622` remains immediately before that stack as the
+truthful historical record of the then-binding rule. The owner exception,
+narrow PASS, and this landing supersede its operational disposition; history
+was not rewritten.
+
+Fresh campaign verification after integration: Release solution build PASS,
+0 warnings / 0 errors; focused particle/driver/queue/classifier lane 96/96;
+targeted no-surface path 1/1; AP boundary/count pin 1/1; both real production
+allocation pins 2/2 at 0 B; shader/manifest/SPIR-V lane 32/32; `git diff
+--check` clean. The campaign `src`/`tests` tree is byte-identical to reviewed
+scratch commit `9cfddf301`. No graphical client was launched. c3b is now
+unlocked; G3 remains locked until the deletion-only c3b chunk lands.