docs(overhaul): record independent #474 candidate verification

This commit is contained in:
Erik 2026-09-05 09:45:44 +02:00
parent fc1a24b6d7
commit b913d542e0
2 changed files with 143 additions and 0 deletions

View file

@ -0,0 +1,128 @@
# #474 round0 — independent lead verification
Status: candidate verified offline; retail/behavior review pass1 RUNNING.
No production commit, graphical PASS or G4 acceptance is claimed.
## Frozen candidate and contract
Scratch: `C:\Users\erikn\source\repos\acdream\.claude\worktrees\s5-474-openai-impl`,
branch `codex/s5-474-openai-impl`, base
`31960039be9c16580aa830456982666059cc0128`. The four production, two test
and two architecture/register files below are the complete pending return.
The campaign's `474-publication-repair-contract.md` amendment A at
`fc1a24b6d` is binding; the scratch's older contract is historical.
The lead independently confirmed both reset/recenter callers first converge
every retained publication before generation advance/cancellation. No new
cancellation API remains. `LandblockPhysicsPublisher.cs` matches its base blob;
raw SHA256 `295FD451ACC3E8BB3E9265669E6BC329B56596E5421F5E02538E1C71FED8B4A7`.
## Fresh lead commands and outcomes
All commands below ran in the scratch above, on2026-09-05, after a fresh
process check found both AcDream and retail absent. The lead did not close
retail. No graphical launch, debugger attach or heap capture occurred.
The latest privileged ACE check at09:28+02 found UDP9000 PID13340 up.
Before each build/test command:
```powershell
$runningClients = @(Get-Process -Name AcDream.App,acclient -ErrorAction SilentlyContinue)
if ($runningClients.Count -ne 0) { throw 'Client running; no build/test started.' }
```
Release solution build, exit0, zero warnings/errors:
```powershell
dotnet build AcDream.slnx -c Release --no-restore -v minimal
```
App affected classes, exit0,135 passed/0 failed/0 skipped:
```powershell
dotnet test tests/AcDream.App.Tests/AcDream.App.Tests.csproj -c Release --no-build --no-restore --filter 'FullyQualifiedName~GraphicalRemotePlacementServiceWindowTests|FullyQualifiedName~LandblockConcretePresentationPipelineTests|FullyQualifiedName~LandblockPhysicsPublisherTests|FullyQualifiedName~LandblockPlacementPublicationCompositionTests|FullyQualifiedName~LandblockPresentationPipelineTests|FullyQualifiedName~StreamingControllerReadinessTests|FullyQualifiedName~RuntimePlacementPresentationSinkTests|FullyQualifiedName~RuntimePlacementShadowCompositionTests' --logger 'trx;LogFileName=474-lead-app.trx' --results-directory 'artifacts/474-lead/app' -v minimal
```
Runtime prefix/subscription classes, exit0,42 passed/0 failed/0 skipped:
```powershell
dotnet test tests/AcDream.Runtime.Tests/AcDream.Runtime.Tests.csproj -c Release --no-build --no-restore --filter 'FullyQualifiedName~RuntimeCollisionPrefixQuiescenceTests|FullyQualifiedName~RuntimePlacementProjectionSubscriptionTests' --logger 'trx;LogFileName=474-lead-runtime.trx' --results-directory 'artifacts/474-lead/runtime' -v minimal
```
The two test processes ran concurrently only AFTER the build had finished.
App breakdown: service-window6, concrete-pipeline12, physics-publisher26,
new composed publication9, presentation-pipeline34, controller-readiness27,
placement-sink17, placement-shadow4. Runtime: collision-prefix32,
projection-subscription10. The unchanged direct TryCancel case is included in
the physics-publisher26; the implementer also recorded a separate1/1 run.
These are focused deterministic tests, NOT the canonical full solution lanes.
## Mutation evidence and its explicit limit
The lead read each failed TRX and verified its SHA256, test name and first
assertion. All use the genuine composed T1, not a fake ACK/preset completion.
Initial setup receipts are acknowledged before the real subscription is bound;
the regression's refresh/restore suffix uses the real sink/subscriber.
The literal mutation commands were:
```powershell
dotnet test tests/AcDream.App.Tests/AcDream.App.Tests.csproj -c Release --filter "FullyQualifiedName~LandblockPlacementPublicationCompositionTests.CollisionRefresh_WithMissingGraphicalBackend_PublishesBackendBeforeExactRestoreAck" --logger "trx;LogFileName=474-mutation-old-order.trx" --results-directory artifacts/474-round0/mutation-old-order
dotnet test tests/AcDream.App.Tests/AcDream.App.Tests.csproj -c Release --filter "FullyQualifiedName~LandblockPlacementPublicationCompositionTests.CollisionRefresh_WithMissingGraphicalBackend_PublishesBackendBeforeExactRestoreAck" --logger "trx;LogFileName=474-mutation-controller-fence.trx" --results-directory artifacts/474-round0/mutation-controller-fence
dotnet test tests/AcDream.App.Tests/AcDream.App.Tests.csproj -c Release --filter "FullyQualifiedName~LandblockPlacementPublicationCompositionTests.CollisionRefresh_WithMissingGraphicalBackend_PublishesBackendBeforeExactRestoreAck" --logger "trx;LogFileName=474-mutation-service-fence.trx" --results-directory artifacts/474-round0/mutation-service-fence
```
All three exit1/0 passed/1 failed:
- old-order: backend absent, Assert.True at test line55;
- controller-fence: reveal readiness opened early, Assert.False at line60;
- service-fence: remote service admitted early, Assert.False at line67.
| Artifact under artifacts/474-round0 | SHA256 |
|---|---|
| mutation-old-order/474-mutation-old-order.trx | 190959E5B5AF35CF9AB13B92E8033F3D2E96E04939216B1746FACEF41DD65D52 |
| mutation-controller-fence/474-mutation-controller-fence.trx | FF201032EC27525AFE8BECB4FE800D487995F70604F3964B7FA6B16A47706CD8 |
| mutation-service-fence/474-mutation-service-fence.trx | 11E16A55558AD2DAFFC1EAA6069F33CDA0A8BFD9E77DEF87017CA23FF0D167E2 |
Implementer pipeline tested-cycle pre/post hash matched
`2CDB4E2FD5CE2C0F4AFEDF9C69573A9114281F6ADED1E440B7501B8EC3648724`.
Service tested-cycle pre/post hash matched
`B2FDD7EB6B5FD8AB5A645F2079680557A06192DEA3A5D252417C65611D4ACA5C`;
the later remarks-only correction yields the final hash below.
**OPEN PROOF GAP:** the controller's tested mutation had different pre/post
raw hashes. A later byte-identical remove/restore cycle was NOT test-run.
That does not meet the contract's single-cycle restoration proof. The lead
will repeat the tested mutation against the frozen final source after the
current read-only review, restore it byte-identically and rerun the green test.
No claim that this proof already exists.
T4 covers reset/recenter × pre/post-backend starting edge, failed static
reconciliation retry, exact ACK completion, retirement and zero remaining
prepared-mesh references. T6 uses a real0.48 sphere near the outdoor seam;
adjacent collision exists but adjacent graphics do not. Its literal result is
`restoreCell=0x3031003C actualPrefix=0x30310000 targetBackend=True adjacentBackend=False`.
This is a same-prefix boundary control, not universal cross-prefix closure.
## Frozen raw file hashes
Hashes include comments and line endings; tested assembly hashes below belong
to this scratch, not the campaign's later graphical build.
| File | SHA256 |
|---|---|
| src/AcDream.App/Streaming/LandblockPresentationPipeline.cs | 2CDB4E2FD5CE2C0F4AFEDF9C69573A9114281F6ADED1E440B7501B8EC3648724 |
| src/AcDream.App/Streaming/StreamingController.cs | 8A6AA9202390E8DF9A2916196EA539D18E52D33972FE71D2F9D65808A18B01D3 |
| src/AcDream.App/Streaming/GraphicalRemotePlacementServiceWindow.cs | A1524051D58F5D69875273C689367FC956D5592D456DD4A1DE0E355E2BDCB656 |
| src/AcDream.App/Composition/SessionPlayerComposition.cs | 841C7E049A283D631CF0DA868E89E66DB7F4595A71591960FE466F8E074E6420 |
| tests/AcDream.App.Tests/Streaming/GraphicalRemotePlacementServiceWindowTests.cs | DF47F00AE3FD6322A120477F71F0E6F2F9B8DE1B9B436C3F05096B6ABF9B770E |
| tests/AcDream.App.Tests/Streaming/LandblockPlacementPublicationCompositionTests.cs | AD40411A3F7E1564FB451BDD3FA639D689218887D1C25625E2D86EA0BB717793 |
| docs/architecture/acdream-architecture.md | 1B4F23E6CB06ACA00D63EAA56752CBC0FE330A12DF42B6A69A736C7B00C85A13 |
| docs/architecture/retail-divergence-register.md | CE1098C223E27676ED13039BBD9F6200656747514C95A1E4392A0A23A4A454DA |
| src/AcDream.App/bin/Release/net10.0/AcDream.App.dll | 6698A3A018E8C68F86835042F5F211B20326F33CCE99FB9121028C17EA551B90 |
| tests/AcDream.App.Tests/bin/Release/net10.0/AcDream.App.Tests.dll | 5E69DBE0699DCF23E77F1CA111DAB41FA8E479B072A4CFFE162C555C60473B1D |
| tests/AcDream.Runtime.Tests/bin/Release/net10.0/AcDream.Runtime.Tests.dll | E5B5840B2C55AE636E2190818170DC65AEE901E8C2C4051271788E9BE9BF890A |
| artifacts/474-lead/app/474-lead-app.trx | F2589C7A3EE3D200579BE3C5B45F286C519669E18259FD3317BCAD06FA958CF2 |
| artifacts/474-lead/runtime/474-lead-runtime.trx | 3BF20A03034A2320DD4B1482FA754D3B382934FE368B9BE0A5BD4C54B9D79CF8 |
## Remaining boundary
Named-retail/paired-PE proof is in the amended contract; the lead rehashed the
paired retail executable again during verification and got the same SHA256.
The change is AD-2's asynchronous adaptation, not literal retail machinery.
Independent reviews, the controller mutation restoration proof, integration,
canonical full lanes, the exact nine-hop graphical route and owner G4 remain
outstanding. Preserve C1c and geometry-witness work; never merge main before G4.

View file

@ -4441,3 +4441,18 @@ new retail behavior/deviation or a completed review pass. T1 has a discriminatin
old-order missing-backend failure and a green repair run; the implementer's
T1T3 checkpoint is 3/3. Remaining mandatory cases, final review and graphical
gate are still outstanding; no broad completion is inferred from those tests.
### Round0 frozen return and lead verification
The eight-file implementation return is frozen in the scratch, uncommitted.
`474-round0-verification.md` records its complete source/assembly hashes,
literal lead commands, independently repeated Release build (0 warnings/errors),
App135/135 and Runtime42/42, and the exact mutation assertions. Reset/recenter
now covers four starting-edge combinations with failure/retry and retirement;
the outdoor seam control records its same-prefix result with adjacent graphics
absent, without a universal closure claim. Retail/behavior review pass1 of at
most10 is running. One controller-mutation restoration proof gap is explicitly
open: the lead will repeat the tested cycle after that read-only review so the
candidate source remains frozen while reviewed. This is not a code failure or
a graphical result. Production/lifetime review and the actual graphical gate
remain pending; no production commit or G4 acceptance yet.