docs(overhaul): record owner gate failure #473 and bound exterior diagnosis

docs/ISSUES.md

@@ -39,6 +39,26 @@ confirmed closed by the owner, 11 need a focused live gate, and 43 are safe to
 remain closed. See
 [`docs/research/2026-08-28-owner-closed-issue-validity-audit.md`](research/2026-08-28-owner-closed-issue-validity-audit.md).
 
+## #473 — Owner gate: exterior buildings have missing roof/wall sections
+
+**Status:** IN-PROGRESS — owner visual gate FAIL, 2026-09-05.
+
+At clean campaign `02219318a`, Release 0 warnings / 0 errors, the owner
+reports broken exterior buildings in Holtburg and the cathedral, while
+Facility Hub interiors appear correct. The supplied Holtburg PNG clearly
+shows absent roof/wall sections. This is a rendered-product failure; exact
+walk-event transcripts and completed world-readiness events do not clear it.
+Root cause is not yet established: construction, shell/part selection,
+degrade, upload/index ranges, and draw state must be distinguished rather
+than treating the image alone as proof of incorrect source geometry.
+
+Evidence: `research/2026-09-01-overhaul/owner-gate-20260905-holtburg-fail.png`;
+manual session `logs/owner-gate-20260905-02219318a/`, PID18836, verified
+recipe-10 package. The client remains owned by the user's gate; no automatic
+movement, close, rebuild or second client. Packet §41 owns the bounded
+read-only diagnosis. C1c's test-only correction is frozen, awaiting review;
+closeout and final G4 acceptance are blocked by this defect. No merge main.
+
 ## #472 — Stair-arch walk fixture cannot distinguish retail e229 residency from block rejection
 
 **Status:** IN-PROGRESS — capture complete; §40's diagnostic resolves the

docs/plans/2026-09-01-campaign-overhaul-world-solidity.md

@@ -696,7 +696,7 @@ Update immediately when a slice changes state. Chat is not the ledger.
 | S5-#470 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL A/B PROVISIONAL PASS.** Campaign implementation stack `15a796c3a` -> `7506e5f14` -> `b333edb4f`; route `19b44e5e3`; reviewed scratch `51f974da4` -> `2cad9c84` -> `98c004aa7`; packet §§27–30. | G4 UNPASSED | Retail/behavior pass 2/10 and production pass 4/10 closed the two evidence-only findings. Fresh campaign Release 0W/0E and focused 48/48; exact scratch hermetic 16,976/16,976 and canonical InstalledDat 386/10/1, manifests 30/30. Pinned gate `logs/selfgate-20260905-032132-s5-470-pinned-shadow-ab-r1`: retail/off -> High -> retail/off, 3/3 PNGs, exit 0, graceful, no client; visual PASS provisional. The stale recipe-8 pre-route launch is excluded and recorded in §30. |
 | S5-#469 | **LANDED + REVIEW-CLOSED 2026-09-05; LEAD GRAPHICAL TRANSITION PROVISIONAL PASS.** Contract `809887524`; reviewed scratch `c09b6cf0f`; campaign implementation `94ddde69a`; route `62efc72cb`; packet §§31–32. | G4 UNPASSED | Retail/deviation pass 1/10 and production pass 2/10 both PASS with no finding. The two atmospheric vertex receivers keep retail's authored unnormalized `uLights` direction across every shadow gate; celestial direction remains for opt-in shadow/volumetric projection; IA-24 corrected in the same commit. Exact scratch: Release 0W/0E, focused 126/126, Vulkan 2/2, hermetic 16,983/16,983, InstalledDat 386/10/1. Fresh campaign Release 0W/0E, focused 82/82, Vulkan 2/2. Gate `logs/selfgate-20260905-040449-s5-469-lighting-transition-r1`: five PNGs, active 2,500-caster/four-cascade High rows, no near-black relight, exit 0/graceful, no client; visual PASS provisional. |
 | S5-c5 | **CLOSED + LANDED 2026-09-05; LEAD GRAPHICAL SMOKE PROVISIONAL PASS.** Contract `b77989c32`; campaign `bf53e2ad6` -> `e625dc4e6` -> `1b7ee4e58`; reviewed scratch tip `158656f0d`; packet §§33–35. | G4 UNPASSED | Retail/deletion pass 1/10 PASS. Production pass 2/10 found one static-field hole in the owner guard; fix round 1 reproduced both static-owner mutations, and production pass 3/10 PASS. Exact scratch hermetic 16,921/16,921, canonical InstalledDat 368/9/1, manifests 30/30. Fresh campaign Release 0W/0E, App 146/146, Core 8/8. A stale recipe-8 preflight is excluded; a non-destructive recipe-10 bake produced 2,237,865 keys with zero failures. Corrected gate `logs/selfgate-20260905-052130-s5-c5-landed-v10`: five PNGs, exit 0/graceful, no fatal/deleted-prefix match, no client left; geometry matches S5-c4, visual PASS provisional. |
-| S5 | **IN FLIGHT: C1b diagnostic complete; C1c permanent replay correction contracted.** c1–c5 plus #470/#469 landed, review-closed, and provisionally self-gated; C1 offline evidence complete. | G4 | Packet §§7 and 12–40 bind. Corrected matrix projection + next-marker pose + live-view EC recording match all 25 complete OH/capture frames exactly; #458/#472 and AD-118's former x87 attribution are disproven as harness defects. C1c makes the proven correction permanent with mutations and sequential reviews; then C1a geometry/membership hash, full-lane closeout, C2 and G4. No production code changed in the diagnostic. Never merge main before G4. |
+| S5 | **OWNER VISUAL GATE FAIL — #473 exterior roof/wall sections missing (2026-09-05).** c1–c5 plus #470/#469 landed; prior self-PASS is not owner acceptance. C1 offline evidence complete; C1c test correction frozen pending review. | G4 | Packet §§7 and 12–41 bind. Owner's clean02219318a Release/recipe10 gate shows broken Holtburg and cathedral buildings; Facility Hub interiors appear correct. §41 read-only diagnosis takes priority; no root cause claimed yet. The 25 exact transcript frames do not prove complete rendered buildings. After the defect's bounded repair/reviews/re-gate: C1c review/landing, real geometry/membership hash, full-lane closure, C2 and the full G4 matrix remain. Never merge main before G4. |
 
 ---
 

docs/research/2026-09-01-overhaul/s5-consumers-material-closeout-packet.md

@@ -3854,3 +3854,56 @@ canonical conformance closure when no client is running, verifies the same
 nonpassing identities except the intentionally retired #458 row, and keeps
 the ledger current. Geometry/membership witness, final full-lane evidence,
 C2 and G4 remain. No merge to main.
+
+## 41. Owner visual gate FAIL — exterior building sections missing (#473)
+
+### 41.1 Observed result and exact session
+
+On 2026-09-05 the owner authorized a manual graphical gate. Fresh explicit
+JSON preflight found ACE UDP9000/PID13340 and no retail, AcDream or debugger.
+A complete Release solution build at clean02219318a finished exit0, 0W/0E.
+One client PID18836 launched at05:22:31Z using the verified recipe10 package
+`acdream-v10-s5-c5.pak`, SHA256
+`4E0FA6C589ECE12E13099A56385077964961EC52F888BC9161C6F5D34829B59B`.
+App.dll SHA256:
+`0EE6E74174C1E33168EA17A1DF2B592A996F3D77009F0D5A35A451E9A21DDB26`.
+Build, logs and launch provenance: `logs/owner-gate-20260905-02219318a/`.
+There is no automated movement or shutdown script.
+
+**OWNER FAIL:** exterior buildings in Holtburg and cathedral are broken;
+Facility Hub interiors seem correct. Original owner PNG (unaltered copy):
+`owner-gate-20260905-holtburg-fail.png`. It visibly contains incomplete
+roof/wall sections. World-reveal logs report completed ready/visible worlds
+at Holtburg, cathedral and Facility, but that is readiness evidence only.
+Likewise the exact walk-event replay does not prove mesh/subset completeness.
+No PASS or G4 acceptance is inferred. The renderer must be repaired and the
+owner must re-gate; no merge to main.
+
+### 41.2 Bounded read-only diagnosis, before a repair contract
+
+Freeze the uncommitted §40 C1c return in s5-closeout-harness (9 test/doc
+files; manifest artifacts/s5-c1c-02219318a/README.txt); do not discard or
+mix the renderer defect into it. C1c reviews/landing and C1 geometry/C2
+closeout wait behind this owner failure.
+
+The lead and at most two OpenAI contributors may inspect current source,
+history, existing tests/captures/logs, installed DATs/package and the named
+retail decomp plus paired binary. Trace the actual exterior-building path:
+DAT/Setup/GfxObj geometry and source-part order -> prepared records -> live
+shell/degrade choice -> classification/subset/transform/index ranges ->
+ordered command and shader state. Compare it with the working EnvCell path.
+Distinguish missing construction from admission, part/degrade selection,
+batch index/range errors and depth/cull/material state. Verify every claimed
+retail rule in named source and paired bytes. A hypothesis is not a finding
+until an exact reachable code/data witness supports it.
+
+No source/test mutation, production build, package bake, graphical launch,
+debugger attach or user-client input/closure is authorized by this diagnostic
+step. Read-only lightweight inspection continues beside owner PID18836; do
+not run a heavy corpus/performance gate during the user's inspection. Return
+the concrete first divergence and smallest discriminating test/reproduction
+needed. Lead then writes/commits the bounded repair contract, one OpenAI
+implementer repairs it, sequential retail and production lenses review, and
+the lead verifies/commits/re-gates after graceful client closure. Any genuine
+unrecoverable static retail fact is reported rather than guessed. Owner's
+ten-review ceiling remains; documentation-only corrections are direct.