acdream/docs/research/2026-06-02-membership-verbatim-port-handoff.md

Handoff — Verbatim port of retail find_cell_list (the R1 "flap" fix) — 2026-06-02

Canonical pickup for the next (fresh) session. Read this FIRST, then the linked design docs. This session shipped R1 — the per-cell DrawInside render redesign (the interior seal works: the cellar is solid), and that render redesign exposed a pre-existing cell-MEMBERSHIP ping-pong — the visual "flap" the user sees at every cottage threshold. The render is correct; the membership answer it consumes is unstable. The next job is a verbatim port of retail CObjCell::find_cell_list's containing-cell pick to make membership stable.

---

0. THE MANDATE + the new authorization (user, 2026-06-02 — non-negotiable)

• The standing render mandate is unchanged: fully working outdoor + indoor + dungeon rendering, no shortcuts/bandaids, port from retail, architecturally-correct even if slower. (See the master render handoff + design spec, §13 links.)
• NEW, EXPLICIT authorization (this is the key enabler): "You are allowed to break whatever you want in the code to get the engine and membership working, it's OK!" — i.e. do the faithful verbatim port even if it breaks other physics/movement tests or behavior. Don't tiptoe around the #98-area accumulated logic. Get the membership right, faithfully; fix any breakage afterward. Run the physics suite to SEE what breaks (eyes open), don't avoid the port.
• The user also clarified the fidelity split: physics/membership = strict, line-by-line faithful decomp port (this task); rendering = retail-structured orchestration over the kept WorldBuilder pipeline (already done in R1 — do NOT re-port rendering from decomp).
• The user is tired of probe-driven debug cycles — do NOT ask them to run manual probe walks. Diagnose from existing data + the existing apparatus (trajectory-replay harness, auto-logging probes); verify the fix with a normal visual test (their eyes) + the deterministic harness.

---

1. THE MENTAL MODEL (render vs membership) — internalize this first

Two separate systems, in a strict producer→consumer relationship:

1. Membership (physics, AcDream.Core.Physics): every tick, answers ONE question — "which cell (room/space) is the player standing in?" → a single currentCell per tick. The world is carved into cells: cellar 0174, stairs 0175, main room 0171 (+ sub-cells 0172/0173), vestibule 0170, outdoors 0031 (note: low id 0x31 < 0x100 ⇒ outdoor landcell).
2. Render (AcDream.App.Rendering): draw(currentCell) — strictly downstream. If currentCell is jittery, render faithfully redraws the jitter.

The flap = render correctly drawing an oscillating membership answer. Proof it's membership, not render: when membership is stable (standing still in the cellar) the render seals perfectly (solid walls/floor, no bleed — user confirmed). The flap appears only at the boundaries where the [cell-transit] log shows the cell answer oscillating. Fix membership → render goes stable; the seal already works.

Confidence note (honest): very high the flap is membership (the cellar-seals proof + the flap-tracks-cell-flips evidence). NOT a claimed 100% that zero render residual exists — a single clean outdoor→indoor transition has never been observed (the ping-pong masks it), so a small render tear on a genuine one-time crossing could exist. If so it's separate + isolated, and becomes visible once membership is stable. The membership fix is unambiguously the right next step regardless.

---

2. WHAT THIS SESSION SHIPPED (commit ledger, branch claude/thirsty-goldberg-51bb9b)

SHA	What	Keep?
7aca79f	R0 — locked render-redesign design spec (brainstorm outcome)	✅ authority
ce7404b	R1 implementation plan (per-cell DrawInside, TDD)	✅ authority
cf85ea4	R1 Task 1 — InteriorEntityPartition (3-bucket entity split, TDD, 3 tests)	✅ correct
4b75c68	R1 Task 2 — InteriorRenderer per-cell DrawInside loop	✅ correct
c4fd711	R1 Task 3 — binary render decision in GameWindow.OnRender (indoor = DrawInside only)	✅ correct
58822fe	R1 Task 4 — repurpose the WbDrawDispatcher.cs:1756 ParentCellId==null bypass (#78)	✅ correct
5ca2f44	membership pre-check approximation (current-cell-first explicit check)	⚠️ REPLACE (see §5)

Working tree is clean at 5ca2f44 (untracked = session screenshots + launch logs only). R1 (the render redesign) is done and proven correct by the visual gate (cellar seals). The only open R1 blocker is the membership flap (this handoff).

Design + plan docs (read after this handoff):

• Design spec: docs/superpowers/specs/2026-06-02-render-pipeline-redesign-design.md
• R1 plan: docs/superpowers/plans/2026-06-02-render-r1-per-cell-drawinside.md
• Master render handoff: docs/research/2026-06-02-render-pipeline-redesign-handoff.md
• Retail render reference: docs/research/2026-06-02-retail-render-pipeline-full-reference.md

---

3. THE PROVEN DIAGNOSIS (the flap = membership ping-pong)

Captured from the user's R1 walk (ACDREAM_PROBE_CELL, [cell-transit] lines). 59 cell transitions in one cottage walk (a clean walk should be ~6–8) — oscillating at every boundary:

• Stairs ↔ cellar (0175 ↔ 0174) at ~(154.3, 9.4, 93.1). Crucially, the foot Z oscillates ~0.2 m/tick (93.07 ↔ 93.27; low Z = cellar, high Z = stairs). ⇒ membership is faithfully following a bouncing position — this looks like a SEPARATE stairs/ramp physics instability (step-up/step-down, #98 family), not (only) the pick. See §8 — do not conflate.
• Room ↔ room (0171 ↔ 0173 ↔ 0172) at constant Z = 94.0, tiny X/Y movement. ⇒ pure membership-pick non-determinism (the unordered HashSet). This is the verbatim-port target.
• Vestibule ↔ outdoors (0170 ↔ 0031) at ~(155, 16). 0031 is an outdoor landcell, so each flip swings the binary render decision to the outdoor path → the full sky/world/NPCs flash ("bluish background"). Fixed by the same current-first hysteresis (vestibule wins while it contains you).

The [vis] log confirms the mechanism: as the root cell flips, the OutsideView + visible-cell set flip with it (e.g. room 0171 → outside(polys=0) sealed vs stairs 0175 → outside(polys=1) sky-through-portal), so the through-door landscape appears/disappears = the flap.

Evidence files (this session, may still be present in the worktree root): launch-r1.log, launch-fix.log (UTF-16 — read with Select-String / ripgrep --encoding utf-16-le, NOT GNU grep).

---

4. ROOT CAUSE + the verbatim retail target

4.1 acdream (the bug)

CellTransit.BuildCellSetAndPickContaining (src/AcDream.Core/Physics/CellTransit.cs, the body of FindCellSet):

• The candidate set is an unordered HashSet<uint> (declared ~line 433).
• The current cell IS added first (~line 447, indoor seed) — but HashSet does not preserve insertion order, and the set's contents churn tick-to-tick at a boundary, so the enumeration can surface a neighbour before the current cell.
• The pick (the foreach (uint candId in candidates) interior pass, ~lines 544–562 post-5ca2f44): iterates the HashSet in arbitrary order, returns the first interior cell whose CellBSP contains the sphere center (interior-wins). Outdoor fallback = a gx/gy XY-column computation (NOT retail's point_in_cell on landcells — acdream landcells have no point_in_cell).
• The player's CellId is set from this: ResolveWithTransition (PhysicsEngine.cs:608) returns the swept sp.CurCellId (lines 880/901), which FindEnvCollisions (TransitionTypes.cs:1958) sets from FindCellSet; PlayerMovementController.cs:1296 does UpdateCellId(resolveResult.CellId, "resolver"). A1 (swept membership) IS ported — the divergence is purely the pick ordering.

4.2 retail (the verbatim source) — CObjCell::find_cell_list @ 0x52b4e0 (pc:308742–308831)

Reads verbatim this session. The structure:

// edi = arg4 = the CELLARRAY (an ORDERED DArray<CELLINFO{cell_id, cell*}>)
num_cells = 0; added_outside = 0;
objcell_id = arg1->objcell_id;                 // the CURRENT cell
cell0 = (objcell_id >= 0x100) ? CEnvCell::GetVisible(objcell_id) : CLandCell::GetVisible(objcell_id);
if (objcell_id >= 0x100)  CELLARRAY::add_cell(edi, objcell_id, cell0);   // CURRENT at INDEX 0  (pc:308766)
else                      CLandCell::add_all_outside_cells(arg1, arg2, arg3, edi);
// expand: for each cell already in the array, call its find_transit_cells (vtable[0x80])  (pc:308782)
for (i = 0; i < edi->num_cells; i++)
    if (edi->cells[i].cell)  edi->cells[i].cell->vtable[0x80](arg1, arg2, arg3, edi, arg6);

// THE PICK (pc:308788–308825): iterate the array IN ORDER from index 0, interior-wins-break
*arg5 = nullptr;
for (i = 0; i < edi->num_cells; i++) {
    cell = edi->cells[i].cell;
    if (cell) {
        // point relative to the cell's block offset:
        Vector3 p = arg3->center - LandDefs::get_block_offset(arg1->objcell_id, cell->cell_id);
        if (cell->vtable[0x84](&p) != 0) {        // point_in_cell  (pc:308810)
            *arg5 = cell;                          // set result on ANY containing cell
            if ((int16_t)cell->cell_id >= 0x100) { // interior?
                arg6->hits_interior_cell = 1;
                break;                             // INTERIOR-WINS — stop
            }
        }
    }
}
// (then do_not_load_cells prune, pc:308829+ — out of scope for the flap)

The load-bearing facts: (a) the current cell is at index 0; (b) the pick iterates in order and breaks on the first interior-containing cell. So the current cell is tested FIRST — if you're still inside it, it wins and the search stops. That ordered, current-first iteration IS the hysteresis: you stay in your current cell until the center genuinely leaves it, never flipping to an overlapping neighbour. acdream's unordered HashSet discarded that ordering.

CELLARRAY::add_cell definition was not located by grep (void CELLARRAY::add_cell( → no match; only call sites at pc:279012/288076/308766/309860/309960/310030/310054/310208/317064/317218). Behaviorally it appends to the ordered array; treat the candidate collection as ordered + deduped (the HashSet already dedups; an ordered-dedup collection is the faithful model). The fresh session can locate add_cell via Ghidra MCP (/decompile_function) or acclient.h (CELLARRAY = acclient.h:31574) if exact dedup semantics are wanted.

4.3 The fix (the fresh session's task)

Replace the unordered HashSet candidate set with an ordered, deduped collection (mirror retail CELLARRAY: current cell at index 0, neighbours in BFS add-order, unique) and port the pick verbatim: iterate from index 0; for each interior cell, point_in_cell via BSPQuery.PointInsideCellBsp(cell.CellBSP.Root, localCenter); first interior-containing → return (break). This is the current-first hysteresis that stops the ping-pong.

• Thread the new ordered-collection type through the methods that build candidates: BuildCellSetAndPickContaining, FindTransitCellsSphere, AddAllOutsideCells, CheckBuildingTransit (they currently take HashSet<uint> candidates). Changing the type is the invasive part the user authorized.
• Honest scope: the interior pick is fully verbatim-portable. The outdoor fallback (the gx/gy XY-column) stays an acdream adaptation — acdream landcells lack retail's CLandCell::point_in_cell (they're a terrain grid). Mark it clearly. The flap is all interior/boundary, so the verbatim interior pick covers it.
• Suggested collection: a small CellArray class — List<uint> (order) + HashSet<uint> (O(1) dedup); Add(id) appends iff new; ordered enumeration; Contains; Count. Exposes its list as IReadOnlyCollection<uint> for the out cellSet return.

---

5. REPLACE the committed pre-check approximation (5ca2f44)

5ca2f44 added an explicit current-cell-first pre-check in BuildCellSetAndPickContaining (before the interior-pass foreach): if the current cell is interior and its CellBSP contains the center, return it. This achieves the property but NOT retail's ordered-array structure, and it still diverges on the multi-neighbour edge (hash-order among non-current candidates). The user wants this replaced by the verbatim ordered-CELLARRAY port (§4.3). When you implement the ordered pick, delete the pre-check (it becomes redundant).

• Keep the regression guard test added in 5ca2f44: CellTransitFindCellSetTests.TwoOverlappingCells_CurrentCellWinsTheStraddle (two-direction [Theory]). It documents the current-cell-first invariant and passes under the verbatim port. Note: it does not go RED against the bug statically (the HashSet happens to enumerate the current cell first when the set is small/unchurned — see §7), so it's a guard, not the RED repro. The real verification is the harness + the visual flap gate.

---

6. THE WORKFLOW for the fresh session (this is a PHYSICS port)

Per CLAUDE.md's mandatory faithful-port workflow (the triangle-Z / frame-swap lessons):

1. Grep named — DONE. find_cell_list found at pc:308742.
2. Read decomp — DONE. §4.2 has the verbatim pseudo-C of the pick.
3. WRITE PSEUDOCODE (the step skipped this session): translate retail find_cell_list's candidate-build + ordered pick to readable pseudocode in docs/research/*_pseudocode.md before porting. This catches misreads.
4. PORT FAITHFULLY line-by-line (§4.3): ordered CellArray + in-order current-first interior-wins pick. Same control flow as retail. Don't "improve."
5. CONFORMANCE TEST: extend CellTransitFindCellSetTests — a multi-neighbour straddle where the current cell wins by order (not just by containment), and an indoor↔outdoor straddle (vestibule stays vestibule while it contains you).
6. VERIFY (no manual probe walks): the deterministic harness (CellTransitFindCellSetTests, CellarUpTrajectoryReplayTests, DoorBugTrajectoryReplayTests), then run the FULL physics suite to see breakage (dotnet test tests/AcDream.Core.Tests), then the visual flap gate (user walks normally; ACDREAM_PROBE_CELL auto-logs so you can confirm the transition count drops 59 → ~6–8 without asking them to do anything extra).

Superpowers: you may go straight to superpowers:writing-plans → superpowers:executing-plans for the port (the design is clear — a heavy brainstorming pass is probably unnecessary). Use superpowers:systematic-debugging if the flap doesn't fully clear and you need to chase a residual. Use superpowers:test-driven-development for the conformance tests.

---

7. WHY the static unit test alone won't catch it (important nuance)

The pre-check / the bug interplay: .NET HashSet<uint> with a small, unchurned set tends to enumerate in insertion order, and the current cell is added first — so a static single-tick test where the current cell contains the center already returns the current cell (the TwoOverlappingCells guard PASSES even against the unfixed pick). The production ping-pong is dynamic — it arises from (a) the candidate set's contents churning tick-to-tick (reordering the enumeration), and/or (b) the foot position genuinely oscillating across a boundary (the stairs Z-jitter, §8). The ordered CELLARRAY removes (a) by construction (deterministic current-first order every tick). (b) is the separate physics issue. ⇒ verify dynamically (harness + visual), not just by the static guard.

---

8. The SEPARATE stairs-physics suspicion (don't conflate with the pick)

On the stairs the foot Z oscillated ~0.2 m/tick while membership flipped 0175↔0174. The room flips were at constant Z (pure pick). So:

• The room/vestibule flips → fixed by the verbatim current-first pick (this task).
• The stairs flip may be a separate physics-movement instability (step-up/step-down on the cellar stairs/ramp — the #98 family: "stuck at the last step", Transition.AdjustOffset / DoStepUp). The current-first hysteresis will dampen it if the wobble stays inside the current cell's BSP, but if the Z-oscillation is large enough to cross the cell boundary it will persist.
• If the stairs still flap after the membership port lands and the room/door flaps are gone, that's the physics-movement target (a #98-area follow-up) — diagnose it the same evidence-first way (the existing ACDREAM_CAPTURE_RESOLVE + the trajectory-replay harness; the user's cellar-stairs is the repro). Do not block the membership port on it.

---

9. KEEP / DON'T-REDO (avoid re-litigating settled work)

KEEP (correct, do not reopen for the flap):

• All R1 render code: InteriorEntityPartition, InteriorRenderer (per-cell DrawInside loop), the binary decision in GameWindow.OnRender, the WbDrawDispatcher gate fix. The cellar seals — render is correct.
• PortalVisibilityBuilder, ClipFrameAssembler/ClipFrame, EnvCellRenderer, TerrainModernRenderer, the WB mesh pipeline. The render design spec + R1 plan.
• The swept-membership chain (A1): ResolveWithTransition returning sp.CurCellId. Do NOT revert to a static ResolveCellId re-derive.
• The 5ca2f44 regression test (TwoOverlappingCells_CurrentCellWinsTheStraddle).

DON'T:

• Don't reopen R1's render code chasing the flap — the flap is membership.
• Don't re-port rendering from the decomp (use the WB pipeline — CLAUDE.md).
• Don't add a render-side debounce/grace-period for the flap (bandaid — forbidden).
• Don't ask the user for manual probe walks (diagnose from existing data + harness; verify visually).

---

10. TEST STATE (baseline for regression judgement)

• Pre-existing Core failures (NOT yours — verified): the handoff's "5" — 2 step-up gaps (incl. an A6.P4 door regression) + 3 door-collision apparatus / A6.P5. The 2 DoorBugTrajectoryReplayTests failures (TransientState live=0x87 harness=0x83, e.g. LiveCompare_DoorBlocksFromOutside_Tick22760) were verified pre-existing this session (they fail without the membership change too). Plus the documented PhysicsResolveCapture/PhysicsDiagnostics static-leak flakiness (8–19 failures across runs of identical code). ⇒ the deterministic membership net (CellTransit|FindEnvCollisions|CellGraph|Doorway|Cellar|DoorBug) is the reliable signal: it was 66 pass + 2 pre-existing DoorBug with the pre-check.
• tests/AcDream.App.Tests: 174 green (incl. InteriorEntityPartitionTests ×3, the flipped EntityClipTests gate test).
• Breakage is authorized (§0): when the verbatim port lands, run the full physics suite, diff the failure set against this baseline, and fix genuinely-new breakage (the port may legitimately change membership-dependent test expectations — update them with retail-cited reasoning, don't pin wrong values).

---

11. After the membership port: the remaining render arc

Once the flap is gone and the seal holds, resume the R1→R7 plan (design spec §7):

• R1b — per-cell particles (#104): "particles bleed through the ground when looking out the door" — Scene-pass particles aren't cell-clipped (needs a cell link on ParticleEmitter; the per-cell DrawInside loop makes this tractable).
• R2 — outside-looking-in (DrawPortal): "interior walls are transparent when looking in a window/door from outside" — no outdoor→interior portal render yet.
• R3 — dungeons. R4 — polish (the CullMode.Landblock→None winding; remove dormant WB two-pipe scaffolding Building/BuildingLoader; conformance).
• The cottage seal (R1) is not signed off until the flap is gone — the membership port is the R1 gate's remaining blocker.

---

12. KEY FILES + ANCHORS (quick index)

MEMBERSHIP (the task)
  src/AcDream.Core/Physics/CellTransit.cs
    FindCellSet (entry, ~388 single-sphere, ~412 multi-sphere)
    BuildCellSetAndPickContaining (the candidate build + pick — THE function to port)
      ~433  candidates = new HashSet<uint>()           ← the unordered set to replace
      ~447  candidates.Add(currentCellId)              ← current added first (indoor seed)
      ~520  the 5ca2f44 pre-check                      ← DELETE when the ordered pick lands
      ~544  foreach interior pass (the pick)           ← port verbatim (ordered, current-first)
      ~558  gx/gy outdoor fallback                     ← acdream adaptation (landcells lack point_in_cell)
    FindTransitCellsSphere / AddAllOutsideCells / CheckBuildingTransit  ← take `HashSet<uint> candidates` (re-type)
  src/AcDream.Core/Physics/TransitionTypes.cs:1958     ← FindEnvCollisions calls FindCellSet (the swept membership)
  src/AcDream.Core/Physics/PhysicsEngine.cs:608/880/901← ResolveWithTransition returns swept sp.CurCellId
  src/AcDream.App/Input/PlayerMovementController.cs:1296 ← UpdateCellId(resolveResult.CellId, "resolver")
  tests/AcDream.Core.Tests/Physics/CellTransitFindCellSetTests.cs ← conformance home (+ the kept guard)
  (line numbers ≈ — shifted by 5ca2f44's ~22 lines; grep by method name)

RETAIL DECOMP (the verbatim source)
  CObjCell::find_cell_list   0x52b4e0  pc:308742 (pick = 308788–308825; add_cell @308766; point_in_cell vtable[0x84] @308810; find_transit_cells vtable[0x80] @308782)
  CEnvCell::find_transit_cells 0x52c820 pc:309968
  acclient.h: CELLARRAY 31574 ; CELLINFO 31925 ; SPHEREPATH 32625
  Ghidra MCP (port 8081, patchmem.gpr) for /decompile_function on add_cell if exact dedup wanted.

RENDER (correct — context only)
  src/AcDream.App/Rendering/InteriorRenderer.cs          ← per-cell DrawInside loop
  src/AcDream.App/Rendering/InteriorEntityPartition.cs   ← 3-bucket entity split
  src/AcDream.App/Rendering/GameWindow.cs (OnRender ~7530)← the binary decision
  src/AcDream.App/Rendering/Wb/WbDrawDispatcher.cs:~1744 ← EntityPassesVisibleCellGate (gate fix)

---

13. RUNNING THE CLIENT + apparatus (no manual probe walks)

Per CLAUDE.md "Running the client" (PowerShell; +Acdream spawns at/near the Holtburg cottage):

$env:ACDREAM_DAT_DIR="$env:USERPROFILE\Documents\Asheron's Call"; $env:ACDREAM_LIVE="1"
$env:ACDREAM_TEST_HOST="127.0.0.1"; $env:ACDREAM_TEST_PORT="9000"
$env:ACDREAM_TEST_USER="testaccount"; $env:ACDREAM_TEST_PASS="testpassword"
$env:ACDREAM_PROBE_CELL="1"   # auto-logs [cell-transit]; lets you confirm the count drops, no manual walk
dotnet run --project src\AcDream.App\AcDream.App.csproj --no-build -c Debug *>&1 | Tee-Object -FilePath launch.log

• Build green BEFORE launching. Logs are UTF-16 (Select-String / ripgrep --encoding utf-16-le).
• A client from THIS session may still be running (graceful close clears ACE in ~3–5s; a hard kill leaves the session stuck ~3 min — see CLAUDE.md). Close gracefully before relaunching.
• Verify the flap visually (user's eyes) + the [cell-transit] count. Walk: outside 0031 → door 0170 → room 0171 → stairs 0175 → cellar 0174, and back. Room/door flap should be GONE.

---

14. PICKUP PROMPT (copy-paste for the fresh session)

VERBATIM PORT of retail CObjCell::find_cell_list's containing-cell pick — to fix the cell-MEMBERSHIP
ping-pong that the R1 render redesign exposed (the cottage "flap"). Continue on branch
claude/thirsty-goldberg-51bb9b (do NOT branch/worktree; do NOT push without asking; NEVER git
stash/gc — a shared stash is under investigation). PowerShell on Windows; launch logs are UTF-16
(Select-String / ripgrep --encoding utf-16-le, NOT GNU grep).

AUTHORIZATION (user, explicit): you may BREAK ANY physics/movement code or tests to get the engine +
membership working faithfully — breakage is OK, fix later. Do the faithful line-by-line port; don't
tiptoe around the #98-area logic. Run the physics suite to SEE what breaks. The user is tired of
probe walks — diagnose from existing data + the deterministic trajectory-replay harness; verify with
a normal VISUAL test (their eyes) + the auto-logging ACDREAM_PROBE_CELL.

READ FIRST (in order):
1. docs/research/2026-06-02-membership-verbatim-port-handoff.md   (THIS handoff — full diagnosis,
   the verbatim retail source §4.2, the fix §4.3, replace-the-pre-check §5, workflow §6, KEEP §9).
2. docs/superpowers/specs/2026-06-02-render-pipeline-redesign-design.md   (the render redesign — context; render is CORRECT + downstream of membership).
3. docs/superpowers/plans/2026-06-02-render-r1-per-cell-drawinside.md     (R1 plan — what shipped).

THE JOB:
- Replace the UNORDERED HashSet candidate set in CellTransit.BuildCellSetAndPickContaining with an
  ORDERED, deduped collection (retail CELLARRAY: current cell at index 0, BFS add-order) and port the
  pick VERBATIM: iterate from index 0, point_in_cell per interior cell, first interior-containing wins
  (break) — retail find_cell_list pc:308788-308825. This is the current-first hysteresis that stops
  the ping-pong. Thread the new type through FindTransitCellsSphere/AddAllOutsideCells/CheckBuildingTransit.
- DELETE the 5ca2f44 current-first pre-check (the ordered pick supersedes it). KEEP its regression
  test (TwoOverlappingCells_CurrentCellWinsTheStraddle).
- Outdoor fallback (gx/gy XY-column) stays an acdream adaptation (landcells lack point_in_cell) — mark it.

WORKFLOW (physics port — mandatory): grep named (done) → read decomp (done, §4.2) → WRITE PSEUDOCODE
(docs/research/) → PORT FAITHFULLY line-by-line → CONFORMANCE TEST → run full physics suite (see
breakage vs the §10 baseline; fix new breakage) → VISUAL flap gate (room/door flap GONE; [cell-transit]
count 59→~6-8). Use superpowers:writing-plans → executing-plans; test-driven-development for conformance.

PROVEN, DON'T RE-LITIGATE: the flap is MEMBERSHIP not render (cellar seals when membership is stable;
flap tracks the [cell-transit] ping-pong). R1 render is correct — do NOT reopen it. The 2 DoorBug
TransientState failures are PRE-EXISTING (verified). The stairs flip additionally shows the foot Z
oscillating ~0.2m/tick = a SEPARATE physics issue (#98 family, §8) — if it persists after the
membership port (room/door fixed), that's the next target; don't block on it.

GOAL: stable membership → the R1 seal holds with no flap. Then resume R1b (particles) → R2
(outside-looking-in) → R3/R4 per the design spec.