fix(physics): close A-04 transitive serve breach + W1 adversarial findings + blueprint integration plan #40

Merged

core-labs merged 5 commits from feat/adr-0241-0242-mastery-close into main 2026-07-15 20:59:50 +00:00

Conversation 0 Commits 5 Files changed 11 +1545 -36

core-labs commented 2026-07-15 19:53:12 +00:00

Owner

Copy link

Summary

W1 adversarial verification of the merged ADR-0241/0242 surface (executed, not read-only) + the one confirmed defect fixed + full 4-blueprint integration plan + W2 plan archives.

Finding #2 (HIGH) — fixed here

Importing chat.runtime transitively loaded 5 off-serving modules (wave_manifold, holographic_vault, fibonacci_search, multi_scale_energy, wave_energy_boundary) through the core/physics package barrel — falsifying the 🟢 'serve path not wired' acceptance row while the direct-AST A-04 pin stayed green. Chain: chat.runtime → … → field.propagate → core.physics.energy → [barrel __init__] → *.

Reconciliation (ruled 2026-07-15): one substrate, two tiers.

• T1 sanctioned serve substrate: wave_manifold — goldtether/surprise/biography delegate to it (subsumption map); removed from the A-04 ban list.
• T2 off-serving: holographic_vault / fibonacci_search / wave_energy_boundary / multi_scale_energy → PEP 562 lazy __getattr__ exports; serve process never loads them; from core.physics import X still works off-serving.
• New tests/test_serve_quarantine_transitive.py: process-level sys.modules guard (RED against old barrel → GREEN now).

Adversarial verdicts (docs/research/adr-0241-0242-adversarial-and-fidelity-findings.md)

Attack	Verdict
Chiral non-vacuity (P8)	✅ Q=−2.5 non-vacuous, conserved exactly, honest-even
Fibonacci cert (V1)	✅ budget-exact across 8/15/20/21 (live counter), digest-stable
P9 seal discipline	✅ SPECULATIVE-only + defensive re-check
Ledger spot-check	🟡 honest except prose-only anyon V5 🟢 row (no code, no test)
Serve quarantine	🔴 live breach → fixed in this PR

Also in this PR

• docs/research/adr-0241-0242-blueprint-integration-plan.md — every mechanism of the 4 authority docs dispositioned (faithful / honest-deviation / missing-piece / scrap / staged). Tracked missing pieces: chiral sign-preservation gate (next PR) + CRDT-vs-bit-exact determinism clarification.
• docs/plans/ — W2 archive of Plan A/B + session completion summary (Grok worktree was at prune risk).

Test plan

• tests/test_serve_quarantine_transitive.py (new guard, GREEN)
• 3 dedicated suites (wave_manifold / fibonacci / cohesion): 47 passed
• 15-file affected lane (energy/vault/seam/codec/rethaw/…): 179 passed, 0 failed
• Serve smoke: T2 absent from sys.modules after import chat.runtime; lazy barrel access verified
• Forgejo Act CI (smoke + lane-shas) green on this PR
• Merge only with explicit authorization

Note: GitHub Actions mirror CI is currently dead — account billing lock ('job was not started because your account is locked'). Act runner is the validating CI for this PR.

## Summary **W1 adversarial verification of the merged ADR-0241/0242 surface (executed, not read-only) + the one confirmed defect fixed + full 4-blueprint integration plan + W2 plan archives.** ### Finding #2 (HIGH) — fixed here Importing `chat.runtime` transitively loaded **5 off-serving modules** (wave_manifold, holographic_vault, fibonacci_search, multi_scale_energy, wave_energy_boundary) through the `core/physics` package barrel — falsifying the 🟢 'serve path not wired' acceptance row while the direct-AST A-04 pin stayed green. Chain: `chat.runtime → … → field.propagate → core.physics.energy → [barrel __init__] → *`. **Reconciliation (ruled 2026-07-15): one substrate, two tiers.** - **T1 sanctioned serve substrate:** `wave_manifold` — goldtether/surprise/biography delegate to it (subsumption map); removed from the A-04 ban list. - **T2 off-serving:** holographic_vault / fibonacci_search / wave_energy_boundary / multi_scale_energy → PEP 562 lazy `__getattr__` exports; serve process never loads them; `from core.physics import X` still works off-serving. - New `tests/test_serve_quarantine_transitive.py`: process-level sys.modules guard (RED against old barrel → GREEN now). ### Adversarial verdicts (docs/research/adr-0241-0242-adversarial-and-fidelity-findings.md) | Attack | Verdict | |---|---| | Chiral non-vacuity (P8) | ✅ Q=−2.5 non-vacuous, conserved exactly, honest-even | | Fibonacci cert (V1) | ✅ budget-exact across 8/15/20/21 (live counter), digest-stable | | P9 seal discipline | ✅ SPECULATIVE-only + defensive re-check | | Ledger spot-check | 🟡 honest except prose-only anyon V5 🟢 row (no code, no test) | | Serve quarantine | 🔴 live breach → **fixed in this PR** | ### Also in this PR - `docs/research/adr-0241-0242-blueprint-integration-plan.md` — every mechanism of the 4 authority docs dispositioned (faithful / honest-deviation / missing-piece / scrap / staged). Tracked missing pieces: **chiral sign-preservation gate** (next PR) + CRDT-vs-bit-exact determinism clarification. - `docs/plans/` — W2 archive of Plan A/B + session completion summary (Grok worktree was at prune risk). ## Test plan - [x] tests/test_serve_quarantine_transitive.py (new guard, GREEN) - [x] 3 dedicated suites (wave_manifold / fibonacci / cohesion): 47 passed - [x] 15-file affected lane (energy/vault/seam/codec/rethaw/…): **179 passed, 0 failed** - [x] Serve smoke: T2 absent from sys.modules after `import chat.runtime`; lazy barrel access verified - [ ] Forgejo Act CI (smoke + lane-shas) green on this PR - [ ] Merge only with explicit authorization **Note:** GitHub Actions mirror CI is currently dead — account billing lock ('job was not started because your account is locked'). Act runner is the validating CI for this PR.

core-labs added 3 commits 2026-07-15 19:53:21 +00:00

fix(physics): close A-04 transitive serve breach — lazy Tier-2 barrel exports + process-level guard ... c8160cacba

Importing chat.runtime transitively loaded 5 off-serving modules
(wave_manifold, holographic_vault, fibonacci_search, multi_scale_energy,
wave_energy_boundary) through the core/physics package barrel — falsifying
the 'serve path not wired' acceptance row while the direct-AST A-04 pin
stayed green.

Reconciliation (ruled 2026-07-15): one substrate, two tiers.
- T1 sanctioned serve substrate: wave_manifold (goldtether/surprise/
  biography delegate to it) — stays eager, removed from the A-04 ban list.
- T2 off-serving (holographic_vault, fibonacci_search, wave_energy_boundary,
  multi_scale_energy): converted to PEP 562 lazy __getattr__ exports so the
  serve process never loads them; 'from core.physics import X' still works
  for off-serving callers. TYPE_CHECKING block keeps static analysis intact.
- New tests/test_serve_quarantine_transitive.py enforces the process-level
  invariant via a clean-interpreter sys.modules probe (RED against the old
  barrel, GREEN now).

Evidence: docs/research/adr-0241-0242-adversarial-and-fidelity-findings.md
(Finding #2). 179 affected tests green.

docs(research): W1 adversarial findings + 4-blueprint integration plan ... 5ebad71ab6

- adversarial-and-fidelity-findings: executed hostile verification of the
  merged ADR-0241/0242 surface (chiral non-vacuity Q=-2.5 conserved exactly;
  Fibonacci cert budget-exact across 8/15/20/21 + digest-stable; P9 seal
  SPECULATIVE-only; ledger spot-check incl. the prose-only anyon V5 row;
  Finding #2 serve breach — fixed in the preceding commit).
- blueprint-integration-plan: every mechanism of the 4 authority docs
  dispositioned (faithful / honest-deviation / missing-piece / scrap /
  staged). Missing pieces tracked: chiral sign-preservation gate (§5.2,
  next PR) and CRDT-vs-bit-exact determinism clarification. ADR-0242 memo
  slice pending its local export.

docs(plans): archive Plan A/B + session completion summary (W2) ... a11899f8b9

Copied from the Grok session worktree before arc cleanup prunes it.
Summary is the living status surface; the two plans are point-in-time
archives (CI-state headers say 'as of archive').

core-labs added 1 commit 2026-07-15 19:58:29 +00:00

ci: hybrid mirror push triggers for feature branches (smoke + lane-shas) ... 819cf78b31

GitHub never sees Forgejo PRs, so pull_request-gated workflows never ran on
the mirror for feature branches. Per the hybrid workflow guide convention,
smoke + lane-shas now also trigger on non-main branch pushes.

- Job guards (github.server_url) keep the Forgejo Act host from running each
  branch twice (push + pull_request) — the run #167 OOM class.
- lane-shas extends its skip-safe pin-relevant-path policy to branch pushes
  (merge-base vs origin/main); main pushes keep always-verify.
- full-pytest stays main-only (a per-push ~73-min trigger would torch the
  Actions minute budget).

Note: GitHub-side runs stay dead until the AssetOverflow account billing
lock is cleared ('job was not started because your account is locked').

core-labs force-pushed feat/adr-0241-0242-mastery-close from 819cf78b31 to a11899f8b9 2026-07-15 20:05:25 +00:00 Compare

core-labs added 1 commit 2026-07-15 20:07:30 +00:00

docs: establish local-first CI validation protocol in AGENTS.md da1f0386ba

core-labs added 1 commit 2026-07-15 20:14:34 +00:00

fix(cli): smoke suite parity with the CI smoke gate (audio sensorium lane) ... 25772154ff

The CLI 'smoke' suite omitted tests/test_audio_*.py (6 files) that the
.github/workflows/smoke.yml PR gate runs — so the new AGENTS.md local-first
pre-push gate ('core test --suite smoke') was silently narrower than CI
(108 vs 175 tests). Adds the audio lane explicitly and pins parity:
test_cli_smoke_suite_covers_ci_smoke_gate parses the workflow's tests/
paths (globs expanded) and fails if the CLI tuple ever lags the CI gate.

[Verification]: CI-identical smoke file set passed locally (134s, 175
passed); tests/test_cli_test_suites.py 10 passed incl. the new pin.

core-labs merged commit 54228d453e into main 2026-07-15 20:59:50 +00:00

core-labs referenced this pull request from a commit 2026-07-15 20:59:55 +00:00

Merge pull request 'fix(physics): close A-04 transitive serve breach + W1 adversarial findings + blueprint integration plan' (#40) from feat/adr-0241-0242-mastery-close into main

core-labs referenced this pull request 2026-07-15 21:00:56 +00:00

feat(physics): chiral orientation sign-gate — sgn(Q)=const fail-closed (ADR-0241 §2.4C) #41

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: core-labs/core#40

No description provided.