71bf04fb44
Squashes the arc's work into one commit; the workflow-file edit it originally carried is excluded (see the end of this message). ## Lane 1 — Workbench recorded a proved answer as ungrounded With deduction_serving_enabled ratified ON (ADR-0256), workbench/api.py's live chat route builds a bare ChatRuntime(), so the deduction composer decides Workbench turns and stamps grounding_source="deduction" — but _coerce_grounding_source carried a hand-copied whitelist of the six pre-arc labels and silently rewrote anything else to "none". The runtime comment reasoned this was inert because "REPL turns do not flow through Workbench's CognitivePipelineRecord path". True, and irrelevant: the traffic flows the other way. Stale since 2026-07-24. Scope is one field. workbench/api.py:818 prefers TurnEvent.epistemic_state, which read epistemic_state_needed — honest. So the UNregistered path degraded honestly while the hand-copied whitelist asserted a falsehood; a second copy of a closed enum was worse than no copy. Hence registration AND derivation: GROUNDING_SOURCES exposes the Literal's members, and the coercion reads it. workbench-ui badges/tokens/snapshot follow; enumCoverage.test.ts forces atomicity. ## Lane 2 — the ratification ceremony The discovery loop was instrumented but not closed. teaching/ratification.py turns a reviewed decision into a chain record, a corpus commit, and a receipt. Its design turns on one observation: _ratified_rows DROPS unadmissible rows silently — correct when serving, a trap when ratifying, because the file grows, the commit lands, and the band count does not move. So the ceremony refuses to call an append a ratification until it has re-read the curriculum through the real loader and seen the chain arrive; a non-admitted append is rolled back. Validation is a pre-flight courtesy, admission is the proof. Arena queue entry and ledger reseal are deliberately NOT performed (bridge rule 1); the receipt names them. Front door: `core proposal-queue ratify`, a sibling of `review` rather than a flag on it. ## Lane 3 — structural closures - ADR-0263 gains rule 5: absence policy is DECLARED in CAPABILITY_LEDGERS, not passed at the call site. An AST-matched test fails if a serving path passes missing_ok again. - Deductive suite added WHOLE to the pre-push gate: 285 tests in 29s against smoke's 216 in 62s, so no coverage trade was needed. - Smoke/CI parity assertion made bidirectional. It was one-directional, and had drifted. - test_prior_surface_deduction_binding.py pins correction binding on the deduction path. The review's diagnosis did NOT reproduce — hash_surface moves in lockstep — so it pins what is there. Mutation-checked. - Domain-keyed ADR index over 312 flat-numbered files, explicitly partial. - Arc-close brief template, plus this arc's own brief filled in against it. ## Lanes 4 and 5 — two premises falsified by measurement, one of them mine Math 4.2: baseline reproduced (correct=5 wrong=0 refused=495); all four named cases traced to one seam with each gap isolated by one-variable probes. Then the number that changes the recommendation: the gap blocking case 0000 affects 1 case in 500, the 'than' gap blocking 0001 affects 2. ADR-0251's prohibition on per-case growth now rests on a count. No reader change made. CGA: versor_condition is 0.22% of a turn, not the "~10x proof latency" I claimed — that multiplied an isolated microbenchmark by a call count and compared it to a single verdict's latency. The real cost is geometric_product at 33,986 calls/turn (~73%) via cga_inner in search paths. The obvious closed form is NOT bit-exact (954/4000 in f32); backend.vault_recall's serial fold IS (3000/3000, worst-rel 0) and is the correct target. cargo test could not run — static.crates.io is denied by the sandbox network policy — so the Rust parity question stays open and the typestate lane is carried forward, not shipped uncompiled. ## Not landed: three lines owed to .github/workflows/smoke.yml The CI smoke gate is narrower than the local one — test_pack_draft_serve_boundary.py (ADR-0253 INV-33) has been local-only, unseen because the parity pin checked one direction. The edit was authored and rejected at push for lacking the `workflow` OAuth scope, so it is recorded as a named, dated PENDING_IN_CI exception rather than dropped: the assertion still fires on any new divergence, and a second guard fires once the three land. [Verification]: pre-push gates all green — smoke 236 passed, warmed_session 10 passed, deductive 285 passed. Ratification 14, ADR index 5, CLI suites 10. Grounding/epistemic sweep 741 passed 1 skipped. workbench-ui 598 passed across 73 files, tsc -b clean. capability index 11 passed, digest unchanged. Math holdout correct=5 wrong=0 refused=495. Committed chain corpora byte-unchanged after the tests that write to them. Environment caveat: the repo pins requires-python ==3.12.13, which uv cannot fetch for linux-x86_64, so `uv sync --locked` fails. All Python runs used a scratch venv on 3.12.11 with declared deps — not the locked universe, not the full ~12k suite. The pin was left untouched. Re-run on a 3.12.13 host before treating this as merge evidence. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FduW6Krm3PPQv3P5iwBYtx
74 lines
3.1 KiB
Bash
Executable file
74 lines
3.1 KiB
Bash
Executable file
#!/bin/sh
|
|
# CORE local-first pre-push gate (weekly-audit T13, 2026-07-22).
|
|
#
|
|
# Automates the AGENTS.md §Local-First CI Validation Protocol "Pre-Push Gate":
|
|
# (1) the `smoke` suite — exact CI-gate parity,
|
|
# (2) the warmed_session consistency lane pin — catches the T13
|
|
# telemetry-consistency regression class, which `smoke` does NOT cover
|
|
# (the #96 fail-closed resolve + #97 morph override escaped smoke and
|
|
# surfaced only in the warmed_session lane), and
|
|
# (3) the `deductive` suite — added 2026-07-25.
|
|
#
|
|
# On (3): this suite was an ASYNC CI concern while deduction serving was a
|
|
# capability under development. ADR-0256 ratified the flag ON by default, which
|
|
# makes it a regression suite for a LIVE serving path — a push that breaks
|
|
# deduction serving would otherwise clear this gate and sit broken on main for
|
|
# the window between push and CI. The register-axis regression (red on main for
|
|
# the 2026-07-22..24 window, masked by an unrelated flake label) is the direct
|
|
# precedent for that failure mode.
|
|
#
|
|
# It was added WHOLE rather than as a subset because the cost measurement said
|
|
# it could be: 285 tests in ~29s, against smoke's 216 in ~62s. There is no
|
|
# coverage trade recorded here because none was needed.
|
|
#
|
|
# The full ~12k fast-lane stays an ASYNC CI concern by design — this gate is
|
|
# deliberately targeted so it prevents the regression class without gridlocking
|
|
# the push cycle.
|
|
#
|
|
# Install (per clone): scripts/hooks/install.sh (sets core.hooksPath).
|
|
# Emergency bypass: git push --no-verify (defeats the gate — avoid).
|
|
|
|
set -u
|
|
|
|
z40="0000000000000000000000000000000000000000"
|
|
read_any=0
|
|
only_deletes=1
|
|
while read -r _local_ref local_sha _remote_ref _remote_sha; do
|
|
read_any=1
|
|
if [ "${local_sha}" != "${z40}" ] && [ -n "${local_sha}" ]; then
|
|
only_deletes=0
|
|
fi
|
|
done
|
|
|
|
# Fail-closed: run the gate unless we positively identified a deletion-only push.
|
|
if [ "${read_any}" -eq 1 ] && [ "${only_deletes}" -eq 1 ]; then
|
|
echo "[pre-push] deletion-only push — nothing to validate."
|
|
exit 0
|
|
fi
|
|
|
|
echo "[pre-push] CORE local-first gate: smoke + warmed_session lane pin + deductive"
|
|
|
|
echo "[pre-push] (1/3) smoke suite (core test --suite smoke) ..."
|
|
if ! uv run core test --suite smoke -q; then
|
|
echo "[pre-push] BLOCKED: smoke suite failed. Fix before pushing." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] (2/3) warmed_session consistency lane ..."
|
|
if ! uv run python -m pytest tests/test_warmed_session_lane.py -q; then
|
|
echo "[pre-push] BLOCKED: warmed_session lane failed (T13 regression class)." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] (3/3) deductive suite (core test --suite deductive) ..."
|
|
if ! uv run core test --suite deductive -q; then
|
|
echo "[pre-push] BLOCKED: deductive suite failed — deduction serving is a" >&2
|
|
echo "[pre-push] LIVE capability (ADR-0256), not an experiment." >&2
|
|
echo "[pre-push] (emergency bypass, discouraged: git push --no-verify)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "[pre-push] gate PASSED — push proceeding."
|
|
exit 0
|