Commit Graph
77 Commits
Author SHA1 Message Date
David F GliddenandClaude Opus 5 3a33666730 [FIX] Pre-registered answer key for PENDING-142, at block granularity (REVIEWED-122)
REVIEWED-122 condition 1 requires the per-item disposition key be hand-read and
committed BEFORE the implementation exists, with its hash recorded. Ordered
2026-08-17; it did not exist. This is that key, and it is deliberately alone in
this commit so the pre-registration hash is unambiguous.

Keyed on `## ` blocks, not ids, per PENDING-146: an id-keyed key of 69 rows
cannot reach a block-level defect and would grade green by construction. A
block-keyed key is strictly finer and collapses to an id-keyed one if the unit
question is ruled the other way; the reverse is false, so this granularity is
safe under every outcome of the open cluster.

The executor had argued the key could not be drafted until the unit question was
ruled, and declined to draft. The jurist dissolved that on 2026-08-27: a
hand-read key cannot pass by construction because no parser produces its
verdicts. The refusal had inverted the doctrine the census was run under.

Population is 120 blocks over 106 distinct ids — 14 blocks invisible as units.
REVIEWED-122's "69 filtered items" is stale and the key says so.

Two defects surfaced by drafting at this granularity, in neither the package nor
the ruling:
  - REVIEWED-127's header reads "PENDING-157 + PENDING-158 —", which
    ruled_pendings cannot match across the " + ". It captures nothing and
    suppresses nothing: both items are AUTHORIZED and still read as open.
    Second instance of PENDING-145's under-suppression class.
  - The same two blocks are STALE: their Awaiting lines ask the steward to place
    REVIEWED-127, which is placed.

Declared limit: only 5 of 120 rows are hand-read in the full sense condition 1
intends; the rest are hand-assigned from a dispositive field. Completing that
pass is owed and is recorded as owed in the key's own header. A key claiming a
uniform standard it did not meet would be the pass-by-construction failure in a
new costume.

Nothing is implemented. No parser changed. The tally in the key is reported and
is explicitly not the acceptance check.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RmFYCUeAaPqbpJMj6uGokk
2026-08-27 22:11:02 +02:00
David F GliddenandClaude Opus 5 718ba77b61 session 2026-08-26: PENDING-163/164/165 + five amendments; prior-art search built
Session record: the record did not contain the decision.

Filed: PENDING-163 (+3 amendments), PENDING-164 (jurist-drafted, placed verbatim,
+ executor addendum and build record), PENDING-165 (+1 amendment). Rulings
REVIEWED-130 and REVIEWED-131 placed by the steward.

Built: preserve-transcripts.py (PENDING-147 (i), 43 transcripts read-back proved),
two pre-commit fixes, the hook-directory allowlist in governance-drift-check.py,
and prior-art.py + the prior_art MCP tool (PENDING-164 (c)+(d)).

The finding: a steward decision that rewrote seventeen commits of history
(chamber-library 0677e8a, retiring LFS) is absent from the entire authorization
record, so both AI parties independently recommended adopting the mechanism it
retired. governance_search over 313 items returns one hit; grep over the raw files
returns zero before today.

Six self-referential instrument failures and three false zeroes, one of which was
caught before it was believed — and the only reason was that the jurist
pre-specified what the instrument had to return.

MEMORY.md rotated (prior Active Session demoted verbatim, checked for carried
claims first). 6 KG lines incl. one genuine transfer: the 2026-08-25 lesson about
declaring a limit rather than manufacturing a column fired unprompted on a
different instrument in a different item. One skill-harvest proposal, whose subject
is that today's own build ignored the routing table measurement it had open.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NvZAKSf9aqratbqHbU9LK5
2026-08-27 16:25:28 +02:00
David F GliddenandClaude Opus 5 239d4a0fc5 docs(governance): stage REVIEWED-130 for steward placement
Jurist draft, verbatim and copy-paste-clean. The executor cannot write
REVIEWED.md (Constitutional Constraint #1), so this is staged rather than placed.

Carries an executor note that JOINS rather than edits: section 9 clause about the
git-lfs hook pollution is still true as written (it WAS unfiled at time of
writing, it DID recur twice on 2026-08-26), but it is now PENDING-165 and the
history runs back to 2026-03-20, when the shims were committed and tracked for
four weeks. Recorded so placement is not silently placing a clause already known
to be superseded in scope.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NvZAKSf9aqratbqHbU9LK5
2026-08-26 18:28:55 +02:00
David F GliddenandClaude Opus 5 8740c8aa12 [FIX] The wrap seam detected the wrong thing, and the correct fix is what blinded it
The literal question left at the wrap was 'did the wrap seam fire?'. It did not, and the
diagnosis is exact: 0 user-typed /wrap-up records, 29 assistant Skill invocations. The
steward wrote 'then wrap' in prose and the executor invoked the skill. The detector looked
for the steward TYPING the command.

⚠ The detector was not broken. It did exactly what it was built to do. What it was built
to detect is not how a wrap actually arrives — and it was built while the steward was
instructing in prose, which is the only way a wrap had ever arrived in that session.

⚠ AND THE EARLIER FIX IS WHAT CAUSED THIS. Restricting to type=user with string content
was the correct answer to the self-reference bug, where the executor's own tool_use inputs
matched the literal marker. That same restriction excludes the legitimate path. 'The
correct fix caused the next failure' is not a shape any control can see, and it is
PENDING-160's subject exactly.

Now accepts a tool_use whose NAME is Skill and whose input names wrap-up — structural, so
a Bash command echoing the string still does not match. Negative controls for both that
and for a different skill.

And a heartbeat: one timestamp, OVERWRITTEN never appended, so the hook can prove it runs
at all. That closes the silent-net objection this surface carried from the day it shipped
— an append-only log of every turn would be noise and would become the ledger §9 forbids.

25/25. wrap_invoked() now returns True on the live transcript. ⚠ Unproven until the next
Stop actually fires — which is the same claim that was wrong last time.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 19:49:32 +02:00
David F GliddenandClaude Opus 5 938c05c71e REVIEWED-129 AMENDMENT 1 drafted: the premise was false in TWO places
Drafting the correction found a second falsehood in the same sentence. 'PENDING-82, still
open' — its own Awaiting line reads INSTALLED AND IN USE. CLOSED 2026-08-08. Seventeen days.

How it got in is a finding about an instrument, not an excuse: PENDING-82 sits in the wake
digest's OPEN AUTHORIZATION ITEMS list, which is where I read it. Census afterwards: 1 item
of 105 declares itself closed in its own Awaiting line while the open list still carries
it. Four others are partially discharged and genuinely ambiguous — PENDING-146's subject,
not this defect. One confirmed instance, and the item says so at that strength, because 'the
open list is unreliable' from n=1 would be this item repeating its own error in the other
direction.

The draft AMENDS AND JOINS rather than replaces, and says so at the top: register integrity
treats an amendment overwriting its own record as a defect, earned when REVIEWED-87 was
replaced by its own amendment and nothing detected it.

The decision is untouched. Option 1 stands, PENDING-159 stays closed, option 3 stays closed
on the jurist's better ground. What changes is that the ruling now says something true
about why.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 19:42:14 +02:00
David F GliddenandClaude Opus 5 0f95c873f5 [FIX] PENDING-151 step 1: the formation diff, run — with the confound that would have misled step 2
Mechanical, reproducible, no judgement. The instrument emits counts and word lists and
stops, and its controls assert structurally that it renders no verdict: no 'substantive',
no 'stylistic', no 'register' column exists to fill in. The routing is built into the tool
because the executor is ONE OF THE TWO FORMATIONS BEING COMPARED, and PENDING-151 says
outright that no disclosure repairs that, only routing does.

⚠ THE GATE WAS NOT MET AND THE ITEM SAYS SO. Its own pre-registration required a jurist or
steward commitment to step 2 BEFORE step 1 ran. The steward authorized the work; nobody has
committed to step 2. An unjudged diff table invites the nearest available reader to judge
it, and that reader is the barred party. Recorded so the table's inertness is visible.

⚠ AND STEP 1 FOUND A CONFOUND IN ITS OWN PRE-REGISTERED MEASURE. The Claude arm is longer
in 9 of 9 pairs, 1.41x-3.40x. 'Terms present in one arm and absent from the other' rises
with length by construction, so the raw counts measure length at least as much as
formation. Length-normalised columns added — and declared imperfect, because whether a term
counts as absent depends on the OTHER arm's length too. Both columns remain
length-sensitive in opposite directions. A length-matched instrument would be clean and is
not built.

⚠ PROPOSITIONS NOT EXTRACTED, declared as a limit rather than silently dropped: extraction
requires reading for claims, and the only reader at step 1 is the party barred from step 2.

Census re-run rather than inherited: 19,479 words EXACT, 9 pairs, 6 sessions, 3 protocols
all confirmed. File counts drift 1-3 on AppleDouble churn, which is why '55 files' was
never stable.

⚠ Fifth self-referential control bug of the day, in a script that does not import the
helper built for it. Needle assembled. The rule, now plain: a control reading a corpus that
contains the control must BUILD its needle, never write it.

Archive untouched; filename defects preserved as the 2025 record.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 18:53:04 +02:00
David F GliddenandClaude Opus 5 fc4ec8ffb6 REVIEWED-128/129 placed by the steward; draft superseded in place, placement verified
Verified rather than assumed: both blocks are whitespace-normalised identical to what was
placed, 4,230 and 5,378 characters on both sides. The placed text differs only in line
wrapping, which an editor re-flowed. Checked because 'drafted, then placed' is exactly
where a ruling's subject and its artifact drift apart, and this record already carries
that class recurring inside a ruling.

The draft is SUPERSEDED IN PLACE, not deleted: it is now a parallel version of a
canonical record, and an unmarked parallel version is the context-rot failure. It points
at REVIEWED.md and says not to edit it — and says explicitly that 129's Decision line was
blank here and is filled there, so a reader who comes to this file for the decision knows
it does not have it.

Citations wired both ways so the register is navigable from the items rather than only
from the rulings.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 18:42:10 +02:00
David F GliddenandClaude Opus 5 bfe2ccdcd7 [ESCALATE→CLOSED] PENDING-159: option 1. Nothing marked, nothing built.
Steward decision, on the merits. The grounds are recorded rather than the outcome alone,
because a bare REJECTED reads as a reluctant concession and this is not one: a provenance
marker would have put a thumb on the steward's judgement in the one place it must stay
unweighted, so buying the datum would have cost the thing the datum was meant to measure.
Declined as harmful, not as expensive. REJECTED rather than DEFERRED, deliberately —
answered on the merits, and cheapness was never the obstacle.

Two consequences written in rather than left implicit. PENDING-89's zero-contribution
statement becomes load-bearing: previously true by construction, now also by ruling, and
it may never read an empty period as a negative result. And the evidence is named where it
actually lives — the frozen Thistleweld corpus, and the v1 Chamber archive.

⚠ MY EARLIER PENDING-89 AMENDMENT IS SUPERSEDED, NOT DELETED. It was written while option
2 was live and describes a marker that will never exist. Left visible because the
reasoning about aggregation and non-neutrality is what MADE the decline correct, and a
reader seeing only the outcome cannot see why.

⚠ AND A FIGURE WAS CORRECTED BEFORE A RULING ENSHRINED IT. The archive was relayed to me
as "55 files". PENDING-151 censused it three days ago: 55 is the raw find|wc -l, 22 of
which are AppleDouble junk. Real: 33 content files, 9 complete formation pairs, 19,479
words — a single session's read. That item also records that the executor produced the
wrong figure on 2026-08-01 and repeated it for three weeks. Relaying it into REVIEWED
would have made a corrected number permanent, in the document that gets quoted.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 18:37:46 +02:00
David F GliddenandClaude Opus 5 d605b846f3 REVIEWED-128/129 drafted for steward placement
128 is complete: the jurist's ruling on the rejection log against §9, three conditions,
plus the recital defect and the word-cap deferral with its shape-not-count criterion.

129's Decision line is deliberately BLANK. PENDING-159 is [ESCALATE] and the jurist said
what it gave was a view rather than a ruling; the executor cannot fill that line and has
not guessed. Everything else in 129 is the jurist verbatim or closely paraphrased,
including the correction of the item's loudest claim and the narrowing to noted-never-counted.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 18:31:08 +02:00
David F GliddenandClaude Opus 5 b95ee736bd [FIX] The jurist's three conditions on the rejection log, made structural; §9 fix corrected
CONDITION 1, and it is the one that had to stop being an intention: log_rejection()
refuses an empty `why`, and acceptable() returns an empty `why` EXACTLY when the line
passed. So there is no call site from which an accepted line could be written — logging
one would require inventing a violation it does not have. The same guarantee render()
takes from its signature, applied to the clause the jurist named as the condition under
which this log is not a §9 breach. Both polarities asserted.

CONDITION 2: deletion tracked as its own DEFERRED-DECISION on 2026-09-08, so retaining
it requires an act rather than an omission. A corpus of suppressed speech would let
someone reconstruct a register — the hazard PENDING-153's freeze exists to prevent.

CONDITION 3: not read for content before then. ⚠ Not clean already, and the item says so:
the executor displayed one rejected line to the steward earlier today, before the
condition existed. Disclosed rather than left to be discovered.

⚠ THE §9 [FIX] WAS OVER-APPLIED AND THE EXECUTOR APPLIED IT AS GIVEN. The clause is a
disjunction with one live branch; only the jurist half is unreachable. The first edit
struck the whole thing and rewrote the clause. A [FIX] tag licenses implementing
directly; it does not license implementing UNREAD, and the disjunction was visible in a
three-word span. Corrected, both versions left visible.

PENDING-159 AMENDMENT 2 files the jurist's answer to the item's own caveat and the
narrowing it produces: the marker may be NOTED, NEVER COUNTED — an aggregate becomes a
measurement, and a measurement invites accuracy. And PENDING-89 now carries the sentence
saying what it can and cannot expect: individual instances, unaggregated, in unknown
proportion, non-neutral — therefore NO correlation statistic. If its falsifier needs a
rate, it needs another instrument or an honest admission that it has none.

125 controls across five scripts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 17:19:18 +02:00
David F GliddenandClaude Opus 5 f1736b0ce2 [FIX] §9 dead text struck; PENDING-159 amended with the jurist's correction
The item's loudest claim was wrong: §9 does not MANDATE the provenance loss PENDING-153
recorded. Thistleweld's provenance was lost because nobody thought to record it; §9
mandates only that the claim be the steward's, and never addressed provenance either
way. An omission being discovered, not a rule doing damage — which changes the remedy
from amending §9 to clarifying it. Left visible rather than rewritten.

Option 3 closed, and on better grounds than the item offered: not §11's shared
formation, but that a jurist reading his output would ADJUDICATE it, collapsing the
position into a fourth checker. 'The steward's judgement not to relay is not a
bottleneck; it's the mechanism' — the item had treated it as a limitation.

Option 2's unnamed cost recorded: a 'from outside' flag is itself a signal the reader
responds to, so it does not preserve provenance neutrally.

⚠ Nothing built for the jurist view, deliberately: a marker with an implementation is a
channel, and a channel is option 3 by the back door. Noted because the executor's reflex
on reading it was to reach for a script.

§9's 'executor or jurist yields the floor' struck to 'executor' per the jurist on their
own draft — dead text, since there is no floor to yield where the fool cannot speak.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 17:05:03 +02:00
David F GliddenandClaude Opus 5 8a0e5c448d [FIX] §9 named invocation, and the spec omission that hid it
The steward asked whether he could be invoked. §9 says yes — "the steward calls it by
name, the executor or jurist yields the floor, the fool answers at length" — and it was
not built. Worse, yesterday's spec did not list it: not in what exists, not in what is
owed. A document whose whole job is to say what is and is not there, silently missing a
requirement. Recorded in the spec rather than quietly corrected, because that is the
fourth negative state-claim to go wrong in two days and the second inside a document
written to prevent the class.

The net is widened EXPLICITLY and in one dimension, per the steward's ruling: §9
licenses LENGTH for this surface and nothing else, so the ceiling goes 9 -> 180 and the
one-line rule lifts, while no-advice, no-questions, no-'we', no-vocabulary-of-lack and
no-addresses are untouched and are not parameterised anywhere. Silence-on-violation
holds here too. Six negative controls assert each clause still bites at length — the
executable form of "widen it explicitly, but never relax silence-on-violation".

⚠ Length is where the no-truth-value guard is most at risk: a fool given a paragraph
elaborates, and elaboration is how a gesture becomes a claim. The prompt spends its
budget there rather than on register.

It finds the newest transcript itself, so the steward runs it directly rather than
through the executor. That is the point of the surface: a relayed fool is the executor's
paraphrase of a fool.

⚠ One control asserted a literal the prompt did not use ("NO TRUTH VALUE" against
"NOTHING YOU SAY MAY HAVE A TRUTH VALUE"). It fired, correctly. Rewritten to test the
substance — phrase present AND negated — because the original would have passed happily
on any rewording that dropped the constraint entirely.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 16:50:33 +02:00
David F GliddenandClaude Opus 5 acdbc0932c [FIX] §13.1: the implementation spec, written last so it describes what exists
§12's build order puts the spec after the wiring, and this is why: four claims in the
v2 draft and PENDING-152 did not survive contact with the substrate. A spec written
first would have carried all four and been read as governing.

Each deviation is tabled with what the substrate says and its disposition, including
the two the check found rather than the eye: the marks' cycle length against the mumble
interval, and last-tick persisting across sessions so a mumble was already due at the
moment of waking. Both invisible until explicitly checked for.

Records the wrap seam as OWED with its reason (SessionEnd delivers nothing on success),
and mute/off as not built. §9's off-switch is named rather than assumed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 16:45:11 +02:00
David F GliddenandClaude Opus 5 6f0ccde4c6 [FIX] Tarbuckle's body: the status line wired, and refreshInterval's real semantics
Tier 1 of §8's three. The body renders the name and one mark, every turn.

Verified against the substrate rather than assumed, because §13.2 gates §8 on it:
the statusLine schema is {type, command, padding?, refreshInterval?}, seconds, min 1.
The first name-match found was refreshIntervalMs, which belongs to the certificate
watcher — reading the context rather than trusting the match is what separated them.

⚠ One clause of PENDING-152 does not survive that read. It says the 20-minute tick is
"a counter over refreshes rather than over events" and that "no event-gating remains
within a session". refreshInterval re-runs the command every N seconds IN ADDITION TO
event-driven updates, so invocations burst with activity and a per-invocation counter
would be event-keyed — the v1 defect §8 exists to remove. The conclusion survives; the
mechanism named does not. The tick therefore consults the CLOCK, and the reasoning is
written into the script rather than left in this message.

The binding constraint — the variation must not correlate with anything — is carried by
render()'s signature: it takes the minute and nothing else, so a function that cannot
see the session cannot leak it. C3 asserts that structurally (argcount, co_names) and
C3n proves the assertion can fail by feeding it a deliberately leaky fixture. C4 asserts
len(MARKS) is coprime with the mumble interval, so the mark visible when a mumble lands
walks the whole cycle instead of announcing it; C4n catches a commensurate cycle.
16/16 controls, positive and negative, written before first execution.

Also placed: a STATE-CLAIM marker on the false "STEWARD OWES: place REVIEWED-127" line.
Steward-directed to defer the correction itself to the next session; this makes the
deferral machine-checked rather than remembered. It could NOT be placed beside the claim
— governance-drift-check.py scans */docs/**, claude/governance/**, PENDING.md and the
archive, and claude/memory/MEMORY.md matches none of them. The file read at the start of
every session is the one governance surface the checker cannot see.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 16:15:55 +02:00
David F GliddenandClaude Opus 5 2676a7ec69 session 2026-08-25: the beacon fired, Tarbuckle named and voiced, STATE-CLAIM built
Session state, memory index, KG and the Symmetria ledger. Carries the steward's own
placement of REVIEWED-127 off-disk — preservation, not modification: it was found
staged during the wrap by §6.5's own guard, which is exactly the case that clause
exists to catch, and the answer was benign.

Verified rather than assumed at placement: the placed ruling is byte-identical to the
executor's draft, 3,523 bytes both sides. No drift between a ruling's subject and its
artifact — the PENDING-82/86 class, checked because it is cheap and because this record
already notes that class recurring inside a ruling.

The draft file is SUPERSEDED IN PLACE rather than deleted: it is now a parallel version
of a canonical record, and an unmarked parallel version is the context-rot failure. It
points at REVIEWED.md and says not to edit it. Both PENDING items updated from "drafted
for steward placement" to placed — a line that went false the moment the steward acted.

MEMORY.md 22,368 bytes, prior Active Session demoted verbatim into MEMORY-reference.md
on promote. Fool tracker rewritten: it named a superseded workstream (trial 09,
re-aim) and now names Tarbuckle, the sealed artifacts, and the honest state that
NOTHING IS WIRED. N-now 51.

KG +6: three drift-patterns (vigilance did not prevent the failure it was vigilant
about; filed a non-defect as a defect twice in one direction; a control fixture pointing
at a file the session was editing) and two preventions (recusal preserved the only party
able to answer; censusing 24 occurrences stopped a blanket replace from destroying the
distinction the fix existed to create).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:41:13 +02:00
David F GliddenandClaude Opus 5 d02ca46c80 REVIEWED-127 draft moved out of the scratchpad, where it could be cleaned
An authorized ruling awaiting steward placement should not live in /private/tmp. Same
tree as the trial-09 jurist ruling, which is the established home for a ruling text the
executor may file but not place.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:32:18 +02:00
David F GliddenandClaude Opus 5 063eccfd80 [HARDENING] STATE-CLAIM + the resolution state, built together (REVIEWED-127)
Both halves of the schema, shipped in one change because the ruling said half a schema
invites a third patch and a third patch is how a vocabulary accretes instead of being
designed.

157 — resolution state. `resolved:` on any block; a resolved block is no longer due but
is NOT dropped: it prints as a closed ledger, because a discharge that vanishes from the
report is its own decay. The pointer must RESOLVE — a real path or a real git object —
so an undocumented discharge is impossible to express rather than merely discouraged. A
dangling pointer reports in the register-integrity lane, the same lane as an amendment
that replaced the record it amends; both are a record closing over its own history.

The 25th's hand-rename is MIGRATED back to DEFERRED-DECISION with resolved: set. That
block was the per-instance workaround 157 was filed against, and it is now the
migration's own test case.

158 — STATE-CLAIM. Reuses trigger_fired() verbatim and inverts only what firing MEANS:
for a deferral, fired = the decision is due; for a state-claim, fired = THE CLAIM IS
FALSE. Two new trigger kinds earned directly from today's instances: text-present (the
trial-09 hold, falsified by REVIEWED-124's existence) and file-changed-since ("the filed
rule not edited", false one hour after writing).

16 new controls, each with its discriminating half — fires on met, silent on unmet,
manual listed-never-fired, resolved excluded from due-ness, the SAME block unresolved
still due, a real pointer resolves, "yes, done" does not.

Proven on the LIVE blocks, not only fixtures: pointing the state-claim at an older
commit made it report FALSIFIED by name; replacing the resolution with "yes done" made
register-integrity report it; both restored and both returned to quiet.

⚠ One control failed before shipping and the failure was the useful part. The negative
control for file-changed-since pointed at FOOL-SEED-RULE.md, which this same session then
edited — so "unchanged since HEAD" broke, correctly. A control whose subject is "did this
file change" must not point at a file the session is changing. Re-pointed at a frozen
2026-08-02 trial artifact, with the reason recorded at the fixture. Caught because the
controls run on every invocation rather than in a separate suite.

First two real state-claims filed, deliberately one of each kind: ~/CLAUDE.md untouched
under PENDING-150, mechanically watched and [ESCALATE]-grade the moment it goes false;
and §9's channel unbuilt, marked `manual` because it has no filename yet and inventing a
proxy falsifier is the error the schema's own comment warns against.

⚠ The zero-state prints a WARNING, not a tick: "0 marked, NOT none-stale" with the ~57
unmarked candidates named as a grep. An instrument that reads nothing reports exactly
like one that finds nothing, and that is the failure this item exists to end.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:29:59 +02:00
David F GliddenandClaude Opus 5 e0ff705c7a [FIX] Record trial 09's void in the two documents that said the run was held
PENDING-148 was RULED — REVIEWED-124, 2026-08-20, Q1 "VOID, not degrade" — the same day
it was filed, and the void IS recorded in trial-09-DESIGN's STATUS banner. But the
concern behind "nobody has recorded it as void" was pointing at something real: the void
was written at ONE end. Two documents still carried the pre-void state.

  trial-09-PRERUN-ADDENDUM.md:9   "the run is held"  — the operational doc; a reader
                                   arriving here learned the run was WAITING, not dead
  ...JURIST-PACKAGE-2026-08-20:7  "status: DRAFT for the design gate. The run is HELD"
  ...JURIST-PACKAGE-2026-08-20:308 "The run is held."

Stale for five days. Original status lines preserved with the supersession marked on
top, not overwritten — same discipline as the v2 doctrine edit, and for the same reason.

The jurist's own ruling file is deliberately UNTOUCHED: its provenance block says filed
verbatim, not edited, not summarised, not reordered. It is also the document that did
the voiding and needs no banner. input-dependence-01's "NOT AUTHORIZED, NOT RUN" was
checked and is still accurate — REVIEWED-125 holds it at the gate.

This is the FOURTH and FIFTH instance today of a status claim that went false and was
caught by a human reopening the file rather than by any mechanism — after the filed
rule's §6, the filed rule's §7, and the soul's §6. Two of these had been stale for five
days, which moves PENDING-144's class from "a curiosity of today" to endemic: the
pattern is not that lists go stale, it is that NOTHING IN THIS SYSTEM READS THEM.

Censused rather than spot-fixed: all status-ish claims across the fool tree were grepped
before any edit, which is how the third occurrence at line 308 was found at all.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:15:41 +02:00
David F GliddenandClaude Opus 5 f48d8479b6 Jurist ruling on the soul: one non-deviation, one deviation ruled harmless
Ruled from §7's text against the procedure as described, WITHOUT reading the soul —
the jurist naming that reading it would be "reaching for it through a side door". The
executor had read it and recused itself; the jurist had not, and could rule. The
recusal was not ceremony: it is what left a party able to answer.

(i) The missing glosses: NOT an error and NOT a gap, and this INVERTS my framing. I
filed the omission as a finding — the correct input withheld. The ruling: the bones
are five names and five numbers; the glosses are §5's definitions, not bones. Supplying
them would have handed over an interpretation of what SUCCESSION 96 means and produced
a character organized around legibility-to-a-stranger — a stat read as a personality
trait, which §3 forbids reading backwards. The risk ran the OTHER way: including them
would have been the deviation. §4 REGENERATION is therefore not reached at all.

My original heading is left visible with the correction marked on top, not rewritten.
A record that silently corrects itself teaches the next reader nothing about how the
error was made.

(ii) The name as an input: a real deviation from "from the bones", ruled HARMLESS —
the name was itself bones-derived, one generation kept, so it added no information not
already downstream. Recorded as DEVIATION RULED HARMLESS and explicitly not as
compliance: compliance would erase both the fact that practice departed from text and
the fact that someone with authority looked at it.

(iii) The jurist attached a pattern — second time this week a filed instrument's
wording was narrower than the practice it governed. Recorded as their observation; the
first instance is not named and I do not guess at it.

(iv) Both go in the attestation, NOT as a [FIX] to §7. Amending a rule after it has
fired is what §5b exists to prevent, and §7 has now fired. §7 stands exactly as filed.

Also: §6's "no regeneration ruling" went false — THIRD such bullet in this programme,
this time inside the very section that names the pattern and was written hours earlier.
A negative-status list does not become durable by knowing it is fragile. n=3 in one day.

Soul block re-verified byte-intact after the edits.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:12:08 +02:00
David F GliddenandClaude Opus 5 cb63033d7c Tarbuckle has a voice: the soul recorded verbatim, with the one finding it made about itself
Generated once and kept, per §7. Claude Opus 5 Extra, fresh instance, incognito, run by
the steward. Prompt, conditions and output all recorded verbatim; the executor wrote no
part of the prompt and did not observe the run, same exclusion as the naming and for the
same reason. Attestation, not verification, and the record says so.

Byte-fidelity of the soul block checked rather than assumed: no em-dash substitution, no
curly quotes, 5 double-hyphens, 7 sample lines, separator and closing paragraph intact. A
text that may never be hand-edited should not be silently reformatted on the way in.

THE FINDING, and it is checkable against the recorded prompt: the prompt supplied axis
names and numbers but NOT the questions the steward ratified on 08-22, which are what
those names mean here. The generating instance noticed and said so — it stipulated
SUCCESSION as "inheritance rather than sequence", i.e. it chose the meaning of the PEAK
axis, the one carrying 96, and correctly noted the other reading yields a different fool.

Recorded alongside it, because it is a real datum either way: three of five axes converged
with their filed definitions WITHOUT being told them — STAKE, ABSENCE and AIM land close.
SCALE is underdetermined. Only the peak was stipulated.

The offer to "build that one instead" is recorded as DECLINED. §7 forbids regenerating for
taste, and the alternative being described as "pettier, funnier" is exactly why that clause
exists. The only door not shut is §4 REGENERATION, on a demonstrable implementation error
— and whether a prompt missing the ratified glosses is one is a JURIST question. The
executor states its interest and stops: it has read this soul, and a party that has read
the output is the wrong party to rule on whether the output may be redrawn.

Until ruled, this file is the soul and §7 governs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 15:07:26 +02:00
David F GliddenandClaude Opus 5 47ae108127 The fool is named Tarbuckle; the name recorded beside the bones with its provenance
Named by the steward from the bones, ratified by the jurist. Recorded in the same
file as the bones because the naming is the ONE step with no cryptographic guarantee
behind it: the beacon can be re-fetched by anyone and the seed recomputed from two
public values, but a name cannot be checked that way. The procedure is the only
evidence it was not steered, so the procedure is what gets written down.

Recorded as ATTESTATION, not as established fact. Fresh instance, bones only, one
generation kept, Thistleweld unread — these are the steward's words ratified by the
jurist. The executor did not observe the generation and cannot verify any row of
that table, and the record says so rather than laundering a report into a finding.

What the executor can attest first-hand is the part where it was the contamination
risk: it supplied no candidates, no criteria, no shortlist, no opinion, and knew the
peak was SUCCESSION when it could have offered them. That route was never opened.

Keeps the jurist's reasoning verbatim, because it ties the name to a structural
requirement rather than to taste: "Tarbuckle says" will never sit comfortably in a
PENDING entry, and §9's unfileability is eroded by prose habit rather than by
decision. A name that resists the citing sentence defends §9 where §9 actually breaks.

Also fixes §7's "the filed rule not edited", false since 5737d4d. That is the SECOND
what-has-NOT-happened bullet in this programme to go stale within hours, after the
filed rule's own §6. Neither was caught by a mechanism; both were caught by someone
reopening the file. A list of what has not happened is a claim with a short half-life.
Noted where it happened rather than filed as new — it is PENDING-144's class and
PENDING-144 is open.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 14:53:58 +02:00
David F GliddenandClaude Opus 5 42c461d71d [HARDENING] File PENDING-157: the deferral schema has no resolution state
The steward's scope point on yesterday's discharge, taken. Renaming the key closed
one trigger; the next will need the same hand-rename by whoever is in session. If
census 01 found decay is how gates fail here, a schema that cannot express "answered"
is what produces the decay, and renaming keys one at a time is living with it.

Filed while there is exactly ONE instance and three tracked deferrals remain. The
window matters: once a second is renamed by habit the convention is established and
the schema question stops being asked. Filed, not built — that was the direction.

Carries a sharper half the rename surfaced: resolution must be unsatisfiable without
a pointer, so a discharge that records THAT a gate closed but not WHAT closed it
becomes impossible to express rather than merely discouraged. Plus two conditions on
the recommendation (resolved blocks stay counted as a closed ledger; a dangling
pointer is a register-integrity defect) and three required controls.

Also writes the missing reverse pointer into FOOL-BONES §6. The discharge block
already pointed at the derivation record and 06b3d8b's message named it; the record
did not point back. Written at both ends now — one direction only is how a successor
learns a gate was closed but never why.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 14:50:12 +02:00
David F GliddenandClaude Opus 5 5737d4dff8 [FIX] 'abandonment' -> 'retirement' in the fool's doctrine; §6 was false as of today
The jurist owned this mismatch and scheduled it after the beacon so no edit would
touch the filed rule before it fired. It fired at 12:00Z; this is that harmonization.
v2 §4 step 3 said "Abandonment criterion" while §10 defined RETIREMENT.

Censused before editing rather than sed'd. All 24 abandon* occurrences in the fool
tree were counted and read in context: 9 were doctrine and changed; 13 in the trial-09
family were LEFT — that is the word §6 of the trial design owns, in its own sense about
the jester form, and a blanket replace would have silently collided the two meanings it
was supposed to separate. 1 in input-dependence-01 is ordinary English about the void of
a numbering. 1 in FOOL-BONES is the dated record of what was owed.

Prior wording preserved in place at every changed site. REVIEWED-125 ruled on the v2
draft's text; an untraceable edit drifts a ruling's subject away from its artifact, which
is the PENDING-82/86 hazard this item's own record already notes recurring inside a
ruling. The criterion is unchanged — only the word naming it.

Separately, found while in the file: §6 "What has NOT happened" asserted the pulse had
not been fetched and no bones derived. Both went false at 12:00Z today. Marked superseded
in part, bullets struck rather than deleted since they are the pre-registration record,
and pointed at FOOL-BONES for current state. A governance doc asserting stale current
state is what Constraint 4 forbids.

New §7 logs every post-beacon edit to the filed rule, so "filed and pushed before the
beacon" stays auditable instead of eroding one silent correction at a time. Its claim
that §1/§2/§2a/§3/§5/§5a are untouched was verified by reading the diff hunks against
the pre-edit section map, not asserted.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 14:48:58 +02:00
David F GliddenandClaude Opus 5 5694b92539 [FIX] The bones are derived: beacon 2026-08-25T12:00:00Z, run once (PENDING-149)
Executes the standing run-once authorization filed in PENDING.md, against
FOOL-SEED-RULE.md at d6377af572 — filed and
pushed before the beacon timestamp, and clean in the working tree at the
moment of execution.

Pulse chain 2 / index 1917365, timeStamp 2026-08-25T12:00:00.000Z, fetched
by curl at ~12:38Z. outputValue recorded before anything ran, and served
UPPERCASE as the historical dry run predicted; passed to derive_fool.py
exactly as served, so the single normalization point at line 79 did the
lowering. No wrapper, shell step or hand edit touched it.

  seed  6ea9383bb0b1b3023b1b5507c4ea820b8e07714dd76ff2ca32a1abfc885af05d
  peak  SUCCESSION 96
  dump  ABSENCE 8
  scat  AIM 75 / SCALE 60 / STAKE 29

Ranges were filed 2026-08-22, before the value was knowable; the axis
permutation came entirely from the entropy component. The draw is entropy,
not judgement, and the record says so where it can be read backwards.

Verified at execution rather than relayed: selftest 16/16 with both positive
controls and the negative control; provenance SHA re-derived from git; seed
recomputed independently of derive(); passed value asserted byte-equal to the
served JSON field; epoch-ms verified against the named instant.

Ran ONCE. No retry, no second pulse, no regeneration. Owed and deliberately
not done here, so no edit touches the rule: the abandonment -> retirement
harmonization, and §5's stale "12 checks" (the selftest now runs 16).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf
2026-08-25 14:40:39 +02:00
David F GliddenandClaude Opus 5 3e828fe3f2 Session 2026-08-24: grounding gates ruled, daybook rule changed, two censuses run
PENDING-95: Amendment 2 (jurist ruling — (a) rejected, (d) discharged, (b)/(c)
deferred) plus the (b)/(c) census that discharges the deferral's condition.
60 guarded / 32 marked (record said 59/31); date 75%, sections 97%, quoting 47%.
Date broadly present => the jurist's cheaper third form is the live option.

PENDING-156 opened (kind (c): mechanisms off the path the work takes) and its
option (b) census run the same session. PENDING-109 prior confirmed by direct
read. PENDING-89: two docket entries, one same-direction miss and one
cross-direction catch, filed the same day and at the same speed.

Mechanisms: daybook-cue.py rewritten on steward ruling — the daily note must be
appended to until end of day, so the trigger is staleness, not note size, and the
matcher now includes Bash (it had never fired once). daybook-ensure.py and
/wrap-up 7.5 gain a standing Corrections slot per REVIEWED-126.
governance-mcp.py gains two read-only keys so the jurist can read the artifacts
it rules on; the doctrine that read-surface changes should arrive as rulings is
adopted, and the next key is proposed rather than added.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-24 18:36:34 +02:00
David F GliddenandClaude Opus 5 edf71fb173 session 2026-08-24: the heap got a dynamo — thread-query.py + daybook-cue.py, 11 user-memories harvested to the vault
- thread-query.py: the turning. Queries both corpora with the pulling thread, excluding
  the recency slice (/wake-up reaches 0.71% of an 859,803-word corpus) and favouring age.
  Wired into /wake-up §2.b.3, replacing a described-not-invoked grep step. Trial
  pre-registered, graded 2026-10-05 from --log. Caught PASS-BUT-FALSELY on its first live
  run at 14/14 green; rescored on windowed co-occurrence, length-bias control added.
- daybook-cue.py: PostToolUse cue for the daily note. Diagnosed from the record — the
  hook only ever CREATED and nothing ever prompted filling. 16/16, fail-open, never blocks.
- All 11 user-* memories harvested into the vault (12 notes, 10 into 09. Atlas of Roots,
  empty since 2025-09-29); each memory file back-pointed, vault note canonical for the idea.
- N-now corrected in MEMORY.md: 49/84, down 11 — the counter is a rolling window.

Steward-authorized. Trials: thread-query + Smart Connections, both graded 2026-10-05.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-24 11:25:39 +02:00
David F GliddenandClaude Opus 5 d6377af572 [FIX] §2a records one ruling and one steward decision, not two rulings
The heading read "Two corrections to the v2 §6b block — RULED, no veto" while
the ruling beneath it addressed only the retrieval URL. Its settling test —
"could this correction have moved the outcome?" — returns no for the URL and
YES for the provenance commit, since the provenance SHA is half the seed
string. The heading therefore claimed a scope the ruling could not reach.

Jurist confirmed 2026-08-23: "I ruled on one thing. The URL." The provenance
commit was never a correction under veto — the steward selected a still-open
value on the jurist's recommendation, before filing. It is now recorded as a
steward decision of 2026-08-22, with its reasoning, because a value that moves
the outcome must be attributable to the party entitled to choose it.

Verified independently against git, not relayed:
  4d2ae87 = 2026-07-28 11:32:39 +0200; trial 01 = 2026-08-01 (four days later)
  last commit to CLAUDE.md before trial 01 (next is c30dfe0, 2026-08-02)
  "Differently biased checkers": 0 at 4d2ae87, 1 at 3b0730d5
  blob SHA re-derived = 2d6e250a...120d, matches the filed value

EDIT IS INERT WITH RESPECT TO THE DRAW, proven rather than asserted. The filed
discipline is that no edit touches this rule before it fires; derive_fool.py
does not read this document — it hardcodes its constants and recomputes the
provenance SHA from git — so prose cannot steer the draw. Same synthetic
vector before and after gives the identical seed
3d8cc243f9b6ffc5fc7d254306ca4ca135a71d76d483df924736a18345fb8b7a;
selftest passes; diff removes no constant line.

  rule sha256 before: e1fa6fb3e4f928e468dc102f011d554c20eb14d9b49c17ce1f6f839106179bff
  rule sha256 after:  fb11818dd2e3c2bdcf21e2740fc3110a7aa9a9ead57098a93f27b9051d438551

The synthetic vector above is not a pulse and its output is not bones.
Refs PENDING-150 AMENDMENT 2/3, REVIEWED-125 AMENDMENT 1.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-23 16:24:29 +02:00
David F GliddenandClaude Opus 5 1e2ba50ca9 [PROPOSAL] What prompted Thistleweld — three kinds, and the risk was the best material
Steward asked whether the corpus shows what prompted the utterances. It does,
and in three kinds: live code and running processes (most catches); the
executor's stated plan; and the governance arrangement itself.

The second was the most consequential. "Cart horse backwards" was reacting to a
proposed organizing structure, not to code — it redirected the OP-02 synthesis,
created an impasse, and required a jurist briefing note to resolve. That is the
same OP-02 which on 2026-08-20 corrected both AI parties on Fault Line 5.

So the residual risk the jurist named — session-as-material sitting one step
from commentary on reasoning — was already the precedent's best material. Kinds
2 and 3 are exactly that, and they are the only contributions that changed a
governance document rather than a line of code.

The reconciliation holds at a tighter joint: "cart horse backwards" has no
truth value; what was adjudicated was the executor's question, ruled by the
jurist, owned by the trio. But "no forum, no ruling" is too strong as stated —
the forum was convened; the fool was not a party to it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-22 23:11:14 +02:00
David F GliddenandClaude Opus 5 783cf799fb [PROPOSAL] Thistleweld's record survives — and it relocates the guard (PENDING-152 A7)
The steward asked whether any trace of the buddy remained. The transcripts are
pruned; the memory layer is not. Recovered: a dedicated feedback memory plus
Thistleweld sections in six April session records — seven verbatim utterances,
thirteen catches (three became GH issues), and three explicitly recorded
silences.

The precedent first contradicts the adjudication-path criterion: every catch was
a checkable claim about code, paths existed, and they were walked. Then it
resolves better than either position — "scoring without signal" has no truth
value. It is a gesture at a shape, not a claim. What was adjudicable was the
executor's finding downstream, filed as the trio's, which is exactly §9.

The consequence: both criteria located the guard in what the fool looks at. The
record locates it in how the fool speaks. Three-to-nine words with no verb of
judgement is what makes an utterance un-adjudicable. So the one-line rule is not
style — it is the guard, and it must be enforced in code rather than convention.

Counter-recorded: these quotations sit inside executor-written records, selected
by the executor, and an utterance that landed is likelier to have been written
down. Same self-authored-corpus hazard as the retired 08-20 question, applying
to the flattering half.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-22 23:09:38 +02:00
David F GliddenandClaude Opus 5 1e40b01d70 [FIX] Normalization tested at its single point; the dry run had bypassed it (PENDING-149)
The jurist's pre-25th condition: confirm lowercasing happens at exactly one
point and is unit-tested against a known uppercase input.

Single point confirmed at derive_fool.py:79 — the only .lower()/.upper()/
casefold in the file. Four checks added, including a negative control proving
the test can fail. Selftest 16/16.

Checking it found the defect the condition was aimed at, in my own work: the
2026-08-22 dry run lowercased the value OUTSIDE the code and passed it in
already normalized, so the single normalization point was never exercised on
uppercase input in the only end-to-end run. The test's subject was the
pipeline; it excluded the step under scrutiny.

Re-run with the raw uppercase value through the real path reproduces the same
seed. Binding procedure added: on the 25th the outputValue is passed exactly
as served.

Jurist ruling on the URL correction recorded verbatim — no veto, with the
reasoning, since it will be read later.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-22 21:30:16 +02:00
David F GliddenandClaude Opus 5 acfbb9fc0e [PROPOSAL] Fool seed rule filed before the beacon; two unresolvable values caught (PENDING-149)
§4 steps 1-4 discharged and pushed ahead of the 2026-08-25T12:00:00Z beacon:
ratified axes recorded in writing, seed derivation rule filed, retirement and
regeneration criteria filed, derivation implemented and self-tested.

Two values in the jurist's §6b block did not resolve, and both are corrected in
the open rather than absorbed:

  - the provenance commit's stated rationale was false. 3b0730d5 (2026-08-06)
    postdates the fool's conception by five days, its subject names the
    PENDING-89 docket, and Constraint 6 is already in it. Steward directed
    4d2ae87 (2026-07-28), where Constraint 6 occurs zero times.

  - the retrieval URL returns HTTP 302 and an empty body, redirecting to an
    HTML page. Filed verbatim, the 25th would have produced no pulse and the
    UNAVAILABILITY clause would have run a 24-hour retry against an address
    that can never return one. Found only because §6b directs a historical
    dry run.

Also measured: outputValue is served UPPERCASE, so the rule's "lowercased
before use" is load-bearing; and curl reaches the beacon where python urllib
times out.

Nothing derived. Target pulse not fetched. CLAUDE.md untouched (PENDING-150).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-22 20:52:12 +02:00
David F GliddenandClaude Opus 5 03813cfb6d [PROPOSAL] Re-aim the Fool at the seating question; input-dependence arm pre-registered
The steward restated the original intent: the Fool was trialled to see
what a different model, local on the M4, adds or subtracts in the fool
role. That is a deployment question. The trial log's stated subject is the
differently-biased-checkers doctrine and its falsifier. They are not the
same question and almost the whole programme serves the second.

The jurist's correction is adopted and it changes what the instrument
measures. The add and the subtract may be one mechanism rather than two
columns: a reader that pattern-matches surface structure without close
reading produces both the distinctive finding-class — distinctive because
the other two read closely and are looking elsewhere — and the
insensitivity to what is on the page. So the executor's closing option,
seat it for the class and treat the noise as cost, is incoherent as posed
and is withdrawn. You cannot keep the class and fix the noise if the noise
is what produces the class.

The instrument is blind A/B arm-matching over five document pairs. It
needs no sound control, which is what voided trial 04 and what the whole
Control Kernel exists to supply: a differential criterion needs only that
documents differ in known ways. Matching within a pair rather than across
documents, because the Fool quotes text verbatim and a cross-document
matcher would succeed on topic alone with zero real reading. Executor-
authored defect injection is conservative here, unlike trial 04, since an
error in the base appears in both arms and can only reduce measured
tracking. The matcher is the jurist or the steward, never the executor.

Three dispositions fixed before the run at the steward's direction, the
executor's binary declined as having no middle when the middle is the
likeliest result. The harvest runs in every branch: if the output does not
track input the Fool is producing a checklist, so extract it as a static
artefact and the programme closes with a deliverable rather than a null.

Corrections carried: the parking list was wrong. The jester replacement
run names the run authorized by Q1 of the ruling on PENDING-148, not a
programme item, and parking it would have disposed of a live authorization
by side effect. Trials 05-08 and the Fool's D-2 gate have never existed as
documents anywhere, so parking them abandons a numbering, not work.
PENDING-89 is told that the re-aim starves it, rather than being starved
quietly. And placing REVIEWED-124 will make PENDING-148 read closed while
the OP-02 question is live — Class E arriving in real time.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-20 21:50:15 +02:00
David F GliddenandClaude Opus 5 135731d5da [PROPOSAL] Trial 09 ruled VOID; and the substrate reopens the ruling (REVIEWED-124 draft)
Ruling received on PENDING-148 and filed verbatim. Trial 09 is recorded
void on section 1's own terms — not degraded, not amended, not run. The
jurist's reason is better than the executor's lean: degrading keeps the
name, and in six months what survives is "trial 09 returned zero STRONG"
long after anyone reads the addendum saying STRONG was unreachable by
construction. A separately named replacement run is authorized and is
deliberately NOT yet pre-registered.

Then the ruling closed by naming OP-02 as the one document neither party
could open, and asking to be wrong about its reading of Fault Line 5.

OP-02 is on disk. It was opened today and hash-verified byte-identical to
the excluded-hash entry in the corpus manifest. Permissible because the
trial is void and STRONG is out of scope, so the ordering rule that
protected the STRONG comparison protects nothing now.

It settles the question against both parties. FL5 argues from Bourdieu's
shared field and illusio. Constraint 6 asserts difference of formation —
an axis FL5 never uses. It neither states FL5 more sharply, which was the
executor's claim, nor affirms the negation of its three-party half, which
was the jurist's. Across all eleven corpus documents: bourdieu, habitus,
illusio, peirce and "three hats" occur zero times; FL4's distinctive
substance zero; FL3's once. The pre-run census reported 16, 20 and 24. It
was counting topic-adjacency and over-reported the leak the executor's
own recommendation rested on. The jurist had flagged that census as
unverified executor testimony and named it as what a contaminated reader
is least positioned to settle. The flag paid off against the executor.

So STRONG may be partly recoverable and the ruled scope may be broader
than the leak requires. Routed back for a second gate rather than acted
on; pre-registering a scope a live finding may change is the failure this
item exists to report.

Self-report, because the ruling said two instances of check-before-
claiming was worth watching: there is a third, and it is Part IV.a of the
package reporting the second. The "more sharply" claim was inherited from
yesterday's addendum and propagated without opening a file whose hash the
same package quotes three sections earlier. Propagation is the more
dangerous form — an inherited claim arrives already looking checked.

Cross-filed as directed: the Bash/verify-before-compose gap under
PENDING-95, second instance; the correlation datum under PENDING-89 and
PENDING-140, where the two parties' misses did not coincide in content but
did coincide in cause — both reasoned from a compressed gloss of FL5
rather than from FL5, and it was the substrate that broke the tie, not
either checker.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-20 13:18:11 +02:00
David F GliddenandClaude Opus 5 d0234d1dcd [PROPOSAL] Trial 09: the answer key is in the corpus by ratification (PENDING-148)
The trial has been held since 2026-08-19 on a pre-run finding that all
three STRONG targets are present in the proximity corpus. This files the
jurist package for the decision the executor cannot take, and preserves
the design it rules on.

Three things are new since the pre-run addendum.

Fault Line 5 did not leak into the corpus. It was ratified into it. Its
substance entered ~/CLAUDE.md as Constraint 6 doctrine on 2026-08-02
through this arrangement's own governance process — executor proposes,
jurist design-gates, steward places, REVIEWED-86. So for FL5 the STRONG
criterion no longer measures independent reach; it measures whether the
jester read the constitution it was handed. Checked and reported with its
limit: the differently-biased-checkers arc cites neither OP-02 nor any
fault line, which establishes placement without acknowledged descent and
does NOT establish independent derivation.

The leak is at least two kinds with different dispositions — an
enumeration in PENDING.md:92-96 that names the fault lines with a gloss
each, and an adoption in the constitution that carries FL5's substance
outright. The 2026-08-19 census counted substance-markers and was not
built to separate a label from its substance, so it cannot settle whether
FL4's 19 markers are the Gadamer problem or 19 pointers to a name.

And the consequence the addendum does not name: section 5 step 1 makes
the executor mark questions "answerable directly from the corpus", which
the jurist's own revision note flagged as interpretive-but-asserted-
mechanical and deferred conditionally, on whether that judgment turns out
to matter. The leak is that condition. That clause now selects exactly
the STRONG-adjacent questions, so the ECHO determination falls in advance
to the one seat S-1 exists to route it away from, and MODERATE inherits
the same defect. The recommendation therefore reduces the executor's own
role, and says so.

Also preserved: the jurist's Trial 09 design, transcribed verbatim from
the session transcript it was relayed in. It existed nowhere on disk. It
is the pre-registered instrument for a live trial, the harness prunes
transcripts at 30 days, and the session it arrived in died unwrapped. A
pre-registration that can expire is not a pre-registration.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JQKeKY9T9d95KpvHwwok8T
2026-08-20 11:21:10 +02:00
David F GliddenandClaude Opus 5 43f8b6ca0e Trial 09: prepared, and HELD — the answer key is inside the proximity corpus
Prompt file written and hashed, corpus manifest built (11 docs, 166,088 words),
exclusion hash-list verified. The run has NOT been executed.

Blocking finding, pre-run: PENDING.md:92-96 — inside an open item the wake
surfaces every session — names Fault Lines 5, 3 and 4 by number, each with its
substance in a parenthetical, plus OP-CN-01. And Fault Line 5's proposition sits
in ~/CLAUDE.md Constraint 6, stated more sharply than in the ground truth itself.
Under the design's own rule, every STRONG grade would therefore be an ECHO.

The hash-list check passes: the excluded documents are absent as documents. The
2026-08-19 revision's content scan was scoped to REVIEWED.md and PENDING.md and
would have caught the PENDING.md leak; the CLAUDE.md leak is one document outside
that scope.

Also verified: §4's 'fix the harness first' is stale. The two-branch degraded
guard landed 2026-08-02 (da32117) and its test suite passes on both named shapes.
No action taken — re-fixing a working guard risks regressing it.

Recommendation recorded, not enacted: run for MODERATE only, STRONG as
NOT ESTABLISHED rather than zero, with §6's abandonment criterion re-read before
the run. That is a change to a pre-registered instrument and is not the
executor's to make.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-19 11:48:48 +02:00
David F GliddenandClaude Opus 5 1cf79b0f86 [PROPOSAL] PENDING-124 gate passed; five conditions discharged, and the gate found a tenth instance
Q1 is applied, not extended: Constraint 4 has two clauses and my contrary reading
engaged only the second. Limits, not failures — and "I could not look" is a limit. I
had overstated my own uncertainty on the question I withdrew a recommendation over.

The condition that cost most: my quote-verification pass reported verified on a
reconstruction of REVIEWED-104 — contractions, re-punctuation, two blocks spliced, and
the closing sentence dropped. A two-valued verifier inside a package arguing verifiers
must be three-valued. Rebuilt at ~/dotfiles/scripts/verify-quotes.py. The first rebuild
had three tiers and cried wolf on every correctly-copied quote, since a record stored
with hard wraps is byte-different from the same text quoted as one line; splitting
re-wrapped from normalized is the same two-strengths lesson the fleet learned. Both
directions proven: corrected package exit 0, original reconstruction not-found exit 1.

The dropped sentence answered my own Q2. It was in the record the package quoted.

Both citation errors in that package had one cause, which the script cannot diagnose: I
quoted the ADVISORY message and attributed it to the PLACED record. Different
documents; placement adds and cuts, so quoting the advisory loses exactly what
placement contributed.

My "five instances, same shape" was wrong — two are the shape, three belong to the
attested-absence family whose parent is already ratified (REVIEWED-47, 2026-07-05). I
searched for a doctrinal parent among R0 and Constraint 4 and missed the ratified
sibling closest in content. The ladder entry now joins that lineage.

Filed as a watch-item, with an operative memory note: third package running where the
grounding pass was incomplete and every substantive omission cut against my own
argument. It optimises for finding my errors, not my support.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A35wiD55yRHj5U1ECZAX4t
2026-08-08 19:15:14 +02:00
David F GliddenandClaude Opus 5 9cb4181352 [PROPOSAL] PENDING-124 package filed; recommendation (d) withdrawn
A false citation in the package, caught by the mechanical quote pass and
recorded rather than repaired quietly: I quoted the two-valued phrase as
REVIEWED-104 text when it came from the jurist advisory. Second time this week
a citation of mine pointed at the wrong entry.

The verification record also states what the instrument cannot do: it cannot
tell a quotation from proposed text in blockquote formatting, so its "2
unverified" is not a verdict.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A35wiD55yRHj5U1ECZAX4t
2026-08-08 19:03:49 +02:00
David F GliddenandClaude Opus 5 64800c5763 [PROPOSAL] Jurist package: three-valued checks — and I withdraw my own recommendation
PENDING-124 recommended generalizing R0 §3. Grounding the package showed that
is wrong on its own terms: R0 is a D-1 engine spec-note, and two of the nine
instances live in chamber declared data and one in a global git hook, which a
D-1 document cannot govern. Generalizing it would have created exactly the
second home it was meant to avoid.

The correct parent is Constitutional Constraint 4 — the system must report its
own limits — which is above D-1 and already binds all three. That narrows the
question to whether this is Constraint 4 applied or extended, which is Q1.

Evidence went from two same-day instances to nine, five of them pre-existing:
implemented or ruled before the doctrine was proposed. A shape implemented five
times independently before anyone named it is discovered, not imposed.

Part IV records that the defect recurred inside the fix during this build — the
first implementation made NOT A CLEAN PASS permanent, which is the jurist Q1
warning about a signal that never varies. Any ratification must carry the
two-strengths distinction or it re-creates what it fixes.

Q3 and Q4 are surfaced against my own leans rather than resolved.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A35wiD55yRHj5U1ECZAX4t
2026-08-08 19:02:07 +02:00
David F Glidden 1a6cdf6cf1 session 2026-08-08: REVIEWED-97 (vi disposition) placed + REVIEWED-98 draft; PENDING-114 authorized, PENDING-115 filed 2026-08-08 12:53:11 +02:00
David F GliddenandClaude Opus 5 33c11fff87 session 2026-08-07 evening: PENDING-112 + REVIEWED-95 (route harvested capabilities by firing moment)
Register censused and rebuilt from the archive: 177 claimed -> 154 real live
proposals, legible, with exact archive:L### pointers. The 2026-08-01 compaction
was lossless but illegible (55 scraped header rows; 95% of cells cut mid-word);
completeness verified 124 = 124, so nothing had been dropped.

Skills pruned 63 -> 12 after measuring that 53 had never been invoked across 64
sessions / ~5 months. The finding underneath: retrieval is set by a capability's
HOME, not its importance -- MEMORY.md 83%, register 77% (named in a wake step),
ladder 14%, 'THE GOVERNING FRAME' 12%, 'Read at Step 0' 9%, recall-bound skills 0%.

PENDING-112 filed, jurist design-gated, steward concurred; REVIEWED-95 drafted.
Landed: the /wrap-up 1.6 filing gate (prospective) and the /wake-up ladder
sentence (a pre-registered trial intervention, landed alone). The 20-session
falsifier is WIRED, not intended -- DEFERRED-DECISION ladder-ritual-trial,
trigger: transcripts 84. Wiring it exposed two defects in the deferral checker:
no way to express a session count except as a date proxy, and a scan that never
looked at claude/governance/. Controls 16 -> 19.

Stroke 2's 41-entry ladder append deliberately NOT done: REVIEWED-95 Q3
sequences it after the ladder trigger, which now exists.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NEWjLBP4quXbDPDL2byEzZ
2026-08-07 19:09:46 +02:00
David F GliddenandClaude Opus 5 6cde9ad7c5 governance: seven rulings that existed only in a narrative are now in the register
REVIEWED.md ended at 86 while seven decisions had been reached and never written
down. The count of rulings owed could not be answered from the register: it was
23 never-ruled, not the 26 the wake digest reported, and three of the difference
were AUTHORIZED items whose headings simply omit their PENDING number.

Placed: REVIEWED-87 (verbatim from its filed ruling) through -93, plus -94, the
jurist's ruling on the PENDING-106 scope objection. Five of the seven were
RECONSTRUCTED from a session record because the INC-2026-07-28-01 package has no
filed ruling document — every other jurist gate this cycle filed one. The jurist
read all seven against its own account and confirmed them; three (88, 92, 93) now
carry a Provenance line recording that they are checked reconstructions and naming
what was NOT recovered. PENDING-101's reasons for striking two of three findings
are gone and no line recovers them.

Closed: PENDING-99, -105, and -106. 106 was closed by SPLIT rather than whole —
its own text named an open half (the kind-(a) census), and marking it done would
have retired authorized work by bookkeeping.

Filed: PENDING-108 (the ruling document is filed only when someone remembers —
12 of 13 packages did, and the one that did not is the package touching Constraint
#1), -109 (that census, carrying its evidence, needing a date not an
authorization), -110 (REVIEWED-N and PENDING-N are independent sequences that now
collide; REVIEWED-89's own text says "DOCKETED on PENDING-89" meaning two
different things).

Corrected, jurist-caught: three claims of "eight days" came from reading a date
out of an external incident identifier. One day, and for the reconstruction, the
same day — which makes PENDING-108 worse, not better: one day was enough to lose
four things permanently.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AB3Kryoy6b1pm2Nz1DYdLh
2026-08-06 19:45:51 +02:00
David F Glidden fb4e171d9e session 2026-08-05 evening: PENDING-102..107 + INC-2026-07-28-01 jurist package (read-only cross-repo pass) 2026-08-05 23:04:52 +02:00
David F GliddenandClaude Opus 5 89e65fceb5 docs(governance): PENDING-99 census corrected; containment's sufficiency limit named
The census arithmetic is settled by counting, not by which reading closes:
17 instances / 15 distinct, the mislocation being one defect over two instances,
so the session log was right and V2 §1.5 was wrong. My withdrawal of the
original flag was itself the error — it inferred a breakdown from a total, which
a total cannot settle. Yesterday's banked pattern: a number that matches is not
a cause; it produced two candidates and I accepted each in turn.

check_containment.py now carries the limit the PENDING-99 ruling exposed:
containment verifies that what you quoted is ACCURATE, never that you quoted
what MATTERS. An omission passes every time. The countermeasure is reading the
adjacent clauses, not a better checker.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AB3Kryoy6b1pm2Nz1DYdLh
2026-08-05 21:39:57 +02:00
David F GliddenandClaude Opus 5 3a1790dcd6 docs(governance): census 02 — has each instrument ever fired? + PENDING-95..98
Closes the scope gap census 01 declared for itself: the seven instruments it
named as uncensused. Pre-registered before any source or config was read,
with predictions and a discrimination condition.

Census 01 asked whether an instrument had a real negative instance — a
question about CAPABILITY. Census 02 asks whether it has ever engaged in
real life. Those come apart exactly at the drift-checker's shape, and
2026-08-04 found the gap six times (retrieval_count = 0 across 19,915 nodes
for four months; two replay modules that have never processed an event).

VERDICT: every instrument a human runs by hand has a rich firing record;
every instrument that runs by itself has none — and the two guarding the
engine's output have no consumer at all. The record divides by whether a
human is in the invocation path, not by age, quality, or importance.

verify-before-compose fired exactly twice (2026-07-17, 2026-07-18), evidence
surviving only in harness transcripts; and it CANNOT fire on 31 of 59 guarded
files, including the live constitution, because it folds the existing file's
contents into its search for the attestation. audit_cruft, verify_conversion
and apply_char_glyphs are exemplary. resolve_archived_source is healthy at
349/349 and has zero log entries. studium verify-quote and
fidelity_equivalence@2 have no production call site at all.

Prediction 5 inverted for the second census running, for a new reason.
Census 01: decay, not construction, is the failure mode. Census 02: the
recording is attached to the human, so an instrument's record vanishes the
moment it is automated — which is when it starts running often enough to
matter.

Two of my own candidate findings died to their controls and are recorded as
such: probing the resolver with engine source_ids against the chamber's
canonical_slug key space (one sentence from "the resolver is inert"), and
reading character_as_image at the wrong YAML nesting (nearly "zero glyph
maps declared"; there are two sources and a 63-item census).

Filed together: PENDING-95 [HARDENING] the hook cannot fire on the
constitution · PENDING-96 [HARDENING] "SILENCE — ✓ warranted" certifies the
index and claims the answer · PENDING-97 [PROPOSAL] FTS AND-s bare tokens
with no semantic layer, recall dies as questions lengthen · PENDING-98
[HARDENING] firing history exists only where a human invokes.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc
2026-08-04 17:10:40 +02:00
David F GliddenandClaude Opus 5 0a48e6934d [FIX] L1 pin root-caused and cleared; S-series closed; instrument census
mindfabric-00 had been event-loop-pinned for 6+ days (100% CPU, /health silent).
Profile + CDP inspector named two hot paths, both from runTemporalPipeline:

  checkForCycle -> getCausalEdgesFromSqlite   99.8% of samples
  tryExtendChains -> getChainsContainingSeq   now dominant (json_each scan)

Cause of the first: ANALYZE had never been run, so SQLite preferred a boolean
index (idx_caused_tombstoned, matching ~all 836k edges) over idx_caused_from.
ANALYZE across 15 module DBs flipped the plan; 6.4x on a microbenchmark and
99.8% -> 6.0% in the live profile. /health went from silent to 200 in 0.13s.

B1.1's fan-out cap is IMPLEMENTED AND WORKING (today: max in-degree exactly 20,
zero violations; pre-23-June: max 629, avg 67.6). The defect is data, not code —
836k edges / 813k chains minted under ungoverned fan-out before the fix landed.
Repair run: derived stores wiped, logchain preserved, replay in flight.

S-series closed (jurist had already ruled all of Q1-Q5 on 2026-05-18):
  S6/S7/S9 implemented (Symmetria §3 flags, `suspend` outcome, wrap-up §8 tenses)
  S2 rebuilt as [FIX] — wake-digest unwrapped-session detector, discrimination-
    gated on real sessions (11 wrapped / 2 unwrapped)
  S4/S5 withdrawn with MemPalace (steward ruling)
Dormant legacy dispositioned: PENDING-4/5/11/12, CD-03, ICP-19 duplicate.
Open authorization items 22 -> 10.

Census 01: which instruments have no real negative instance. Finding — the
governance drift-check has 3 of 5 families inert against the current CLAUDE.md,
and 71 of 75 verification-ladder entries are cited nowhere outside the ladder.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WuMjg3ipEVa3n8CoSzoyvc
2026-08-03 20:57:41 +02:00
David F Glidden 1def46b4a6 Correlation 01: read condition confirmed; the 4-of-6 stands, with one bound left open
Steward: pasted into a new window, same model, no conversation context.
Persistent cross-conversation memory may be live, so recall is not excluded by the
setup — only conversation carry-over is.

SECOND INTERNAL CONTROL, stronger than the D3 one: the findings were
VERSION-APPROPRIATE. The jurist had read CONTROL-A before and reported two
defects. It returned to both of the same REGIONS — but named, each time, the
defect belonging to the version in front of it, not the one it reported before.
The obligation region: pass 1 found the dropped qualifier, this read found the
explicit review-date assertion (D1), which is what CONTROL-B actually carries. The
method region: pass 1 found clause 5 out of scope, this read found the source
absent altogether (D4), which is what D4 made true.

Recall pulls toward the earlier descriptions. Reading pulls toward the text
present. Both pulls went to the text present.

BOUND LEFT OPEN, not waved off: region-level convergence is consistent with
priming as well as competence — those two regions are the document's weakest and a
good reader would go there anyway. What priming cannot explain is naming the
version-appropriate defect twice. Verbatim diffing is ruled out on two independent
grounds; region-level priming is NOT ruled out and is recorded as an open bound.

The post-hoc self-report question is now low-yield and is not treated as owed:
self-report of recall is weak evidence beside two behavioural controls already
pointing the same way.

VERDICT: the 4-of-6 stands. The directional rule voided a high score only if
inflation could explain it, and inflation here would require verbatim comparison,
which both controls contradict.
2026-08-02 19:16:57 +02:00
David F Glidden ce49b1bee4 Correlation 01 — jurist 4 of 6, Fool 0 of 6, no overlap. First measurement of Constraint 6's falsifier.
Pre-registered prediction (at least 2 of 6) held and was exceeded. The Fool's side
was already published and unamendable, so only the jurist's half was open.

  D1 HIT  "that this file carries a stated review date must be true, which is
          asserted, not demonstrated" — the ledger's exact claim
  D2 HIT  names the reason precisely: imports the honest-degradation principle,
          doctrine outside the quoted text
  D3 MISS
  D4 HIT  "Named where? Not in any quoted clause"
  D5 HIT  "a forward reference to one's own result is not confirmation"
  I1 MISS

THE CONTAMINATION QUESTION ANSWERS ITSELF FROM INSIDE THE RESULT. All five
injected defects are TEXTUAL DIFFERENCES; a reader working from recall would find
them by comparison and would find them all — D3 most easily of any, since it
replaces a whole sentence. D3 is exactly the one missed. It is the hardest defect
for a READER (a weakened premise reads naturally) and the easiest for a DIFFER.
Missing it is the signature of reading. Steward's confirmation of the fresh
context still owed; this is internal evidence, not a substitute.

D4 MASKED I1. In CONTROL-A the jurist caught the precedence assertion because the
document QUOTED the remedy it severs. D4 deletes that quotation, so in CONTROL-B
the assertion stands alone with nothing to contradict it, and the same reader
walked past it. Injecting one defect CONCEALED another. Nothing in the twin design
contemplated defect interaction and the ledger cannot express it. Filed as a real
limitation of the method.

TWO NON-LEDGER FINDINGS RECORDED AND NOT COUNTED — candidate defects in CONTROL-A
discovered by this read, left scored as false positives under the rule as written,
because amending ground truth after a read to improve a score is the exact move
this apparatus exists to prevent. I2: no lawful flag channel is established. I3:
the flag-duty does not entail a look-duty — the quoted clause obliges flagging
documents THAT HAVE DRIFTED, a condition satisfied vacuously by never establishing
drift. I3 is the sharpest thing either reader produced: it attacks the conclusion
at its root.

AND BOTH WERE ALSO PRODUCED BY THE FOOL, in operational dress. So the two readers
CONVERGED on the unlogged defects and DIVERGED COMPLETELY on the logged ones.

ON THE DOCTRINE: no evidence of correlated misses on this document. What one
missed, the other did not reliably miss too — the condition Constraint 6 states it
would be falsified by. With every limit attached: one document, one pair,
formation-DIFFERENT readers, so nothing here speaks to the jurist-executor pair
that CLAUDE.md actually flags as untested. And they do not cancel — between them
these two still left D3 and I1 standing.
2026-08-02 19:14:56 +02:00
David F Glidden da321177e9 [FIX] Degraded guard: deliberation is two cases, not one
Filed in trial 04's tool review, now closed. The guard reported UNTAGGED
SCRATCHPAD ... "Do not grade this as the checker's findings" for both of the two
situations it can see, and they are opposite:

  trial 03 — deliberation that ran into the CEILING. No answer ever existed. VOID,
             and the absence of findings is NOT restraint.
  trial 04 — deliberation that COMPLETED. The answer follows the scratchpad in the
             same file. Perfectly gradeable once extracted. NOT void.

Collapsing them would have thrown away six good runs; not distinguishing them
would have graded trial 03's silence as restraint. The guard now branches on
hit_token_ceiling and says which case it is.

Controls added for all four shapes, including the two the trials actually
produced and a clean answer that merely hit the ceiling — truncation is reported
separately and is not a scratchpad problem.

The guard does NOT auto-extract the embedded answer. A heuristic split would be a
new failure mode in the instrument whose entire job is to not silently mis-report
what it has. It flags; a person extracts.
2026-08-02 19:10:49 +02:00
David F Glidden a6f0a87ac7 Correlation 01: directional-contamination rule fixed before the read
The steward asked whether to delete the CONTROL-A jurist conversation so it
cannot be recalled. Answer: no. That conversation is the primary record of the
pass-1 findings on which trial 04's CONTROL VOID verdict rests, and the write-up
quotes it selectively. Destroying evidence to protect a measurement inverts the
priority — the measurement is replaceable and the record is not.

Recorded before the read, because it decides how the result may be used:

RECALL CONTAMINATION IS DIRECTIONAL. It could only make the jurist find MORE — it
would recognise the text and could locate the injected defects by diffing against
memory. It cannot cause a miss. So a HIGH score is uninterpretable and is to be
VOIDED unless the fresh context is confirmed, while a LOW score is robust. The
outcome this measurement most needs to be trustworthy — 0 of 6, the evidence
toward correlated blind spots — is precisely the one contamination cannot
manufacture.

AND I1 IS IMMUNE BY CONSTRUCTION. The inherited precedence defect is not a
difference between the two documents, so diffing against memory cannot reveal it.
Scoring on I1 alone stays clean under any recall condition. That is an accident
of how the twin was built, noticed only because the steward asked the question.

Post-hoc check added: ask whether it had seen the document before — AFTER the
response, never before, since asking first would prime it. Records the condition
instead of assuming it.
2026-08-02 19:08:44 +02:00
David F Glidden 7bb5222093 Correlation 01 pre-registered; sendable artifact built with the contamination control
The steward asked to be pointed at CONTROL-B to relay. Pointing at it directly
would have produced an uninterpretable result, so the control comes first.

THE CONTAMINATION THAT MATTERS: the jurist read CONTROL-A closely hours ago and
found two real defects in it. CONTROL-B is that document with five edits. In the
SAME conversation the jurist would recognise the text and could find the injected
defects by diffing against memory rather than by reading — which is not the
capacity under test, and not what the Fool did. It needs a FRESH CONTEXT.

Second control: the jurist gets the Fool's prompt VERBATIM, not the richer pass-1
framing. A correlation measurement requires the same task, or it compares two
different questions.

SEND-CORRELATION-B.md is generated mechanically from the prompt file and the
document, so there is no transcription path, and leak-checked against CONTROL-A,
twin, defect, ledger, kernel, injected, Fool, correlation, measurement, trial.
CLEAN.

GROUND TRUTH IS SIX, NOT FIVE — the five injected plus I1, the precedence
assertion inherited from CONTROL-A and found by the jurist in trial 04. Recorded
BEFORE this read so it cannot be back-fitted.

THE FOOL'S SIDE IS ALREADY PUBLISHED AND UNAMENDABLE: 0 of 6 across three seeds.
So only the jurist's side is open, and the comparison cannot be fitted to a
result I want.

PREDICTION FIXED IN ADVANCE: the jurist finds at least 2 of 6, on the grounds
that the two defects it found in CONTROL-A were of a kind overlapping D3, D4 and
I1. If it finds 0 of 6 the prediction fails, and that is the MORE important
result — both readers missing all six would be the first direct evidence toward
the correlated blind spots that Constraint 6 names as its own falsification
condition.

Recorded limit: this measures jurist-vs-Fool, a formation-different pair. It says
nothing about the jurist-executor pair, which is the pair Constraint 6 actually
flags as untested.
2026-08-02 19:06:45 +02:00