P08-03: 配置の通常操作受入

2026-10-14 03:22:38 +09:00
parent 12430ba899
commit 7dd450c64c
22 changed files with 7543 additions and 2 deletions
@@ -0,0 +1,102 @@
+# Root collection protocol (not executed by worker)
+
+Read the fixed spec and condition matrix first. Freeze/commit through the
+authorized Root workflow. The worker has not committed or run this procedure.
+Use a clean checkout at the exact submitted HEAD, an installed native Godot,
+and a new output directory **outside** the source checkout:
+
+```sh
+python3 tools/run_p08_normal_placement.py --collect \
+  --project-root /absolute/frozen/checkout \
+  --output /absolute/build/p08-normal-placement-evidence \
+  --commit EXACT_FROZEN_HEAD --godot /absolute/Godot \
+  --input-mode native_os
+BUILD_OUTPUT_DIR=/absolute/build python3 tools/check_p08_normal_placement_evidence.py \
+  --verify-only --project-root /absolute/frozen/checkout
+```
+
+`--input-mode handler` collects only the strict headless pair. Its index has
+no OS proof and intentionally cannot pass the whole checker. `native_os`
+first collects that same headless pair, then separately starts the passive
+nonheadless writer/reader. Import and handler phases use unchanged
+`execute_phase` guards, markers, owner/audio proof. OS phases reuse the
+P08-02 `collect_native_os.py` / passive recorder protocol, read-only as reuse
+sources, with P08-03 arguments and paths; no new OS automation framework.
+
+Before native launch the controller checks live engines, exact HEAD, clean
+checkout, copied source inventory, disk admission and default player.
+Each OS role gets a UUID private profile. Writer receives the handler's
+`pair/initial-formal`; reader receives the OS writer's `os-pair/formal`.
+All four formal members are copied and SHA-checked. The staged project gets
+only private-profile settings and is restored in finally. Only captured
+Popen children are cleaned by `owned_outer.finish_captured`.
+
+Actual argv is `[engine, --path, stage, --script, passive_os.gd]`, with no
+headless flag or headless proof gate. `started.json`, `process-started.json`,
+`ended.json`, raw engine log, actual profile/engine report, source/stage/default
+player inventories and ordinary owner/audio records remain in the evidence.
+Controller and recorder SHA appear in start/end documents. Each OS child
+has a 900-second bound and each Root acknowledgement a 300-second bound.
+Timeout/error preserves failure records and cleans only owned children.
+
+## CUA request / read-only acknowledgement bridge
+
+The collector prints `waiting_for_root_cua`; the recorder prints each exact
+request filename and writes:
+`os-pair/{writer|reader}-request-NNNN/request.json`.
+It contains PID, sequence, action, target window, instructions and applicable
+expected world cell, transformed viewport/screen coordinate, window/screen
+scale. The recorder waits; it never clicks or changes Accessibility settings.
+
+Root uses its existing CUA tool on the indicated PID/window. A request may
+ask for normal palette scrolling, a button/cell click, ordinary non-Ctrl
+wheel, normal manual load, or normal play/speed/pause until construction
+finishes. Modal buttons include their own window ID and screen transform.
+If a cell is clipped, the recorder first asks for ordinary zoom-out framing,
+then recomputes coordinates. Do not substitute old pixels or injected input.
+Capture real CUA screenshots before and after each request. Retain the raw
+CUA result and tool-call identity; never manufacture a receipt to advance.
+
+Root writes its own receipt file within the evidence directory. The bridge
+envelope references that raw tool call and records:
+
+```json
+{
+  "method": "native_os",
+  "target_pid": 123,
+  "timestamp_ns": 123456789,
+  "collector_pid": 456,
+  "tool_name": "actual CUA tool name",
+  "tool_call_id": "actual tool call identity",
+  "events": [{"type": "actual input event", "raw_receipt": "retained raw CUA result"}]
+}
+```
+
+After completing the requested operation, Root writes `ack.json` beside
+the request. All artifact references are relative to the evidence root:
+
+```json
+{
+  "target_pid": 123,
+  "sequence": 1,
+  "request_sha256": "actual request file SHA-256",
+  "input_receipt": "root-receipts/writer-0001.json",
+  "screen_before": "root-receipts/writer-0001-before.png",
+  "screen_after": "root-receipts/writer-0001-after.png"
+}
+```
+
+These numbers/strings are format examples, never evidence. Recorder and
+controller only **read** Root's acknowledgement/receipt files. The recorder
+separately retains actual Godot input observations and world selection,
+whole typed/Variant snapshots, displayed reasons and Runtime results.
+The checker verifies request/ack hash and sequence/PID binding, raw input
+presence, PNG structure/CRC, affine coordinate conversions, formal members,
+model invariants, distinct processes, native lifecycle and real owner proof.
+Independent review must match tool-call identities/raw CUA results and actual
+screenshots; an integrity checker is not an OS attestation authority.
+
+Keep final requests (including save/load) as well as row-specific requests.
+Do not edit evidence after collection to force a pass. Correct source/input
+defects through the fixed repair workflow. GDScript parsing, actual native
+and OS success, full regression, review and integration are all pending.