Start authorized file-only P08-03 implementation without shell permission changes

docs/plans/original-completion-2026-10-02/execution/p08-03/ACTUAL_OPUS_FILE_ONLY_RUN_DIRECTION.json

@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P08-03",
+  "reason": "P08-03 is ready and its registered contract has an empty depends_on list, so a safe, independent file-only path is available. The run must use the isolated, already-verified AGY 1.3.3 authentication and strict stream (/init/user_input confirmed) and keep the existing outer sandbox. AGY may use only file view/edit tools. Shell and run_command are forbidden entirely. That avoids the printf marker command waiting for owner approval: do not re-run, rephrase or route it through another tool, and do not treat this run as approving it. This run does not certify full acceptance of RP24-02 (0a7b0148) or production adoption of the 1.3.3 adapter. File-only instructions, limited to allowed_paths: (1) Before editing, read docs/spec/acceptance/P08-03.json, ACTUAL_OPUS_START_DIRECTION.json, CURRENT_ACCEPTANCE_AUDIT.json, autoload/simulation_runtime.gd (submit_command, demolish_facility, refusal codes, STAIR_LANDING_MISSING) and tests/transport/test_runtime_stairs.gd. Using DIAGNOSTIC_SCENARIO_SOURCE_AUDIT as reference, write CONDITION_MATRIX.md stating that preview validate_placement has no connection check and that STAIR_LANDING_MISSING is a pre-construction Runtime refusal. Keep these two oracles separate, so a preview rejection is never presented as proof of a Runtime connection rejection. (2) In scenes/main/main.gd and world_preview.gd, add a normal-palette demolition entry, mode, selection, confirmation, cancel and result/status display that call only SimulationRuntime.submit_command demolish_facility. Do not duplicate domain logic, mutate Runtime directly or touch Runtime/service/construction data. Keep build, excavation, pan, zoom, selection and modal behavior coherent. (3) Write diagnostic-tagged GDScript fixtures with stable UIDs under tests/fixtures/p08-03, choosing existing normally constructible definitions for support/connection and rebuild cases. Add one new strict marker entry to tests/ui/test_p08_normal_placement_ops.gd. (4) Write the Root driver tools/run_p08_normal_placement.py using existing execute_phase, the profile guard and owned_outer. (5) Write checker tools/check_p08_normal_placement_evidence.py with --verify-only reading BUILD_OUTPUT_DIR/p08-normal-placement-evidence/index.json; it must recompute hashes and state. (6) Write tools/test_p08_normal_placement_evidence.py with one whole positive case and semantic corruption negatives: reason mismatch, cell drift, stale source/input, fake OS provenance, partial demolition or orphan occupancy, bad resume, omitted members. (7) Only if the existing cleanup helper is used, add one source-SHA-pinned policy to suite-policy.json. (8) Update implementation.json and the completion marker contract. Because no Shell is allowed, the worker must record Python syntax, checker tests, Godot, native, OS and full regression all as unexecuted/pending. Running them is not the worker's job: Root runs local syntax and meaningful tests, guarded native, real-OS pan/zoom and the separate-PID resume. If an ordinary edit permission is refused, stop and report the exact denial without widening permissions or working around it. The original P08-03 conditions in full, 30 packages/88 units, the Windows open item and the need for independent review and integration are all preserved. Do not start a new Root or Codex duplicate implementation or a duplicate full regression.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "The assigned worker is AGY, so the Codex model is only a fallback or for later repairs. The work is broad but well specified: UI wiring onto an existing Runtime API, fixtures, and a checker with defined corruption cases. No hard reasoning failure or repeated failed repair has been observed for this task. Execution is file-only, and Root owns native/OS verification. The default model gives enough quality at lower time and usage cost. Escalate to gpt-6-astra only if a submitted candidate shows a concrete semantic defect in the checker invariants or the two-oracle split that the default model fails to repair."
+}

docs/plans/original-completion-2026-10-02/execution/p08-03/CURRENT_EXECUTION.json

@@ -5,7 +5,7 @@
     "units": 88,
     "completed": 11
   },
-  "UI_impl_worker_started": false,
+  "UI_impl_worker_started": true,
   "necessary_prerequisite": {
     "task": "RP24-02",
     "state": "review_pending",
@@ -22,7 +22,18 @@
     "counting_scope": "infrastructure task, no original game-unit completion credit"
   },
   "Claude_auth": "existing native subscription client automatically renewed; actual authenticated request success, no user login wait or API fallback",
-  "P08_03_next": "registered ready, actual Opus scope confirmed wait; UI worker not started. Continue independent evidence preparation, no duplicate code or repeated game regression.",
+  "P08_03_next": "actual Opus run direction recorded, file-only AGY source implementation started in existing registered task; Root runs all tests",
   "current_game_sources_changed": false,
-  "permission_request": "single readonly printf command temporary, not applied"
+  "permission_request": "still pending and not applied; independent source work does not require marker command",
+  "UI_worker_method": "file view/edit only; no shell/run_command or denied marker action",
+  "RP24_acceptance_not_inferred": true,
+  "actual_UI_run": {
+    "id": "a33343b08feb43f1ae18e3adc8f8dfcf",
+    "state": "implementing",
+    "pid": 17973,
+    "session": 32391,
+    "service": "agy",
+    "method": "file-only; no shell/run_command",
+    "worker_count": 1
+  }
 }

docs/plans/original-completion-2026-10-02/plan_validation.json

@@ -254,6 +254,6 @@
     "validate_facility_value_contracts.py": "91640e2a76cd6cc9186f7b85c0bf379b24b6cac0d48962815235ee628e7ae43e",
     "validate_plan.py": "23678227d9b3c556f1bd903f4b5b3147c4a82ce5085e10055481026803451b80",
     "validator_update_checks.json": "f997d0f3de2cea29550840b1d5cb23647d64f81329de46758551e2b6c8fecc27",
-    "work_packages.json": "1e6530adb9269476cc8bd85ed8c9f6ea91dc315d3a340d558cfacc8fff321a57"
+    "work_packages.json": "d82fedac9733830d08c907cb38d237b56e79fb544b2e1fe7393a97df8d7a3fe0"
   }
 }

docs/plans/original-completion-2026-10-02/work_packages.json

@@ -6875,12 +6875,12 @@
             "current_game_acceptance_inferred": false
           }
         ],
-        "progress_summary": "P08-02完了後の次1件として実Opusが選定。原work/acceptanceを保持して読取監査に着手し、通常UIの撤去入口欠損を現ソースで確認。pan_mode+Ctrlなしwheel、通常wheel zoomの実装経路を確認、延期ジェスチャーとは区別。P08-01完了/30施設受入という初回Opusの誤前提は真正台帳で訂正し撤回済み。配置契約が原本と一致する通常施設を現ソースから選ぶ。契約・担当確定、必要UI追加、fixture/checker・OS入力・独立レビュー・統合は未完、新規workerは未起動。 2026-10-14: 原5条件をRunner登録し実Opusが範囲を確認。通常UIワーカー未起動。関連RP24-02のAstra候補0a7b0148は登録検証済み、実失敗ログのfatal拒否/診断ENoENT対照を再生。AGY1.3.3の限定shellはheadless command自動拒否、許可案のみ提示して未適用。独立source監査で接続拒否はconstruction previewでなくRuntime建設のSTAIR_LANDING_MISSINGをoracleにすべきことを確定し、原本2x1表の一般客室・現階段/通路の診断案とinputSHAを固定。価格/工期は診断予算算出にのみ使用し新本番値にしない。",
+        "progress_summary": "P08-02完了後の次1件として実Opusが選定。原work/acceptanceを保持して読取監査に着手し、通常UIの撤去入口欠損を現ソースで確認。pan_mode+Ctrlなしwheel、通常wheel zoomの実装経路を確認、延期ジェスチャーとは区別。P08-01完了/30施設受入という初回Opusの誤前提は真正台帳で訂正し撤回済み。配置契約が原本と一致する通常施設を現ソースから選ぶ。契約・担当確定、必要UI追加、fixture/checker・OS入力・独立レビュー・統合は未完、新規workerは未起動。 2026-10-14: 原5条件をRunner登録し実Opusが範囲を確認。通常UIワーカー未起動。関連RP24-02のAstra候補0a7b0148は登録検証済み、実失敗ログのfatal拒否/診断ENoENT対照を再生。AGY1.3.3の限定shellはheadless command自動拒否、許可案のみ提示して未適用。独立source監査で接続拒否はconstruction previewでなくRuntime建設のSTAIR_LANDING_MISSINGをoracleにすべきことを確定し、原本2x1表の一般客室・現階段/通路の診断案とinputSHAを固定。価格/工期は診断予算算出にのみ使用し新本番値にしない。 実Opusが独立したfile-only経路のrunを記録し、登録済みAGY1担当の実装を開始（a33343b08feb43f1ae18e3adc8f8dfcf、初回/修正0）。Shell/run_command/拒否markerの再実行は禁止、Rootが必要試験を行う。RP24-02未達・設定一時許可質問は保留のままで、元P08-03条件は狭めない。",
         "remaining_gaps": [
-          "提示済みの限定コマンド許可の回答。設定照合/復元を確認し、実AGY限定shellとRP24-02の独立受入を揃える。",
-          "実Opusのrun判断で登録済みUI担当1名を開始し、通常撤去入口とfixture/checkerを実装する。",
-          "表示理由をplacement reportとRuntime接続/撤去拒否の適切な実結果へ照合し、原5条件のRoot native/OSを採取する。",
-          "必要局所/影響試験→関連変更凍結→正確な最終版の必須全回帰・独立レビュー・統合/台帳反映。"
+          "同一AGY file-only実装の真正提出。通常撤去入口、fixture、driver/checker/docsを許可範囲だけでまとめる。",
+          "Rootによる構文/意味局所試験、表示理由の適切なplacement/Runtime oracle照合、原5条件のnative/OS証拠を採取する。",
+          "関連差分凍結後の必要影響/最終全回帰・独立レビュー・統合/台帳反映。",
+          "RP24-02の限定shell許可質問と実AGYshell受入は別未達として保持し、今回file-only作業から成功を推定しない。"
         ],
         "updated_at_jst": "2026-10-14T00:50:37.842980+09:00"
       }