Compare commits
10
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Agent Control Runner
|
2dde7596a8 | ||
|
Agent Control Runner
|
fb8b7919db | ||
|
Agent Control Runner
|
55f1fb49aa | ||
|
Agent Control Runner
|
4ab7ab8712 | ||
|
Agent Control Runner
|
7af6fafaf0 | ||
|
Agent Control Runner
|
d393e4d90f | ||
|
Agent Control Runner
|
8418560aaf | ||
|
Agent Control Runner
|
16207d353a | ||
|
Agent Control Runner
|
b543c26c95 | ||
|
Agent Control Runner
|
accd07c91d |
@@ -1,177 +1,26 @@
|
||||
# 初期監査の検証器
|
||||
# Current checker protocol — repair29
|
||||
|
||||
## repair7 定義（以前の版識別説明に優先）
|
||||
Worker **SOURCE-READY / NOTRUN**. [CURRENT_STATUS.md](CURRENT_STATUS.md) is canonical for execution facts; creation-time NOT RUN in REPAIR22–28 and runbooks is historical. [ORDER_AUDIT.md](ORDER_AUDIT.md) and order-audit.json give the eleven-phase/seven-domain audit. [D05_REMAINING_ORDER_CANDIDATE.md](D05_REMAINING_ORDER_CANDIDATE.md) is approval material only.
|
||||
|
||||
registered は deb1bcb、execution_origin は 9767b0a、checker は実際に
|
||||
実行したcheckerのcommitとbytes、product_target は
|
||||
`{main_anchor, submitted, composed_tree}` とする。checkerのSHAを製品版に
|
||||
代用しない。提出後にしか確定しない自己blob照合は未実施としてRootが検証する。
|
||||
B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
The checker remains a61 (`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`), with its registry unchanged. Fifteen conditions + EV, seven domains, three safety outcomes and30/88 denominator remain fixed. Original credit13/88 unchanged; P04 remains incomplete.
|
||||
|
||||
`duty_payments` は決算日のpayroll settlement取引のうち、
|
||||
ShiftInstance.record_duty_minute の勤務recordとstaff_id/day単位で
|
||||
結合できる取引の件数。期待値は1のまま。独立した通貨項目ではない。
|
||||
collectorはpayroll行と勤務recordの実rawを結合し、結合不能なら失敗する。
|
||||
| Evidence | Root-measured current fact |
|
||||
| --- | --- |
|
||||
| B/p04-s4-native-r28 | 4/4 PASS; PIDs49940,50044,50078,50105 all ended; guards0; cleanup0. |
|
||||
| B/audit-support/p04-root-fb8b-s4-r01 | S4 controls and native receipts PASS. |
|
||||
| B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS and registered validation fb8b PASS28.095s. |
|
||||
| B/audit-support/p04-raw-collect-r22 | Current collection, preserving raw and exact relocation/series SHA256 bindings. |
|
||||
| B/p04-evidence/index.json | Schema2; missing_conditions=[]; all15 conditions + EV mechanically verified. |
|
||||
|
||||
融資の公開返済API `repay_loan_principal` とledger分類
|
||||
`LOAN_PRINCIPAL_REPAID` / `financing_principal_outflows` は存在する。
|
||||
自動返済や全UIの完成は主張しない。「融資機構がない」という説明は撤回する。
|
||||
Root-measured native product5f6bc11d/main9b1a18c1. Current product is B/audit-support/p04-r17-full-inputs-r01/product, not deb11300. Static current hashes and handler/function lines, plus exact proof pins, are in REPAIR29_STATIC_SOURCE.json. The index preserves source/config/input/environment applicability and native ownership joins; mechanical PASS does not grant D05 approval or original completion.
|
||||
|
||||
midnight_replayは同minuteの決算API再呼出しによる実測までpending。
|
||||
1442完了やservice request再送を1440売上・決算API再呼出しの証明にしない。
|
||||
shift_completionはapproved-shift-current-r01.gdの1080観測を使う。
|
||||
D05のEV停止帰属、停電と休業の厳密な順序、費用時点の未確定部分はpending。
|
||||
全case収集、登録validate、独立whole review、統合準備の順序を維持する。
|
||||
本修理での試験・engine実行はworkerでは行わない。
|
||||
C NATIVE_RUNS/native_ownership/verify_native remains unchanged. C shift proof joins actual owned start/end PIDs, serviceID, original priceSnapshot, service.payment key and receipt entries; no fixed PID or ledger number. S1 typed raw joins pre-travel ACTIVE reservation/task/staff/cell to boarded trip; JSON summaries do not replace typed evidence.
|
||||
|
||||
## repair6 現在値（2026-10-16）
|
||||
Only S4 supplies isolated power_stop. It preserves native ownership, full product1338 plus sole QA override, Writer/Reader packages, exact Runtime typed restoration and replay, actual NO_POWER, operating dependency, powered/ACTIVE kitchen, positive global mana and open operator. Raw graph/revision, source-derived hold, intervening held minutes, zero stopped charge, original identity and one recovery sale are joined without canonicalization or dropped fields. S4 causes NO_POWER by directly calling disconnect_nodes; it is not global-depletion proof. Global depletion appears only in B1 combined diagnostic; B1 has RELATED_FACILITY_INACTIVE and supplies neither isolated power_stop nor priority approval.
|
||||
|
||||
旧値: C全体は `native ordering bytes` によりblocked、実applicabilityは拒否、
|
||||
whole native未確認。以下の「今回のPython確認と入力不整合」は旧bundleの履歴。
|
||||
新値: 補正済み `build_dir/audit-support/native-first-current/` に対し
|
||||
verify_native、ownership/save/ledger個別検査、applicabilityが成功した。
|
||||
checker_native_fixtures.py、checker_negative_fixtures.py、
|
||||
checker_applicability_fixtures.py --native-bundle は各1回実行しexit 0。
|
||||
旧23負例と新2負例（signature行だけのSHA、後続コメントを除いたSHA）を全て拒否。
|
||||
既存fixture14件も拒否、A/Bの登録版・production版・行移動正対照成功、3負例拒否。
|
||||
正規bundleを合成補正せず検査し、結果・旧値・新版SHAはc-native-validation.jsonに保存。
|
||||
全文rawの `old == new` および
|
||||
`sha256(new[function]) == production_body_sha256 == registered_body_sha256` が必須。
|
||||
whole gateは未実行。原15条件+EV、7領域、安全性3結果、30/88の分母、予算、
|
||||
repair上限は変更せず、formal_original_credit=0。正式受入はRunner・独立レビュー・
|
||||
オーナー判断待ち。以下の旧blocked記述を現在のC検査結果として扱わない。
|
||||
The low authority finding remains explicit: destruction_stop is bound to BASELINE:183, a mana-depletion line, not destruction authority. An explicit D05 destruction rule is required; pin/registry correction only after approval through normal repair. Observation and mechanical verification do not resolve this gap. A01 midnight ownership upkeep, dependency hold and18:00 are approved and are not re-asked. Other mandatory priorities remain pending under D05(a–d).
|
||||
|
||||
## C段階追補（本節がrepair4以前の状態説明に優先）
|
||||
Full178 used checker f5 (`f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324`),21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json (runner-input.json selected_source_map preserves all1339 selected inputs; source-start.json records initial product sources). **No full1339 run against a61 exists.** Suites/parse not executing Python support checker-independent product applicability only. Static full178 selected-map comparison found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…); no game-source difference. Runner must preserve that test applicability binding; no blanket1338 identity is claimed. Do not relabel the old full proof as a61 validation.
|
||||
|
||||
`verify_native(base)` は供給済み `native-first-current` 形式の有限adapter。
|
||||
Rootのprobe/Reader/wrapperは起動・再実装しない。A/B、verify、coverage、
|
||||
boundary_conditions、15条件、reachable EV、7領域、3安全性結果は維持する。
|
||||
既存scalar検査は宣言の整合性検査として残すが、これだけでは成功しない。
|
||||
|
||||
whole gateのindexには追加で `native_bundle` が必要。
|
||||
`manifest` は evidence directory相対の `OWNERSHIP_RAW_PROVENANCE.json`、
|
||||
`sha256` はその実SHA。manifestの親をbundle rootとして以下を照合する。
|
||||
絶対パス・親参照・symlinkは既存safe規則で拒否する。
|
||||
native production_commitはtested HEADと一致させる。別版資料をA/Bの一致だけで
|
||||
流用しない。今回のproduction版とworker checkoutは区別したまま保持する。
|
||||
|
||||
1. SOURCE_MANIFESTの76 fileとOWNERSHIP_RAW_PROVENANCEの96 fileは、
|
||||
各bytesとSHAを実体から再計算する。由来のsource絶対パスは開かない。
|
||||
3 runのimport/parse/repro、formalのwriter/reader、合計10プロセスは
|
||||
started→process→endedのPID、owner、argv、時刻順、実終了codeを照合する。
|
||||
execution・phase receipt・actual phase・cleanupのPID集合と埋込記録も一致必須。
|
||||
stdout/stderr/native logのSHA、通常終了、cleanupのwait結果とerrors空を要求する。
|
||||
Writer/Readerは別PID・別profileで、profile receipt・環境・5 slotのパスも結合する。
|
||||
2. production_commitは3結果資料とapplicabilityで一致し、specの6登録pinと
|
||||
production Git blobから計算した6 current pinを区別する。各runのsource_beforeと
|
||||
selected_source_mapにも結合する。20関数は既存A/Bと同じ全文raw比較を行う。
|
||||
後続トップレベルdoc commentを含む抽出全文rawのSHAだけを許可する。
|
||||
signature行のみ、コメント除外prefix等の候補は許可しない。
|
||||
3. `observations.json` の5点と対応 `midnight-*.json` を結合する。
|
||||
receiptはtransaction IDを一意にし、row重複を拒否し、順序・多重度を保持した
|
||||
台帳差分との完全一致を要求する。Readerの生receipt、first/replayも同じ行に結合する。
|
||||
SERVICE_SALEにservice_idを要求しない。after snapshotの
|
||||
`/systems/runtime/economy/idempotency` の `service.payment.<service_id>` から
|
||||
transaction_idを得て、sale・guest wallet・facility revenue・cash sweepを結合する。
|
||||
固定のPID・価格・transaction番号を使わない。元価格と時間はproduction Gitの
|
||||
facility .tres、run inputのpin、初期facility/service/requestと照合する。
|
||||
PAUSEDはstateに加え `interruption_reason=RELATED_FACILITY_INACTIVE` を要求し、
|
||||
進捗・service ID・予約IDを保持、売上0、財布差分0を再計算する。
|
||||
request存在系列、予約requester/facility/ACTIVE→CONSUMED、復帰1回課金を照合する。
|
||||
最後のGuest despawn時は残存台帳から財布を再計算し、Guest辞書の存在を偽定しない。
|
||||
maintenanceは同一transaction・施設・金額のaccrual/paymentを対にする。
|
||||
発生1439と支払い1440は同分扱いせず、観測したmidnightとその直前として照合する。
|
||||
4. 正式保存は5点×4member×writer/reader=40実ファイルを照合する。
|
||||
execution.formal_before/afterの20 member map一致と実SHA/bytes一致を要求する。
|
||||
typed 14件はwriter-persisted 5、reader-loaded 5、reader-replayed 4（before以外）。
|
||||
原order-evidence .varおよびrun固定input pinと実SHAを照合する。
|
||||
.var decodeは行わず、値の判定はnative JSON receipt/stateを根拠とする。
|
||||
|
||||
このadapterが返す条件はdependency_stop/recovery_completion/paused_midnightの
|
||||
有限系列だけ。正式保存member同一性は、全save_restore条件達成を意味しない。
|
||||
whole gateは固定15条件+EVとこの結果の差集合を未収集としてfailする。
|
||||
非ゼロ給与×シフト交代×00:00、command再送、停電→閉店同Tick、退出/予約解放、
|
||||
破壊、EV等をscalar=trueで埋めることはできない。原条件の加点は常に0。
|
||||
|
||||
### 今回のPython確認と入力不整合
|
||||
|
||||
供給rawのownership/save/ledger個別検査は成功。applicability資料は
|
||||
`native ordering bytes` で拒否する。4関数のbody SHAが複数行シグネチャの
|
||||
途中までしか含まないためで、詳細はEVIDENCE_COLLECTION.mdに記録した。
|
||||
実raw全体を合格とは報告しない。
|
||||
|
||||
checker_native_fixtures.pyはallowed_paths内の一時コピーで23負例を検査する。
|
||||
通常の負例ではmanifest SHAも再計算し、hashだけを理由とする失敗を避ける。
|
||||
1byte改竄、member欠落、PID/profile同一化、ended異常、cleanup欠落、
|
||||
receipt二重化/削除、PAUSED売上、予約孤立、財布差分、idempotency誤結合、
|
||||
commit/pin不一致、typed/member変更、scalar自己申告を全て拒否する。
|
||||
PAUSED売上と予約孤立にはJSON側も同時変更する対抗例を含む。
|
||||
一時コピーのapplicabilityのみGit全文hashへ差し替えた合成正対照はあるが、
|
||||
これを正規native証拠として保存・採用しない。
|
||||
|
||||
旧synthetic_controlはnative rawを持たないため現在はexit 1が正しい。
|
||||
既存13負例も維持し、全14件を拒否。A/Bの正対照と3負例も維持する。
|
||||
本番の未収集indexに対する重複validateは行わない。
|
||||
|
||||
## repair4差分（未完成・blocked）
|
||||
|
||||
今回のA/B実装では、以下の旧説明の「6不変pin=実checkout」および
|
||||
reachabilityのstart/end/text形式を置き換えた。詳細と未供給入力は
|
||||
`EVIDENCE_COLLECTION.md` を参照。Cのowned_outer/raw台帳結合とD/Eの残項目が
|
||||
未完成のため、このcheckerを正式受入には使用しない。
|
||||
|
||||
- `registered_pins` はspec.current_source_pinsと一致し、登録Git blob SHAをcheckerが再計算する。
|
||||
- `versions` はexecution_origin（9767b0aの完全SHA）、registered（deb1bcbの完全SHA）、
|
||||
tested（HEAD）、integration（null）の4キー。candidate_commitもHEADを維持。
|
||||
- `applicability_delta` は登録版..HEADのautoload/scriptsのGD変更関数の
|
||||
path/function配列。checkerの計算順と完全一致。`delta_cases` は
|
||||
`path:function` → 条件ID → engine case ID。条件集合はchecker内固定の保守的判定。
|
||||
- 全autoload/scripts GDがsource_map必須で、実checkoutとHEADのraw一致も必須。
|
||||
- reachability.source_refsはpath/sha256/function/anchor_sha256/line_count。
|
||||
絶対行位置は使用せず、関数内のraw本文アンカーを一意に解決する。
|
||||
- 20順序関数は固定抽出規則で登録Git blobとtestedをraw比較する。
|
||||
|
||||
Python確認結果: 既存合成正対照1件exit 0、負例13件exit 1。
|
||||
別のA/B対照は登録=testedと実production Git blobの合法delta（25変更単位）の
|
||||
2件成功、両版で+7行のアンカー解決成功、delta欠落/境界case欠落/版誤表示の
|
||||
3負例を拒否した。全てengine証拠ではなくPython検証のみ。
|
||||
owned/count/restore/別候補receipt流用の新負例は未実装であり、上記に含めない。
|
||||
|
||||
以下はrepair3時点の記録。置換対象以外もC修正完了の証明として扱わない。
|
||||
|
||||
`python3 tools/check_p04_order_evidence.py --verify-only` は環境変数 `BUILD_OUTPUT_DIR` の `p04-evidence/index.json` を読み、書込み・試験・Runner操作をしない。欠落時は非0。原30/88の受入・完了を確定しない。
|
||||
|
||||
D05-P04-DEPENDENCYとD05-P04-SHIFT-1800は承認済み。固定必須条件と証拠が揃えばmachine_verified=true、formal_acceptance=false、exit 0。残るD05の帰属pendingを一括failにしない。必須authority pending・証拠欠落は非0。独立レビュー・通常統合までは正式受入0。
|
||||
|
||||
内部JSON形式は `P04_ORDER_EVIDENCE_PROTOCOL.json` を基に次の有限サブセットを実装した。重複JSONキー、NaN/Infinity、絶対・親参照・symlink・重複artifact pathを拒否する。全ハッシュは生バイトSHA256。indexに合格booleanや試験数があっても判定には使用しない。
|
||||
|
||||
- `schema_version: 1`, `task_id: P04-01`, checkout HEADと一致する `candidate_commit`, `formal_acceptance: false`。
|
||||
- `source_map`: repository相対パス→SHA256。specの6不変pinと旧map内autoload/scriptsの全GDScript依存を必須とする。追加sourceも実ファイルと照合する。
|
||||
- `environment`: 非空 `os` と `engine`, `configuration`, `inputs` の証拠ディレクトリ相対パス→SHA256 map。engineは実行バイナリのコピー。OSの自己申告だけではnative証明にならない。
|
||||
- `artifacts`: ID→`path`, `bytes`（整数）, `sha256`, `type`。typeは observation/state/receipt/stdout/native_log/save/authority のいずれか。
|
||||
- `authority`: ref→`status`（original/approved）, `artifact_id`。raw文書の存在を確認するが内容の原規約適合は独立レビューを要する。pendingは失敗。
|
||||
- `domains`: 正確な7領域名→`source_refs`, `authority_refs`, `cases`, `invariants`, `applicability`。source_refは `path/function/sha256`。applicabilityはindexと同じ `source_map/environment`。
|
||||
- 各caseは一意な `id` とartifact IDの `input/before/operation/after/receipt`。receipt JSONは正整数 `start_pid`、同じ `end_pid`、整数 `exit_code: 0`、`engine_ended: true`、一致する `source_map/environment`、raw `stdout/native_log` artifact IDを要求する。receiptのcase_idとinput/before/operation/afterのartifact_hashesを照合する。caseにもraw_origin=engineを要求する。ログの意味と実行由来の独立確認はRoot/reviewerが行う。
|
||||
- 各invariantは `artifact_id/json_pointer/operator/authority_ref/raw_origin`。raw_originはengineのみ。root derivationはformula検証未対応のため拒否する。RFC6901 pointerでraw JSONから値を読む。eqはexpectedとの型を含むliteral一致、nonnegativeはboolean以外の数値が0以上、count_eqは配列/辞書長と整数expectedの一致。same_literal/distinctは `paired_artifact_id/paired_json_pointer` の値との型を含む比較。未知operatorは失敗。
|
||||
|
||||
## 固定必須条件
|
||||
|
||||
checkerのREQUIREDが唯一の必須条件定義であり、indexから条件を受け取らない。conditionsはそのIDと完全一致するmap。各値はcase_id、固定順のauthority_refs、nativeWindows: pending。各条件は指定domainのengine caseと全metricのeq invariantを必要とする。観測はcase.afterの /conditions/<condition_id>/<metric> に置き、invariantのcase_id、artifact_id、pointer、expectedを固定定義と照合する。pass booleanや試験数は使わない。測定値は実際のengine観測から出すこと。手書き合成fixtureはchecker分岐検証専用であり、受入証拠には使用不可。
|
||||
|
||||
- 停止課金0: power_stop / destruction_stop / dependency_stop。依存先停止は進捗差分0・予約とservice ID保持も必要。
|
||||
- 完了・課金1回: shift_completion（1080、交代前）/ recovery_completion / same_minute_replay（再送・重複生成0）。
|
||||
- 孤立0: closure_release / exit_release / patience_release / paused_midnight。直接休業ではD-034の開始済み継続と待機予約解放を区別。停止日跨ぎは停止中課金0と復帰完了課金各1回。
|
||||
- 決算1回: midnight_settlement / midnight_replay / save_restore。売上・給与・維持費・勤務分の支払い各1回、非ゼロ給与を必須とし、帰属先は新しく決めない。
|
||||
- night_staff_absent: 1081、夜番0、WAITING_FOR_STAFF。
|
||||
- overtime_task: 既存interrupt_level=0の残業と勤務分記録1回（staff_service:1409-1412）。
|
||||
|
||||
authorityの参照名はREQUIREDに固定。BASELINE文書、D-034文書、既存A01を記録した入力草案のraw bytesをcheckoutと照合する。A01を再承認しない。承認2条件はauthority typeの同梱D05_OWNER_APPROVAL.jsonと同一SHA256（4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e）を要求する。origin=direct_user_reply、formal_acceptance=falseと承認IDも確認する。
|
||||
|
||||
save_restore条件にはsave_artifact（type=save）とrestore_receiptを追加する。元caseのreceiptのsaved_sha256、readerのrestored_sha256を保存raw hashと照合し、別の正整数PID・終了・exit 0・source/environment一致・stdout/native_logを要求する。保存packageの意味的完全性・正式保存APIの利用は生証拠の独立レビュー対象。
|
||||
|
||||
reachabilityはEV/transportのみ。各source_refはpath/sha256/start/end/textで、固定REACH_REFSの経路を全て含み、実際の行本文と一致すること。reason必須。救護搬送は課金予約reach=false。EVはスタッフ移動前予約経路があるためreach=trueとcase_idを必要とする。停電domainのengine case.afterのev.reserved_before_travel=true、power_stopped=true、orphan_reservations=0のeq invariantを要求する。客の到着後予約だけを根拠にEV全体を除外できない。
|
||||
|
||||
specは契約文字列hashと照合し、checkoutの末尾LF一つの表現差だけを許容する。その他のraw hashは正規化しない。
|
||||
|
||||
## worker確認
|
||||
|
||||
checker_negative_fixtures.pyはallowed_paths内の一時ディレクトリをBUILD_OUTPUT_DIRに使用し、終了後削除する。py_compile、対照用合成index（exit 0、正式受入false）、指定10負例（各exit 1、対応エラー）を確認済み。実engine試験・Runner操作は0。Runnerがp04-acceptanceを正式実行し、Rootが現版適用性、別セッションのreviewerが生証拠由来と意味を独立確認する。
|
||||
Remaining Runner work: owner D05 decisions after review, any subsequent normal repair, support53cb normal registered rebind, final full run and final applicability binding, formal independent review, integration P04 first then support on main9b1a18c1, and individually applicable nativeWindows obligations. Missing original authority or unknown mandatory rules remain gaps regardless of mechanical PASS. No probe or test is requested or run by this docs-only repair.
|
||||
|
||||
@@ -0,0 +1,31 @@
|
||||
# P04-01 current status — repair29
|
||||
|
||||
Worker checks: SOURCE-READY / NOTRUN. No probes or tests were run by this worker.
|
||||
|
||||
This canonical table overrides creation-time NOT RUN / pending-execution entries in REPAIR22–28, their status/validation records, and the runbooks (including S4_ROOT_RUN.md). Those files are historical and remain untouched. It does not relabel an old run as execution of repair29.
|
||||
|
||||
`B` = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
|
||||
| Item | Canonical status | Exact-version evidence |
|
||||
| --- | --- | --- |
|
||||
| Current native product / main | Root-measured `5f6bc11d` / `9b1a18c1` | Product1338 at B/audit-support/p04-r17-full-inputs-r01/product; current SHA256 inventory in REPAIR29_STATIC_SOURCE.json. Old deb11300 is not current. |
|
||||
| S4 r28 | Root-measured 4/4 PASS; import/parse/Writer/Reader PIDs49940,50044,50078,50105 all ended; guards0; cleanup0 | B/p04-s4-native-r28; B/audit-support/p04-root-fb8b-s4-r01/native.result.json. Full controls in that same support directory. |
|
||||
| Local8 | Root-measured PASS | B/audit-support/p04-root-fb8b-local-r01: bulk, negative, applicability, native, series, encoder, join, roles result/stdio records. |
|
||||
| Collection | Root-measured r22 collected, no native re-run claimed | B/audit-support/p04-raw-collect-r22/MANIFEST.json and s1/s2a/s2b/s3/s4.json. |
|
||||
| Index | Root-measured schema2, missing_conditions=[], all15 conditions + EV mechanically verified | B/p04-evidence/index.json and generation-invocation.json; local-r01 index/checker output. This is not D05 approval. |
|
||||
| Registered validation on fb8b7919 | Root-measured PASS,28.095s | B/audit-support/p04-root-fb8b-local-r01/registered-validation.result.json and stdout log. Does not establish final repair29 validation or acceptance. |
|
||||
| Full178 | Root-measured178 suites /21615 checks PASS used checker f5, **not a61** | B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json and source-start.json; exact receipt remains preserved. Checker f5 SHA256 `f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324`. |
|
||||
| Full1339 against a61 | **No such full run exists** | a61 SHA256 `a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`. Local8 and registered validation are separate evidence. |
|
||||
| Worker repair29 | SOURCE-READY / NOTRUN | Static source/line/registration/SHA256 inspection only. No tests, probes, Git, engine, Runner or agents. |
|
||||
| Owner D05 | Pending a–d, candidate only | D05_REMAINING_ORDER_CANDIDATE.md/json; A01, dependency hold and18:00 remain approved. |
|
||||
| Original unit | **Incomplete;13/88 unchanged** | Mechanical PASS does not approve unknown mandatory priorities, replace independent review, or integrate the unit. |
|
||||
|
||||
Proof hashes for the exact collection/index/full receipt/validation and current source are in [REPAIR29_STATIC_SOURCE.json](REPAIR29_STATIC_SOURCE.json). Applicable source/config/input/environment joins stay in the immutable schema2 index and raw collection; no raw is normalized, spliced, regenerated or relabelled here.
|
||||
|
||||
Product reuse requires exact applicability: the178 suites do not execute the Python checker and the316-file GDScript parse roster excludes it. Static comparison with the preserved full178 selected_source_map found one test-source difference, tests/business/test_required_kitchen.gd (full178 3a9c92f8…, current product5dcc86d6…), and no game-source difference. Preserve the Runner applicability binding for this test; do not claim all1338 selected product hashes match that full178 receipt or byte-identical full1339 validation against a61. Preserve the f5 full178 receipt and all historical partial/full outputs separately.
|
||||
|
||||
Remaining Runner steps: independent review of these documents, then Root obtains owner decisions (or explicit non-mandatory rulings) for D05 a–d. Unknown mandatory rules stay pending. Any destruction authority pin/registry or other approved implementation change follows a normal repair. The support53cb normal registered rebind, final full run on the final source/checker, final source/config/input/environment binding, formal independent review and integration remain Runner work. Integration order is **P04 first, then support on main9b (`9b1a18c1`)**. NativeWindows obligations remain individually pending if required. No criterion is waived and no extra original unit is counted.
|
||||
|
||||
Known authority/scope gaps: destruction_stop binds BASELINE:183 (mana depletion, not destruction); explicit D05 destruction rule required before normal pin repair. S4 NO_POWER was induced by direct disconnect_nodes; global depletion appears only in B1 combined diagnostic. Preserve these distinctions even though the mechanical index passes.
|
||||
|
||||
Changed files in repair29 (all under this directory): ORDER_AUDIT.md; order-audit.json; D05_REMAINING_ORDER_CANDIDATE.md; D05_REMAINING_ORDER_CANDIDATE.json; CHECKER_PROTOCOL.md; EVIDENCE_COLLECTION.md; P04_ORDER_EVIDENCE_PROTOCOL.json; CURRENT_STATUS.md; REPAIR29_STATIC_SOURCE.json. Product/checker/registry, native footprint, staged inputs, raw and historical runbooks are unchanged.
|
||||
+130
@@ -0,0 +1,130 @@
|
||||
{
|
||||
"task_id": "P04-01",
|
||||
"revision": "repair29",
|
||||
"status": "approval candidate only; SOURCE-READY / NOTRUN",
|
||||
"approval": null,
|
||||
"apply_to_product_or_checker": false,
|
||||
"review_flow": "Root asks owner after review. This document neither requests approval from worker nor records it.",
|
||||
"proof_legend": {
|
||||
"R": "B/audit-support/p04-raw-collect-r22",
|
||||
"I": "B/p04-evidence/index.json schema2",
|
||||
"pins": "REPAIR29_STATIC_SOURCE.json; R/MANIFEST.json and I raw_references/versions"
|
||||
},
|
||||
"choices": [
|
||||
{
|
||||
"id": "a",
|
||||
"topic": "Power vs closure/dependency",
|
||||
"status": "pending D05",
|
||||
"observation": {
|
||||
"status": "observed-current",
|
||||
"behavior": "RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge.",
|
||||
"source": "FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection",
|
||||
"proof": "Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins"
|
||||
},
|
||||
"inputs": "Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.",
|
||||
"A": {
|
||||
"recommended": true,
|
||||
"rule": "Keep current RELATED-first reason selection.",
|
||||
"outcome": "Service held, progress/payment paused, reservation and serviceID retained.",
|
||||
"side_effects": "Reason reports dependency while both causes apply; no new hold limit.",
|
||||
"dependencies": "Approved dependency hold, D-034 direct closure, existing MANA-before-completion order."
|
||||
},
|
||||
"B": {
|
||||
"rule": "NO_POWER wins reason selection when both conditions fail.",
|
||||
"outcome": "Same no-charge hold safety; reason reports power.",
|
||||
"side_effects": "Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.",
|
||||
"dependencies": "Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior."
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "b",
|
||||
"topic": "Destruction",
|
||||
"status": "pending D05",
|
||||
"observation": {
|
||||
"status": "observed-current",
|
||||
"behavior": "Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick.",
|
||||
"source": "Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804",
|
||||
"proof": "Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json"
|
||||
},
|
||||
"inputs": "A service due for completion in a minute with command or incident destruction of its facility.",
|
||||
"A": {
|
||||
"recommended": true,
|
||||
"rule": "Keep command-before-completion and incident-after-completion behavior.",
|
||||
"outcome": "Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.",
|
||||
"side_effects": "Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.",
|
||||
"dependencies": "P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required."
|
||||
},
|
||||
"B": {
|
||||
"rule": "An incident in the same minute suppresses that minute completion (or voids it if already posted).",
|
||||
"outcome": "No retained completion/sale for the incident-destruction minute.",
|
||||
"side_effects": "Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.",
|
||||
"dependencies": "Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required."
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "c",
|
||||
"topic": "Exit",
|
||||
"status": "pending D05",
|
||||
"observation": {
|
||||
"status": "observed-current",
|
||||
"behavior": "Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later.",
|
||||
"source": "Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762",
|
||||
"proof": "Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json"
|
||||
},
|
||||
"inputs": "Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.",
|
||||
"A": {
|
||||
"recommended": true,
|
||||
"rule": "Keep current command/AI distinction and state predicates.",
|
||||
"outcome": "Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.",
|
||||
"side_effects": "AI due time alone does not universally cancel current-minute completion; later despawn remains separate.",
|
||||
"dependencies": "D-034, reservation ownership/release, phase6 completion before phase10 AI."
|
||||
},
|
||||
"B": {
|
||||
"rule": "An exit due this minute preempts completion.",
|
||||
"outcome": "Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.",
|
||||
"side_effects": "Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.",
|
||||
"dependencies": "Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required."
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "d",
|
||||
"topic": "Cost time/day attribution beyond A01 and18:00",
|
||||
"status": "pending D05",
|
||||
"observation": {
|
||||
"status": "observed-current",
|
||||
"behavior": "Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive.",
|
||||
"source": "Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136",
|
||||
"proof": "Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json"
|
||||
},
|
||||
"inputs": "Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.",
|
||||
"A": {
|
||||
"recommended": true,
|
||||
"rule": "Keep post-increment sale time and new-day attribution for00:00 sales.",
|
||||
"outcome": "Closing day excludes boundary-minute completion; new day receives sale.",
|
||||
"side_effects": "Closing summary is finalized before those sales; upkeep ownership rule unchanged.",
|
||||
"dependencies": "Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math."
|
||||
},
|
||||
"B": {
|
||||
"rule": "Boundary-minute sales belong to closing day.",
|
||||
"outcome": "Closing day includes those sales.",
|
||||
"side_effects": "Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.",
|
||||
"dependencies": "Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required."
|
||||
}
|
||||
}
|
||||
],
|
||||
"bundle": {
|
||||
"label": "accept current-behavior A for a-d",
|
||||
"status": "pending D05",
|
||||
"recommended": true,
|
||||
"coupling_notes": [
|
||||
"a preserves the approved hold and no-charge safety independent of reason priority.",
|
||||
"b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.",
|
||||
"d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.",
|
||||
"A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.",
|
||||
"Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed."
|
||||
]
|
||||
},
|
||||
"authority_gap": "destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.",
|
||||
"power_scope": "S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.",
|
||||
"original_unit_complete": false
|
||||
}
|
||||
+93
@@ -0,0 +1,93 @@
|
||||
# D05 remaining order candidate — repair29
|
||||
|
||||
**Approval candidate only. SOURCE-READY / NOTRUN.** Root asks the owner after review. Nothing is applied to product, checker or registry; observation is not approval. A01 midnight ownership upkeep, dependency hold and18:00 are already approved and are not re-asked.
|
||||
|
||||
Structured choices: [D05_REMAINING_ORDER_CANDIDATE.json](D05_REMAINING_ORDER_CANDIDATE.json). Source path/line/SHA256 pins: [REPAIR29_STATIC_SOURCE.json](REPAIR29_STATIC_SOURCE.json); phase map: [ORDER_AUDIT.md](ORDER_AUDIT.md). R = B/audit-support/p04-raw-collect-r22; I = B/p04-evidence/index.json. These are Root-measured exact-version proof references, with raw/provenance pins in R/MANIFEST.json, I and the static manifest.
|
||||
|
||||
## (a) Power vs closure/dependency — pending D05
|
||||
|
||||
**Observed-current:** RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge. Source: FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection. Proof: Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins.
|
||||
|
||||
**Inputs:** Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.
|
||||
|
||||
**Option A (recommended; keep current behavior):** Keep current RELATED-first reason selection.
|
||||
|
||||
- Outcomes: Service held, progress/payment paused, reservation and serviceID retained.
|
||||
- Side effects: Reason reports dependency while both causes apply; no new hold limit.
|
||||
- Dependencies: Approved dependency hold, D-034 direct closure, existing MANA-before-completion order.
|
||||
|
||||
**Option B:** NO_POWER wins reason selection when both conditions fail.
|
||||
|
||||
- Outcomes: Same no-charge hold safety; reason reports power.
|
||||
- Side effects: Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.
|
||||
- Dependencies: Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior.
|
||||
|
||||
## (b) Destruction — pending D05
|
||||
|
||||
**Observed-current:** Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick. Source: Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804. Proof: Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json.
|
||||
|
||||
**Inputs:** A service due for completion in a minute with command or incident destruction of its facility.
|
||||
|
||||
**Option A (recommended; keep current behavior):** Keep command-before-completion and incident-after-completion behavior.
|
||||
|
||||
- Outcomes: Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.
|
||||
- Side effects: Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.
|
||||
- Dependencies: P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required.
|
||||
|
||||
**Option B:** An incident in the same minute suppresses that minute completion (or voids it if already posted).
|
||||
|
||||
- Outcomes: No retained completion/sale for the incident-destruction minute.
|
||||
- Side effects: Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.
|
||||
- Dependencies: Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required.
|
||||
|
||||
## (c) Exit — pending D05
|
||||
|
||||
**Observed-current:** Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later. Source: Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762. Proof: Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json.
|
||||
|
||||
**Inputs:** Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.
|
||||
|
||||
**Option A (recommended; keep current behavior):** Keep current command/AI distinction and state predicates.
|
||||
|
||||
- Outcomes: Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.
|
||||
- Side effects: AI due time alone does not universally cancel current-minute completion; later despawn remains separate.
|
||||
- Dependencies: D-034, reservation ownership/release, phase6 completion before phase10 AI.
|
||||
|
||||
**Option B:** An exit due this minute preempts completion.
|
||||
|
||||
- Outcomes: Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.
|
||||
- Side effects: Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.
|
||||
- Dependencies: Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required.
|
||||
|
||||
## (d) Cost time/day attribution beyond A01 and18:00 — pending D05
|
||||
|
||||
**Observed-current:** Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive. Source: Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136. Proof: Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json.
|
||||
|
||||
**Inputs:** Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.
|
||||
|
||||
**Option A (recommended; keep current behavior):** Keep post-increment sale time and new-day attribution for00:00 sales.
|
||||
|
||||
- Outcomes: Closing day excludes boundary-minute completion; new day receives sale.
|
||||
- Side effects: Closing summary is finalized before those sales; upkeep ownership rule unchanged.
|
||||
- Dependencies: Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math.
|
||||
|
||||
**Option B:** Boundary-minute sales belong to closing day.
|
||||
|
||||
- Outcomes: Closing day includes those sales.
|
||||
- Side effects: Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.
|
||||
- Dependencies: Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required.
|
||||
|
||||
## Bundle: accept current-behavior A for a-d
|
||||
|
||||
Recommended candidate, not approved.
|
||||
|
||||
- a preserves the approved hold and no-charge safety independent of reason priority.
|
||||
- b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.
|
||||
- d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.
|
||||
- A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.
|
||||
- Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed.
|
||||
|
||||
destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.
|
||||
|
||||
S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.
|
||||
|
||||
P04 timing/attribution remains mandatory; D04/P05 numeric cost math is separate. No acceptance criterion is relaxed. P04 remains incomplete; original13/88 unchanged.
|
||||
+15
-225
@@ -1,233 +1,23 @@
|
||||
# P04-01: C段階の結合とrepair4収集契約の履歴
|
||||
# Evidence collection status — repair29
|
||||
|
||||
## repair6 現在値（2026-10-16、以下の旧blocked記述に優先）
|
||||
Worker **SOURCE-READY / NOTRUN** (static Read/SHA256 only). No probes, tests, engine or Runner execution in this repair. [CURRENT_STATUS.md](CURRENT_STATUS.md) overrides historical creation-time NOT RUN entries in REPAIR22–28 and runbooks, which remain untouched. Do not repeat their completed execution steps merely because their original prose says pending.
|
||||
|
||||
旧値: 実applicabilityは `native ordering bytes` で拒否、C全体blocked、
|
||||
whole native未確認。新値: 補正済みbundleのverify_native成功、
|
||||
ownership/save/ledger個別検査とapplicability成功。供給bundleへの書込みは0。
|
||||
全文rawの登録版/production一致と両body SHAの全文SHA一致だけを認める。
|
||||
後続コメント除外prefixを許す暫定処理は削除した。
|
||||
B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
|
||||
下記3本のPythonコマンドを各1回実行しexit 0を確認。
|
||||
native fixtureは既存23負例+signature行SHA/コメント除外SHAの2負例を全て拒否。
|
||||
合成補正コピーは廃止し、補正済み供給rawをそのまま正対照に使用。
|
||||
既存fixture14件拒否、A/Bの登録版・production版・行移動正対照成功、3負例拒否、
|
||||
native applicability成功。実行結果、旧検査値、新旧bundle pin、検査コードSHAは
|
||||
c-native-validation.jsonに記録。verify_nativeは有限C検査でありwhole gateは未実行。
|
||||
原未達の条件、formal_original_credit=0、15条件+EV/7領域/安全性3結果、
|
||||
30/88の分母、予算、repair上限を維持する。Root追加paid/再送は今回の範囲外。
|
||||
engine、全回帰、製品、Runner、config、DB、git書込み、他agentは全て0。
|
||||
正式検証・独立レビュー・オーナー判断待ち。以下の「今回」は旧検査履歴を指す。
|
||||
| Completed material | Current fact (Root-measured) |
|
||||
| --- | --- |
|
||||
| B/p04-s4-native-r28 | Four phases PASS; PIDs49940,50044,50078,50105 all ended, guards0, cleanup0. |
|
||||
| B/audit-support/p04-root-fb8b-s4-r01 | S4 control/native receipts preserved. |
|
||||
| B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS; registered validation on fb8b PASS28.095s. |
|
||||
| B/audit-support/p04-raw-collect-r22 | Completed collection of preserved C/series applicability; no new C/S1/S2a/S2b/S3 native runs. |
|
||||
| B/p04-evidence | Current schema2 index/generation invocation, missing_conditions=[], all15 conditions + EV mechanically verified. |
|
||||
|
||||
## C段階の追補対象
|
||||
Native product5f6bc11d and main9b1a18c1 remain the Root-measured versions. REPAIR29_STATIC_SOURCE.json hashes current B/audit-support/p04-r17-full-inputs-r01/product (1338 files), not old deb11300, and pins current collection/index. Per-series raw/source/config/input/environment joins remain in the immutable collection and schema2 index; this worker neither regenerates nor normalizes raw.
|
||||
|
||||
供給rawの現在位置は `build_dir/audit-support/native-first-current/`。
|
||||
所有権、台帳・service・予約、正式保存の結合を追加する対象であり、
|
||||
この資料の存在だけでは原受入を満たさない。formal_original_creditは0を維持する。
|
||||
S4 is isolated NO_POWER from direct disconnect_nodes, not global mana depletion. Global depletion is observed only in B1 combined diagnostic. B1 supplies no isolated power_stop or priority approval. Destruction authority BASELINE:183 is a known wrong category (mana depletion); explicit owner D05 destruction rule is required before normal registry/pin repair. Product/checker/registry remain unchanged here.
|
||||
|
||||
## 今回のC実装と入力blocker
|
||||
Full178 used checker **f5**,21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json and exact selected inputs at runner-input.json selected_source_map (source-start.json records initial product sources). f5 SHA256 is f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324. Product suites/316-file GDScript parse do not execute Python; this does not establish an exact1339 proof against a61. Static comparison with the full178 selected_source_map found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…) and no game-source difference. Runner must retain explicit applicability for that test; no blanket product1338 identity with that full178 receipt is claimed. **No full1339 run exists against a61** (a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850). Keep the old full and partial receipts distinct and intact.
|
||||
|
||||
変更はchecker、Python fixtureと本ディレクトリ内のdocsだけ。
|
||||
Root helperはコピー・再実装せず、既存native成果物を読む。
|
||||
結合の正確な規則はCHECKER_PROTOCOL.mdのC追補を参照。
|
||||
新規engine/全回帰/Runner操作/git書込み/他agent起動は全て0。
|
||||
旧39rawを読了・採用した数も0。repair4-context.jsonの旧履歴は保持した。
|
||||
Remaining steps belong to Runner: review this repair; Root obtains owner D05(a–d) decisions or explicit non-mandatory rulings; unknown mandatory rules remain pending. Any approved checker/registry/product change uses a normal repair. Perform support53cb normal registered rebind, final full run against the final source/checker and final source/config/input/environment applicability binding, independent review and integration (P04 first, then support on main9b1a18c1). NativeWindows obligations stay individually pending if required. This document does not launch or authorize duplicate probes and does not replace Runner scheduling.
|
||||
|
||||
供給rawでは次の個別Python検査が成功した。
|
||||
|
||||
- OWNERSHIP_RAW_PROVENANCEの96 fileのbytes/SHAと10プロセスのlifecycle/cleanup。
|
||||
- Writer/Readerの5点×4member、元20member不変、typed .var 14件の実SHA結合。
|
||||
- 生receipt 8行、service.paymentのidempotency経由での1回課金、財布差分、
|
||||
PAUSED時の進捗・予約保持、復帰後の消費、維持費発生1439→支払い1440。
|
||||
|
||||
ただし `POST_P18_CURRENT_SOURCE_APPLICABILITY.json` の4関数の
|
||||
registered_body_sha256/production_body_sha256は本文を含まない。
|
||||
実Git blobで検算すると、以下の関数先頭からのprefix SHAに一致した。
|
||||
|
||||
| path | function | hash対象のbyte数（本文を含まない） |
|
||||
|---|---|---:|
|
||||
| autoload/simulation_runtime.gd | _complete_service_transaction | 140 |
|
||||
| scripts/facility/facility_service.gd | _prepare_service_for_tick | 87 |
|
||||
| scripts/facility/facility_service.gd | _complete_service | 113 |
|
||||
| scripts/facility/facility_service.gd | _fail_service | 119 |
|
||||
|
||||
4つとも複数行引数の後の `) -> ...` より前で終わる。全文比較は別途成立するが、
|
||||
報告されたbody hashとの一致は成立しないため、実bundleは
|
||||
`native ordering bytes` でfailする。workerはこの供給資料もmanifestも変更していない。
|
||||
Root側で同じproduction Git blobの全文を対象にapplicabilityとそのmanifestを
|
||||
再生成する必要がある。engineの再起動を必要とする不整合ではない。
|
||||
旧暫定処理では後続トップレベルdoc commentの有無だけの2関数差をraw prefix一致
|
||||
として扱っていた。repair6で撤去し、現在は全文SHA一致のみ必須とする。
|
||||
|
||||
この入力不整合が残るため、C段階の実raw全体の成功は未確認（blocked）。
|
||||
これは原P04-01未達とは別のblockerであり、修正済みの合成コピーで全C検査が
|
||||
通ることを原証拠の合格へ換算しない。
|
||||
|
||||
## 有限の検証
|
||||
|
||||
実行したのは次のPython確認のみ。全て一時ファイルをallowed_paths内へ限定し削除する。
|
||||
|
||||
```sh
|
||||
python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/native-first-current
|
||||
python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py
|
||||
python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py --native-bundle /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/native-first-current
|
||||
```
|
||||
|
||||
Cの結果は `c-native-validation.json`。23負例を拒否し、実rawの3個別検査成功、
|
||||
実applicability拒否、修正した合成applicabilityの組合せ正対照成功を区別する。
|
||||
既存fixtureはscalarのみの旧正対照を含む14件を拒否。
|
||||
A/Bは登録版・production版の正対照と行移動の正対照、3負例、C資料の拒否を確認した。
|
||||
未収集indexに対するwhole gate/validateは再実行していない。
|
||||
|
||||
## 固定の原未達
|
||||
|
||||
非ゼロ給与のシフト交代×00:00、command再送、停電→閉店同Tick、退出/予約孤立、
|
||||
破壊、EVは未収集。正式保存のSHA同一性は全原条件のsave_restore証明とは別。
|
||||
15条件、reachable EV、7領域、安全性3結果を減らさず、未収集をfalse/pending扱いとする。
|
||||
原30/88のformal_original_credit=0、独立レビュー・通常統合未実施を維持する。
|
||||
|
||||
以下はrepair4時点の履歴であり、C追補の実装・検証状態には上記が優先する。
|
||||
|
||||
本修正は未完成であり、収集開始・machine gate・原受入の承認ではない。
|
||||
原30/88、7領域、部分点0を維持する。D05全体はpending、既存の承認2条件を
|
||||
超える規則は作らない。D-034/A01の再承認は求めない。
|
||||
|
||||
## 読取確認
|
||||
|
||||
`.review-material` はこのcheckoutには存在しない。指定された実体
|
||||
`build_dir/audit-support/p04-native-existing-sources/` のwrapper 4本とGD probe
|
||||
6本、および `tools/run_all_tests.py`、`tools/regression/owned_outer.py` を確認した。
|
||||
10本のraw SHA/sizeは配布SOURCE_MANIFEST.jsonと一致し、`repair4-context.json`
|
||||
に保存した。外部旧worktreeのartifactパスは由来としてのみ扱った。
|
||||
|
||||
実checkout HEADは `9767b0a28ca8d252520307dbbac60a1d8cfb87ab`、Runtimeは
|
||||
`d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39`。
|
||||
提供されたproduction資料の版は `5f6bc11d6bb6e92d22d787989b219fef3a435bc1`、
|
||||
Runtimeは `7f01b2dcdf28bc965c7588173c2dc70054633faf7204b1ac38ba0f4369331b47`。
|
||||
productionのGit objectも存在する。production資料を実checkoutのsource_mapとして
|
||||
流用しない。登録版は `deb1bcb2374eb378b840ca345db952bd8572cb6e`。
|
||||
|
||||
## A/Bの変更
|
||||
|
||||
checkerはspecのcurrent_source_pinsを登録pinとして保持し、登録Git blobのSHAを
|
||||
独立計算する。indexはregistered_pinsとversionsのexecution_origin/registered/
|
||||
tested/integrationを分離する。integrationは未統合のためnullのみ。
|
||||
testedのautoload/scripts全GDはcheckoutとHEAD blobの一致を必須にする。
|
||||
|
||||
20関数の抽出はchecker内固定。行頭func/static funcから次の行頭関数までの
|
||||
raw bytesを比較し、コメント・空白・改行を正規化しない。先頭宣言は
|
||||
`<top-level>` 単位としてdiffに含める。追加・削除関数も含む。
|
||||
`git diff --no-ext-diff --no-renames --name-only -z base..HEAD -- autoload/ scripts/`
|
||||
で変更GDを列挙し、Git blobから変更関数を計算する。applicability_deltaは
|
||||
path/function順の配列と完全一致させる。未知の変更も無影響と推定せず、
|
||||
delta_casesに保守的な全条件被覆を要求する。境界case IDの存在は後続coverageで
|
||||
検証するが、**Cの生証拠結合は未実装なので、この段階では適用可の最終判断に使えない**。
|
||||
|
||||
REACH_REFSはpath/function/anchor_sha256/line_countに変更。実tested関数内で
|
||||
本文raw bytesのアンカーを一意に解決する。旧固定範囲が隣接関数へ跨がる
|
||||
reserve/rescue箇所は関数単位に分割した。行位置が7行移動しても解決し、
|
||||
本文変更・欠落・重複アンカーは失敗する。
|
||||
|
||||
## 新collectorを作らず残す既存実行パターン
|
||||
|
||||
Root側の既存wrapper修正で保持すべき順序は、`r.source_refs(R)` →
|
||||
明示QA上書きしたrefs → `r.copy_source` によるprivate stage → bootstrap →
|
||||
cacheの `cp -c` と別inode確認 → parse-paths/contracts → `execute_phase` →
|
||||
finallyの `owned_outer.finish_captured` → fixed_guardと不変性確認。
|
||||
このworkerはwrapperを起動・変更していない。適用可能なパラメータ化patchと
|
||||
全不足probeはまだ提出できていないため、以下は実行済みの契約ではなく残作業である。
|
||||
|
||||
- R/OUT/QA/testpath/cache/input manifestは最終tested checkoutに対して固定する。
|
||||
1299件数や旧source-after.json一致をauthorityにしない。現r.source_refsがauthority。
|
||||
- checkout mapと、testpathにQAを明示上書きしたselected mapを別に記録する。
|
||||
source_map=tested、probeの元pathとSHA、QA_overrides、実stageの同SHAを結合する。
|
||||
候補製品source overrideは持ち込まない。
|
||||
- source_before/after、default_player_before/after、doc4_before/after、stage inventory、
|
||||
parse-paths、contracts、wrapper raw、phase receipt、started/ended、
|
||||
outer-owned-finally、execution.jsonを保存する。booleanだけでは不変性の代用にならない。
|
||||
- case receiptはphaseのactual_pidとexecution.actual_captured_PIDs、cleanupの全PID集合に
|
||||
結合する。cleanup_errorsが空、全childのengine_ended、終了codeを実成果物間で照合する。
|
||||
- 各条件のscalarに加え、生台帳・service/settlement ID・予約配列とのcount_eqまたは
|
||||
same_literalが必要。save_restoreはWriter保存直前と正式Reader復元直後の
|
||||
台帳・予約のsame_literal、および別PIDを要求する。nonceやログ文言では代用しない。
|
||||
|
||||
## 負履歴（起動禁止）
|
||||
|
||||
10本すべてのSHAはrepair4-context.jsonに記録した。特に以下を再実行しない。
|
||||
|
||||
- shift-end-repro-r03.gdは1080で「課金なし・予約保持」を期待し、承認済みの
|
||||
完了段階先行と矛盾する。対応native-r03.pyには旧1299 pinもある。
|
||||
- formal-boundary-reload-native-r03.pyは旧candidate sealと製品2件overrideを使う。
|
||||
SHAを書換えて別候補receiptとして使わない。
|
||||
- formal-boundary-reload-r01.gdのmanifest.source_refs==1299も旧前提。
|
||||
- midnight native-r01とpower native-r04も固定1299と旧full-run cacheに依存する。
|
||||
power readerは旧Writerの二つの正式保存slotに依存し、fresh Writerではない。
|
||||
|
||||
## 15+EVの被覆確認（未収集）
|
||||
|
||||
同一プロセス内でも条件ごとのseed、before/after、case receiptを保持する。
|
||||
以下のartifact名は既存probeが出すもの。不足欄を合格扱いにしない。
|
||||
|
||||
| 条件 | 既存probe / phase / artifact | 不足 |
|
||||
|---|---|---|
|
||||
| midnight_settlement, midnight_replay | midnight-boundary-r01 / repro / observations.json, midnight-*.var | countとraw台帳の結合、同minute再送の明示 |
|
||||
| paused_midnight | midnight-boundary-r01は開業サービスのみ | 停止した同一serviceの日跨ぎ系列 |
|
||||
| night_staff_absent | shift-end-repro-r03 / repro / 18-01観測 | 旧誤期待を除いた独立caseと非完了service |
|
||||
| power_stop, recovery_completion | power-formal-recovery-r04 / reader-a,b / recovery-*.var | fresh停止入力、台帳JSON、旧Writer依存の解消 |
|
||||
| dependency_stop | 供給6 probe内に専用系列なし | 関連施設停止・進捗/予約/service ID保持 |
|
||||
| exit_release | exit-boundary-r01 / repro / queued-*.var, observations.json | raw stateとcount結合 |
|
||||
| patience_release, closure_release | 供給6 probe内に専用系列なし | 待機解放、開始済み継続を区別したcase |
|
||||
| same_minute_replay | exit/destruction/midnightはsnapshot巻戻し再実行 | 同minuteコマンド再送の独立条件 |
|
||||
| shift_completion | shift-end-repro-r03 / repro / 18-00各phase観測 | 誤期待の修正、課金1回のraw結合 |
|
||||
| overtime_task | 供給6 probe内に専用系列なし | interrupt_level=0残業・勤務記録1回 |
|
||||
| destruction_stop | destruction-completion-boundary-r02 / repro / unfinished-*.var | raw台帳結合。completeは別帰結として維持 |
|
||||
| save_restore | formal-boundary-reload-r01 / writer,reader / *.var, writer.json, reader.json | final版の入力seal、JSON台帳/予約、owned PID結合 |
|
||||
| EV | 供給6 probe内に専用系列なし | staff予約→EV移動→停止→到着の実状態 |
|
||||
|
||||
transportはreach=falseのソース根拠のみで、別engine条件は追加しない。
|
||||
|
||||
## 再利用の有限条件と未供給資料
|
||||
|
||||
input.jsonのevidence_refsは旧証拠の参照であり、生証拠そのものではない。
|
||||
今回の供給先で確認できたのはsource、監査、適用性診断とgate失敗ログである。
|
||||
旧39件のraw receipt/state/packageを照合して採用した件数は0。
|
||||
「20関数一致」だけで39件を採用することは禁止する。
|
||||
|
||||
必要な追加のローカルraw資料:
|
||||
|
||||
1. 旧39件のexecution/phase/started/ended/outer-owned-finally/log/state一式と
|
||||
元source/config/input/environment pin。既存input.jsonのreference SHAで照合する。
|
||||
2. formal-boundary-reload-input-r02.json
|
||||
（wrapper記録SHA `195cb767e597008d1767aa0b6c8300711b83e8cf101863166e7932d9bd4ed612`）
|
||||
と、そのwhole_typed_inputs、元exact_execution、保存package全4メンバー。
|
||||
3. power original writer.json
|
||||
（wrapper記録SHA `cf3850c262012e5e52743bfb8b41af7ef5608689fb10c059c8a494216b0aff52`）
|
||||
と参照slot。旧candidateは比較用負履歴に限定する。
|
||||
|
||||
原則は最終の正確な版で再実行する。登録版証拠を再利用する有限条件は、A(i)の
|
||||
20関数raw一致、A(ii)の全delta一致、A(iii)の変更境界をtested engine caseで被覆し、
|
||||
さらに当該旧caseのsource/config/input/environmentとraw状態を独立照合できること。
|
||||
relationship restore/schema変更は正式Writer/Reader再実行、build/path/arrivalに
|
||||
関係する変更は当該経路に到達するcaseの再実行が必要。今回の資料だけでは再利用0。
|
||||
|
||||
## Rootのコマンドと残る作業
|
||||
|
||||
現在実行できるのは次のPython確認のみ（engineプロセス0）。
|
||||
|
||||
```sh
|
||||
python3 docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py
|
||||
python3 docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py
|
||||
BUILD_OUTPUT_DIR=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build python3 tools/check_p04_order_evidence.py --verify-only
|
||||
```
|
||||
|
||||
最後のコマンドはindex未収集ならexit 1が期待値。Python正対照はengine証明ではない。
|
||||
**Cのchecker強化、Dのparameter patch/不足probe、Eのowned/count/restore/他候補流用負例は未完成。**
|
||||
旧checkerのscalar/receipt自己申告を受入可能な証拠とみなしてはならない。
|
||||
現在のcheckerを正式受入に使用せず、修正全体をblockedとしてRootへ返す。
|
||||
|
||||
native収集の正確なコマンド列は、上記入力と未完成patchがないため提示できない。
|
||||
仮のコマンドを実行可能と偽って提示しない。共有stageでimport+parseを2プロセス、
|
||||
midnight/power/exit/shift/destruction/save Writer/save Reader/EVを8プロセスに
|
||||
束ねられれば計10プロセスが計画目安になるが、これは確定数・目標数ではない。
|
||||
条件ごとに必要な状態系列とguard成立を優先する。
|
||||
Rootのnative収集→validate→別セッション独立レビュー→通常統合は未実施。
|
||||
A01 midnight ownership upkeep, dependency hold and18:00 are already approved. P04 timing/attribution remains mandatory, separate from D04/P05 numeric cost math. Original13/88 credit,15 conditions + EV, seven domains, three safety outcomes and30/88 denominator remain unchanged. Original unit is incomplete.
|
||||
|
||||
@@ -1,52 +1,61 @@
|
||||
# P04-01 監査状態
|
||||
# P04-01 order audit — repair29
|
||||
|
||||
原単位は未完了。D05-P04-DEPENDENCY と D05-P04-SHIFT-1800 は direct_user_reply により承認済み（同梱 D05_OWNER_APPROVAL.json、SHA256 4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e）。承認は試験合格を意味しない。A01の00:00保有時間按分維持費は承認済みで再確認しない。
|
||||
Worker **SOURCE-READY / NOTRUN**: static Read and SHA256 only. No original completion. [CURRENT_STATUS.md](CURRENT_STATUS.md) is canonical for execution status. [order-audit.json](order-audit.json) is the matching structured audit.
|
||||
|
||||
正式試験はRunnerが実行する。旧証跡参照は来歴であり、現版の生証跡・ソース・設定・入力・環境の適用性確認なしに合格として再利用しない。
|
||||
B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
P = `B/audit-support/p04-r17-full-inputs-r01/product`. Source references below are relative to P, not old deb11300. All1338 product file SHA256 values, function lines and16 handler registrations are recomputed in [REPAIR29_STATIC_SOURCE.json](REPAIR29_STATIC_SOURCE.json).
|
||||
Kernel `scripts/core/simulation_kernel.gd` SHA256: `341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb`.
|
||||
Runtime `autoload/simulation_runtime.gd` SHA256: `7f01b2dcdf28bc965c7588173c2dc70054633faf7204b1ac38ba0f4369331b47`.
|
||||
Root-measured native product `5f6bc11d`; main `9b1a18c1`.
|
||||
|
||||
## 現行ソースの観測
|
||||
## Actual eleven phases — observed-current
|
||||
|
||||
`scripts/core/simulation_kernel.gd:123-153` の順序は APPLY_COMMANDS → 時計増分・日境界signal → TIME_BOUNDARIES → MANA → CONSTRUCTION → LOGISTICS → FACILITY_COMPLETION → VITALS_AND_ENVIRONMENT → INCIDENTS_AND_EVENTS → FACILITY_QUEUES → AI_DECISIONS → PUBLISH_SNAPSHOT。同phase内はhandler IDの辞書順（242行）。Runtimeの登録は364-427行。時計や製品ロジックは変更していない。
|
||||
Kernel advance_one_minute:122 defines the order; _run_phase:236 string-sorts handler IDs. Registrations below are Runtime lines366–435 plus operations:1766. Every literal ID begins `simulation_runtime.`. Observations do not approve D05.
|
||||
|
||||
| 領域 | 現行呼出しと先後 | 原本・承認・不足 |
|
||||
| --- | --- | --- |
|
||||
| 閉店 | `_advance_facilities` の後、`_advance_guest_queues` が `_release_closed_business_queues` を実行し、patienceより先に予約解放を試みる。 | 直接休業はD-034の開始済サービス継続。依存先休業は承認済D05の進捗・課金停止、予約・ID保持、復帰後1回完了。旧business試験は部分候補。open serviceの00:00証拠を代用しない。 |
|
||||
| 停電 | `_advance_mana` → `mana_power_projection.apply` → FacilityService `_prepare_service_for_tick`。NO_POWERはpause、復電はresume。 | 草案の961停止/962復電/963不変は生証跡未確認。進捗・予約・帳簿・通知を現版で確認する必要がある。 |
|
||||
| 破壊 | commandはAPPLY_COMMANDSで先行。`_advance_defense` は完了後のINCIDENTS。BROKENはサービス準備時に失敗。 | 先行破壊44と後段完了45を区別。失敗診断も保持し、原本適合と断定しない。 |
|
||||
| 退出 | 公開queue leave → 完了 → INCIDENTS → queue patience解放 → AI再計画/予定退出。LEAVINGのdespawnは入状態分より後。 | 公開leave・自動patience・overdue退出の正式保存/別PID証跡は参照のみ。孤立0を現版で証明する必要がある。 |
|
||||
| 課金 | `_complete_service` callback → `_complete_service_transaction` → `_apply_service_transaction`。予約消費後、service IDによるpayment keyで記帳し、通知scopeを終了。 | 原価格・時間を変えない。静的なidempotency keyの存在や試験数だけで二重課金・二重生成なしとしない。 |
|
||||
| シフト交代 | 完了後の `_advance_staff_ai` 内でstaff更新・commute・staffing投影。 | 原本64/67行の18:00交代を保持。承認済D05により[17:59,18:00)は昼番、18:00完了・課金後に交代。夜番は[18:00,18:01)から。1080診断を承認規約に格上げしない。 |
|
||||
| 00:00決算 | TIME_BOUNDARIESのweather/upkeep/operationsが完了より先。OperationsCoordinatorのdaily closeと同分service売上は別区間。 | 原本71/72行、承認済A01を保持。1440一回/1441不変の生証跡と適用性が必要。給与0fixtureを非ゼロ給与証拠に数えない。 |
|
||||
1. **APPLY_COMMANDS** — simulation_runtime.commands → _process_tick_commands (registration:369). Previous minute: commands → _process_tick_commands:5743. Operations gate requests current tick abort and returns before Clock changes; otherwise commands apply for minute+1.
|
||||
|
||||
## 再利用の制限
|
||||
2. **TIME_BOUNDARIES** — simulation_runtime.0_weather → _advance_weather (registration:366); simulation_runtime.a_upkeep → _advance_facility_upkeep (registration:368); simulation_runtime.operations → _advance_operations_time (registration:1766). After APPLY: absolute_minute += 1, _sync_calendar_fields, _handle_time_boundaries:254 emits settlement_requested(completed_day) then day_started at00:00, before TIME_BOUNDARIES handlers. Handler order: weather, upkeep, operations. Runtime upkeep:1855; operations:1898 → coordinator _process_minute_boundaries:882: 00:00 upkeep, daily close, 06:00 morning, demand, arrivals (conditional boundaries and early returns).
|
||||
|
||||
詳細ハッシュ・7領域の不足は `order-audit.json` に記録した。ローカル旧mapはSHA256 `df8328ea8b6a7bc400caad8a52f6ead710c01942a726e5a6b530b82411c55da5`、1299件、欠落0件。主要6ソースの指定pinは一致。旧mapとの差は14件で、契約記載のRuntime/main/preview/performance/path/2試験の7件に加え、Kenney同梱サンプル/URL7件がバイト不一致だった。追加7件は後述のRunner支援入力で分類し、素材を編集していない。
|
||||
3. **MANA** — simulation_runtime.mana → _advance_mana (registration:379). Runtime _advance_mana:10694: proxy preflight → mana_network advance → mana_power_projection.apply → MANA_STATE_CHANGED events.
|
||||
|
||||
修正入力で旧Runtimeのローカルrawコピーを受領し、SHA256 `2d7e2cea5424585e9aa4302ab66d1fc4dbaefe743ce4328fccc1efa2f19b82e4` を確認した。`git diff --no-index` による現Runtimeとの差分は4箇所で、客候補経路batch、施設入口の経路費用比較、客/スタッフの移動時間推定、connector credit helper抽出に関わる。Runtime内のphase登録・施設完了順序はこの差分では変わらないが、変更されたPathServiceと到達性・選択・到着・勤務見積りへの影響を個別確認する必要がある。追加7素材差分はRunner supportがCRLF→LFのみと報告し、現raw hashを照合した。旧raw素材は未供給のため正規化一致を独立再現したとは扱わない。
|
||||
4. **CONSTRUCTION** — simulation_runtime.construction → _advance_construction (registration:384). Construction:8064 follows power and precedes logistics.
|
||||
|
||||
ローカル入力は旧summary/map/draftであり、生の保存package・stdout・engineログ・開始終了記録・設定・入力・環境証拠は提供されていない。外部worktreeのartifactパスは来歴に留め、読んでいない。正式保存8境界27状態、fresh Reader A/B、P04-02/fullの成功記載は未検証参照で、P04-01受入を意味しない。
|
||||
5. **LOGISTICS** — simulation_runtime.logistics → _advance_inventory_and_logistics (registration:389). Logistics:8472 precedes completion.
|
||||
|
||||
## 提出状態と有限検証計画
|
||||
6. **FACILITY_COMPLETION** — simulation_runtime.facilities → _advance_facilities (registration:394). Runtime _advance_facilities:8482: facility_service.advance_one_minute then kitchen. FacilityService _prepare_service_for_tick:853 checks BROKEN, related_facility_operating (RELATED_FACILITY_INACTIVE), power_available (NO_POWER), staff grace. Only ACTIVE services advance (:569). _complete_service:895 → Runtime _complete_service_transaction:11769 → _apply_service_transaction:11785 posts SERVICE_SALE / SERVICE_CASH_SWEEP at the post-increment minute (:11826–11838).
|
||||
|
||||
今回の承認2条件と既存権限（BASELINE:64/67/71/72/183、D-034、A01）を分け、checker内の固定条件レジストリに対応付けた。費用時点・日跨ぎの帰属など残るD05はpendingのまま補完しないが、一括failの理由にはしない。売上・給与・維持費・勤務分の各1回、非ゼロ給与、停止の00:00またぎでも完了課金1回・予約孤立0は必須である。全条件を満たすとmachine_verified=true、formal_acceptance=false、exit 0。必須条件のauthorityがpendingなら失敗する。
|
||||
7. **VITALS_AND_ENVIRONMENT** — simulation_runtime.guest_vitals → _advance_guest_vitals (registration:399). Guest vitals:8488 follows completion.
|
||||
|
||||
承認4文書は全てバイト数とSHA256を再計算し、SOURCE_MANIFESTと一致。必要な承認JSONのみ2073 bytesを同梱した。初期空き容量約1.8GiB、旧39 artifactの複製なし。39件の原パスは来歴であり、今回のミラーは承認4文書のみ。生証拠・入力・設定・環境が不足しているので、境界の適用性合格は宣言しない。
|
||||
8. **INCIDENTS_AND_EVENTS** — simulation_runtime.authority_incidents → _advance_authority_incidents (registration:409); simulation_runtime.defense → _advance_defense (registration:414); simulation_runtime.relationship_events → _advance_relationship_events (registration:419). String-sorted authority_incidents:8551 → defense:8577 → relationship_events:8615; after completion/charging.
|
||||
|
||||
順序関数20本は今回個別に本文を再ハッシュし、供給されたhistorical_body_sha256と20/20一致した（詳細はJSON repair3）。旧監査の29本とは合算しない。旧Runtime rawも再ハッシュし、git diff --no-indexでは5個の@@区間（候補batchの開始・終了が別区間）、論理的な変更は記録の4箇所と確認した。関数一致は経路・候補・到着の適用性を保証しない。PathService変更を含め、停電・破壊・退出の影響ケースはRootが生証拠と設定を照合し、不適用の場合だけ新しい有限境界証拠を作る。production Runtime 4696df4aとcheckout d52a995の差も統合前にRootが確認する。
|
||||
9. **FACILITY_QUEUES** — simulation_runtime.guest_queues → _advance_guest_queues (registration:404). _advance_guest_queues:8502 releases closed queues first (_release_closed_business_queues:12624); closed queues spend no patience (:8516–8517).
|
||||
|
||||
### 到達性
|
||||
10. **AI_DECISIONS** — simulation_runtime.staff_ai → _advance_staff_ai (registration:424). _advance_staff_ai:8658: prune elevator waits, elevators, rescue, staff_service, prune waits, staff_commute (shift handover), staffing sync, cleaning, fatigue, rescue and staffing sync again, then _advance_guest_ai_decisions:8738. DECIDING PLANNED_EXIT → LEAVING; despawn occurs only on later minute (:8760–8762).
|
||||
|
||||
- 営業時間による閉店: autoload/scriptsの検索ではset_opening_hoursの定義とサービスの委譲のみ。既定[0,1440)で製品呼出しなし。直接休業と依存先休業の証拠は引き続き必須。
|
||||
- 客の通常EV移動: Runtime:8898-8922の到着後にqueueを要求し、7421-7445で予約する。この移動前予約経路は対象外。
|
||||
- スタッフEV: 対象外にできない。公開create_staff_task（Runtime:329、6733-6742）でrequired_itemsを渡せる。task_dispatcher:256-261、293-294、309-314が移動前に予約し、Runtime:9141-9170が在庫予約を実施、12009-12013で移動へ進み、8755-8763、8946-8987からEVを利用する。set_powered（elevator_service:279-284）による停電はこの予約保持経路に到達する。checkerはEV全体のreach=falseを拒否し、予約保持中停電のengine caseと孤立0 invariantを要求する。EV停止規則や期限は新設しない。
|
||||
- 救護搬送: Runtime:12023-12030は治療状態を更新するだけ、12976-13050は救護タスク生成・移動・取消でrequired_items・課金処理を持たない。物理搬送自体でなく、課金・予約の到達性がfalse。静的根拠の行・本文・hashを必須とし、7領域の分母に加えない。
|
||||
11. **PUBLISH_SNAPSHOT** — simulation_runtime.snapshot → _publish_snapshot (registration:374); simulation_runtime.zz_save_checkpoints → _process_save_checkpoints (registration:431). snapshot:12476 then zz_save_checkpoints:4514; persistence follows publication.
|
||||
|
||||
### 有限検証と残件
|
||||
## Seven domains
|
||||
|
||||
workerはpython3 -m py_compileとchecker_negative_fixtures.pyを実行。index欠落、重複キー、symlink、hash不一致、stale pin、未実行receipt、pending authority、必須条件欠落、根拠なしreach=false、承認hash不一致の10例が期待した理由でexit 1。合成対照のみexit 0であり、エンジン由来の製品証拠ではない。最初の対照実行はspec pinで失敗した。契約のspec文字列は末尾LFなし、checkout JSONは末尾LF一つ付きであり、その厳密な表現差のみ許容後、上記確認が通った。仕様ファイルは変更していない。
|
||||
Proofs below are **Root-measured**. R = B/audit-support/p04-raw-collect-r22; I = B/p04-evidence/index.json (schema2). I native_bundle/raw_references/versions/source_map/environment preserve exact C and series bindings. R/MANIFEST.json pins series bytes/SHA256 and relocation; each series retains raw provenance. REPAIR29_STATIC_SOURCE.json also pins R files and I. Source function paths/lines/hashes are in that static manifest.
|
||||
|
||||
1. Runnerがp04-acceptanceを正式実行する。
|
||||
2. Rootが旧証拠の適用性と不足を独立確認する。非ゼロ給与の00:00、停止の00:00またぎ、再送、正式保存→別PID復元、夜番不在18:01、既存残業タスク、予約保持中EV停電の証拠を揃える。
|
||||
3. 別セッション独立レビューと通常統合のfinalまで正式受入加算0。nativeWindowsは条件ごとにpending。
|
||||
| Domain | Status / authority | Phase and source function+line | Relative priority | Exact-version proof | Pending |
|
||||
| --- | --- | --- | --- | --- | --- |
|
||||
| 閉店 | approved; D-034, D05-P04-DEPENDENCY | APPLY_COMMANDS / FACILITY_COMPLETION / FACILITY_QUEUES: Runtime _process_tick_commands:5743; FacilityService _prepare_service_for_tick:853; Runtime _release_closed_business_queues:12624 | Command closure before completion; dependency hold during preparation; closed queue release after completion. | I native_bundle C; R/s2a.json; R/s3.json B1 | D05(a) simultaneous reason selection |
|
||||
| 停電 | observed-current; BASELINE:183, P04-01 safety acceptance | MANA → FACILITY_COMPLETION: Runtime _advance_mana:10694; FacilityService _prepare_service_for_tick:853 | Projection before completion; RELATED chosen before NO_POWER. | R/s4.json; B/p04-s4-native-r28; R/s3.json B1 combined diagnostic | D05(a) |
|
||||
| 破壊 | pending D05; P04-01 safety acceptance (original); explicit destruction rule pending D05 | APPLY_COMMANDS vs INCIDENTS_AND_EVENTS: Runtime _process_tick_commands:5743; _advance_defense:8577; _apply_defense_outcome_boundary:9804; FacilityService _prepare_service_for_tick:853 | Command destruction before completion; incident destruction after completion: B4a charges25G then destroys in same tick; B4b next-tick failure/release. | R/s3.json B4a/B4b | D05(b); BASELINE:183 is mana depletion, not destruction authority; destruction_stop registry correction only after approval |
|
||||
| 退出 | pending D05; D-034, P04-01 safety acceptance | APPLY_COMMANDS vs AI_DECISIONS: Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738 | Command exit before completion/charging; AI PLANNED_EXIT after them; despawn later. | R/s3.json B2a/B2b/B3 and B1 departure history | D05(c) |
|
||||
| 課金 | pending D05; P04-01 safety acceptance, D05-P04-DEPENDENCY, D05-P04-SHIFT-1800 | TIME_BOUNDARIES → FACILITY_COMPLETION: Runtime _advance_facility_upkeep:1855; _complete_service_transaction:11769; _apply_service_transaction:11785; coordinator _process_daily_close:1125 | Upkeep/daily close before sale; post-increment sale timestamp, exclusive close period_end;00:00 sale belongs to new day. | I native_bundle C; R/s2a.json; R/s4.json | D05(d), beyond approved A01 and18:00; timing/attribution mandatory P04, numeric math D04/P05 separate |
|
||||
| シフト交代 | approved; BASELINE:64, BASELINE:67, D05-P04-SHIFT-1800 | FACILITY_COMPLETION → AI_DECISIONS: Runtime _advance_facilities:8482; _advance_staff_ai:8658; StaffService advance_one_minute:700 | 18:00 completion/payment before shift handover; day staff [17:59,18:00), night [18:00,18:01). | I C first1080 sale joins; R/s2b.json no-night1081/overtime | Already approved; do not re-ask |
|
||||
| 00:00決算 | approved; BASELINE:71, BASELINE:72, A01, D05-P04-DEPENDENCY | pre-TIME_BOUNDARIES signals → TIME_BOUNDARIES → FACILITY_COMPLETION: Kernel _handle_time_boundaries:254; Runtime _advance_operations_time:1898; coordinator _process_minute_boundaries:882; _process_daily_close:1125 | Midnight signals, then upkeep/close, then completion. | I C paused/formal; R/s2a.json nonzero payroll/upkeep, replay and typed restore | A01 approved ownership-based midnight upkeep not reopened; extra attribution D05(d) |
|
||||
|
||||
エンジン実行・Runner操作・Git書込み・他エージェント起動は0。原30パッケージ/88成果の既存1単位内の準備であり、成果追加0、正式完了0。
|
||||
S4 proves isolated NO_POWER caused by the probe calling disconnect_nodes directly, not global mana depletion. Global depletion appears only in B1 combined diagnostic; B1 does not prove isolated power or approve priority. BASELINE:183 is mana depletion, not destruction authority. Current destruction_stop binding is therefore a known authority gap. Checker a61 and registry stay unchanged until approval and normal repair.
|
||||
|
||||
## Cross-cutting safety
|
||||
|
||||
- **No charge while paused NO_POWER or RELATED** — original; FACILITY_COMPLETION; FacilityService _prepare_service_for_tick:853, ACTIVE-only gate:569, _complete_service:895. Preparation before advance/completion/payment. Root-measured proof: R/s4.json isolated power; I C and R/s2a.json dependency hold.
|
||||
- **Double-settlement idempotency** — original; TIME_BOUNDARIES; coordinator _process_daily_close:1125; _day_summaries replay:1127–1130; daily-close:N:1137. Before facility completion. Root-measured proof: I C; R/s2a.json same-boundary replay and separate-PID restore, unchanged accounting.
|
||||
- **Orphan reservation release** — original; APPLY_COMMANDS / FACILITY_QUEUES; Runtime _execute_leave_facility_queue:7553 (release keys:7565–7569); _leave_guest_queue_boundary:9178; _release_closed_business_queues:12624; _release_closed_business_request:12642. Command release before completion; closed-queue release afterward; closed patience not spent. Root-measured proof: R/s3.json B2a/B2b/B3/B4b; I C; R/s2a.json reservation/service identity and restore.
|
||||
|
||||
A01 midnight ownership upkeep, dependency hold and18:00 are already approved; do not re-ask. Authority pins are in I/authority; D05_OWNER_APPROVAL.json approves only the two named D05 choices. Remaining candidate choices and their side effects are in [D05_REMAINING_ORDER_CANDIDATE.md](D05_REMAINING_ORDER_CANDIDATE.md). P04 timing/attribution remains mandatory and separate from D04/P05 numeric cost math. Unknown mandatory rules remain pending.
|
||||
|
||||
Original credit **13/88 unchanged**,15 conditions + EV, seven domains, three safety outcomes and30/88 denominator unchanged. P04 remains incomplete. Root execution history and remaining Runner steps are in CURRENT_STATUS.md.
|
||||
|
||||
+73
-1
@@ -61,5 +61,77 @@
|
||||
"unexecuted proof, incomplete7domain or required boundary coverage",
|
||||
"selfreported pass/test count as substitute for actual state invariants"
|
||||
],
|
||||
"implementation_note": "Implement this finite mechanical protocol and document exact supported predicates. If evidence is absent, output actual missing IDs and exit nonzero. No requirement to create fake pass evidence. Do not change source/Clock/game numbers; no engine/test run by worker."
|
||||
"implementation_note": "Implement this finite mechanical protocol and document exact supported predicates. If evidence is absent, output actual missing IDs and exit nonzero. No requirement to create fake pass evidence. Do not change source/Clock/game numbers; no engine/test run by worker.",
|
||||
"revision": "repair29",
|
||||
"status": "Worker SOURCE-READY / NOTRUN; Root-measured S4r28/local8/r22/schema2 index/registered validation PASS on fb8b; no original acceptance",
|
||||
"accepted_index_schema_versions": [
|
||||
1,
|
||||
2
|
||||
],
|
||||
"schema2_note": "Current candidate-role/index binding uses the existing schema2 implementation. Legacy field descriptions below are not a replacement schema.",
|
||||
"current_order_table": "order-audit.json",
|
||||
"series_collection": "BUILD_OUTPUT_DIR/audit-support/p04-raw-collect-r22",
|
||||
"power_stop_binding": {
|
||||
"only_series": "S4",
|
||||
"status": "Root-measured S4r28 4/4 PASS; all four owned PIDs ended; guards0 cleanup0",
|
||||
"required_reason": "NO_POWER",
|
||||
"related_facility_operating": true,
|
||||
"kitchen_power_available": true,
|
||||
"global_mana": ">0",
|
||||
"operator_open": true,
|
||||
"formal_points": [
|
||||
"boundary",
|
||||
"held",
|
||||
"recovered"
|
||||
],
|
||||
"canonicalization": false,
|
||||
"dropped_fields": false,
|
||||
"native_path": "B/p04-s4-native-r28",
|
||||
"controls_path": "B/audit-support/p04-root-fb8b-s4-r01",
|
||||
"PIDs": [
|
||||
49940,
|
||||
50044,
|
||||
50078,
|
||||
50105
|
||||
],
|
||||
"cause": "probe calls disconnect_nodes directly; isolated NO_POWER, not proof of global depletion",
|
||||
"global_depletion_scope": "Only B1 combined diagnostic observes global depletion; B1 supplies no isolated power_stop or priority approval"
|
||||
},
|
||||
"B1": {
|
||||
"scope": "combined dependency/closure diagnostic only",
|
||||
"power_stop_evidence": false,
|
||||
"priority_approval": false
|
||||
},
|
||||
"D05_power_vs_closure": "pending D05(a); observation RELATED before NO_POWER is not approval; choices in D05_REMAINING_ORDER_CANDIDATE.json",
|
||||
"history": "Creation-time NOT RUN in REPAIR22–28 and runbooks is historical; CURRENT_STATUS.md canonical table overrides execution status. Historical files untouched.",
|
||||
"version_policy": "Full178 used checker f5,21615 checks, exact receipt preserved. No full1339 against a61 exists. Product-only reuse is distinct from current-checker validation. support53cb normal rebind, final full run, independent review and P04-then-support integration on main9b remain Runner steps.",
|
||||
"root_measurements": {
|
||||
"label": "Root-measured",
|
||||
"local8": "B/audit-support/p04-root-fb8b-local-r01 PASS",
|
||||
"collection": "B/audit-support/p04-raw-collect-r22",
|
||||
"index": "B/p04-evidence/index.json schema2; missing_conditions=[];15 conditions + EV verified",
|
||||
"registered_validation": "fb8b PASS28.095s; local-r01/registered-validation.result.json",
|
||||
"native_product": "5f6bc11d",
|
||||
"main": "9b1a18c1",
|
||||
"canonical_status": "CURRENT_STATUS.md",
|
||||
"exact_sha256_pins": "REPAIR29_STATIC_SOURCE.json"
|
||||
},
|
||||
"destruction_stop_binding": {
|
||||
"status": "pending D05",
|
||||
"current_registry_authority": "BASELINE:183",
|
||||
"gap": "mana depletion, not destruction authority",
|
||||
"action": "No checker or registry edits before owner approval; explicit destruction rule and subsequent normal repair required"
|
||||
},
|
||||
"remaining_order_choices": "D05_REMAINING_ORDER_CANDIDATE.json; pending, not applied",
|
||||
"full178_applicability_context": {
|
||||
"selected_map": "B/audit-support/p18-regression-support-final-r01/native-full178/runner-input.json",
|
||||
"difference": [
|
||||
{
|
||||
"path": "tests/business/test_required_kitchen.gd",
|
||||
"current_sha256": "5dcc86d66bdc47003472d6c30d6889eb514e016003265965bdd8496d123d5ca5",
|
||||
"full178_sha256": "3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f"
|
||||
}
|
||||
],
|
||||
"status": "SOURCE-READY / NOTRUN; test-source applicability retained as Runner responsibility; no blanket1338 identity claim"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,92 @@
|
||||
# REPAIR17 — blocked on required raw access
|
||||
|
||||
This is not accepted or completed. Stage R is not implemented. No new condition
|
||||
is claimed as proven. This document records an observed input-access blocker,
|
||||
not a replacement implementation or a proposal to trust Root summaries.
|
||||
|
||||
## Checkout and scope
|
||||
|
||||
- Observed HEAD: `accd07c91d4e34d9b7c7fc20e389df2424b167e1` (the requested reused checkout).
|
||||
- Registered contract base: `deb1bcb2374eb378b840ca345db952bd8572cb6e`.
|
||||
- Only this status file was created. The checker, `verify_native`, C checks,
|
||||
existing fixtures, probes, originals, and logs were not modified.
|
||||
- No git writes, Runner operations, engine runs, or other agents were used.
|
||||
|
||||
## Reproduced blocker
|
||||
|
||||
Let `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
The four `B/<series>/raw/{writer,reader}.json` files are readable. Their literal
|
||||
`slots` mappings locate the formal packages. Attempting `Path.read_bytes()` on
|
||||
every `journal.log`, `manifest.json`, `thumbnail.png`, and `world.bin` in those
|
||||
slots returned `PermissionError: [Errno 1] Operation not permitted`:
|
||||
|
||||
| Series | Slots per role | Unreadable original + copy members |
|
||||
| --- | ---: | ---: |
|
||||
| `p04-s1-native-r02` | 14 | 112 |
|
||||
| `p04-s2a-native-r03` | 1 | 8 |
|
||||
| `p04-s2b-native-r02` | 6 | 48 |
|
||||
| `p04-s3-native-r01` | 22 | 176 |
|
||||
|
||||
For example, this exact required S3 original cannot be read:
|
||||
|
||||
```text
|
||||
/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-078167a92c6e4888a6b4ee4a005fd858-standard-runtime-writer/saves/p04_s3/B1-after/world.bin
|
||||
```
|
||||
|
||||
Its Reader counterpart is also inaccessible:
|
||||
|
||||
```text
|
||||
/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-b1fd1956bd28493cbac1e00f3a775232-standard-runtime-reader/saves/p04_s3/B1-after/world.bin
|
||||
```
|
||||
|
||||
Searching each series directory for `world.bin` found only the unrelated
|
||||
`stage/tests/fixtures/required_kitchen_legacy14/formal-package/world.bin`.
|
||||
There is no `.review-material` directory in this checkout. Root result SHA
|
||||
fields cannot replace re-hashing the actual original and Reader member bytes.
|
||||
|
||||
Current-game source access also fails: reading the first source_before entry,
|
||||
`/Users/korizatou114/Projects/とりにく工房ゲーム制作部/AGENTS.md`, returned the same error.
|
||||
Each run's fixed_input_pins contains three inaccessible entries. The remaining
|
||||
entries re-hashed successfully (S1: 13, S2a: 14, S2b: 10, S3: 15).
|
||||
Each staged source tree has 1337 hashes matching source_before and one differing
|
||||
test script (`tests/s3/test_runtime_staff_assignment.gd`); this is not a proof
|
||||
that the current game's full 1338-file source set still matches.
|
||||
|
||||
Required unblock: make these declared original inputs readable to the worker,
|
||||
or supply an authorized, provenance-bound relocation of their full bytes,
|
||||
including both formal roles and the current-game source/fixed inputs. No new
|
||||
engine run is requested. Permission denial must not be interpreted as missing
|
||||
files, matching hashes, or failed product behavior.
|
||||
|
||||
## Evidence and remaining conditions
|
||||
|
||||
Readable raw locations were inspected under all four series, including
|
||||
runner-input/source_before, lifecycle receipts, raw inventory, and raw Writer
|
||||
and Reader records. D05 supplement bytes were read. ROOT result files were
|
||||
used to inspect locators, never as proof of passing conditions.
|
||||
|
||||
- S1: EV remains unverified in this run; no paid-service power claim.
|
||||
- S2a: midnight_settlement, midnight_replay, save_restore remain unverified.
|
||||
- S2b: night_staff_absent, overtime_task and same-minute rejection remain unverified.
|
||||
- S3: closure_release, exit_release, patience_release and B4 release-once remain unverified.
|
||||
- power_stop, destruction_stop, shift_completion, same_minute_replay remain unverified.
|
||||
- Existing C verification was neither changed nor rerun; no fresh C result is claimed.
|
||||
- Required native-Windows conditions remain pending individually; this run supplies no Windows proof.
|
||||
|
||||
Stage A remains pending: actual HEAD + filesystem candidate binding, the known
|
||||
`MAIN_ANCHOR` `9694...`, candidate_tree trust, and `3139` metadata holes are
|
||||
untouched. No final index or composition was generated.
|
||||
|
||||
## Footprint and verification
|
||||
|
||||
Read-only `df -h` reported about 3.1 GiB available. No evidence payload was
|
||||
copied. `B/audit-support/p04-raw-collect-r17/` did not exist at the access audit
|
||||
and was not created. A trustworthy collection footprint cannot be finalized
|
||||
without access to the required member bytes; no collector was run.
|
||||
|
||||
Only Python read/hash/access diagnostics were executed. Fixture suites were
|
||||
not run and are not reported as passing. `p04_native_series.py`,
|
||||
`collect_p04_native.py`, and `checker_series_fixtures.py` were not created, so
|
||||
there are no valid Root collector/new-fixture commands to advertise yet.
|
||||
Implementation and its required positive/adversarial checks remain outstanding
|
||||
after the required inputs become readable.
|
||||
+2
@@ -0,0 +1,2 @@
|
||||
{"estimated_payload_bytes": 2970454, "files": 5, "available_disk_bytes": 4596576256, "large_payloads_copied": 0}
|
||||
{"collection": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-raw-collect-r17", "manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "actual_payload_bytes": 2970454, "formal_acceptance": false}
|
||||
+1
@@ -0,0 +1 @@
|
||||
{"C_provenance_sha256": "51d746879b4197445a09cd44a88dd918c365fa98025d9cd652a740cee09a9040", "C_source_manifest_sha256": "dbaab3c293c191eb5f3aff34854945e2d564f824df50a92802b3a7eda55321a8", "error": "candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion", "formal_acceptance": false, "machine_verified": false, "missing_conditions": ["power_stop", "save_restore", "shift_completion"], "nativeWindows": {"EV": "pending", "closure_release": "pending", "dependency_stop": "pending", "destruction_stop": "pending", "exit_release": "pending", "midnight_replay": "pending", "midnight_settlement": "pending", "night_staff_absent": "pending", "overtime_task": "pending", "patience_release": "pending", "paused_midnight": "pending", "power_stop": "pending", "recovery_completion": "pending", "same_minute_replay": "pending", "save_restore": "pending", "shift_completion": "pending"}, "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8", "series_bindings": {"s1": "9792569af9c8ecef177ffdeb880b814fb2878231f23e77c3749e18c228ff0ceb", "s2a": "746b58cf1aff95b082c35f6cc2c29556f146a7c56cce0475f4f2c091168605a7", "s2b": "e6d5412c14809825cf368af1d93972bc9c4e41f4c09afa414732b007c9cc7589", "s3": "a9b4b80d54c18ae2a1dc82514052e22d6174ff79999c76fa622282709759b433"}, "series_manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "stage_A": "candidate binding stage A pending", "task_id": "P04-01", "verified_conditions": ["EV", "closure_release", "dependency_stop", "destruction_stop", "exit_release", "midnight_replay", "midnight_settlement", "night_staff_absent", "overtime_task", "patience_release", "paused_midnight", "recovery_completion", "same_minute_replay"]}
|
||||
+153
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"s1": {
|
||||
"facts": {
|
||||
"paid_service_power_claim": false
|
||||
},
|
||||
"formal_acceptance": false,
|
||||
"owned_pids": [
|
||||
64745,
|
||||
64788,
|
||||
64818,
|
||||
64850
|
||||
],
|
||||
"phase_pairs": 0,
|
||||
"product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
|
||||
"raw_reference_count": 97,
|
||||
"relocated_reference_count": 1464,
|
||||
"relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
|
||||
"series": "s1",
|
||||
"source_files": 1338,
|
||||
"verified_conditions": [
|
||||
"EV"
|
||||
],
|
||||
"verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
|
||||
},
|
||||
"s2a": {
|
||||
"facts": {
|
||||
"paid_originals": {
|
||||
"completed_service_id": "service_00000027",
|
||||
"same_minute_replay": "request resend, not advance_to settlement replay",
|
||||
"shift_completion": "missing: zero SERVICE_SALE rows at 1080",
|
||||
"transaction_id": "ledger_00000085"
|
||||
},
|
||||
"payroll_gold": 255,
|
||||
"raw_getter_bytes_equal": false,
|
||||
"sales_gold": 25,
|
||||
"save_restore_gap": "Raw getter also changes typed arrays to untyped arrays; authorized normalization permits only StringName/String and ordering",
|
||||
"settlement_replay_is_request_resend": false,
|
||||
"upkeep_gold": 5
|
||||
},
|
||||
"formal_acceptance": false,
|
||||
"owned_pids": [
|
||||
85229,
|
||||
85263,
|
||||
85303,
|
||||
85425
|
||||
],
|
||||
"phase_pairs": 0,
|
||||
"product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
|
||||
"raw_reference_count": 486,
|
||||
"relocated_reference_count": 1362,
|
||||
"relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
|
||||
"series": "s2a",
|
||||
"source_files": 1338,
|
||||
"verified_conditions": [
|
||||
"midnight_replay",
|
||||
"midnight_settlement",
|
||||
"same_minute_replay"
|
||||
],
|
||||
"verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
|
||||
},
|
||||
"s2b": {
|
||||
"facts": {
|
||||
"same_minute_rejection": "MINUTE_ALREADY_APPLIED"
|
||||
},
|
||||
"formal_acceptance": false,
|
||||
"owned_pids": [
|
||||
98696,
|
||||
98744,
|
||||
98770,
|
||||
98810
|
||||
],
|
||||
"phase_pairs": 12,
|
||||
"product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
|
||||
"raw_reference_count": 163,
|
||||
"relocated_reference_count": 1397,
|
||||
"relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
|
||||
"series": "s2b",
|
||||
"source_files": 1338,
|
||||
"verified_conditions": [
|
||||
"night_staff_absent",
|
||||
"overtime_task"
|
||||
],
|
||||
"verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
|
||||
},
|
||||
"s3": {
|
||||
"facts": {
|
||||
"B1": {
|
||||
"amount": 0,
|
||||
"reservation_states": [
|
||||
"ACTIVE",
|
||||
"RELEASED"
|
||||
],
|
||||
"sales": 0
|
||||
},
|
||||
"B2a": {
|
||||
"amount": 25,
|
||||
"reservation_states": [
|
||||
"CONSUMED"
|
||||
],
|
||||
"sales": 1
|
||||
},
|
||||
"B2b": {
|
||||
"amount": 0,
|
||||
"reservation_states": [
|
||||
"RELEASED"
|
||||
],
|
||||
"sales": 0
|
||||
},
|
||||
"B3": {
|
||||
"amount": 0,
|
||||
"reservation_states": [
|
||||
"RELEASED"
|
||||
],
|
||||
"sales": 0
|
||||
},
|
||||
"B4a": {
|
||||
"amount": 25,
|
||||
"reservation_states": [
|
||||
"CONSUMED"
|
||||
],
|
||||
"sales": 1
|
||||
},
|
||||
"B4b": {
|
||||
"amount": 0,
|
||||
"reservation_states": [
|
||||
"RELEASED"
|
||||
],
|
||||
"sales": 0
|
||||
}
|
||||
},
|
||||
"formal_acceptance": false,
|
||||
"owned_pids": [
|
||||
10448,
|
||||
10493,
|
||||
10523,
|
||||
10578
|
||||
],
|
||||
"phase_pairs": 352,
|
||||
"product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
|
||||
"raw_reference_count": 891,
|
||||
"relocated_reference_count": 1530,
|
||||
"relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
|
||||
"series": "s3",
|
||||
"source_files": 1338,
|
||||
"verified_conditions": [
|
||||
"closure_release",
|
||||
"destruction_stop",
|
||||
"exit_release",
|
||||
"patience_release"
|
||||
],
|
||||
"verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
|
||||
}
|
||||
}
|
||||
+367
@@ -0,0 +1,367 @@
|
||||
{
|
||||
"formal_acceptance": false,
|
||||
"results": [
|
||||
{
|
||||
"class": "small_synthetic_positive",
|
||||
"result": "pass",
|
||||
"series": "shared"
|
||||
},
|
||||
{
|
||||
"class": "full_body_positive",
|
||||
"result": "pass",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "wrong_source_pin",
|
||||
"error": "SHA drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "signature_only_pin",
|
||||
"error": "full-function-body pin mismatch",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "symlink",
|
||||
"error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "traversal",
|
||||
"error": "raw traversal",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "unmapped_original_path",
|
||||
"error": "unmapped original path: /native/unknown.gd",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "relocated_manifest_native_mismatch",
|
||||
"error": "byte length drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "relocated_byte_manifest_mismatch",
|
||||
"error": "SHA drift: relocation /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "JSON_only_getter_substitute",
|
||||
"error": "unsupported Variant flags 8827:25959 at 0",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "forged_scalar",
|
||||
"error": "SHA drift: p04-s1-native-r02/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "changed_raw_byte",
|
||||
"error": "SHA drift: p04-s1-native-r02/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "formal_member_SHA_drift",
|
||||
"error": "SHA drift: p04-s1-native-r02/execution.json",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "unowned_missing_PID_end",
|
||||
"error": "missing PID end",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "altered_phase_pair",
|
||||
"error": "SHA drift: p04-s1-native-r02/raw/reader-landing-held.var",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "relabeled_interruption_reason",
|
||||
"error": "SHA drift: p04-s1-native-r02/raw/writer-landing-depleted.json",
|
||||
"result": "rejected",
|
||||
"series": "s1"
|
||||
},
|
||||
{
|
||||
"class": "full_body_positive",
|
||||
"result": "pass",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "wrong_source_pin",
|
||||
"error": "SHA drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "signature_only_pin",
|
||||
"error": "full-function-body pin mismatch",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "symlink",
|
||||
"error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "traversal",
|
||||
"error": "raw traversal",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "unmapped_original_path",
|
||||
"error": "unmapped original path: /native/unknown.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "relocated_manifest_native_mismatch",
|
||||
"error": "byte length drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "relocated_byte_manifest_mismatch",
|
||||
"error": "SHA drift: relocation /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "JSON_only_getter_substitute",
|
||||
"error": "unsupported Variant flags 8827:25959 at 0",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "forged_scalar",
|
||||
"error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "changed_raw_byte",
|
||||
"error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "formal_member_SHA_drift",
|
||||
"error": "SHA drift: p04-s2a-native-r03/execution.json",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "unowned_missing_PID_end",
|
||||
"error": "missing PID end",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "altered_phase_pair",
|
||||
"error": "SHA drift: p04-s2a-native-r03/raw/reader-C3-recall.var",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "relabeled_interruption_reason",
|
||||
"error": "SHA drift: p04-s2a-native-r03/raw/writer-C1-midnight.json",
|
||||
"result": "rejected",
|
||||
"series": "s2a"
|
||||
},
|
||||
{
|
||||
"class": "full_body_positive",
|
||||
"result": "pass",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "wrong_source_pin",
|
||||
"error": "SHA drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "signature_only_pin",
|
||||
"error": "full-function-body pin mismatch",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "symlink",
|
||||
"error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "traversal",
|
||||
"error": "raw traversal",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "unmapped_original_path",
|
||||
"error": "unmapped original path: /native/unknown.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "relocated_manifest_native_mismatch",
|
||||
"error": "byte length drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "relocated_byte_manifest_mismatch",
|
||||
"error": "SHA drift: relocation /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "JSON_only_getter_substitute",
|
||||
"error": "unsupported Variant flags 8827:25959 at 0",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "forged_scalar",
|
||||
"error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "changed_raw_byte",
|
||||
"error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "formal_member_SHA_drift",
|
||||
"error": "SHA drift: p04-s2b-native-r02/execution.json",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "unowned_missing_PID_end",
|
||||
"error": "missing PID end",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "altered_phase_pair",
|
||||
"error": "SHA drift: p04-s2b-native-r02/raw/reader-night_absent-1080-before-facility.var",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "relabeled_interruption_reason",
|
||||
"error": "SHA drift: p04-s2b-native-r02/raw/writer-night_absent-1081.json",
|
||||
"result": "rejected",
|
||||
"series": "s2b"
|
||||
},
|
||||
{
|
||||
"class": "full_body_positive",
|
||||
"result": "pass",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "wrong_source_pin",
|
||||
"error": "SHA drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "signature_only_pin",
|
||||
"error": "full-function-body pin mismatch",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "symlink",
|
||||
"error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "traversal",
|
||||
"error": "raw traversal",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "unmapped_original_path",
|
||||
"error": "unmapped original path: /native/unknown.gd",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "relocated_manifest_native_mismatch",
|
||||
"error": "byte length drift: native /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "relocated_byte_manifest_mismatch",
|
||||
"error": "SHA drift: relocation /native/body.gd",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "JSON_only_getter_substitute",
|
||||
"error": "unsupported Variant flags 8827:25959 at 0",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "forged_scalar",
|
||||
"error": "SHA drift: p04-s3-native-r01/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "changed_raw_byte",
|
||||
"error": "SHA drift: p04-s3-native-r01/raw/writer.json",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "formal_member_SHA_drift",
|
||||
"error": "SHA drift: p04-s3-native-r01/execution.json",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "unowned_missing_PID_end",
|
||||
"error": "missing PID end",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "altered_phase_pair",
|
||||
"error": "SHA drift: p04-s3-native-r01/raw/reader-B1-phase-960-TIME_BOUNDARIES.var",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
},
|
||||
{
|
||||
"class": "relabeled_interruption_reason",
|
||||
"error": "SHA drift: p04-s3-native-r01/raw/writer-B1-after.json",
|
||||
"result": "rejected",
|
||||
"series": "s3"
|
||||
}
|
||||
],
|
||||
"scope": "file-only Stage R controls; immutable descriptor and primitive negatives"
|
||||
}
|
||||
@@ -0,0 +1,211 @@
|
||||
# REPAIR18 — executable Stage R, blocked on remaining conditions
|
||||
|
||||
This is **not accepted or completed**. Executable R artifacts and a reference-only
|
||||
collection were produced and the file-only checks were run. The whole gate
|
||||
fails. Original completion credit remains **13/88**, with no additional credit.
|
||||
The repair counter and `max_repair_attempts: null` were not changed.
|
||||
|
||||
## Scope and preservation
|
||||
|
||||
- Checkout: `accd07c91d4e34d9b7c7fc20e389df2424b167e1`; registered base:
|
||||
`deb1bcb2374eb378b840ca345db952bd8572cb6e`.
|
||||
- Changed `tools/check_p04_order_evidence.py` only to add R composition and its
|
||||
separate read-only CLI, call composition from the whole missing-check, and
|
||||
retain an unconditional Stage A failure.
|
||||
- Created `p04_native_series.py`, `collect_p04_native.py`,
|
||||
`checker_series_fixtures.py`, this status, and the four output files listed below.
|
||||
- All existing checker functions except `verify` and `main` were compared with
|
||||
HEAD and are byte-unchanged, including `verify_native` and all C helpers.
|
||||
All three existing fixture files are byte-unchanged. Their failures were not
|
||||
hidden by editing assertions or Stage A code.
|
||||
- `REPAIR17_STATUS.md` was never written. Its SHA256 is
|
||||
`6497c335739f266c9026aa6499cf5c49ae80d590d6aa2d0f90d32adc08018061`.
|
||||
- No git writes, new worktree/branch, agents, Runner operations, engine runs,
|
||||
full regression, permission requests, production edits, input edits, or final
|
||||
`B/p04-evidence/index.json` writes occurred. This did not revalidate accd.
|
||||
|
||||
## Inputs and actual collection
|
||||
|
||||
Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`,
|
||||
`R=B/audit-support/p04-r17-full-inputs-r01`, and
|
||||
`E=docs/plans/original-completion-2026-10-02/execution/p04-01`.
|
||||
|
||||
The first input identity check verified `R/MANIFEST.json`: **1,244,135 bytes**,
|
||||
SHA256 `a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8`.
|
||||
All **1,721** relocated members were used and rehashed across the series,
|
||||
covering 71,488,772 logical bytes. All four complete native `source_before`
|
||||
sets equal the supplied 1,338-file product set at content anchor
|
||||
`5f6bc11d6bb6e92d22d787989b219fef3a435bc1`. The one native QA override is checked
|
||||
separately against its supplied probe bytes; it is not represented as product
|
||||
content. Full-function-body pins include trailing comments and declarations.
|
||||
|
||||
External original paths remain provenance strings. The resolver uses exact
|
||||
`original_to_relocated` keys, and checks each used file against both native
|
||||
descriptors and relocation descriptors. There is no prefix substitution or
|
||||
external-path fallback. Formal slot membership, directory membership, separate
|
||||
Writer/Reader paths and inodes, symlinks, traversal and duplicates are checked.
|
||||
All **344** formal members in **86** original/Reader slots were rehashed.
|
||||
|
||||
The collector created only `B/audit-support/p04-raw-collect-r17/`. It did not
|
||||
exist before creation. It contains four series reference manifests and one
|
||||
collection manifest; no large evidence snapshots were copied.
|
||||
|
||||
Actual collector output (exit 0):
|
||||
|
||||
```json
|
||||
{"estimated_payload_bytes":2970454,"files":5,"available_disk_bytes":4596576256,"large_payloads_copied":0}
|
||||
{"actual_payload_bytes":2970454,"manifest_sha256":"953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975","formal_acceptance":false}
|
||||
```
|
||||
|
||||
The estimate was printed before directory creation or output writes. The
|
||||
collection is deterministic and refuses an existing destination on rerun.
|
||||
Per-series manifests bind native raw references, relocation references, and
|
||||
verifier bytes by SHA. Composition reruns C and all series verifiers and
|
||||
compares the recomputed results and references with those manifests; editing a
|
||||
`verified_conditions` list cannot add credit.
|
||||
|
||||
## Conditions derived from literal raw
|
||||
|
||||
| Verifier | Native raw | Relocated formal members | Conditions proved |
|
||||
| --- | --- | --- | --- |
|
||||
| S1 | `B/p04-s1-native-r02/raw/` | `R/formal/p04-s1-native-r02/{writer,reader}/` | `EV` |
|
||||
| S2a | `B/p04-s2a-native-r03/raw/` | `R/formal/p04-s2a-native-r03/{writer,reader}/C3/` | `midnight_settlement`, `midnight_replay` |
|
||||
| S2b | `B/p04-s2b-native-r02/raw/` | `R/formal/p04-s2b-native-r02/{writer,reader}/` | `night_staff_absent`, `overtime_task` |
|
||||
| S3 | `B/p04-s3-native-r01/raw/` | `R/formal/p04-s3-native-r01/{writer,reader}/` | `closure_release`, `exit_release`, `patience_release`, `destruction_stop` (B4b) |
|
||||
| Paid/resend supplement, collected with S2a | `B/audit-support/p04-current-native-series-r01/p04-idempotency-paid-midnight-native-r01/order-evidence/` | Manifest pin resolved through `R/MANIFEST.json`, full raw already inside B | `same_minute_replay` (request resend) |
|
||||
| Unchanged C | `B/audit-support/native-first-current/` | Existing C bundle, unchanged | `dependency_stop`, `recovery_completion`, `paused_midnight` |
|
||||
|
||||
All product reads resolve to `R/product/` through manifest keys. Fixed-input
|
||||
relocations and every original formal provenance string are retained in the
|
||||
four generated series manifests; they are not replaced with guessed paths.
|
||||
|
||||
Owned import/parse/Writer/Reader PIDs checked against starts, ends, owners,
|
||||
commands, raw stream hashes, exit gates and cleanup/guard records:
|
||||
|
||||
| Series | PIDs | Formal slots per role | Exact raw phase pairs |
|
||||
| --- | --- | ---: | ---: |
|
||||
| S1 | 64745, 64788, 64818, 64850 | 14 | 0 (14 exact typed snapshot restore points instead) |
|
||||
| S2a | 85229, 85263, 85303, 85425 | 1 | 0 (typed settlement/replay and formal Runtime restore comparisons) |
|
||||
| S2b | 98696, 98744, 98770, 98810 | 6 | 12 |
|
||||
| S3 | 10448, 10493, 10523, 10578 | 22 | 352 JSON/typed phase files |
|
||||
|
||||
- S1 checks task/trip/resource identity, safe landing, no-safe-landing hold,
|
||||
preserved reservation identity and release. It makes no paid-service power claim.
|
||||
- S2a derives a 25G sale/one transaction, 255G payroll/one transaction
|
||||
(Akane 120, Bardo 135 joined to actual staff and shifts), and 5G upkeep in
|
||||
three rows/one transaction. `advance_to(1440)` has processed minutes 0 and
|
||||
daily closes 0, with entire typed Runtime bytes unchanged. Formal Reader
|
||||
Runtime restore and recall bytes match exactly.
|
||||
- The supplemental request-resend raw preserves typed economy, facilities,
|
||||
inventory, guests and staff at the same minute, and joins the one completed
|
||||
service `service_00000027` to sale transaction `ledger_00000085`. This is not
|
||||
settlement-replay proof; S2a supplies that distinct proof.
|
||||
- S2b derives `STAFF_UNAVAILABLE`/`WAITING_FOR_STAFF`, the absent night workers,
|
||||
overtime task/staff/shift joins and one duty minute. Its same-minute call is
|
||||
rejected as `MINUTE_ALREADY_APPLIED`, with entire typed Runtime unchanged.
|
||||
- S3 retains `RELATED_FACILITY_INACTIVE` in B1, never relabeling it `NO_POWER`.
|
||||
The directly closed facility retains its started service while the dependent
|
||||
facility interruption pauses it; the queued reservation is released.
|
||||
B2a completes/consumes once; B2b and B3 release without a sale.
|
||||
B4b's queued event completes, durability becomes 0/`BROKEN`, then the service
|
||||
fails with `BROKEN` at 961, releases its reservation and has zero sale rows.
|
||||
|
||||
## Unresolved raw/specification gaps
|
||||
|
||||
1. **`power_stop` missing.** EV evidence is not a paid-service power proof;
|
||||
B1 is a dependency interruption. No relabeling or invented D05 rule was used.
|
||||
2. **`shift_completion` missing.** The actual supplied paid-shift originals at
|
||||
`B/audit-support/p04-current-native-series-r01/p04-paid-shift-midnight-native-r01/order-evidence/`
|
||||
have zero `SERVICE_SALE` rows in all three 17:59/completion-phase/18:00
|
||||
snapshots. The `paid` filenames do not establish a charged completion at 1080.
|
||||
3. **`save_restore` withheld under the fixed normalization restriction.** The
|
||||
entire formal Runtime does restore exactly. However, the getter comparison
|
||||
changes not only StringName/String and dictionary order but typed arrays to
|
||||
untyped arrays. Examples are `/anomalies`, `/anomalies/0/allocations`,
|
||||
`/anomalies/0/unallocated_by_staff`, `/anomalies/0/facility_ids`,
|
||||
`/settlement/input_payments` and `/settlement/rows`. Native array headers
|
||||
include `1c000100...` versus `1c000000...`. The raw getter byte inequality is
|
||||
preserved and parsed from `.var`; JSON is not substituted. Normalization was
|
||||
not broadened beyond the instruction, so this condition remains missing.
|
||||
4. **B4a zero-charge assertion is unsupported.**
|
||||
`B/p04-s3-native-r01/raw/writer-B4a-next.{json,var}` contains one 25G sale at
|
||||
960 and a completed service with consumed reservation. B4b has zero sales.
|
||||
The implementation records both facts, rather than declaring B4a charge 0.
|
||||
Destruction-stop credit above is specifically the B4b failed-service branch.
|
||||
|
||||
D05 approval and supplement full bytes in `p04-whole-closure-r01` were read.
|
||||
They approve dependency closure and the 18:00 ordering choice, not an invented
|
||||
blanket policy for all D05 domains. The supplied raw discrepancies require
|
||||
owner-level resolution or appropriate evidence; this worker did not amend scope.
|
||||
|
||||
Each of these native-Windows conditions remains individually **pending**:
|
||||
`EV`, `power_stop`, `destruction_stop`, `dependency_stop`, `shift_completion`,
|
||||
`recovery_completion`, `same_minute_replay`, `closure_release`, `exit_release`,
|
||||
`patience_release`, `paused_midnight`, `midnight_settlement`, `midnight_replay`,
|
||||
`save_restore`, `night_staff_absent`, `overtime_task`. The machine output also
|
||||
contains an explicit per-condition pending map.
|
||||
|
||||
## Actual validation outputs
|
||||
|
||||
- Static Python compilation: **4 files passed** (in-memory compile; no engine).
|
||||
- Existing C fixture: **exit 0**, 5 positive controls passed and 25 negatives
|
||||
rejected. `verify_native` reports 10 owned processes and its original three
|
||||
conditions. No C condition names were edited.
|
||||
- Existing negative fixture: **exit 1**, at `synthetic_scalar_only_rejected`:
|
||||
`AssertionError: ('synthetic_scalar_only_rejected', {'task_id': 'P04-01', 'machine_verified': False, 'formal_acceptance': False, 'error': "'product_binding'"})`.
|
||||
- Existing applicability fixture: **exit 1**:
|
||||
`AssertionError: negative fixture accepted: wrong_tested_revision`.
|
||||
These two suites therefore could not be confirmed to pass/reject as requested.
|
||||
Their files and the functions involved were unchanged; they were not repaired
|
||||
by touching the deferred A holes, and no baseline rerun is claimed.
|
||||
- New series fixtures: **exit 0**, **5 small positive controls and 56 rejected
|
||||
negatives**, 14 negative classes per series. Controls cover immutable raw and
|
||||
descriptor overlays, source/body pins, PID endings, paths, relocation byte
|
||||
drift and typed-vs-JSON rejection. Immutable descriptor hashes are deliberately
|
||||
not refreshed; the tests do not claim to be new engine evidence.
|
||||
- Real series verifiers ran successfully during collection and were rerun by
|
||||
composition. Outputs are recorded in `REPAIR18_REAL_SERIES_OUTPUT.json`.
|
||||
- Separate composition CLI: **exit 1**, with 13 raw-derived conditions and:
|
||||
|
||||
```text
|
||||
candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion
|
||||
```
|
||||
|
||||
Full new outputs: `REPAIR18_COLLECTOR_OUTPUT.jsonl`,
|
||||
`REPAIR18_SERIES_FIXTURE_OUTPUT.json`, `REPAIR18_REAL_SERIES_OUTPUT.json`,
|
||||
`REPAIR18_COMBINED_OUTPUT.json`. The 13 verified boundary conditions are not
|
||||
13 newly accepted units and do not change the original 13/88 credit.
|
||||
|
||||
## Exact Root commands
|
||||
|
||||
Run from this existing checkout. These commands perform file-only work:
|
||||
|
||||
```sh
|
||||
B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
|
||||
E=docs/plans/original-completion-2026-10-02/execution/p04-01
|
||||
python3 -B "$E/collect_p04_native.py" --build "$B"
|
||||
python3 -B "$E/checker_series_fixtures.py" --build "$B"
|
||||
python3 -B "$E/p04_native_series.py" --build "$B"
|
||||
python3 -B "$E/checker_negative_fixtures.py"
|
||||
python3 -B "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
|
||||
python3 -B "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
|
||||
BUILD_OUTPUT_DIR="$B" python3 -B tools/check_p04_order_evidence.py --verify-series-only
|
||||
```
|
||||
|
||||
The collector command above was already executed successfully; another execution
|
||||
must refuse the now-existing destination. Review the existing collection rather
|
||||
than overwriting it. The final command is intentionally failing; it does not
|
||||
need or generate a final index and never performs candidate composition.
|
||||
|
||||
## Stage A and subsequent dependencies
|
||||
|
||||
Stage A remains pending: actual HEAD/filesystem candidate binding,
|
||||
`MAIN_ANCHOR` `9694...`, `candidate_tree` trust and the `3139` metadata holes
|
||||
are untouched. `--verify-only` still requires the actual final evidence index;
|
||||
its missing-check unions recomputed C/R results and still fails for any missing
|
||||
condition, and it cannot succeed while Stage A is pending.
|
||||
|
||||
Required sequence remains **R → A → final index → mandatory whole validation →
|
||||
independent review → ordinary integration**. Outstanding raw/specification gaps
|
||||
and the two existing fixture failures prevent representing this dispatch as a
|
||||
completed or accepted implementation.
|
||||
@@ -0,0 +1,58 @@
|
||||
# Repair19 persistence explanation corrigendum
|
||||
|
||||
This corrects the old Root explanation that the live day-summary comparison
|
||||
differed only in StringName/String and dictionary order. That explanation missed
|
||||
generic Array headers. It also corrects the superseded proposal to explain this
|
||||
path using `_to_snapshot_variant`.
|
||||
|
||||
The exact relocated source is
|
||||
`B/audit-support/p04-r17-full-inputs-r01/product/scripts/operations/operations_coordinator.gd`.
|
||||
Its 130891 bytes have SHA256
|
||||
`871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
|
||||
Full bodies, including bytes through the next named function, were read directly
|
||||
and compared with `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`, where
|
||||
`T=B/audit-support/p04-repair19-close-r01`. All five bodies, lengths and hashes
|
||||
match that supplied file:
|
||||
|
||||
| Function | Line | Bytes | SHA256 |
|
||||
| --- | ---: | ---: | --- |
|
||||
| `get_day_summary` | 577 | 153 | `449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb` |
|
||||
| `create_snapshot` | 620 | 3988 | `8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309` |
|
||||
| `_snapshot_root_report` | 2943 | 2062 | `96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe` |
|
||||
| `_visit_snapshot_tree` | 2992 | 3045 | `70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0` |
|
||||
| `_to_snapshot_variant` | 3083 | 550 | `f7db3cf2d495bb117fc7f6795633daa272c03d8eb7f99977e462e0a9df20cd8a` |
|
||||
|
||||
`get_day_summary` returns `_day_summaries[day].duplicate(true)` directly. It
|
||||
exposes an internal API representation; the product getter need not change.
|
||||
`create_snapshot` first validates with capture=true. In that pass,
|
||||
`day_summaries` is not among the reusable encoded fields. It then assembles
|
||||
`saved_days` and calls `_snapshot_root_report(raw_snapshot, field_cache, false)`.
|
||||
That report invokes `_visit_snapshot_tree` with encoding enabled. The visitor
|
||||
creates untyped arrays, converts StringName to String, stringifies permitted
|
||||
dictionary keys and sorts the resulting String keys with native sorting.
|
||||
|
||||
The separate `_to_snapshot_variant` helper is not on this call chain. Its
|
||||
`sort_custom(_variant_string_less)`, lack of finite-float/budget checks and
|
||||
pass-through of unsupported types prevent using it as a general equivalent.
|
||||
|
||||
The supplied `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json` lists the following six
|
||||
changes. These are explicitly attributed to that diagnostic; they have not been
|
||||
independently rerun by a repair19 fixture in this dispatch.
|
||||
|
||||
| Path below `day_summary` | Writer header | Writer element kind | Reader header | Length |
|
||||
| --- | --- | --- | --- | ---: |
|
||||
| `/anomalies` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
|
||||
| `/anomalies/0/allocations` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
|
||||
| `/anomalies/0/facility_ids` | `1c000100` | String (4) | `1c000000` | 3 |
|
||||
| `/anomalies/0/unallocated_by_staff` | `1c000100` | Dictionary (27) | `1c000000` | 0 |
|
||||
| `/settlement/input_payments` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
|
||||
| `/settlement/rows` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
|
||||
|
||||
Every listed Reader array is untyped. Raw getter byte equality remains **false**.
|
||||
This diagnostic is separate from the source-defined persisted snapshot.
|
||||
Neither this explanation nor an optional projection may weaken exact native
|
||||
expected/restored typed-byte comparison, entire Runtime equality, formal 4+4
|
||||
member equality, settlement counts, duplicate-payment checks or replay checks.
|
||||
No projection implementation or new save_restore verification is claimed here.
|
||||
The executable R18 normalization gate is still unchanged, so save_restore is
|
||||
still open pending the exact encoder port and its required validation.
|
||||
@@ -0,0 +1,78 @@
|
||||
# Repair19 — incomplete; execution constraint clarification pending
|
||||
|
||||
This is not a ready submission and not formal acceptance. Original credit stays
|
||||
13/88. All 15 conditions plus EV retain their existing scope; nativeWindows
|
||||
remains pending for each. No product, acceptance, domain or outcome was changed.
|
||||
|
||||
## Blocking instruction conflict
|
||||
|
||||
The recorded repair19 direction requires local fixture reruns, isolated temp-Git
|
||||
negative and positive controls, and removing the Stage-A refusal only after
|
||||
those tests pass. The final worker instructions prohibit Git writes and say
|
||||
tests are formally executed by Runner. This dispatch has requested clarification
|
||||
on whether that prohibition exempts the specifically requested file-only and
|
||||
isolated temp-Git fixtures. There is no answer at the time of this report.
|
||||
No exemption has been assumed. This is an execution-constraint blocker, not a
|
||||
claim that pending formal acceptance itself blocks implementation.
|
||||
|
||||
## Changes actually made in this dispatch
|
||||
|
||||
- `p04_native_series.py`: retain both JSON and Variant Writer/Reader phase-byte
|
||||
comparisons, but increment the S3 pair metric only for `.var`. The requested
|
||||
interpretation is 352 checked file pairs representing 176 observations. A
|
||||
new execution output confirming that count has not been generated.
|
||||
- `p04_native_series.py`: add the B1 `power_stop` join for the five observations
|
||||
at 959–963, positive finite original reserve, actual public mana and power
|
||||
flags, direct closure, same service identity/progress/reservations, queued B
|
||||
release/stock/patience, recovery payment and unchanged next ledger. Bind the
|
||||
saved 961 recovery command and the APPLY_COMMANDS phase. Preserve the actual
|
||||
`RELATED_FACILITY_INACTIVE` reason. This code is untested; its addition to the
|
||||
verifier's returned conditions is conditional on every assertion succeeding
|
||||
when Runner executes it. No successful power_stop result is claimed here.
|
||||
- `REPAIR19_CORRIGENDUM.md`: correct the StringName/order-only explanation,
|
||||
distinguish raw getter from public persistence, list all six supplied typed
|
||||
Array header changes, and record the actual source call-chain full-body pins.
|
||||
|
||||
## Static observations and preservation
|
||||
|
||||
- In-memory Python `compile` of the edited series module succeeded. No fixture,
|
||||
native, Godot, full-regression or Runner run occurred.
|
||||
- The exact relocated operations source was read. All five complete function
|
||||
bodies, lengths and hashes equal
|
||||
`B/audit-support/p04-repair19-close-r01/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
|
||||
The hash table and exact call-chain explanation are in the corrigendum.
|
||||
- The checker region from `NATIVE_RUNS` through `verify_native`, inclusive of
|
||||
the C constants and helpers, equals its HEAD bytes. Region SHA256:
|
||||
`5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
|
||||
- No R17/R18 output or status file was edited. The existing uncommitted R18
|
||||
checker changes remain. No Git write, agent, integration or Runner operation
|
||||
occurred. No native evidence was created or modified.
|
||||
- No collector was run. Both the existing r17 collection and the required fresh
|
||||
r19 destination remain untouched by this dispatch. Since the series verifier
|
||||
bytes changed, the old r17 collection cannot validate these new verifier bytes;
|
||||
it must never be overwritten or represented as a repair19 collection.
|
||||
|
||||
## Remaining implementation and validation
|
||||
|
||||
Repair19 is incomplete. R2's C-backed paid shift join, R3's exact encoder port
|
||||
and fixtures, Stage A's actual Git-role verifier, new index generator, fixture
|
||||
protocol repairs and all requested fixture executions remain to be completed.
|
||||
The old Stage-A unconditional refusal remains in place. The old
|
||||
`verify_product_target` has not been edited or replaced in this dispatch.
|
||||
The 9b1a18c anchor resolves to
|
||||
`9b1a18c1eb25ca1300dcd59da78423c0dda2f498`; the old checker constant has not yet
|
||||
been changed as part of a complete Stage-A repair.
|
||||
|
||||
No new output JSON is reported, and no old fixture success is reused as success
|
||||
for the edited module. B4a/B4b semantics, frozen save_restore measurements and
|
||||
its current open result remain unchanged. The 25 C negatives and 56 series
|
||||
negatives have not been rerun.
|
||||
|
||||
There are no valid repair19 index-generation or submitted/merged-candidate Root
|
||||
commands yet: the required generator and role verifier are not implemented.
|
||||
Providing plausible commands for nonexistent functionality would be misleading.
|
||||
The completed follow-up must supply those exact commands after implementing and
|
||||
validating the protocol, retain all existing outputs, and collect exclusively
|
||||
into the fresh `B/audit-support/p04-raw-collect-r19` destination.
|
||||
|
||||
Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
|
||||
@@ -0,0 +1,40 @@
|
||||
# Repair20 persistence corrigendum
|
||||
|
||||
The old Root explanation, “StringName/order only”, omitted six generic Array
|
||||
header changes. `get_day_summary` returns the internal day's `duplicate(true)`;
|
||||
it does not return the canonical persisted representation. Its raw Writer and
|
||||
Reader bytes remain unequal. All original raw files and values are retained.
|
||||
No product getter change is proposed.
|
||||
|
||||
| Path under day_summary | Writer header | Element kind | Reader header | Length |
|
||||
| --- | --- | --- | --- | ---: |
|
||||
| anomalies | 1c000100 | Dictionary (27) | 1c000000 | 1 |
|
||||
| anomalies/0/allocations | 1c000100 | Dictionary (27) | 1c000000 | 1 |
|
||||
| anomalies/0/facility_ids | 1c000100 | String (4) | 1c000000 | 3 |
|
||||
| anomalies/0/unallocated_by_staff | 1c000100 | Dictionary (27) | 1c000000 | 0 |
|
||||
| settlement/input_payments | 1c000100 | Dictionary (27) | 1c000000 | 5 |
|
||||
| settlement/rows | 1c000100 | Dictionary (27) | 1c000000 | 5 |
|
||||
|
||||
These are the six entries in `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json`.
|
||||
The new code derives them again from typed nodes and compares the list to that
|
||||
diagnostic. This execution is **NOT RUN** in repair20.
|
||||
|
||||
The persistence chain is `create_snapshot` (620) →
|
||||
`_snapshot_root_report(raw_snapshot, field_cache, false)` (2943) →
|
||||
`_visit_snapshot_tree(..., encode=true)` (2992). The earlier capture=true pass
|
||||
does not cache encoded day_summaries. `_to_snapshot_variant` is not on this path.
|
||||
|
||||
The projection is confined to raw getter → persisted day1. It retains all
|
||||
scalar Variant bytes, including numeric type, rejects nonfinite floats and
|
||||
unsupported values, stringifies permitted keys, rejects canonical collisions,
|
||||
sorts String keys, rebuilds untyped Arrays, and enforces collection, depth, node,
|
||||
single-string and aggregate-string limits. Unsupported dictionary-key types
|
||||
are rejected, never silently normalized. The optional admitted subset does not
|
||||
include composite-key Godot stringification. No projection is allowed on the
|
||||
native persisted expected/restored comparison.
|
||||
|
||||
Full Runtime Writer/Reader/restored equality, formal 4+4 member equality,
|
||||
settlement/duplicate-payment checks and the actual advance_to replay checks
|
||||
remain independent strict requirements. If getter projection still differs
|
||||
from the native canonical_day1 bytes, `save_restore` remains open and reports
|
||||
that exact mismatch. No new successful equality is claimed without Root's run.
|
||||
@@ -0,0 +1,183 @@
|
||||
# Repair20 — source submission; tests NOT RUN
|
||||
|
||||
Source-only repair. No Git command, fixture, collector, series, Godot/native,
|
||||
Runner, agent, commit, branch or integration operation was executed. The only
|
||||
code validation performed was Python `compile(..., 'exec')` in memory, without
|
||||
imports/execution of the edited modules. No acceptance is claimed. Original
|
||||
credit remains 13/88; all 15 conditions + EV, seven domains and three safety
|
||||
outcomes retain their scope. nativeWindows remains pending for every condition.
|
||||
The next submission SHA is assigned by Runner and is not predeclared here.
|
||||
|
||||
Changed files:
|
||||
|
||||
- `tools/check_p04_order_evidence.py`: real checkout/role binding, isolated
|
||||
object stores under B, first-1080 R2 join, schema2 recomputation and r20 collection.
|
||||
- `p04_native_series.py`: B1 departure/despawn/full-state joins, explicit 352/176
|
||||
S3 checks, confined getter projection, persistence pins and six-header diagnostic.
|
||||
- `collect_p04_native.py`: exclusive new collection at
|
||||
`B/audit-support/p04-raw-collect-r20`.
|
||||
- `checker_negative_fixtures.py`: retain existing content-case IDs and meanings;
|
||||
isolate their content layer explicitly in the test harness, while the separate
|
||||
real-Git fixture exercises production role binding without a bypass.
|
||||
- New `build_p04_index.py`, `checker_role_fixtures.py`,
|
||||
`checker_encoder_fixtures.py`, `checker_join_fixtures.py`.
|
||||
- New `REPAIR20_STATUS.md` and `REPAIR20_CORRIGENDUM.md`.
|
||||
|
||||
In-memory compilation: all eleven Python files (checker plus ten modules in E)
|
||||
compile. This is syntax validation only; every test below is **NOT RUN**.
|
||||
The retained C region, `NATIVE_RUNS` through `verify_native`, is byte-for-byte
|
||||
equal to T's retained source, SHA256
|
||||
`5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
|
||||
`verify_product_target` itself is also byte-for-byte retained and no longer called.
|
||||
Existing repair17/18/19 status, corrigendum, raw outputs and T's retained archives
|
||||
were not modified. Existing C 25 negatives and series 56 negatives remain required.
|
||||
|
||||
## R3 source pins
|
||||
|
||||
Product source: `scripts/operations/operations_coordinator.gd`, 130891 bytes,
|
||||
SHA256 `871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
|
||||
Runtime verification checks the complete bodies and cross-checks the actual
|
||||
body bytes, lengths and hashes against `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
|
||||
|
||||
| Function | SHA256 |
|
||||
| --- | --- |
|
||||
| get_day_summary | 449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb |
|
||||
| create_snapshot | 8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309 |
|
||||
| _snapshot_root_report | 96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe |
|
||||
| _visit_snapshot_tree | 70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0 |
|
||||
|
||||
The corrigendum lists all six Array header changes. Native persisted comparisons
|
||||
are direct typed-byte comparisons. Raw getter inequality remains diagnostic.
|
||||
The optional projection admits only the supported persistence subset; unsupported
|
||||
composite dictionary keys fail closed. Its negative controls include field loss,
|
||||
extra fields, both numeric-type directions, value changes, nonfinite floats,
|
||||
invalid keys, collisions, unsaveable values, wrong call chain and use on native
|
||||
persisted comparisons. The positive changes only Array headers and StringName.
|
||||
|
||||
## Condition disposition on this untested source
|
||||
|
||||
No condition is newly proven by this dispatch. All tests are **NOT RUN**.
|
||||
|
||||
| Condition | State and reason pending Root execution |
|
||||
| --- | --- |
|
||||
| power_stop | Open: new B1 959–963 join; real B at 959/960, normal recorded departure then absence, unchanged one-time release, stock 1, wallet 50, no B charge; recovery 25 at 962 and no extra 963 charge. |
|
||||
| destruction_stop | Pending: retained S3 B4b BROKEN failure and zero-sale/release predicates. |
|
||||
| dependency_stop | Pending: unchanged C paused service identity/progress/reservation proof. |
|
||||
| shift_completion | Open: new C first-1080 join; PIDs 77462/77504/77536 ended, 1338-file content 5f, 44→45, ledger_00000006/25G, DAY2 present before handover and zero after, no extra at 1081. |
|
||||
| recovery_completion | Pending: unchanged C recovery transaction/idempotency join. |
|
||||
| same_minute_replay | Pending: retained real paid request-resend join; never substituted for settlement replay. |
|
||||
| closure_release | Pending: retained S3 closure/release plus despawn-aware B1 checks. |
|
||||
| exit_release | Pending: retained S3 B2 release/completion ordering. |
|
||||
| patience_release | Pending: retained S3 B3 patience expiration and release. |
|
||||
| paused_midnight | Pending: unchanged C paused-midnight series. |
|
||||
| midnight_settlement | Pending: retained S2a nonzero sales/payroll/upkeep/duty joins. |
|
||||
| midnight_replay | Pending: actual advance_to replay, zero processed minutes and zero daily closes, exact Runtime bytes. |
|
||||
| save_restore | Open: direct full typed Runtime and formal 4+4 equality remain mandatory; optional getter projection must equal actual persisted day1. A remaining mismatch is explicitly reported, never projected out of native restore. |
|
||||
| night_staff_absent | Pending: retained S2b WAITING_FOR_STAFF at 1081. |
|
||||
| overtime_task | Pending: retained S2b interrupt-level-zero task/staff/shift and once-only duty joins. |
|
||||
| EV | Pending: retained S1 reachable reserved staff power-stop proof and pinned static chain. |
|
||||
|
||||
Stage A is implemented but **NOT RUN**. Submission is inferred from actual Git
|
||||
ancestry and scoped diff; the composed product is labelled prospective, not a
|
||||
tested worker game. Integration/final requires an actual two-parent merge and
|
||||
exact recomputed merge tree, native product map/modes and submitted checker/doc
|
||||
patch. Every tracked file and executing module must match HEAD bytes/mode;
|
||||
untracked/ignored files and symlinks fail. Unknown/deleted sources and candidate,
|
||||
code-only or phase declarations cannot authorize a role. Metadata membership
|
||||
comes from the real 9b1a18c tree, without the old count assumptions.
|
||||
|
||||
Schema2 retains native source/config/input/environment, real lifecycle PIDs,
|
||||
formal proofs, complete raw references, authority and original-audit uncertainty,
|
||||
domain and reachability mappings. Its entire payload is recomputed from raw by
|
||||
the same checker. It contains no candidate==HEAD pin or Root-passed flag.
|
||||
`generation-invocation.json` separately records the actual invocation/HEAD.
|
||||
|
||||
## Root execution order (all commands below NOT RUN)
|
||||
|
||||
Run from the clean, actual auto-submitted checkout. Root supplies actual clean
|
||||
merged/final checkout paths later; do not substitute invented SHAs. Preserve all
|
||||
prior output directories and use exclusive fresh output destinations.
|
||||
|
||||
```sh
|
||||
export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
|
||||
export E=docs/plans/original-completion-2026-10-02/execution/p04-01
|
||||
export BUILD_OUTPUT_DIR="$B"
|
||||
export PYTHONDONTWRITEBYTECODE=1
|
||||
```
|
||||
|
||||
1. Local file-only and fixture controls on the actual new SHA:
|
||||
|
||||
```sh
|
||||
python3 "$E/checker_negative_fixtures.py"
|
||||
python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
|
||||
python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
|
||||
python3 "$E/checker_series_fixtures.py" --build "$B"
|
||||
python3 "$E/checker_encoder_fixtures.py"
|
||||
python3 "$E/checker_join_fixtures.py" --build "$B"
|
||||
```
|
||||
|
||||
2. Real series against B, then the exclusive r20 collection:
|
||||
|
||||
```sh
|
||||
python3 "$E/p04_native_series.py" --build "$B"
|
||||
python3 "$E/collect_p04_native.py" --build "$B"
|
||||
```
|
||||
|
||||
3. After auto-submit, generate the fresh normal Runner index. B/p04-evidence was
|
||||
absent at static inspection. If it is now occupied, retain it and choose an
|
||||
explicit fresh directory with P04_EVIDENCE_DIR for manual checks; do not overwrite.
|
||||
The normal Runner uses B/p04-evidence and must receive that actual generated index.
|
||||
|
||||
```sh
|
||||
python3 "$E/build_p04_index.py" --build "$B" --output "$B/p04-evidence" \
|
||||
--invocation validate \
|
||||
--registered-ref deb1bcb2374eb378b840ca345db952bd8572cb6e \
|
||||
--tested-ref 5f6bc11d6bb6e92d22d787989b219fef3a435bc1
|
||||
```
|
||||
|
||||
4. Checker on submitted, merged and final actual checkouts. Real temp-Git fixtures
|
||||
need the generated index, so their execution follows step 3, not a fabricated
|
||||
pre-submission index. They create throwaway repositories/objects only under B.
|
||||
|
||||
```sh
|
||||
python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
|
||||
python3 tools/check_p04_order_evidence.py --verify-only
|
||||
python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
|
||||
python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
|
||||
```
|
||||
|
||||
The same index works in all three roles. For separate invocation records, the
|
||||
generator also accepts `--invocation prepare-integration` and `--invocation final`
|
||||
with explicit fresh output paths while executing from those actual checkouts.
|
||||
These labels are receipt metadata and grant no role. Root must respect the normal
|
||||
Runner state machine: its prepare_integration requires prior formal review.
|
||||
An isolated local prospective-merge control does not replace that review or move
|
||||
Runner state. `runner.validate("P04-01")`, `runner.prepare_integration("P04-01")`
|
||||
and `runner.integrate("P04-01")` remain Root operations only.
|
||||
|
||||
5. Mandatory whole validation and full 178-game regression once on exact final
|
||||
sources. The supplied Runner core exposes
|
||||
`runner.verify("P04-01", final_checkout, actual_final_sha, "final")`; retain every
|
||||
configured mandatory validation, then run the existing guarded full-game runner:
|
||||
|
||||
```sh
|
||||
python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
|
||||
--project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r01"
|
||||
```
|
||||
|
||||
Do not change timeout, marker contracts or suite policy, splice phases, or reuse
|
||||
historical 177-suite proof. Confirm the final selected source map and 178-suite
|
||||
roster, and preserve source/default-profile invariance. This command is the one
|
||||
full run, not permission for an additional `make test` native run.
|
||||
|
||||
6. Independent Opus review using Root's existing reviewer route, with exact
|
||||
source/validation materials mirrored into the frozen checkout's .review-material.
|
||||
The supplied core's formal method is `runner.review("P04-01")`; that method reviews
|
||||
the actual submitted revision and requires its validation evidence. Any additional
|
||||
final-composition Opus review must explicitly receive the actual final revision.
|
||||
The external commander/Opus CLI entry point and installed Runner configuration
|
||||
were not supplied in this checkout, so no guessed shell command is asserted for
|
||||
them. Root retains its existing formal validation/review/integration workflow.
|
||||
|
||||
The absent external entry-point/configuration details are handoff context gaps,
|
||||
not evidence of a pass, and not a blocker solely because Root testing is pending.
|
||||
@@ -0,0 +1,95 @@
|
||||
# Repair21 — source submission; tests NOTRUN
|
||||
|
||||
P04-01 source-only performance repair. Changes are restricted to the checker,
|
||||
the new `bulk_reader_equivalence.py` fixture, and this status file. No Git
|
||||
command, test, fixture, collector, Runner, native/Godot run, agent, commit,
|
||||
branch or integration operation was executed by the worker.
|
||||
|
||||
`read_blobs` validates full lowercase 40-hex OIDs before starting a process,
|
||||
deduplicates/sorts them, and uses one `git cat-file --batch` process per nonempty
|
||||
request. Empty requests start no process. `check_output` inherits stderr and
|
||||
raises for nonzero exit status just like `git_bytes`. The separately injectable
|
||||
byte parser verifies ordered OIDs, blob type, decimal size, exact framing and
|
||||
complete output consumption. There is deliberately no blob cache, so no object
|
||||
can be reused across `_GIT_ENV` namespaces. The two bulk call sites preserve
|
||||
selected-path sorted manifests and every actual-file byte/mode comparison.
|
||||
|
||||
No existing require message or assertion was removed. The `NATIVE_RUNS` through
|
||||
`verify_native` region, commit-type checks, ancestry, merge-tree isolation,
|
||||
status/untracked/symlink/module checks, schema/encoder, six existing suites and
|
||||
role case IDs were not edited. Checker self-blob reads remain unchanged.
|
||||
|
||||
The fixture source covers binary NUL/CR/LF/trailing LF, empty and large blobs,
|
||||
unicode `ls-tree -z` path resolution, duplicates, empty input, malformed/short
|
||||
OIDs, missing objects, tree/commit objects, invalid/truncated/oversized/garbage
|
||||
responses, process failure, one-process sorted input, and private object
|
||||
visibility inside versus outside and across isolated namespaces. It has not run.
|
||||
|
||||
Static validation: `ast.parse` and in-memory `compile(..., 'exec')` completed for
|
||||
the checker and new fixture. Neither module was imported or executed. This is
|
||||
syntax validation only. Tests: **NOTRUN**. Runtime equivalence and completion
|
||||
within the registered 180 seconds remain for Root to measure.
|
||||
|
||||
The existing schema2 index at B/p04-evidence/index.json was read as data, along
|
||||
with the existing builder and role fixture. Its registered/execution/tested
|
||||
roles remain deb1bcb/9767b0a/5f6bc11 and original_credit remains 13/88.
|
||||
The existing index and r20 collection are untouched. No new generation is
|
||||
needed if Root confirms the recomputed payload is identical. If generation is
|
||||
needed, use a new explicit destination, never overwrite existing evidence.
|
||||
Original P04-01 remains incomplete; criteria and nativeWindows pending status
|
||||
are unchanged. No original credit or acceptance is claimed.
|
||||
|
||||
## Root execution order — all NOTRUN
|
||||
|
||||
Use the clean new auto-submitted checkout, whose SHA is assigned after this
|
||||
source submission. Do not use the registered base SHA as the new submission.
|
||||
|
||||
```sh
|
||||
export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
|
||||
export E=docs/plans/original-completion-2026-10-02/execution/p04-01
|
||||
export BUILD_OUTPUT_DIR="$B"
|
||||
export PYTHONDONTWRITEBYTECODE=1
|
||||
python3 "$E/bulk_reader_equivalence.py"
|
||||
python3 "$E/checker_negative_fixtures.py"
|
||||
python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
|
||||
python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
|
||||
python3 "$E/checker_series_fixtures.py" --build "$B"
|
||||
python3 "$E/checker_encoder_fixtures.py"
|
||||
python3 "$E/checker_join_fixtures.py" --build "$B"
|
||||
python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
|
||||
```
|
||||
|
||||
Next run the registered validation on the **new auto-submitted SHA**, retaining
|
||||
its existing 180-second timeout and actual timed receipt. The supplied formal
|
||||
API call is exactly:
|
||||
|
||||
```python
|
||||
runner.validate("P04-01")
|
||||
```
|
||||
|
||||
The external Runner launcher/configuration is not present in the supplied task
|
||||
context; use Root's already registered invocation, without substituting an
|
||||
invented CLI, changing timeout, or treating direct checker timing as registered
|
||||
validation. Record actual SHA, elapsed time and exit status from that invocation.
|
||||
|
||||
Then run direct real-candidate controls from actual clean submitted, merged and
|
||||
final checkouts, preserving the formal review/integration state machine:
|
||||
|
||||
```sh
|
||||
python3 tools/check_p04_order_evidence.py --verify-only
|
||||
python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
|
||||
python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
|
||||
```
|
||||
|
||||
After required formal validation/review and exact final-source binding, run the
|
||||
full178 product regression once, using a fresh output destination:
|
||||
|
||||
```sh
|
||||
python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
|
||||
--project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r21"
|
||||
```
|
||||
|
||||
Do not regenerate raw collections, overwrite index/r20 evidence, alter existing
|
||||
case semantics, or run an additional native/full suite to compensate for a
|
||||
timeout. Any unrelated improvement is deferred. Pending Root execution is not
|
||||
a worker specification gap and does not change this submission's scope.
|
||||
+348
File diff suppressed because one or more lines are too long
+73
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"scope": "AST/static source checks and in-memory compile ONLY; no module imports or execution of task code",
|
||||
"python": [
|
||||
{
|
||||
"path": "tools/check_p04_order_evidence.py",
|
||||
"bytes": 78399,
|
||||
"sha256": "a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
|
||||
"bytes": 72591,
|
||||
"sha256": "667c95e10c451239292b08589706bfef978de730b321151ae7845dd10a06c411",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
|
||||
"bytes": 7888,
|
||||
"sha256": "f89ee6b835a8b0dc47f804686f7e338e7178c24a5a30a8a25bcd8bf59dfbea0c",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
|
||||
"bytes": 6779,
|
||||
"sha256": "f91b2d7003fd5c8cd196f849ad392d37479317e7d109eb584ccde5e5073e5bee",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/collect_p04_native.py",
|
||||
"bytes": 2996,
|
||||
"sha256": "d727230de0af94dfc7e68bec40e84ecaa86a5b98d5e5bc16c2a35fe9c67fa12d",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py",
|
||||
"bytes": 9246,
|
||||
"sha256": "47ae05b7bec617063e5d4fca2d8687f25e2eee0f809b5676ec91cf21c3223773",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
},
|
||||
{
|
||||
"path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
|
||||
"bytes": 18623,
|
||||
"sha256": "03a0aaab7e824d1b516ee4c6b456913439515c03daa687b5822cdfefb4d54c46",
|
||||
"AST": "parsed",
|
||||
"in_memory_compile": "compiled; not executed"
|
||||
}
|
||||
],
|
||||
"gd_validation": "static text/declaration review only; engine parse NOT RUN",
|
||||
"gd_sha256": "ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7",
|
||||
"C_frozen": {
|
||||
"exact_equal_to_immutable_full_stage": true,
|
||||
"bytes": 20918,
|
||||
"sha256": "5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b",
|
||||
"body_with_one_final_LF_sha256": "33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c"
|
||||
},
|
||||
"required_registry_unchanged": true,
|
||||
"required_conditions": 15,
|
||||
"EV": "additional existing obligation, unchanged",
|
||||
"domains": 7,
|
||||
"product_input_files": 1338,
|
||||
"parse_gd_files": 316,
|
||||
"native_runs": 0,
|
||||
"fixture_runs": 0,
|
||||
"tests": "NOT RUN",
|
||||
"S4_raw": "pending Root execution",
|
||||
"formal_acceptance": false
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
# Repair22 — source-ready submission; NOT RUN
|
||||
|
||||
This batch changes only `tools/check_p04_order_evidence.py` and this P04-01
|
||||
documentation subtree. No Git command, test/fixture, engine, Runner operation,
|
||||
agent, manual commit or integration was performed. The normal autosubmit owns
|
||||
the submitted revision; the contract base SHA is not a new evidence version.
|
||||
|
||||
S3 B1 no longer supplies `power_stop`. Its full diagnostic checks remain under
|
||||
`dependency_closure_diagnostic`, including the actual dependency reason,
|
||||
closure/release, departure history and recovery sale. It approves no priority.
|
||||
Strict power-vs-closure order remains D05 pending/unknown. The existing approvals
|
||||
cover dependency hold and the18:00 shift interval only; A01 is not reopened.
|
||||
|
||||
S4 is a new minimal single-case QA probe using the existing ActorHardening,
|
||||
physical-kitchen and guarded Writer/Reader pattern. It cuts the actual sole
|
||||
cafeteria edge at959, waits for normal evaluation/projection at960, retains the
|
||||
held state at961, reconnects that same edge, and waits normally through the
|
||||
source-derived hold until970. Source constants were re-read as10/10. No forced
|
||||
evaluation, hold bypass, direct power/progress/patience/capacity writes or
|
||||
product edits are introduced. Kitchen Facility.OPEN / network ACTIVE, positive
|
||||
mana, operating dependency and open operator distinguish it from B1.
|
||||
|
||||
Three formal Writer points and separate-process Reader restores retain every
|
||||
typed Runtime field and all four SaveService members. Reconnect resend at970
|
||||
must leave the full Runtime unchanged; normal971 and Reader replay add no
|
||||
extra sale/completion. Full intermediate phase raw is preserved. All graph
|
||||
nodes, cut/restored edge sets, revisions, allocation and derived dependency
|
||||
restoration are checked. Normal post-completion guest redecision/despawn is
|
||||
retained, not forced or concealed; no exit accompanies the outage/hold.
|
||||
|
||||
R now derives shift PID and sale IDs from the existing full raw joins. S1 joins
|
||||
the existing pre-travel reservation/task/staff cell to the boarded task/trip,
|
||||
and checks actual mana0 and elevator loss of power. The existing join fixtures
|
||||
are retained and extended with the requested semantic negatives and consistent
|
||||
dynamic-ID positive controls. Existing C25 and all other fixture sources remain
|
||||
in place. No fixture result is claimed: S4 positives await actual Root raw.
|
||||
|
||||
ORDER_AUDIT.md and order-audit.json are one current seven-domain table with
|
||||
normative rules, source, C/S1/S2a/S2b/S3 evidence, pending S4, approved authority
|
||||
and pending D05. REPAIR17–21 remain untouched historical documents and outputs;
|
||||
their current-status claims are superseded by repair22. The current protocol,
|
||||
collection plan and this status agree: no final acceptance.
|
||||
|
||||
Static validation is recorded in REPAIR22_STATIC_VALIDATION.json:
|
||||
|
||||
- Seven Python files parsed with AST and compiled in memory; none imported or
|
||||
executed. GDScript received static text/source review only; engine parse NOT RUN.
|
||||
- The entire frozen C region is byte-identical to the preserved full-stage
|
||||
checker. Its one-final-LF body hash is
|
||||
`33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c`, matching
|
||||
the supplied repair21 C_FULL_BLOCK_EXACT receipt. Existing C checks are intact.
|
||||
- The complete15-condition registry matches that immutable source; EV, seven
|
||||
domains and three safety outcomes are unchanged. Product1338 inputs and the
|
||||
316-file `.gd` parse roster were counted from the actual relocation manifest.
|
||||
- The five supplied public power bodies were compared to their actual relocated
|
||||
source. Full bodies, hashes, timing and restore analysis are retained in
|
||||
REPAIR22_SOURCE_FACTS.json.
|
||||
|
||||
The exact finite Root plan is `s4/S4_ROOT_RUN.md`: one fresh own-B four-phase
|
||||
collection, with explicit arguments and full input/QA/source footprints. All
|
||||
old C/S1/S2a/S2b/S3 raw and all R17 sources remain accessible and are not rerun.
|
||||
S4 remains **missing/pending Root execution**. Future native/index/cross-gate
|
||||
work does not block this source submission. The updated collector/index
|
||||
references use a fresh r22 destination; no r17/r20 evidence is overwritten.
|
||||
|
||||
Preserve the21615-check proof. Static full-map comparison found exactly the
|
||||
unchanged product1338 plus the old checker in its1339 map. The new checker hash
|
||||
differs; never claim1339 byte identity. The178 product suites do not invoke the
|
||||
checker and `.py` is excluded from the316 parse roster, so reuse requires the
|
||||
explicit QA-only source/config/input/environment applicability argument in
|
||||
EVIDENCE_COLLECTION.md. New-checker validation and S4 are separate, pending.
|
||||
|
||||
Root must rebind support53cb through its normal registered task once the new
|
||||
source is known, without metadata bypass. Only if an exact final1339 full proof
|
||||
is required, perform one run after all fixes, S4 raw, local checks, eight suites
|
||||
and rebind are bundled; do not splice versions or perform a blanket full now.
|
||||
|
||||
No required source context is missing for this preparation. Remaining D05
|
||||
choices are explicitly pending and not silently implemented. Formal validation,
|
||||
independent review, exact final-source applicability and normal integration
|
||||
remain pending. CurrentAlphaScope,30 packages/88 deliveries, original13/88 and
|
||||
P04 main9b are unchanged. P04 receives no credit; nothing is integrated.
|
||||
@@ -0,0 +1,34 @@
|
||||
# Repair 23 — submitted, NOT RUN
|
||||
|
||||
S4 source preparation only. The wrapper now defaults to fresh import without
|
||||
accessing cache receipts or cache directories. It checks that private `.godot`
|
||||
is absent immediately before import and requires the complete 316-script parse
|
||||
roster. The complete 1338-file source check and sole QA override remain intact.
|
||||
Optional cache mode retains the original registered-path, passed-run, source
|
||||
identity, engine identity and original-cache preservation guards.
|
||||
|
||||
Engine identity is independently pinned to
|
||||
`c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
|
||||
Read-only SHA256 inspection found identical bytes in the installed executable
|
||||
and the preserved r22 staged executable; neither was launched.
|
||||
|
||||
Current wrapper SHA256:
|
||||
`6d5f4e05e87607413bfb5498dc9c9e17c2bfd96bf751c9e645050ca6f8e69d5c`.
|
||||
The current runbook binds this SHA. The series verifier already binds the wrapper
|
||||
to current checkout bytes dynamically, so no series metadata change is needed.
|
||||
Historical REPAIR22_STATIC_VALIDATION.json is preserved as historical evidence,
|
||||
not rewritten to claim validation of the new wrapper.
|
||||
|
||||
Root must use fresh staging `audit-support/p04-s4-source-r23` and fresh plan
|
||||
`p04-s4-plan-r23.json`. Output remains `p04-s4-native-r22`. Old staging and plan
|
||||
are preserved. All R22 fixes and other suite wrappers/checks are retained.
|
||||
|
||||
Checker SHA256 remains
|
||||
`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`;
|
||||
S4 probe SHA256 remains
|
||||
`ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
|
||||
No game input file was edited. Review was limited to source reading and hashes.
|
||||
No Git, tests, fixtures, check-only execution, engine, Runner, agents or manual
|
||||
commit were run. Native S4 evidence, root native/data/index work, independent
|
||||
review and formal acceptance remain pending. The expected validate MANIFEST
|
||||
failure is unchanged. Original P04-01 completion is not claimed.
|
||||
@@ -0,0 +1,77 @@
|
||||
# Repair24 — source-ready submission
|
||||
|
||||
Bounded continuation of P04-01 request-repair24; tests NOT RUN.
|
||||
Existing wrapper edits and the untracked identity fixture were read first and
|
||||
preserved/corrected. Only this execution subtree was written. No Git, engine,
|
||||
Runner, agent, commit or integration operation was performed.
|
||||
|
||||
Changed source/runbook SHA256 (exact bytes):
|
||||
|
||||
| File | SHA256 |
|
||||
| --- | --- |
|
||||
| s4/run_s4_native.py | dda495d33566eae14c8a707e77f8ec9dc6c7bd043076a091e90dd53f6a7490db |
|
||||
| p04_native_series.py | 348197759c169c2094db3b1114ca3abe5525b8d4bc9aca611d4579871a130b40 |
|
||||
| s4/engine_identity_negative_fixtures.py | f9148ef79cb62ec6631e7e3f23e1d3b062434f7152977aab3b9d18d82672255e |
|
||||
| s4/S4_ROOT_RUN.md | c1a00e3dad8d91d28df1a7f868f6e4e905f1df721baac964865e341c84356135 |
|
||||
|
||||
This new status document records the hashes above; its own hash must be taken
|
||||
from the submitted checkout, outside its own contents.
|
||||
|
||||
Wrapper pins changed: the own-B bare Godot copy is replaced with exactly
|
||||
`/Applications/Godot.app/Contents/MacOS/Godot`, rejecting symlinks and any
|
||||
different resolved path. Its constant SHA remains
|
||||
`c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
|
||||
Engine identity no longer depends on an old cache runner-input. Fresh NO-CACHE
|
||||
is the default at plan and native collection. Optional explicit cache mode
|
||||
rejects failed receipts before reading their inputs or cache contents.
|
||||
No default cache or cache PASS is required. No engine is copied, re-signed or
|
||||
modified, and no codesign/xattr/security operation is added.
|
||||
|
||||
Before-launch, during-collection and explicit after-cleanup re-pins retain the
|
||||
full runtime descriptor (path/resolved path, bytes, SHA, device, inode, mode,
|
||||
mtime and ctime). Runner-input and execution retain equal before/during/after
|
||||
identity records and execution retains labeled observations. fixed_guard still
|
||||
re-pins the engine. The verifier permits only this exact installed engine
|
||||
outside B, reads/hashes it exactly and checks the recorded identities.
|
||||
Fixed inputs and QA remain own-B only; actual command[0] must equal the pin.
|
||||
|
||||
Defaults and Root staging are now:
|
||||
`p04-s4-native-r24`, `p04-s4-plan-r24.json`,
|
||||
`audit-support/p04-s4-source-r24`. Only RUNS S4 changes to r24.
|
||||
C/S1-S3 bindings, other series and the frozen C block (20916) are unchanged.
|
||||
Source1338, parse316, sole QA override, default-player protection, owned
|
||||
four-distinct-PID capture, live-engine refusal, disk admission, fresh output,
|
||||
cleanup-before-fixed-guard, formal Writer/Reader, NO_POWER, typed declarations,
|
||||
forbidden mutations/bypasses and mana constants guards remain.
|
||||
|
||||
Untouched checker: SHA256
|
||||
`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`,
|
||||
78399 B. Untouched probe: SHA256
|
||||
`ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
|
||||
All 1338 game files are unchanged; no game source was written. No new claim of
|
||||
executed 1338-file verification is made.
|
||||
|
||||
The formal reviewer's five findings are carried forward unchanged, with no
|
||||
closure claimed. Their individual review text was not supplied in this dispatch
|
||||
or found in the local execution records searched; it is not reconstructed here.
|
||||
Main 9b remains frozen at original 13/88. Support 53cb remains review pending.
|
||||
D05 remains pending. No acceptance denominator, specification, main integration
|
||||
or original completion state changes.
|
||||
|
||||
r22 is an immutable failed proof and remains ineligible. Diagnostics:
|
||||
`audit-support/p04-root-d393-s4-r01/ENGINE_STAGING_DIAGNOSTICS.json`.
|
||||
Its pre-banner staged-copy failure is an environment/staging fault; no product
|
||||
logic or probe/checker repair is claimed. Root uses the installed executable
|
||||
directly and preserves r22. Do not rerun S1-S3, C or full178.
|
||||
|
||||
Validation: static AST parsing and in-memory compile completed for the wrapper,
|
||||
series verifier and identity fixture; no module was imported or executed.
|
||||
Read-only SHA/byte inspection completed for the four listed files, checker and
|
||||
probe. These are source checks only. Tests NOT RUN: identity fixtures, all other
|
||||
fixtures/suites, check-only plan generation, native S4, full178, registered
|
||||
validation and independent review. No unexecuted result is reported as passed.
|
||||
|
||||
Registered validation stays exit 2 until Root generates the current
|
||||
MANIFEST.json collection; the gate is not changed. This is the carried-forward
|
||||
expected gate state, not a newly executed validation result. Root execution,
|
||||
current exact-version evidence and formal independent review remain pending.
|
||||
+1802
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,164 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Build a fresh evidence index from supplied native bytes after auto-submit.
|
||||
|
||||
The index has no candidate identity or Root-passed flag. Invocations share the
|
||||
same payload; checkout roles are established afresh by the checker.
|
||||
"""
|
||||
import argparse
|
||||
import hashlib
|
||||
import importlib.util
|
||||
import json
|
||||
import os
|
||||
from pathlib import Path
|
||||
import sys
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
ROOT = Path(__file__).resolve().parents[5]
|
||||
|
||||
|
||||
def checker():
|
||||
spec = importlib.util.spec_from_file_location('p04_index_checker', ROOT / 'tools/check_p04_order_evidence.py')
|
||||
module = importlib.util.module_from_spec(spec)
|
||||
sys.modules[spec.name] = module
|
||||
spec.loader.exec_module(module)
|
||||
return module
|
||||
|
||||
|
||||
def descriptor(path):
|
||||
data = path.read_bytes()
|
||||
return {'path': str(path.absolute()), 'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest()}
|
||||
|
||||
|
||||
def payload(build, gate=None):
|
||||
gate = gate or checker()
|
||||
build = Path(build).resolve(strict=True)
|
||||
native = build / 'audit-support/native-first-current'
|
||||
c = gate.verify_native(native)
|
||||
raw = gate.combine_native_series(build, c)
|
||||
source = gate.product_manifest(gate.tree_entries(gate.TESTED_PRODUCT))
|
||||
gate.require(len(source) == 1338, 'complete native source required')
|
||||
source_map = {p: v['sha256'] for p, v in source.items()}
|
||||
# Resolve content from supplied roots only; never open original provenance
|
||||
# paths, never omit required source/config/input/environment material.
|
||||
supplied = {}
|
||||
roots = [build / 'audit-support' / name for name in
|
||||
('native-first-current', 'p04-whole-closure-r01', 'p04-current-native-series-r01',
|
||||
'p04-r17-full-inputs-r01')]
|
||||
for root in roots:
|
||||
if not root.exists():
|
||||
continue
|
||||
for path in sorted(root.rglob('*')):
|
||||
if path.is_file():
|
||||
gate.safe(root, path.relative_to(root).as_posix())
|
||||
pin = descriptor(path)
|
||||
supplied.setdefault(pin['sha256'], pin)
|
||||
runners = []
|
||||
for run in gate.NATIVE_RUNS:
|
||||
path = native / run / 'runner-input.json'
|
||||
inputs = gate.load(path)
|
||||
row = descriptor(path)
|
||||
row['materials'] = {}
|
||||
for pin in inputs.get('fixed_input_pins', []) + [inputs['QA']]:
|
||||
gate.require(pin['sha256'] in supplied, 'missing supplied runner material: ' + pin['path'])
|
||||
actual = supplied[pin['sha256']]
|
||||
gate.require(actual['bytes'] == pin['bytes'], 'runner material length')
|
||||
row['materials'][pin['path']] = actual
|
||||
gate.require(inputs['wrapper_sha256'] in supplied, 'missing supplied native wrapper')
|
||||
row['wrapper'] = supplied[inputs['wrapper_sha256']]
|
||||
runners.append(row)
|
||||
# C references retain every lifecycle, raw phase, source, environment and
|
||||
# formal member mapping; Stage R retains its complete original->relocated map.
|
||||
references = {}
|
||||
for row in gate.load(native / 'SOURCE_MANIFEST.json')['files']:
|
||||
references['C/' + row['copy']] = descriptor(gate.safe(native, row['copy']))
|
||||
for row in gate.load(native / 'OWNERSHIP_RAW_PROVENANCE.json')['copied']:
|
||||
references['C/' + row['target']] = descriptor(gate.safe(native, row['target']))
|
||||
series = {}
|
||||
collection = build / 'audit-support/p04-raw-collect-r22'
|
||||
for name in ('s1', 's2a', 's2b', 's3', 's4'):
|
||||
series[name] = gate.load(collection / (name + '.json'))
|
||||
relocation = gate.load(build / 'audit-support/p04-r17-full-inputs-r01/MANIFEST.json')
|
||||
authorities = {}
|
||||
for ref in sorted({r for _, refs, _ in gate.REQUIRED.values() for r in refs}):
|
||||
relative = (gate.DOC_SCOPE + 'D05_OWNER_APPROVAL.json' if ref.startswith('D05-P04-') else
|
||||
'docs/traceability/original/BASELINE.txt' if ref.startswith('BASELINE:') else
|
||||
'docs/DESIGN_DECISIONS.md' if ref == 'D-034' else
|
||||
'docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/ORDER_CONTRACT_DRAFT.md')
|
||||
path = gate.safe(gate.ROOT, relative)
|
||||
if ref.startswith('D05-P04-'):
|
||||
gate.require(gate.sha(path) == gate.OWNER_HASH, 'owner approval hash')
|
||||
authorities[ref] = {'source': relative, 'sha256': gate.sha(path),
|
||||
'status': 'approved' if not ref.startswith('BASELINE:') else 'original'}
|
||||
conditions = {cid: {'case_id': cid, 'authority_refs': list(refs), 'nativeWindows': 'pending',
|
||||
'raw_verified': cid in raw['verified_conditions'],
|
||||
'required_measurements': metrics}
|
||||
for cid, (_, refs, metrics) in gate.REQUIRED.items()}
|
||||
domains = {domain: {'conditions': [cid for cid, (d, _, _) in gate.REQUIRED.items() if d == domain],
|
||||
'source_refs': [{'path': p, 'sha256': source_map[p], 'functions': list(fs)}
|
||||
for p, fs in gate.ORDER_FUNCTIONS.items()],
|
||||
'authority_refs': sorted({r for _, (d, refs, _) in gate.REQUIRED.items()
|
||||
if d == domain for r in refs})}
|
||||
for domain in sorted(gate.DOMAINS)}
|
||||
reachability = {}
|
||||
for name, rows in gate.REACH_REFS.items():
|
||||
refs = []
|
||||
for path, function, digest, lines in rows:
|
||||
gate.resolve_anchor(gate.git_bytes('show', gate.TESTED_PRODUCT + ':' + path), function, digest, lines)
|
||||
refs.append({'path': path, 'sha256': source_map[path], 'function': function,
|
||||
'anchor_sha256': digest, 'line_count': lines})
|
||||
reachability[name] = {'reach': name == 'EV', 'case_id': 'EV' if name == 'EV' else None, 'source_refs': refs,
|
||||
'raw_verified': 'EV' in raw['verified_conditions'] if name == 'EV' else None}
|
||||
delta = gate.source_delta(gate.REGISTERED_COMMIT, gate.TESTED_PRODUCT)
|
||||
index = {'schema_version': 2, 'task_id': 'P04-01', 'formal_acceptance': False,
|
||||
'versions': {'registered': gate.REGISTERED_COMMIT, 'execution_origin': gate.EXECUTION_ORIGIN,
|
||||
'tested': gate.TESTED_PRODUCT},
|
||||
'product_binding': {'tested_product': gate.TESTED_PRODUCT, 'runner_inputs': runners},
|
||||
'source_map': source_map, 'registered_pins': gate.load(gate.SPEC)['current_source_pins'],
|
||||
'applicability_delta': delta,
|
||||
'delta_cases': {r['path'] + ':' + r['function']: {cid: cid for cid in
|
||||
gate.boundary_conditions(r['path'], r['function'])} for r in delta},
|
||||
'domains': domains, 'authority': authorities, 'conditions': conditions,
|
||||
'reachability': reachability, 'raw_conditions': raw, 'raw_references': references,
|
||||
'series': series, 'source_config_input_environment_and_formal': relocation,
|
||||
'native_bundle': descriptor(native / 'OWNERSHIP_RAW_PROVENANCE.json'),
|
||||
'original_audit': {'sha256': gate.sha(gate.ROOT / gate.DOC_SCOPE / 'order-audit.json'),
|
||||
'content': gate.load(gate.ROOT / gate.DOC_SCOPE / 'order-audit.json')},
|
||||
'review_status': 'pending_review', 'original_credit': '13/88',
|
||||
'safety_outcomes': ['no charging while legitimately stopped',
|
||||
'no double midnight settlement', 'no orphan reservations']}
|
||||
gate.applicability(index, gate.load(gate.SPEC), source_map, gate.TESTED_PRODUCT)
|
||||
return index
|
||||
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--build', required=True, type=Path)
|
||||
parser.add_argument('--output', required=True, type=Path, help='fresh directory; exclusive creation')
|
||||
parser.add_argument('--invocation', required=True, choices=('validate', 'prepare-integration', 'final'))
|
||||
parser.add_argument('--registered-ref', required=True)
|
||||
parser.add_argument('--tested-ref', required=True)
|
||||
args = parser.parse_args()
|
||||
gate = checker()
|
||||
os.environ['BUILD_OUTPUT_DIR'] = str(args.build.resolve(strict=True))
|
||||
gate.require(args.registered_ref == gate.REGISTERED_COMMIT and args.tested_ref == gate.TESTED_PRODUCT,
|
||||
'source refs differ from immutable evidence roles')
|
||||
output = args.output.absolute()
|
||||
gate.require(not output.exists() and not output.is_symlink(), 'output must be fresh')
|
||||
for path in output.parents:
|
||||
gate.require(not path.is_symlink(), 'output parent symlink')
|
||||
index = payload(args.build, gate)
|
||||
with gate.isolated_objects():
|
||||
_, role = gate.verify_roles(index, args.build.resolve())
|
||||
# The historical invocation is separate from the reusable evidence index.
|
||||
receipt = {'invocation': args.invocation, 'actual_head': role['actual_head'],
|
||||
'actual_tree': role['actual_tree'], 'role': role['role'], 'formal_acceptance': False}
|
||||
output.mkdir(parents=False)
|
||||
for name, value in (('index.json', index), ('generation-invocation.json', receipt)):
|
||||
with (output / name).open('x', encoding='utf-8') as stream:
|
||||
json.dump(value, stream, ensure_ascii=False, sort_keys=True, indent=2)
|
||||
stream.write('\n')
|
||||
print(json.dumps({'evidence_directory': str(output), **receipt}))
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
@@ -0,0 +1,98 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Root-only disposable repository controls; never original acceptance evidence."""
|
||||
import importlib.util
|
||||
import os
|
||||
from pathlib import Path
|
||||
import subprocess
|
||||
import sys
|
||||
import tempfile
|
||||
from unittest.mock import patch
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
ROOT = Path(__file__).resolve().parents[5]
|
||||
|
||||
|
||||
def rejected(operation):
|
||||
try:
|
||||
operation()
|
||||
except (ValueError, subprocess.CalledProcessError):
|
||||
return
|
||||
raise AssertionError('invalid input/response accepted')
|
||||
|
||||
|
||||
def run():
|
||||
spec = importlib.util.spec_from_file_location('bulk_gate', ROOT / 'tools/check_p04_order_evidence.py')
|
||||
gate = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(gate)
|
||||
with tempfile.TemporaryDirectory(prefix='p04-bulk-fixture-') as temporary:
|
||||
base = Path(temporary)
|
||||
repo = base / 'repo'
|
||||
repo.mkdir()
|
||||
gate.ROOT = repo
|
||||
env = gate.git_environment()
|
||||
env.update(GIT_AUTHOR_NAME='fixture', GIT_AUTHOR_EMAIL='fixture@invalid',
|
||||
GIT_COMMITTER_NAME='fixture', GIT_COMMITTER_EMAIL='fixture@invalid')
|
||||
|
||||
def git(*args, data=None):
|
||||
return subprocess.check_output(['git', '-c', 'core.hooksPath=/dev/null', *args],
|
||||
input=data, cwd=repo, env=env)
|
||||
|
||||
git('init', '--quiet')
|
||||
payloads = [b'\x00binary\r\nline\n', b'', bytes(range(256)) * 32768]
|
||||
oids = [git('hash-object', '-w', '--stdin', data=data).decode().strip() for data in payloads]
|
||||
name = '日本語の木.dat'
|
||||
(repo / name).write_bytes(payloads[0])
|
||||
git('add', '--', name)
|
||||
git('commit', '--quiet', '-m', 'fixture')
|
||||
entries = gate.tree_entries('HEAD') # ls-tree -z resolves the unicode path.
|
||||
assert entries[name][1] == oids[0]
|
||||
expected = {oid: git('cat-file', 'blob', oid) for oid in oids}
|
||||
original_output = subprocess.check_output
|
||||
with patch.object(gate.subprocess, 'check_output', wraps=original_output) as process:
|
||||
assert gate.read_blobs(reversed(oids + [oids[0]])) == expected
|
||||
assert process.call_count == 1
|
||||
assert process.call_args.kwargs['input'] == ('\n'.join(sorted(set(oids))) + '\n').encode()
|
||||
with patch.object(gate.subprocess, 'check_output', side_effect=AssertionError('process started')):
|
||||
assert gate.read_blobs([]) == {}
|
||||
for invalid in ('abc', 'g' * 40, 'a' * 39, 'a' * 41, 'HEAD', oids[0] + '\n', None):
|
||||
rejected(lambda: gate.read_blobs([invalid]))
|
||||
for oid in ('0' * 40, git('rev-parse', 'HEAD').decode().strip(),
|
||||
git('rev-parse', 'HEAD^{tree}').decode().strip()):
|
||||
rejected(lambda: gate.read_blobs([oid]))
|
||||
|
||||
oid = oids[0]
|
||||
header = oid.encode() + b' blob '
|
||||
valid = header + b'3\na\x00\n\n'
|
||||
assert gate.parse_blob_batch(valid, [oid]) == {oid: b'a\x00\n'}
|
||||
bad = [b'', header + b'3', header + b'3\na', valid[:-1],
|
||||
header + b'999\na\n', header + b'1\nabc\n', valid + b'garbage',
|
||||
oid.encode() + b' missing\n', oid.encode() + b' ambiguous\n',
|
||||
header + b'-1\n', header + b'x\n', header + b'1.0\n',
|
||||
b'f' * 40 + b' blob 0\n\n', oid.encode() + b' tree 0\n\n']
|
||||
for response in bad:
|
||||
rejected(lambda: gate.parse_blob_batch(response, [oid]))
|
||||
with patch.object(gate.subprocess, 'check_output', return_value=response):
|
||||
rejected(lambda: gate.read_blobs([oid]))
|
||||
rejected(lambda: gate.parse_blob_batch(valid + valid, [oid]))
|
||||
rejected(lambda: gate.parse_blob_batch(valid, [oid, oids[1]]))
|
||||
with patch.object(gate.subprocess, 'check_output',
|
||||
side_effect=subprocess.CalledProcessError(7, ['git'])):
|
||||
rejected(lambda: gate.read_blobs([oid]))
|
||||
|
||||
with patch.dict(os.environ, BUILD_OUTPUT_DIR=str(base)):
|
||||
with gate.isolated_objects():
|
||||
private_data = b'isolated-only unique payload\x00\n'
|
||||
private = subprocess.check_output(
|
||||
['git', 'hash-object', '-w', '--stdin'], input=private_data,
|
||||
cwd=repo, env=gate._GIT_ENV).decode().strip()
|
||||
assert gate.read_blobs([private]) == {private: private_data}
|
||||
rejected(lambda: gate.read_blobs([private]))
|
||||
with gate.isolated_objects():
|
||||
rejected(lambda: gate.read_blobs([private]))
|
||||
assert gate.read_blobs(oids) == expected
|
||||
assert gate._GIT_ENV is None
|
||||
print('bulk reader equivalence controls completed')
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
run()
|
||||
+89
@@ -0,0 +1,89 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Optional getter projection controls; these are never native proof."""
|
||||
import json
|
||||
import struct
|
||||
import sys
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
import p04_native_series as s
|
||||
|
||||
|
||||
def string(value, kind=4):
|
||||
data = value.encode()
|
||||
return struct.pack('<II', kind, len(data)) + data + b'\0' * ((-len(data)) % 4)
|
||||
|
||||
|
||||
def integer(value):
|
||||
return struct.pack('<Ii', 2, value)
|
||||
|
||||
|
||||
def dictionary(rows):
|
||||
return struct.pack('<II', 27, len(rows)) + b''.join(k + v for k, v in rows)
|
||||
|
||||
|
||||
def array(values, typed=None):
|
||||
return (struct.pack('<I', 28 if typed is None else 28 | (1 << 16)) +
|
||||
(b'' if typed is None else struct.pack('<I', typed)) +
|
||||
struct.pack('<I', len(values)) + b''.join(values))
|
||||
|
||||
|
||||
def run():
|
||||
results = []
|
||||
canonical = dictionary([(string('a'), array([string('item')])), (string('n'), integer(7))])
|
||||
getter = dictionary([(string('n', 21), integer(7)),
|
||||
(string('a', 21), array([string('item', 21)], typed=21))])
|
||||
assert s.persisted_day_projection(s.variant(getter)) == canonical
|
||||
results.append({'case': 'typed_array_headers_and_StringName_only', 'result': 'accepted'})
|
||||
|
||||
def reject(name, action, error=None):
|
||||
try:
|
||||
action()
|
||||
except ValueError as exc:
|
||||
assert error is None or error in str(exc), (name, str(exc))
|
||||
results.append({'case': name, 'result': 'rejected', 'error': str(exc)})
|
||||
else:
|
||||
raise AssertionError('negative accepted: ' + name)
|
||||
|
||||
def compare(data):
|
||||
s.require(s.persisted_day_projection(s.variant(data)) == canonical, 'persisted value mismatch')
|
||||
|
||||
reject('dropped_field', lambda: compare(dictionary([(string('n'), integer(7))])))
|
||||
reject('extra_field', lambda: compare(dictionary([(string('a'), array([string('item')])),
|
||||
(string('n'), integer(7)), (string('x'), integer(0))])))
|
||||
reject('int_to_float', lambda: compare(dictionary([(string('a'), array([string('item')])),
|
||||
(string('n'), struct.pack('<If', 3, 7.0))])))
|
||||
floating = dictionary([(string('n'), struct.pack('<If', 3, 7.0))])
|
||||
reject('float_to_int', lambda: s.require(s.persisted_day_projection(s.variant(floating)) ==
|
||||
dictionary([(string('n'), integer(7))]), 'numeric type changed'))
|
||||
reject('value_change', lambda: compare(dictionary([(string('a'), array([string('item')])),
|
||||
(string('n'), integer(8))])))
|
||||
reject('nonfinite_float', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(string('n'), struct.pack('<If', 3, float('inf')))]))), 'NON_FINITE_NUMBER')
|
||||
reject('invalid_key_type', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(struct.pack('<II', 1, 1), integer(1))]))), 'INVALID_DICTIONARY_KEY')
|
||||
reject('key_collision', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(integer(1), integer(1)), (string('1'), integer(2))]))), 'DUPLICATE_CANONICAL_KEY')
|
||||
reject('unsaveable_variant', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(string('x'), struct.pack('<Iff', 5, 1.0, 2.0))]))), 'UNSAVEABLE_VARIANT')
|
||||
reject('wrong_to_snapshot_variant_chain', lambda: s.persisted_day_projection(s.variant(getter),
|
||||
chain='_to_snapshot_variant'), 'projection call chain')
|
||||
reject('projection_on_native_persisted_comparison', lambda: s.persisted_day_projection(s.variant(getter),
|
||||
comparison='native_expected_restored'), 'projection forbidden')
|
||||
reject('single_string_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(string('x'), string('x' * 4097))]))), 'STRING_TOO_LONG')
|
||||
reject('collection_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(string('x'), array([integer(0)] * 20001))]))), 'COLLECTION_TOO_LARGE')
|
||||
nested = integer(1)
|
||||
for _ in range(33):
|
||||
nested = array([nested])
|
||||
reject('depth_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(string('x'), nested)]))), 'MAX_VARIANT_DEPTH')
|
||||
# The collision prepass must win over invalid-key and child errors.
|
||||
reject('collision_error_precedence', lambda: s.persisted_day_projection(s.variant(dictionary([
|
||||
(struct.pack('<II', 1, 1), struct.pack('<If', 3, float('inf'))),
|
||||
(string('true'), integer(0))]))), 'DUPLICATE_CANONICAL_KEY')
|
||||
return {'scope': 'synthetic projection controls only', 'results': results}
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
print(json.dumps(run(), indent=2))
|
||||
@@ -0,0 +1,155 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Real B1/R2 positive controls and semantic mutation negatives for Root."""
|
||||
import argparse
|
||||
import copy
|
||||
import json
|
||||
from pathlib import Path
|
||||
import sys
|
||||
from unittest.mock import patch
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
import p04_native_series as series
|
||||
from build_p04_index import checker
|
||||
|
||||
|
||||
def run(build):
|
||||
gate = checker()
|
||||
base = build / 'audit-support/native-first-current'
|
||||
results = []
|
||||
|
||||
def reject(name, action):
|
||||
try:
|
||||
action()
|
||||
except (ValueError, KeyError, TypeError) as exc:
|
||||
results.append({'case': name, 'result': 'rejected', 'error': str(exc)})
|
||||
else:
|
||||
raise AssertionError('negative accepted: ' + name)
|
||||
|
||||
context = series.Series(build, 's3')
|
||||
series.dependency_closure_diagnostic(context)
|
||||
reject('B1_cannot_supply_power_stop', lambda: series.power_stop(context))
|
||||
results.append({'case': 'B1_real_despawn_positive', 'result': 'accepted'})
|
||||
original_value = context.value
|
||||
for name, label, mutate in (
|
||||
('dependency_reason_relabelled_as_NO_POWER', 'after', lambda r: r['service'].update(interruption_reason='NO_POWER')),
|
||||
('B1_missing_at_closure', 'after', lambda r: r['guests'].update({'p04.s3.guest.b': {}})),
|
||||
('B1_synthetic_later_guest', 'next', lambda r: r['guests'].update({'p04.s3.guest.b': {'patience_remaining': 45}})),
|
||||
('B1_wrong_release_minute', 'next', lambda r: r['reservations'][1].update(terminal_at=961)),
|
||||
('B1_changed_wallet', 'recovered', lambda r: r['wallets'].update({'p04.s3.guest.b': 25})),
|
||||
('B1_missing_departure_history', 'next', lambda r: r['snapshot']['systems']['runtime']['guests'].update(persistent_records=[])),
|
||||
):
|
||||
def altered(key, label=label, mutate=mutate):
|
||||
value = copy.deepcopy(original_value(key))
|
||||
if key == 'writer-B1-' + label:
|
||||
mutate(value)
|
||||
return value
|
||||
with patch.object(context, 'value', altered):
|
||||
reject(name, lambda: series.dependency_closure_diagnostic(context))
|
||||
gate.verify_shift_completion(base)
|
||||
results.append({'case': 'R2_real_first_1080_positive', 'result': 'accepted'})
|
||||
original_load = gate.load
|
||||
observation_path = base / 'actual-native/order-evidence/observations.json'
|
||||
for name, mutate in (
|
||||
('R2_paid_midnight_substitution', lambda o: o['observations'][2]['service'].update(completed_at=1442)),
|
||||
('R2_wrong_transaction', lambda o: o['observations'][2]['receipts'][0].update(id='ledger_00000099')),
|
||||
('R2_missing_DAY2', lambda o: o['observations'][2].update(active_staff=[])),
|
||||
('R2_after_staff_still_present', lambda o: o['observations'][3].update(active_staff=['p04.order.server.a'])),
|
||||
('R2_next_extra_receipt', lambda o: o['observations'][5]['receipts'].append(copy.deepcopy(o['first_receipts'][0]))),
|
||||
):
|
||||
def altered(path, mutate=mutate):
|
||||
value = original_load(path)
|
||||
if path == observation_path:
|
||||
mutate(value)
|
||||
return value
|
||||
with patch.object(gate, 'load', altered):
|
||||
reject(name, lambda: gate.verify_shift_completion(base))
|
||||
# Dynamic IDs are legitimate when every raw join agrees. These are semantic
|
||||
# overlays of already verified raw, not replacement native evidence.
|
||||
shift = gate.verify_shift_completion(base)
|
||||
old_pids = gate.native_ownership(base)
|
||||
replacements = {pid: pid + 1000000 for pid in old_pids.values()}
|
||||
replacements[shift['transaction_id']] = 'dynamic-sale-repair22'
|
||||
|
||||
def remap(value):
|
||||
if isinstance(value, dict): return {k: remap(v) for k, v in value.items()}
|
||||
if isinstance(value, list): return [remap(v) for v in value]
|
||||
if isinstance(value, (str, int)) and not isinstance(value, bool):
|
||||
return replacements.get(value, value)
|
||||
return value
|
||||
|
||||
with patch.object(gate, 'load', lambda path: remap(original_load(path))):
|
||||
dynamic = gate.verify_shift_completion(base)
|
||||
assert dynamic['transaction_id'] == 'dynamic-sale-repair22'
|
||||
results.append({'case': 'R2_dynamic_PID_and_transaction_positive', 'result': 'accepted'})
|
||||
wrong_end = base / 'actual-native' / gate.NATIVE_RUNS['actual-native'][0] / 'ended.json'
|
||||
|
||||
def wrong_pid(path):
|
||||
value = original_load(path)
|
||||
if path == wrong_end: value['actual_pid'] += 1
|
||||
return value
|
||||
|
||||
with patch.object(gate, 'load', wrong_pid):
|
||||
reject('R2_wrong_PID_join', lambda: gate.verify_shift_completion(base))
|
||||
|
||||
s1 = series.Series(build, 's1')
|
||||
series.s1_semantics(s1)
|
||||
s1_value = s1.value
|
||||
for name, mutate in (
|
||||
('S1_pre_travel_mismatch', lambda r: r['reserved_before_travel'].update(staff_cell=(6, 0, 1))),
|
||||
('S1_no_actual_outage', lambda r: r['reserve_exhausted_before_tick']['snapshot']['game_state']['resources'].update(mana=1)),
|
||||
):
|
||||
def altered(key, mutate=mutate):
|
||||
value = copy.deepcopy(s1_value(key))
|
||||
if key == 'writer-landing-observations': mutate(value)
|
||||
return value
|
||||
with patch.object(s1, 'value', altered):
|
||||
reject(name, lambda: series.s1_semantics(s1))
|
||||
|
||||
# S4 is deliberately unavailable until the single Root collection exists.
|
||||
# Never substitute B1 or manufacture a positive raw fixture for it.
|
||||
s4 = series.S4Series(build)
|
||||
series.power_stop(s4)
|
||||
results.append({'case': 'S4_real_NO_POWER_positive', 'result': 'accepted'})
|
||||
s4_value = s4.value
|
||||
|
||||
def facility_change(row, field, value, kitchen=False):
|
||||
target = row['kitchen' if kitchen else 'facility']
|
||||
target[field] = value
|
||||
for f in series.runtime(row)['facilities']['instances']:
|
||||
if f['instance_id'] == target['instance_id']: f[field] = value
|
||||
|
||||
for name, mutate in (
|
||||
('S4_related_facility_operating_false', lambda r: r.update(related_facility_operating=False)),
|
||||
('S4_kitchen_unpowered', lambda r: facility_change(r, 'power_available', False, kitchen=True)),
|
||||
('S4_closure_confound', lambda r: facility_change(r, 'operator_open', False)),
|
||||
('S4_no_actual_outage', lambda r: facility_change(r, 'power_available', True)),
|
||||
('S4_wrong_transaction_join', lambda r: series.runtime(r)['economy']['idempotency'].clear()),
|
||||
):
|
||||
def altered(key, mutate=mutate, name=name):
|
||||
value = copy.deepcopy(s4_value(key))
|
||||
label = 'recovered' if name == 'S4_wrong_transaction_join' else 'boundary'
|
||||
if key == 'writer-S4-' + label: mutate(value)
|
||||
return value
|
||||
with patch.object(s4, 'value', altered):
|
||||
reject(name, lambda: series.power_stop(s4))
|
||||
# Rename every occurrence, including service.payment.<serviceID> keys.
|
||||
original = s4_value('writer-S4-before')['service']
|
||||
paid = series.sales(s4_value('writer-S4-recovered'))[0]
|
||||
id_map = {original['service_id']: 'dynamic-service-22', paid['transaction_id']: 'dynamic-sale-22',
|
||||
'service.payment.' + original['service_id']: 'service.payment.dynamic-service-22'}
|
||||
|
||||
def dynamic_ids(value):
|
||||
if isinstance(value, dict): return {id_map.get(k, k): dynamic_ids(v) for k, v in value.items()}
|
||||
if isinstance(value, list): return [dynamic_ids(v) for v in value]
|
||||
return id_map.get(value, value) if isinstance(value, str) else value
|
||||
|
||||
with patch.object(s4, 'value', lambda key: dynamic_ids(s4_value(key))):
|
||||
assert series.power_stop(s4)['transaction_id'] == 'dynamic-sale-22'
|
||||
results.append({'case': 'S4_dynamic_service_and_sale_positive', 'result': 'accepted'})
|
||||
return {'scope': 'semantic controls only; no new native execution', 'results': results}
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--build', type=Path, required=True)
|
||||
print(json.dumps(run(parser.parse_args().build), indent=2))
|
||||
+14
-6
@@ -9,6 +9,7 @@ from pathlib import Path
|
||||
import subprocess
|
||||
import sys
|
||||
import tempfile
|
||||
from unittest.mock import patch
|
||||
|
||||
ROOT = Path(__file__).resolve().parents[5]
|
||||
CHECKER = ROOT / 'tools/check_p04_order_evidence.py'
|
||||
@@ -124,12 +125,19 @@ def run():
|
||||
(evidence / 'index.json').write_text(json.dumps(candidate))
|
||||
if name == 'duplicate_key':
|
||||
(evidence / 'index.json').write_text('{"schema_version":1,"schema_version":1}')
|
||||
proc = subprocess.run(['python3', str(CHECKER), '--verify-only'],
|
||||
env=dict(os.environ, BUILD_OUTPUT_DIR=str(base)), text=True, capture_output=True)
|
||||
output = json.loads(proc.stdout)
|
||||
assert proc.returncode == (0 if error is None else 1), (name, proc.stdout, proc.stderr)
|
||||
# These are content-layer unit cases. Stage-A real Git/FS controls
|
||||
# live in checker_role_fixtures.py; no production bypass is added.
|
||||
head = index['candidate_commit']
|
||||
with patch.object(gate, 'verify_roles', return_value=(head, {})), patch.dict(
|
||||
os.environ, {'BUILD_OUTPUT_DIR': str(base), 'P04_EVIDENCE_DIR': str(evidence)}):
|
||||
try:
|
||||
gate.verify(base)
|
||||
code, output = 0, {}
|
||||
except (ValueError, OSError, KeyError, TypeError) as exc:
|
||||
code, output = 1, {'error': str(exc)}
|
||||
assert code == (0 if error is None else 1), (name, output)
|
||||
assert error is None or error in output.get('error',''), (name, output)
|
||||
results.append(dict(fixture=name, exit_code=proc.returncode, result=output))
|
||||
results.append(dict(fixture=name, exit_code=code, result=output))
|
||||
check('synthetic_scalar_only_rejected', lambda i: None, 'native bundle required')
|
||||
check('forged_registered_pin', lambda i: i['registered_pins'].update({'autoload/simulation_runtime.gd':'0'*64}), 'registered pin declaration')
|
||||
check('false_delta', lambda i: i['applicability_delta'].append({'path':'autoload/simulation_runtime.gd','function':'initialize'}), 'git diff/applicability_delta mismatch')
|
||||
@@ -141,7 +149,7 @@ def run():
|
||||
(evidence / 'stdout.json').symlink_to(evidence / 'native_log.json')
|
||||
check('symlink', symlink, 'symlink')
|
||||
check('hash_mismatch', lambda i: i['artifacts']['stdout'].update(sha256='0'*64), 'artifact hash')
|
||||
check('stale_pin', lambda i: i['source_map'].update({'autoload/simulation_runtime.gd':'0'*64}), 'stale pin')
|
||||
check('stale_pin', lambda i: i['source_map'].update({'autoload/simulation_runtime.gd':'0'*64}), 'tested game differs from Git')
|
||||
def receipt_mutation(i):
|
||||
aid = 'power_stop_receipt'
|
||||
value = gate.load(evidence / artifacts[aid]['path'])
|
||||
|
||||
@@ -0,0 +1,124 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Real temp-Git role controls. Root executes after auto-submit; never evidence."""
|
||||
import argparse
|
||||
import copy
|
||||
import json
|
||||
import os
|
||||
from pathlib import Path
|
||||
import subprocess
|
||||
import sys
|
||||
import tempfile
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
ROOT = Path(__file__).resolve().parents[5]
|
||||
|
||||
|
||||
def run(build, evidence):
|
||||
build, evidence = build.resolve(strict=True), evidence.resolve(strict=True)
|
||||
original = json.loads((evidence / 'index.json').read_text())
|
||||
results = []
|
||||
env = dict(os.environ, BUILD_OUTPUT_DIR=str(build), PYTHONDONTWRITEBYTECODE='1',
|
||||
GIT_CONFIG_NOSYSTEM='1', GIT_AUTHOR_NAME='P04 fixture', GIT_AUTHOR_EMAIL='fixture@invalid',
|
||||
GIT_COMMITTER_NAME='P04 fixture', GIT_COMMITTER_EMAIL='fixture@invalid')
|
||||
for name in ('GIT_DIR', 'GIT_WORK_TREE', 'GIT_INDEX_FILE', 'GIT_OBJECT_DIRECTORY',
|
||||
'GIT_ALTERNATE_OBJECT_DIRECTORIES'):
|
||||
env.pop(name, None)
|
||||
with tempfile.TemporaryDirectory(prefix='p04-role-fixtures-', dir=build) as temp:
|
||||
base = Path(temp)
|
||||
checkout = base / 'checkout'
|
||||
subprocess.run(['git', 'clone', '--shared', '--no-checkout', str(ROOT), str(checkout)],
|
||||
env=env, check=True, capture_output=True)
|
||||
|
||||
def git(*args):
|
||||
return subprocess.check_output(['git', '-c', 'core.hooksPath=/dev/null', *args], cwd=checkout, env=env).decode().strip()
|
||||
|
||||
actual = git('rev-parse', 'HEAD')
|
||||
anchor = '9b1a18c1eb25ca1300dcd59da78423c0dda2f498'
|
||||
ancestry = subprocess.run(['git', 'merge-base', '--is-ancestor', anchor, actual], cwd=checkout, env=env)
|
||||
submission = git('show', '-s', '--format=%P', actual).split()[1] if ancestry.returncode == 0 else actual
|
||||
git('checkout', '--detach', submission)
|
||||
# Objects created by clone commits/merge-tree remain under build. The
|
||||
# shared canonical objects are consulted as read-only alternates only.
|
||||
probe = base / 'probe.py'
|
||||
probe.write_text(
|
||||
'import importlib.util,json,sys\nfrom pathlib import Path\n'
|
||||
'sys.dont_write_bytecode=True\n'
|
||||
's=importlib.util.spec_from_file_location("gate",Path.cwd()/"tools/check_p04_order_evidence.py")\n'
|
||||
'g=importlib.util.module_from_spec(s);sys.modules[s.name]=g;s.loader.exec_module(g)\n'
|
||||
'with g.isolated_objects():\n'
|
||||
' g.verify_roles(json.loads(Path(sys.argv[1]).read_text()),Path(sys.argv[2]))\n')
|
||||
index_path = base / 'index.json'
|
||||
|
||||
def check(name, index=None, positive=False, full=False):
|
||||
index_path.write_text(json.dumps(original if index is None else index))
|
||||
if full:
|
||||
directory = base / name
|
||||
directory.mkdir()
|
||||
(directory / 'index.json').write_text(index_path.read_text())
|
||||
command = [sys.executable, 'tools/check_p04_order_evidence.py', '--verify-only']
|
||||
process_env = dict(env, P04_EVIDENCE_DIR=str(directory))
|
||||
else:
|
||||
command = [sys.executable, str(probe), str(index_path), str(build)]
|
||||
process_env = env
|
||||
process = subprocess.run(command, cwd=checkout, env=process_env, capture_output=True, text=True)
|
||||
assert (process.returncode == 0) == positive, (name, process.stdout, process.stderr)
|
||||
results.append({'case': name, 'result': 'accepted' if positive else 'rejected',
|
||||
'stdout': process.stdout, 'stderr': process.stderr})
|
||||
|
||||
check('real_submission_positive', positive=True)
|
||||
game = checkout / 'project.godot'
|
||||
original_game = game.read_bytes()
|
||||
game.write_bytes(original_game + b'\n')
|
||||
check('HEAD_tree_FS_mismatch')
|
||||
game.write_bytes(original_game)
|
||||
game.unlink()
|
||||
game.symlink_to(base / 'outside')
|
||||
(base / 'outside').write_bytes(original_game)
|
||||
check('symlink_substitution')
|
||||
game.unlink()
|
||||
game.write_bytes(original_game)
|
||||
unknown = checkout / 'scripts/p04_unknown.gd'
|
||||
unknown.write_text('extends RefCounted\n')
|
||||
check('untracked_substitution')
|
||||
git('add', 'scripts/p04_unknown.gd')
|
||||
git('commit', '-m', 'fixture unknown source')
|
||||
check('unknown_source_commit')
|
||||
git('reset', '--hard', submission)
|
||||
game.unlink()
|
||||
git('add', '-u')
|
||||
git('commit', '-m', 'fixture deleted source')
|
||||
check('deleted_source_commit')
|
||||
git('reset', '--hard', submission)
|
||||
changed = copy.deepcopy(original)
|
||||
changed['product_binding']['tested_product'] = submission
|
||||
check('wrong_tested_revision', changed)
|
||||
for name, key, value in [('forged_candidate', 'candidate_tree', '0' * 40),
|
||||
('code_only_real_candidate', 'code_only', True),
|
||||
('phase_bypass', 'phase', 'candidate')]:
|
||||
changed = copy.deepcopy(original)
|
||||
changed[key] = value
|
||||
check(name, changed)
|
||||
git('checkout', '--detach', anchor)
|
||||
git('merge', '--no-ff', '--no-edit', submission)
|
||||
merged = git('rev-parse', 'HEAD')
|
||||
check('real_integration_positive', positive=True)
|
||||
check('real_final_positive', positive=True)
|
||||
game.unlink()
|
||||
git('add', '-u')
|
||||
git('commit', '--amend', '--no-edit')
|
||||
changed = copy.deepcopy(original)
|
||||
changed['product_binding']['metadata'] = ['project.godot']
|
||||
check('metadata_hiding_deleted_source', changed)
|
||||
git('reset', '--hard', merged)
|
||||
changed = copy.deepcopy(original)
|
||||
changed['conditions']['power_stop']['required_measurements']['charges'] = 9
|
||||
check('forged_index', changed, full=True)
|
||||
return {'scope': 'fixture controls only', 'results': results}
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--build', required=True, type=Path)
|
||||
parser.add_argument('--evidence', required=True, type=Path)
|
||||
args = parser.parse_args()
|
||||
print(json.dumps(run(args.build, args.evidence), indent=2))
|
||||
+123
@@ -0,0 +1,123 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Stage R file-only controls. Synthetic primitive controls plus real raw controls.
|
||||
|
||||
Tests never alter supplied originals or the relocation. In-memory overlays are
|
||||
used for native descriptor/raw adversaries; filesystem adversaries are disposable.
|
||||
"""
|
||||
import argparse
|
||||
import copy
|
||||
import json
|
||||
from pathlib import Path
|
||||
import struct
|
||||
import sys
|
||||
import tempfile
|
||||
from unittest.mock import patch
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
import p04_native_series as s
|
||||
|
||||
|
||||
def run(build):
|
||||
results = []
|
||||
|
||||
def reject(series, name, action):
|
||||
try:
|
||||
action()
|
||||
except (ValueError, KeyError, OSError, TypeError, UnicodeError) as exc:
|
||||
results.append({'series': series, 'class': name, 'result': 'rejected', 'error': str(exc)})
|
||||
else:
|
||||
raise AssertionError('negative accepted: ' + series + '/' + name)
|
||||
|
||||
with tempfile.TemporaryDirectory(prefix='.series-fixtures-', dir=s.HERE) as tmp:
|
||||
base = Path(tmp)
|
||||
data = b'func boundary():\n\treturn 42\n# included trailing comment\n'
|
||||
path = base / 'body.gd'
|
||||
path.write_bytes(data)
|
||||
pin = {'sha256': s.digest(data), 'bytes': len(data)}
|
||||
# A deliberately small resolver fixture bypasses the production-only
|
||||
# fixed 1721-file constructor, but exercises its exact read path.
|
||||
resolver = s.Resolver.__new__(s.Resolver)
|
||||
resolver.base, resolver.used = base, {}
|
||||
resolver.mapping = {'/native/body.gd': dict(pin, relocated=str(path))}
|
||||
resolver.manifest = {'product_source': {'body.gd': dict(pin, path='/native/body.gd')}}
|
||||
assert resolver.read('/native/body.gd', pin) == data
|
||||
assert s.variant(struct.pack('<Ii', 2, 42)).plain() == 42
|
||||
assert s.checked(data, pin, 'positive') == data
|
||||
results.append({'series': 'shared', 'class': 'small_synthetic_positive', 'result': 'pass'})
|
||||
link = base / 'symlink.gd'
|
||||
link.symlink_to(path)
|
||||
for name in s.NATIVE_PINS:
|
||||
context = s.Series.__new__(s.Series)
|
||||
context.build, context.run, context.references = base, s.RUNS[name], {}
|
||||
body_row = {'path': 'body.gd', 'function': 'boundary',
|
||||
'production_body_sha256': s.digest(data), 'registered_body_sha256': s.digest(data)}
|
||||
s.source_body_pins(resolver, [body_row])
|
||||
results.append({'series': name, 'class': 'full_body_positive', 'result': 'pass'})
|
||||
reject(name, 'wrong_source_pin', lambda: resolver.read('/native/body.gd', dict(pin, sha256='0' * 64)))
|
||||
signature = s.digest(data.splitlines(keepends=True)[0])
|
||||
reject(name, 'signature_only_pin', lambda: s.source_body_pins(resolver, [dict(
|
||||
body_row, production_body_sha256=signature, registered_body_sha256=signature)]))
|
||||
reject(name, 'symlink', lambda: s.ordinary(link))
|
||||
reject(name, 'traversal', lambda: context.read_build('../body.gd'))
|
||||
reject(name, 'unmapped_original_path', lambda: resolver.read('/native/unknown.gd', pin))
|
||||
reject(name, 'relocated_manifest_native_mismatch', lambda: resolver.read('/native/body.gd', dict(pin, bytes=len(data)+1)))
|
||||
path.write_bytes(data + b'!')
|
||||
try:
|
||||
reject(name, 'relocated_byte_manifest_mismatch', lambda: resolver.read('/native/body.gd', pin))
|
||||
finally:
|
||||
path.write_bytes(data)
|
||||
reject(name, 'JSON_only_getter_substitute', lambda: s.variant(b'{"getter": {}, "passed": true}'))
|
||||
|
||||
# Each series' real verifier is called for descriptor/raw overlays.
|
||||
# The native descriptor pins are intentionally not refreshed: these
|
||||
# runs and their original native descriptors are immutable inputs.
|
||||
original_read = s.Series.read_build
|
||||
run_name = s.RUNS[name]
|
||||
targets = {
|
||||
'forged_scalar': run_name + '/raw/writer.json',
|
||||
'changed_raw_byte': run_name + '/raw/writer.json',
|
||||
'formal_member_SHA_drift': run_name + '/execution.json',
|
||||
'unowned_missing_PID_end': run_name + '/writer/ended.json',
|
||||
'altered_phase_pair': run_name + '/raw/' + {
|
||||
's1': 'reader-landing-held.var', 's2a': 'reader-C3-recall.var',
|
||||
's2b': 'reader-night_absent-1080-before-facility.var',
|
||||
's3': 'reader-B1-phase-960-TIME_BOUNDARIES.var'}[name],
|
||||
'relabeled_interruption_reason': run_name + '/raw/' + {
|
||||
's1': 'writer-landing-depleted.json', 's2a': 'writer-C1-midnight.json',
|
||||
's2b': 'writer-night_absent-1081.json', 's3': 'writer-B1-after.json'}[name],
|
||||
}
|
||||
for label, target in targets.items():
|
||||
def overlay(self, relative, descriptor=None, target=target, label=label):
|
||||
if relative != target:
|
||||
return original_read(self, relative, descriptor)
|
||||
raw = s.ordinary(self.build / relative).read_bytes()
|
||||
if label in ('changed_raw_byte', 'altered_phase_pair'):
|
||||
raw += b' '
|
||||
else:
|
||||
obj = s.loads(raw)
|
||||
if label == 'unowned_missing_PID_end':
|
||||
obj['event'] = 'ENGINE_STARTED'
|
||||
elif label == 'forged_scalar':
|
||||
obj.update(passed=True, verified_conditions=list(s.RUNS), slots={})
|
||||
elif label == 'formal_member_SHA_drift':
|
||||
slot = next(iter(obj['formal_before']))
|
||||
obj['formal_before'][slot]['world.bin']['sha256'] = '0' * 64
|
||||
elif label == 'relabeled_interruption_reason':
|
||||
if 'service' in obj:
|
||||
obj['service']['interruption_reason'] = 'NO_POWER'
|
||||
else:
|
||||
obj['task']['state_reason'] = 'NO_POWER'
|
||||
raw = json.dumps(obj).encode()
|
||||
if descriptor is not None:
|
||||
s.checked(raw, descriptor, relative)
|
||||
return raw
|
||||
with patch.object(s.Series, 'read_build', overlay):
|
||||
reject(name, label, lambda name=name: getattr(s, 'verify_' + name)(build))
|
||||
return {'scope': 'file-only Stage R controls; immutable descriptor and primitive negatives',
|
||||
'formal_acceptance': False, 'results': results}
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--build', type=Path, required=True)
|
||||
print(json.dumps(run(parser.parse_args().build), indent=2, sort_keys=True))
|
||||
@@ -0,0 +1,61 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Deterministic reference-only Stage R collector; never writes the final index."""
|
||||
import argparse
|
||||
import json
|
||||
from pathlib import Path
|
||||
import shutil
|
||||
import sys
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
import p04_native_series as series
|
||||
|
||||
|
||||
def encoded(value):
|
||||
return (json.dumps(value, sort_keys=True, indent=2, ensure_ascii=False) + '\n').encode()
|
||||
|
||||
|
||||
def collect(build):
|
||||
build = Path(build).absolute()
|
||||
destination = build / 'audit-support/p04-raw-collect-r22'
|
||||
series.require(not destination.exists() and not destination.is_symlink(), 'collection destination already exists')
|
||||
for p in (destination.parent, *destination.parents):
|
||||
series.require(not p.is_symlink(), 'collection parent symlink')
|
||||
payloads = {}
|
||||
bindings = {}
|
||||
for name in series.RUNS:
|
||||
result = getattr(series, 'verify_' + name)(build)
|
||||
result['verifier_sha256'] = series.digest(Path(series.__file__).read_bytes())
|
||||
data = encoded(result)
|
||||
filename = name + '.json'
|
||||
payloads[filename] = data
|
||||
bindings[name] = {'path': filename, 'bytes': len(data), 'sha256': series.digest(data),
|
||||
'relocation_manifest_sha256': series.MANIFEST_SHA256}
|
||||
manifest = {'protocol': 'p04-native-series-collection-v1', 'formal_acceptance': False,
|
||||
'stage_A': 'candidate binding stage A pending', 'series': bindings,
|
||||
'relocation_manifest_sha256': series.MANIFEST_SHA256,
|
||||
'relocation_manifest': 'audit-support/p04-r17-full-inputs-r01/MANIFEST.json',
|
||||
'collector_sha256': series.digest(Path(__file__).read_bytes()),
|
||||
'large_payloads_copied': 0}
|
||||
payloads['MANIFEST.json'] = encoded(manifest)
|
||||
estimate = sum(len(v) for v in payloads.values())
|
||||
# The estimate precedes all writes. Reserve extra directory/allocation space.
|
||||
print(json.dumps({'estimated_payload_bytes': estimate, 'files': len(payloads),
|
||||
'available_disk_bytes': shutil.disk_usage(destination.parent).free,
|
||||
'large_payloads_copied': 0}), flush=True)
|
||||
series.require(shutil.disk_usage(destination.parent).free > estimate + 1048576, 'insufficient disk for pointers')
|
||||
destination.mkdir() # exclusive creation: a previous collection is never overwritten
|
||||
for name, data in sorted(payloads.items()):
|
||||
with (destination / name).open('xb') as output:
|
||||
output.write(data)
|
||||
print(json.dumps({'collection': str(destination), 'manifest_sha256': series.digest(payloads['MANIFEST.json']),
|
||||
'actual_payload_bytes': estimate, 'formal_acceptance': False}))
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--build', type=Path, required=True)
|
||||
try:
|
||||
collect(parser.parse_args().build)
|
||||
except (ValueError, OSError, KeyError, TypeError) as exc:
|
||||
print(json.dumps({'collected': False, 'error': str(exc)}))
|
||||
sys.exit(1)
|
||||
@@ -1,520 +1,440 @@
|
||||
{
|
||||
"input_hashes": {
|
||||
"docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/ORDER_CONTRACT_DRAFT.md": "c4dd8b907321b8859ba0744b9ae3d1447615d98fbe548983f9bb9fcad2d9d989",
|
||||
"docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/input.json": "1286f865656aafb6146c7bcd95c92c53c00b6c706f3f690d96e998d5e45e2b79",
|
||||
"docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/historical-audit.json": "90d2dbd3c04aed7ab409afa4f05f884832a4661cc506d28b818c72aadc352950",
|
||||
"docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/historical-source-map.json": "df8328ea8b6a7bc400caad8a52f6ead710c01942a726e5a6b530b82411c55da5"
|
||||
},
|
||||
"source_pins": {
|
||||
"autoload/simulation_runtime.gd": {
|
||||
"expected": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39",
|
||||
"actual": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39",
|
||||
"matches": true
|
||||
},
|
||||
"scripts/facility/facility_service.gd": {
|
||||
"expected": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77",
|
||||
"actual": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77",
|
||||
"matches": true
|
||||
},
|
||||
"scripts/economy/economy_service.gd": {
|
||||
"expected": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e",
|
||||
"actual": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e",
|
||||
"matches": true
|
||||
},
|
||||
"scripts/guest/guest_service.gd": {
|
||||
"expected": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e",
|
||||
"actual": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e",
|
||||
"matches": true
|
||||
},
|
||||
"scripts/staff/staff_service.gd": {
|
||||
"expected": "355ad5c3c9f85dc4d4ffc3bc4293e36f81078c403d1662512a735b2c8d815fb3",
|
||||
"actual": "355ad5c3c9f85dc4d4ffc3bc4293e36f81078c403d1662512a735b2c8d815fb3",
|
||||
"matches": true
|
||||
},
|
||||
"scripts/mana/mana_network_service.gd": {
|
||||
"expected": "96f195cf2a28b0966d12cd7c6fab86d13eae97c8342d07d70f52e598fbf49af9",
|
||||
"actual": "96f195cf2a28b0966d12cd7c6fab86d13eae97c8342d07d70f52e598fbf49af9",
|
||||
"matches": true
|
||||
}
|
||||
},
|
||||
"historical_map_entries": 1299,
|
||||
"differences": [
|
||||
{
|
||||
"path": "assets/kenney/tiny_dungeon/Tiled/sampleMap.tmx",
|
||||
"old_sha256": "fc545787837e2655c9d2078cc1b167df0d9ea2755f6ec3912c7987e8501339e3",
|
||||
"current_sha256": "3849e083e3d4f6a71dbf725d8473e93fa6ef8cdc9d314368eee15c980cf41775"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_dungeon/Tiled/sampleSheet.tsx",
|
||||
"old_sha256": "02f1b90cfdb37bcccddc83d074954272aaffd297ed4fabce7bb670f2f3f4be71",
|
||||
"current_sha256": "a2cca2c5e50b14023ce00f5d4112fb0b8264bfff9407d7a5198656e28d67fa16"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_dungeon/Visit Kenney.url",
|
||||
"old_sha256": "0dd1a0b295582cd3185547f0c1d92b4d5392c7782b90a428e192944a496052e0",
|
||||
"current_sha256": "6787defa3ecb6118622e1903b65802c0200628fae5164b51b4fd467f92f3f284"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_dungeon/Visit Patreon.url",
|
||||
"old_sha256": "84be5ef26b07905fa7e196e943c9807bf84138c3a71d87f51c6fd57b85c48c34",
|
||||
"current_sha256": "2fcba31333935f4aa35e9de2e74e2b7ba1b1a8011540e08016ff6d81e9dd7490"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_town/Tiny Dungeon (base pack).url",
|
||||
"old_sha256": "6cf442be20ad3364ba87183461744da9e979b5d4f243c83e2404f2cf884500d9",
|
||||
"current_sha256": "6d93bb958f9b7d5f21ceb8cbd24c184dc5c9f87aee7c680b336ecba7a89823d8"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_town/Visit Kenney.url",
|
||||
"old_sha256": "0dd1a0b295582cd3185547f0c1d92b4d5392c7782b90a428e192944a496052e0",
|
||||
"current_sha256": "6787defa3ecb6118622e1903b65802c0200628fae5164b51b4fd467f92f3f284"
|
||||
},
|
||||
{
|
||||
"path": "assets/kenney/tiny_town/Visit Patreon.url",
|
||||
"old_sha256": "84be5ef26b07905fa7e196e943c9807bf84138c3a71d87f51c6fd57b85c48c34",
|
||||
"current_sha256": "2fcba31333935f4aa35e9de2e74e2b7ba1b1a8011540e08016ff6d81e9dd7490"
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"old_sha256": "2d7e2cea5424585e9aa4302ab66d1fc4dbaefe743ce4328fccc1efa2f19b82e4",
|
||||
"current_sha256": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39"
|
||||
},
|
||||
{
|
||||
"path": "scenes/main/main.gd",
|
||||
"old_sha256": "a7ae44c680eb9b70a117ddc8c6cbf0ca290b8e8d485eac41b4122698fde2a620",
|
||||
"current_sha256": "a3d7d7ddd08a8df1f987806e60accf51792d728cf71c06e6b822f5a31d8ed3e3"
|
||||
},
|
||||
{
|
||||
"path": "scenes/main/world_preview.gd",
|
||||
"old_sha256": "3df29be32d3a016d8fb9dc1ee2bd32e2360ac8fad9810293f6be9b58d26046e0",
|
||||
"current_sha256": "75d5b0bd23204f5a485540512e44b89e1d2a4596b368f70177a238ba078ff42d"
|
||||
},
|
||||
{
|
||||
"path": "scripts/core/performance_budget.gd",
|
||||
"old_sha256": "79d18e8f0dcc3932801cd02ea8a8ba037af02ef57665387cba8dbe3b3e9af917",
|
||||
"current_sha256": "0e2278f88d29919a0634fc1b527328a0d0c12d87e2cd612f3eee1526aabdb073"
|
||||
},
|
||||
{
|
||||
"path": "scripts/world/path_service.gd",
|
||||
"old_sha256": "2e68653e4898387cb5a76402813a10595bd5ca7d5fb841c7ed8c55af77d7a918",
|
||||
"current_sha256": "447135729a1106639a6eee6754af3195c8a8b458ca26980ae91fa39d80dcfbd4"
|
||||
},
|
||||
{
|
||||
"path": "tests/s1/test_path_service.gd",
|
||||
"old_sha256": "0f48bb44c27e32f08477b9aed61a0db5c8808219490928f734c3570a07efb251",
|
||||
"current_sha256": "17d9fd42b35004376bf96e435f53d6bce41e79258ec7f6daf3ab04ae5d8c3e1d"
|
||||
},
|
||||
{
|
||||
"path": "tests/ui/test_pixel_tower.gd",
|
||||
"old_sha256": "93bdbb195f2ceec07dbe052e0d0a3017d84b56f1e8ec46b87be8d98105ec0f88",
|
||||
"current_sha256": "f149f4b5507247dadf623e777e90b9bdb81f54324b406a8f55adaf89b649866a"
|
||||
}
|
||||
],
|
||||
"missing_map_paths": [],
|
||||
"revision": "repair29",
|
||||
"status": "SOURCE-READY / NOTRUN; Root measurements separately recorded",
|
||||
"task_id": "P04-01",
|
||||
"base_commit": "deb1bcb2374eb378b840ca345db952bd8572cb6e",
|
||||
"status": "submitted",
|
||||
"original_unit_complete": false,
|
||||
"counted_units_added": 0,
|
||||
"tests_executed": false,
|
||||
"authority": {
|
||||
"owner_approved": {
|
||||
"artifact": "D05_OWNER_APPROVAL.json",
|
||||
"sha256": "4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e",
|
||||
"bytes": 2073,
|
||||
"origin": "direct_user_reply",
|
||||
"formal_acceptance": false,
|
||||
"conditions": [
|
||||
"D05-P04-DEPENDENCY",
|
||||
"D05-P04-SHIFT-1800"
|
||||
],
|
||||
"approval_is_not_test_pass": true
|
||||
},
|
||||
"existing": [
|
||||
"BASELINE:64/67/71/72/183",
|
||||
"D-034 docs/DESIGN_DECISIONS.md:252-258",
|
||||
"A01 already approved; not reopened"
|
||||
"current_table": true,
|
||||
"scope": {
|
||||
"conditions": 15,
|
||||
"additional_EV_obligation": true,
|
||||
"domains": 7,
|
||||
"safety_outcomes": [
|
||||
"no stopped charging",
|
||||
"no double midnight settlement",
|
||||
"no orphan reservations"
|
||||
],
|
||||
"remaining_pending": "Cost/day attribution remains pending; do not infer new policy. Required safety counts remain mandatory; no blanket D05 rejection."
|
||||
"packages": 30,
|
||||
"deliveries": 88,
|
||||
"original_credit": "13/88 unchanged; P04 receives zero credit",
|
||||
"CurrentAlphaScope": "unchanged",
|
||||
"main_9b": "frozen; nothing integrated"
|
||||
},
|
||||
"phase_order": "scripts/core/simulation_kernel.gd:123-153: APPLY_COMMANDS, clock increment/calendar boundary signals, TIME_BOUNDARIES, MANA, CONSTRUCTION, LOGISTICS, FACILITY_COMPLETION, VITALS_AND_ENVIRONMENT, INCIDENTS_AND_EVENTS, FACILITY_QUEUES, AI_DECISIONS, PUBLISH_SNAPSHOT. Handler IDs sorted lexically within phase at line242.",
|
||||
"domains": [
|
||||
{
|
||||
"domain": "閉店",
|
||||
"current_functions": [
|
||||
"simulation_runtime._advance_facilities",
|
||||
"simulation_runtime._advance_guest_queues",
|
||||
"simulation_runtime._release_closed_business_queues",
|
||||
"simulation_runtime._release_closed_business_request"
|
||||
"normative_rule": "D-034: direct closure releases waiting requests and continues started service. Approved dependency closure holds progress/payment and preserves reservation/service ID until one completion.",
|
||||
"current_source": [
|
||||
"Runtime _process_tick_commands:5743",
|
||||
"FacilityService _prepare_service_for_tick:853",
|
||||
"Runtime _release_closed_business_queues:12624"
|
||||
],
|
||||
"order": "Direct closure follows D-034: release waiting requests, continue started services. Dependency closure pauses progress/payment and preserves reservation/service IDs until recovery under D05-P04-DEPENDENCY.",
|
||||
"old_evidence": "Historical phases 001/002: business closure/operations; midnight open-service proof cannot establish closure behavior.",
|
||||
"missing": "Exact-version direct/dependency closure evidence; approval is supplied, not a pass."
|
||||
"evidence": "I native_bundle C; R/s2a.json; R/s3.json B1",
|
||||
"approved_authority": [
|
||||
"D-034",
|
||||
"D05-P04-DEPENDENCY"
|
||||
],
|
||||
"pending_D05": [
|
||||
"D05(a) simultaneous reason selection"
|
||||
],
|
||||
"phase": "APPLY_COMMANDS / FACILITY_COMPLETION / FACILITY_QUEUES",
|
||||
"relative_priority": "Command closure before completion; dependency hold during preparation; closed queue release after completion.",
|
||||
"status": "approved",
|
||||
"observation_status": "observed-current"
|
||||
},
|
||||
{
|
||||
"domain": "停電",
|
||||
"current_functions": [
|
||||
"simulation_runtime._advance_mana",
|
||||
"mana_power_projection.apply",
|
||||
"FacilityService._prepare_service_for_tick",
|
||||
"FacilityService._complete_service"
|
||||
"normative_rule": "BASELINE:183 mana depletion stops facilities. A legitimately power-stopped service must not progress/charge; retain reservation identity and complete once after recovery. This does not approve a simultaneous-cause priority.",
|
||||
"current_source": [
|
||||
"Runtime _advance_mana:10694",
|
||||
"FacilityService _prepare_service_for_tick:853"
|
||||
],
|
||||
"order": "Commands precede MANA power projection, then facility completion. NO_POWER pauses active service and power recovery resumes it.",
|
||||
"old_evidence": "Draft reports formal 961 stop/962 recovery, fresh Reader A/B, one consume/notification and unchanged economy at 963; raw not supplied.",
|
||||
"missing": "Exact-source/config/input/environment raw stop/recovery proofs including same reservations and all ledgers."
|
||||
"evidence": "R/s4.json; B/p04-s4-native-r28; R/s3.json B1 combined diagnostic",
|
||||
"approved_authority": [
|
||||
"BASELINE:183",
|
||||
"P04-01 safety acceptance"
|
||||
],
|
||||
"pending_D05": [
|
||||
"D05(a)"
|
||||
],
|
||||
"phase": "MANA → FACILITY_COMPLETION",
|
||||
"relative_priority": "Projection before completion; RELATED chosen before NO_POWER.",
|
||||
"status": "observed-current",
|
||||
"observation_status": "observed-current",
|
||||
"evidence_scope": "S4 probe calls disconnect_nodes directly: isolated NO_POWER, not global depletion. Global depletion appears only in S3 B1 combined diagnostic. S1 covers separate staff/EV safety."
|
||||
},
|
||||
{
|
||||
"domain": "破壊",
|
||||
"current_functions": [
|
||||
"simulation_runtime._process_tick_commands",
|
||||
"simulation_runtime._advance_defense",
|
||||
"FacilityService._prepare_service_for_tick",
|
||||
"FacilityService._fail_service"
|
||||
"normative_rule": "No charge while legitimately failed/stopped and no orphan reservation. Distinguish command destruction before facility processing from late INCIDENTS event destruction after completion; observation is not normative priority approval.",
|
||||
"current_source": [
|
||||
"Runtime _process_tick_commands:5743",
|
||||
"_advance_defense:8577",
|
||||
"_apply_defense_outcome_boundary:9804",
|
||||
"FacilityService _prepare_service_for_tick:853"
|
||||
],
|
||||
"order": "Command destruction precedes facility processing; INCIDENTS_AND_EVENTS destruction follows completion. BROKEN fails during service preparation.",
|
||||
"old_evidence": "Draft reports early failure44/charge0/release once, late destruction after completion45 and next-minute failure for incomplete service.",
|
||||
"missing": "Verified raw early/late destruction and failed diagnostic history; current infrastructure/path applicability."
|
||||
"evidence": "R/s3.json B4a/B4b",
|
||||
"approved_authority": [
|
||||
"P04-01 safety acceptance (original); explicit destruction rule pending D05"
|
||||
],
|
||||
"pending_D05": [
|
||||
"D05(b); BASELINE:183 is mana depletion, not destruction authority; destruction_stop registry correction only after approval"
|
||||
],
|
||||
"phase": "APPLY_COMMANDS vs INCIDENTS_AND_EVENTS",
|
||||
"relative_priority": "Command destruction before completion; incident destruction after completion: B4a charges25G then destroys in same tick; B4b next-tick failure/release.",
|
||||
"status": "pending D05",
|
||||
"observation_status": "observed-current"
|
||||
},
|
||||
{
|
||||
"domain": "退出",
|
||||
"current_functions": [
|
||||
"simulation_runtime._execute_leave_facility_queue",
|
||||
"simulation_runtime._leave_guest_queue_boundary",
|
||||
"simulation_runtime._advance_guest_queues",
|
||||
"simulation_runtime._advance_guest_ai_decisions"
|
||||
"normative_rule": "Leave/abandon releases the owned reservation once; no orphan or duplicate charge. Preserve D-034. Completion, queue release and later normal despawn are distinct observations.",
|
||||
"current_source": [
|
||||
"Runtime _execute_leave_facility_queue:7553",
|
||||
"_advance_guest_ai_decisions:8738"
|
||||
],
|
||||
"order": "Public leave command precedes completion; patience release occurs in queues; AI replanning/planned exit follows. LEAVING despawns only after state-entered minute.",
|
||||
"old_evidence": "Draft reports public reservation release, automatic45-minute patience and completion-before-exit boundaries.",
|
||||
"missing": "Exact-version leave/patience and overdue-LEAVING reload proofs, no orphan reservations and replay generation checks."
|
||||
"evidence": "R/s3.json B2a/B2b/B3 and B1 departure history",
|
||||
"approved_authority": [
|
||||
"D-034",
|
||||
"P04-01 safety acceptance"
|
||||
],
|
||||
"pending_D05": [
|
||||
"D05(c)"
|
||||
],
|
||||
"phase": "APPLY_COMMANDS vs AI_DECISIONS",
|
||||
"relative_priority": "Command exit before completion/charging; AI PLANNED_EXIT after them; despawn later.",
|
||||
"status": "pending D05",
|
||||
"observation_status": "observed-current"
|
||||
},
|
||||
{
|
||||
"domain": "課金",
|
||||
"current_functions": [
|
||||
"FacilityService._complete_service",
|
||||
"simulation_runtime._complete_service_transaction",
|
||||
"simulation_runtime._apply_service_transaction",
|
||||
"EconomyService.post"
|
||||
"normative_rule": "No stopped charge; one sale per completed service and idempotent resend. Reservation consumption, actual sale and payment key must join by service ID and original priceSnapshot.",
|
||||
"current_source": [
|
||||
"Runtime _advance_facility_upkeep:1855",
|
||||
"_complete_service_transaction:11769",
|
||||
"_apply_service_transaction:11785",
|
||||
"coordinator _process_daily_close:1125"
|
||||
],
|
||||
"order": "Completion callback consumes reservations then posts service.payment.<service_id>; notification scope ends after transaction effects. Static code alone does not prove all boundary rollback paths.",
|
||||
"old_evidence": "P04-02 and historical full are references only; test counts do not establish P04-01 original acceptance.",
|
||||
"missing": "Raw ledger/inventory/notification proof for stopped, failed, replay and paid completion paths; closure/shift rule dependent proof."
|
||||
"evidence": "I native_bundle C; R/s2a.json; R/s4.json",
|
||||
"approved_authority": [
|
||||
"P04-01 safety acceptance",
|
||||
"D05-P04-DEPENDENCY",
|
||||
"D05-P04-SHIFT-1800"
|
||||
],
|
||||
"pending_D05": [
|
||||
"D05(d), beyond approved A01 and18:00; timing/attribution mandatory P04, numeric math D04/P05 separate"
|
||||
],
|
||||
"phase": "TIME_BOUNDARIES → FACILITY_COMPLETION",
|
||||
"relative_priority": "Upkeep/daily close before sale; post-increment sale timestamp, exclusive close period_end;00:00 sale belongs to new day.",
|
||||
"status": "pending D05",
|
||||
"observation_status": "observed-current"
|
||||
},
|
||||
{
|
||||
"domain": "シフト交代",
|
||||
"current_functions": [
|
||||
"simulation_runtime._advance_facilities",
|
||||
"simulation_runtime._advance_staff_ai",
|
||||
"StaffService.advance_one_minute",
|
||||
"simulation_runtime._sync_facility_staffing"
|
||||
"normative_rule": "Approved [17:59,18:00) work belongs to day staff: complete/pay once at18:00 then switch; night work starts [18:00,18:01).",
|
||||
"current_source": [
|
||||
"Runtime _advance_facilities:8482",
|
||||
"_advance_staff_ai:8658",
|
||||
"StaffService advance_one_minute:700"
|
||||
],
|
||||
"order": "Approved D05-P04-SHIFT-1800: [17:59,18:00) belongs to day shift, completion/payment once at 18:00 before switching; night shift begins [18:00,18:01).",
|
||||
"old_evidence": "Historical phase083 hardening includes shift-end interruption; draft retains diagnostic1080 predicate failure without claiming original violation.",
|
||||
"missing": "Applicable 1080 completion/replay, 1081 WAITING_FOR_STAFF with no night staff, and existing overtime task evidence."
|
||||
"evidence": "I C first1080 sale joins; R/s2b.json no-night1081/overtime",
|
||||
"approved_authority": [
|
||||
"BASELINE:64",
|
||||
"BASELINE:67",
|
||||
"D05-P04-SHIFT-1800"
|
||||
],
|
||||
"pending_D05": [
|
||||
"Already approved; do not re-ask"
|
||||
],
|
||||
"phase": "FACILITY_COMPLETION → AI_DECISIONS",
|
||||
"relative_priority": "18:00 completion/payment before shift handover; day staff [17:59,18:00), night [18:00,18:01).",
|
||||
"status": "approved",
|
||||
"observation_status": "observed-current"
|
||||
},
|
||||
{
|
||||
"domain": "00:00決算",
|
||||
"current_functions": [
|
||||
"simulation_runtime._advance_facility_upkeep",
|
||||
"simulation_runtime._advance_operations_time",
|
||||
"OperationsCoordinator._process_minute_boundaries",
|
||||
"OperationsCoordinator._process_daily_close",
|
||||
"simulation_runtime._complete_service_transaction"
|
||||
"normative_rule": "A01 approved ownership-prorated upkeep at midnight is retained. One daily close/payroll/upkeep, no duplicate replay/reload; distinguish prior [0,1440) accounting and sale at1440.",
|
||||
"current_source": [
|
||||
"Kernel _handle_time_boundaries:254",
|
||||
"Runtime _advance_operations_time:1898",
|
||||
"coordinator _process_minute_boundaries:882",
|
||||
"_process_daily_close:1125"
|
||||
],
|
||||
"order": "TIME_BOUNDARIES weather/upkeep/operations precedes facility completion; prior day[0,1440) accounting differs from sale at1440. A01 upkeep already approved.",
|
||||
"old_evidence": "Draft reports real settlement/payroll/upkeep once, service25 once, unchanged ledgers/history1441; zero payroll fixture is not proof of nonzero payroll.",
|
||||
"missing": "Current raw midnight/retry/reload idempotency proof and applicable nonzero payroll boundary; full original conformity review."
|
||||
"evidence": "I C paused/formal; R/s2a.json nonzero payroll/upkeep, replay and typed restore",
|
||||
"approved_authority": [
|
||||
"BASELINE:71",
|
||||
"BASELINE:72",
|
||||
"A01",
|
||||
"D05-P04-DEPENDENCY"
|
||||
],
|
||||
"pending_D05": [
|
||||
"A01 approved ownership-based midnight upkeep not reopened; extra attribution D05(d)"
|
||||
],
|
||||
"phase": "pre-TIME_BOUNDARIES signals → TIME_BOUNDARIES → FACILITY_COMPLETION",
|
||||
"relative_priority": "Midnight signals, then upkeep/close, then completion.",
|
||||
"status": "approved",
|
||||
"observation_status": "observed-current"
|
||||
}
|
||||
],
|
||||
"old_evidence_applicability": {
|
||||
"raw_available_for_reuse": false,
|
||||
"assessment": "39 references in supplied recheck retain old Runtime 2d7e2cea provenance; raw artifacts not supplied here. 20 function bodies independently rehashed in this checkout, matching supplied historical hashes, not the old 29-function count. No blanket boundary reuse.",
|
||||
"source": "14 byte differences, zero missing mapped paths; six immutable current pins match.",
|
||||
"config_input_environment": "Not established by raw local evidence; each required proof must pin these independently.",
|
||||
"runtime_git": "Verified supplied old SHA2d7e2cea; git diff --no-index compared exact raw old/current Runtime. Four hunks affect _project_guest_candidates batching, _find_facility_access_path cost selection, _estimated_actor_path_minutes and extracted connector-credit helper. Completion/phase registration unchanged in this file; callees PathService changed, therefore reachability, choice, arrival and staff estimates require finite applicability evidence.",
|
||||
"known_difference_impact": "Runtime/PathService may alter infrastructure, movement, staffing, guest selection and recovery boundary reachability; UI/main/preview and performance budget changes prevent blanket whole-full reuse. Two changed tests cannot supply old exact-version evidence. Seven additional Kenney metadata/sample byte differences require applicability classification, not product edits."
|
||||
},
|
||||
"blockers": [
|
||||
"D05 dependency closure and 18:00 interval are approved; approval is not test success.",
|
||||
"Raw 39 historical artifacts, settings/input/environment and engine receipts are not mirrored here. Their hashes in recheck are provenance, not verified current evidence.",
|
||||
"Nonzero-payroll midnight, paused midnight, replay/separate-PID save restoration and reachable EV reservation safety need applicable raw evidence.",
|
||||
"Root must independently assess affected power/destruction/exit paths and production Runtime 4696df4a versus checkout d52a995 before integration."
|
||||
"source_facts": "REPAIR29_STATIC_SOURCE.json",
|
||||
"authority": "D05_OWNER_APPROVAL.json approves dependency and shift only; original BASELINE/D-034/A01 retain their scope",
|
||||
"historical_superseded": [
|
||||
"REPAIR17_STATUS.md",
|
||||
"REPAIR18_STATUS.md",
|
||||
"REPAIR19_CORRIGENDUM.md",
|
||||
"REPAIR19_STATUS.md",
|
||||
"REPAIR20_CORRIGENDUM.md",
|
||||
"REPAIR20_STATUS.md",
|
||||
"REPAIR21_STATUS.md",
|
||||
"REPAIR22–28 creation-time status and runbooks"
|
||||
],
|
||||
"validation_plan": [
|
||||
"Runner runs p04-acceptance; worker only py_compile and synthetic negative fixture checks.",
|
||||
"Root verifies source/config/input/environment applicability for power, destruction, exit cases affected by four Runtime hunks and PathService changes; fresh finite boundaries only if reuse fails.",
|
||||
"Require nonzero payroll midnight, stop crossing midnight, same-minute resend, formal save and different PID restore, no-night-staff 18:01, existing overtime task, and reachable reserved-staff EV safety evidence.",
|
||||
"Do not reopen A01 or invent cost/day attribution. Pending unrelated D05 does not fail the whole gate.",
|
||||
"Root rechecks production Runtime 4696df4a against immutable checkout d52a995, then independent review in separate session and normal integration. Formal credit remains zero."
|
||||
"history_policy": "Creation-time NOT RUN in REPAIR22–28 and runbooks is historical; CURRENT_STATUS.md canonical table overrides execution status. Historical files unchanged.",
|
||||
"evidence_policy": "Root-measured S4r28 4/4 PASS, controls, local8, r22 collection, schema2 index, registered validation PASS28s; worker SOURCE-READY / NOTRUN.",
|
||||
"pending": [
|
||||
"Owner D05 a–d approval or explicit non-mandatory ruling; unknown mandatory rules stay pending",
|
||||
"Post-approval normal checker/registry repair (a61 unchanged here)",
|
||||
"support53cb normal registered rebind",
|
||||
"final full1339 against final checker; none exists against a61",
|
||||
"independent review and integration: P04 first, support on main9b afterward",
|
||||
"nativeWindows obligations individually if required"
|
||||
],
|
||||
"repair_support": {
|
||||
"hashes": {
|
||||
"support.json": "36f7443daabf37070ecc331e708a6749816630bf0466ebb2a814aaf647a84410",
|
||||
"runtime-diff.patch": "7ba08537c5e86d0505f2b4df56d29877064c70acc4fa9f12089fefa09e78b707",
|
||||
"historical-runtime.txt": "2d7e2cea5424585e9aa4302ab66d1fc4dbaefe743ce4328fccc1efa2f19b82e4"
|
||||
},
|
||||
"historical_runtime_verified": true,
|
||||
"production_differences": 7,
|
||||
"managed_differences": 14,
|
||||
"additional7_classification": "Runner support reports CRLF to LF only; current raw hashes checked. Old raw metadata absent, normalization not independently reproduced; no acceptance equivalence claim."
|
||||
},
|
||||
"repair3": {
|
||||
"space_available": "1.8 GiB before work; bounded source reads and ~small text changes, no raw archive copies needed",
|
||||
"approval_material_verification": [
|
||||
{
|
||||
"file": "D05_OWNER_APPROVAL.json",
|
||||
"bytes": 2073,
|
||||
"sha256": "4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e",
|
||||
"manifest_matches": true
|
||||
},
|
||||
{
|
||||
"file": "README.md",
|
||||
"bytes": 1029,
|
||||
"sha256": "7b1c8992a8c5298d3ad416a5ff667a49f6e1eafea149fb6abb9e91e517e47c0f",
|
||||
"manifest_matches": true
|
||||
},
|
||||
{
|
||||
"file": "recheck.json",
|
||||
"bytes": 46479,
|
||||
"sha256": "44b32fa297c3c8f81691505878232756b3d63e0d5a801a6ae15173b84894bd22",
|
||||
"manifest_matches": true
|
||||
},
|
||||
{
|
||||
"file": "OPUS_D05_CANDIDATE.json",
|
||||
"bytes": 6653,
|
||||
"sha256": "54cd83971467744b1009e72c56e7b5d558c97073540d027640e486f7b5b5a34b",
|
||||
"manifest_matches": true
|
||||
}
|
||||
],
|
||||
"ordering_functions": [
|
||||
{
|
||||
"path": "scripts/core/simulation_kernel.gd",
|
||||
"function": "advance_one_minute",
|
||||
"line": 122,
|
||||
"sha256": "b9587ef722d8c8640248025462819374ae5eca1c3d8bbe600b6bc9c328567777",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/core/simulation_kernel.gd",
|
||||
"function": "_run_phase",
|
||||
"line": 236,
|
||||
"sha256": "52461eeb288892a4bb4b6a99570185af08a30758ef88b0046a911baaa6f318e1",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/core/simulation_kernel.gd",
|
||||
"function": "_handle_time_boundaries",
|
||||
"line": 254,
|
||||
"sha256": "2ced47a2911b36def9d89de82a43afc69148ead44d19db6a2a6c7bce5a910ae9",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/core/command_queue.gd",
|
||||
"function": "_comes_before",
|
||||
"line": 409,
|
||||
"sha256": "21f7f9f7c0923121fd0a022a2f7546b7bb7117a9979c1ed25d0b33b96e28ab28",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_process_tick_commands",
|
||||
"line": 5736,
|
||||
"sha256": "9de66a4bb84b12304300d49085f44546412319bd4aee91e67b61becf97e50294",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_operations_time",
|
||||
"line": 1894,
|
||||
"sha256": "511580d1fac3d2785072e94c2981065fa47ba18b1c97122922645dac5c0d94ab",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_run_operations_deferred_suffix",
|
||||
"line": 1683,
|
||||
"sha256": "12075307b12cbb66ffda47a26097194a07fad9d6467e3e557bd7269315c98982",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_mana",
|
||||
"line": 10633,
|
||||
"sha256": "05c54626ce6e355acd92994ab80aaf2177c5cf194885e66934552139e087599e",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_facilities",
|
||||
"line": 8421,
|
||||
"sha256": "f1efd0c23bdd60d1ef19a21879640b53b8b4d88844c0c881fe7cd724387ec274",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_guest_vitals",
|
||||
"line": 8427,
|
||||
"sha256": "8226ca18c983ac576a74e772cc3088e9fe52b362ffba1b71255bd1d7623c1234",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_staff_ai",
|
||||
"line": 8597,
|
||||
"sha256": "0e222987f7c5e25583dbaba8fe63784aa563715067396e8d31d10bd191e7179b",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_advance_guest_ai_decisions",
|
||||
"line": 8677,
|
||||
"sha256": "e33b41294e88dba840affd5cc0a5c58fe5d46f5d98a80a8d5f4e907a3b9a7b93",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_release_closed_business_queues",
|
||||
"line": 12562,
|
||||
"sha256": "3a05fbe94877eeb750fb0d692501954555ab6a8005448ab3b6023dab9bad816b",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_release_closed_business_request",
|
||||
"line": 12580,
|
||||
"sha256": "6dbde3a3d425e47a049dcc4f05eae6f01fe9784f473c0fb1019a0633c239d83b",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "autoload/simulation_runtime.gd",
|
||||
"function": "_complete_service_transaction",
|
||||
"line": 11707,
|
||||
"sha256": "f2b6e96a8eeef3dd3f8419b4d9d5ef4e1d13241600ce970bdd78a924428cac6c",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/facility/facility_service.gd",
|
||||
"function": "advance_one_minute",
|
||||
"line": 544,
|
||||
"sha256": "59c0e89b4dca291e3ec02601b3f7c5544dba7c823fc137e0e7a50e7d5319e0ed",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/facility/facility_service.gd",
|
||||
"function": "_prepare_service_for_tick",
|
||||
"line": 853,
|
||||
"sha256": "b35c2c0fb23a04258b71995dd7c3b6dfacbbcdf36106e2e3348acef0e18d21cc",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/facility/facility_service.gd",
|
||||
"function": "_complete_service",
|
||||
"line": 895,
|
||||
"sha256": "494edfd11cb3e896d73c2c6fdbe7c1193efce6d869b105e526d2f1dfd1168142",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/facility/facility_service.gd",
|
||||
"function": "_fail_service",
|
||||
"line": 933,
|
||||
"sha256": "56f61b255217bddb4c8a6ad3af6ed1f9edc3b6a6e928dacf2105be6698936de5",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
},
|
||||
{
|
||||
"path": "scripts/operations/operations_coordinator.gd",
|
||||
"function": "_process_minute_boundaries",
|
||||
"line": 882,
|
||||
"sha256": "1312166dc17aee0ef470069a73ff3fe6b86d11d04ca7de76f3d04f1d2d14674e",
|
||||
"matches_supplied_historical_body_hash": true
|
||||
}
|
||||
],
|
||||
"ordering_function_count": 20,
|
||||
"historical_29_not_combined": true,
|
||||
"nativeWindows": {
|
||||
"power_stop": "pending",
|
||||
"destruction_stop": "pending",
|
||||
"dependency_stop": "pending",
|
||||
"shift_completion": "pending",
|
||||
"recovery_completion": "pending",
|
||||
"same_minute_replay": "pending",
|
||||
"closure_release": "pending",
|
||||
"exit_release": "pending",
|
||||
"patience_release": "pending",
|
||||
"paused_midnight": "pending",
|
||||
"midnight_settlement": "pending",
|
||||
"midnight_replay": "pending",
|
||||
"save_restore": "pending",
|
||||
"night_staff_absent": "pending",
|
||||
"overtime_task": "pending",
|
||||
"EV": "pending"
|
||||
},
|
||||
"spec_representation": {
|
||||
"raw_sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f",
|
||||
"contract_sha256": "9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881",
|
||||
"difference": "exactly one final LF; no spec edits"
|
||||
},
|
||||
"worker_validation": {
|
||||
"py_compile": "passed",
|
||||
"negative_fixture_count": 10,
|
||||
"negative_results": "all exit 1 with intended error; synthetic control exit 0/formal_acceptance=false",
|
||||
"engine_runs": 0,
|
||||
"runner_operations": 0,
|
||||
"formal_acceptance": false
|
||||
},
|
||||
"runtime_diff_hunks": 5,
|
||||
"reachability": {
|
||||
"guest_EV": {
|
||||
"reach": false,
|
||||
"scope": "normal guest automatic service reservation before arrival",
|
||||
"source_refs": [
|
||||
"Runtime:8898-8922 arrival -> queue -> create_service_request",
|
||||
"Runtime:7421-7445 reserve -> create request"
|
||||
]
|
||||
},
|
||||
"staff_EV": {
|
||||
"reach": true,
|
||||
"scope": "public create_staff_task required_items can reserve before EV travel",
|
||||
"source_refs": [
|
||||
"Runtime:329,6733-6742 public task creation",
|
||||
"task_dispatcher.gd:256-261,293-294,309-314 reserve before assignment",
|
||||
"Runtime:5320,9141-9170 inventory callback",
|
||||
"Runtime:12009-12013 begin_moving",
|
||||
"Runtime:8755-8763,8946-8987 EV travel",
|
||||
"elevator_service.gd:279-284 set_powered"
|
||||
],
|
||||
"required": "power-stop case with reserved-before-travel items; orphan_reservations=0; nativeWindows pending"
|
||||
},
|
||||
"transport": {
|
||||
"reach": false,
|
||||
"scope": "rescue transport payment/reservation only; physical movement is reachable",
|
||||
"source_refs": [
|
||||
"Runtime:12023-12030 completion heals only",
|
||||
"Runtime:12976-13050 rescue pickup/transport creation, no required_items/reservation/payment"
|
||||
],
|
||||
"counted_domain_added": false
|
||||
},
|
||||
"opening_hours": {
|
||||
"reach": false,
|
||||
"scope": "production time-of-day closure",
|
||||
"source_refs": [
|
||||
"facility_instance.gd default [0,1440)",
|
||||
"set_opening_hours: definitions/service wrapper only; no autoload caller"
|
||||
],
|
||||
"direct_closure_remains_required": true
|
||||
}
|
||||
},
|
||||
"path_applicability": {
|
||||
"source_refs": [
|
||||
"scripts/world/path_service.gd:1055-1101",
|
||||
"scripts/world/path_service.gd:1302-1319",
|
||||
"Runtime:9222-9268,9296-9300,12798-12812,12838-12848"
|
||||
"priority_candidates_if_required": "D05_REMAINING_ORDER_CANDIDATE.json",
|
||||
"collection_plan": "s4/S4_ROOT_RUN.md",
|
||||
"formal_acceptance": false,
|
||||
"original_unit_complete": false,
|
||||
"phase_order": [
|
||||
{
|
||||
"priority": 1,
|
||||
"phase": "APPLY_COMMANDS",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "APPLY_COMMANDS",
|
||||
"handler_id": "simulation_runtime.commands",
|
||||
"function": "_process_tick_commands",
|
||||
"registration_line": 369
|
||||
}
|
||||
],
|
||||
"power": "Stop/resume core unchanged, but if fixture reaches a facility through guest candidate/connector routes or staff arrival, pins/function equality alone do not prove the same stopped-service boundary. Root must inspect route and arrival observations.",
|
||||
"destruction": "Command-before-completion and incident-after-completion order unchanged; infrastructure/connector destruction can alter selected/access path and arrival, so only those route-dependent cases need current applicability confirmation.",
|
||||
"exit": "Release callbacks unchanged; MOVING target selection/arrival/overdue exit can use the changed paths, so confirm their raw state and arrival minute before reuse.",
|
||||
"path_service": "Batch only with connectors, default layers and empty access; settled tree path/cost, fallback on unusable tree/wrapped cost. Caller estimate can affect arrival even though phase functions match.",
|
||||
"verdict": "No affected case accepted from summaries alone; raw source/config/input/environment evidence remains a Root prerequisite."
|
||||
"behavior": "Previous minute: commands → _process_tick_commands:5743. Operations gate requests current tick abort and returns before Clock changes; otherwise commands apply for minute+1."
|
||||
},
|
||||
"runtime_logical_change_groups": 4,
|
||||
"runtime_diff_note": "Default git diff emits 5 textual hunks: batch begin/end split into two; four logical change groups in commander direction."
|
||||
}
|
||||
{
|
||||
"priority": 2,
|
||||
"phase": "TIME_BOUNDARIES",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "TIME_BOUNDARIES",
|
||||
"handler_id": "simulation_runtime.0_weather",
|
||||
"function": "_advance_weather",
|
||||
"registration_line": 366
|
||||
},
|
||||
{
|
||||
"phase": "TIME_BOUNDARIES",
|
||||
"handler_id": "simulation_runtime.a_upkeep",
|
||||
"function": "_advance_facility_upkeep",
|
||||
"registration_line": 368
|
||||
},
|
||||
{
|
||||
"phase": "TIME_BOUNDARIES",
|
||||
"handler_id": "simulation_runtime.operations",
|
||||
"function": "_advance_operations_time",
|
||||
"registration_line": 1766
|
||||
}
|
||||
],
|
||||
"behavior": "After APPLY: absolute_minute += 1, _sync_calendar_fields, _handle_time_boundaries:254 emits settlement_requested(completed_day) then day_started at00:00, before TIME_BOUNDARIES handlers. Handler order: weather, upkeep, operations. Runtime upkeep:1855; operations:1898 → coordinator _process_minute_boundaries:882: 00:00 upkeep, daily close, 06:00 morning, demand, arrivals (conditional boundaries and early returns)."
|
||||
},
|
||||
{
|
||||
"priority": 3,
|
||||
"phase": "MANA",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "MANA",
|
||||
"handler_id": "simulation_runtime.mana",
|
||||
"function": "_advance_mana",
|
||||
"registration_line": 379
|
||||
}
|
||||
],
|
||||
"behavior": "Runtime _advance_mana:10694: proxy preflight → mana_network advance → mana_power_projection.apply → MANA_STATE_CHANGED events."
|
||||
},
|
||||
{
|
||||
"priority": 4,
|
||||
"phase": "CONSTRUCTION",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "CONSTRUCTION",
|
||||
"handler_id": "simulation_runtime.construction",
|
||||
"function": "_advance_construction",
|
||||
"registration_line": 384
|
||||
}
|
||||
],
|
||||
"behavior": "Construction:8064 follows power and precedes logistics."
|
||||
},
|
||||
{
|
||||
"priority": 5,
|
||||
"phase": "LOGISTICS",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "LOGISTICS",
|
||||
"handler_id": "simulation_runtime.logistics",
|
||||
"function": "_advance_inventory_and_logistics",
|
||||
"registration_line": 389
|
||||
}
|
||||
],
|
||||
"behavior": "Logistics:8472 precedes completion."
|
||||
},
|
||||
{
|
||||
"priority": 6,
|
||||
"phase": "FACILITY_COMPLETION",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "FACILITY_COMPLETION",
|
||||
"handler_id": "simulation_runtime.facilities",
|
||||
"function": "_advance_facilities",
|
||||
"registration_line": 394
|
||||
}
|
||||
],
|
||||
"behavior": "Runtime _advance_facilities:8482: facility_service.advance_one_minute then kitchen. FacilityService _prepare_service_for_tick:853 checks BROKEN, related_facility_operating (RELATED_FACILITY_INACTIVE), power_available (NO_POWER), staff grace. Only ACTIVE services advance (:569). _complete_service:895 → Runtime _complete_service_transaction:11769 → _apply_service_transaction:11785 posts SERVICE_SALE / SERVICE_CASH_SWEEP at the post-increment minute (:11826–11838)."
|
||||
},
|
||||
{
|
||||
"priority": 7,
|
||||
"phase": "VITALS_AND_ENVIRONMENT",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "VITALS_AND_ENVIRONMENT",
|
||||
"handler_id": "simulation_runtime.guest_vitals",
|
||||
"function": "_advance_guest_vitals",
|
||||
"registration_line": 399
|
||||
}
|
||||
],
|
||||
"behavior": "Guest vitals:8488 follows completion."
|
||||
},
|
||||
{
|
||||
"priority": 8,
|
||||
"phase": "INCIDENTS_AND_EVENTS",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "INCIDENTS_AND_EVENTS",
|
||||
"handler_id": "simulation_runtime.authority_incidents",
|
||||
"function": "_advance_authority_incidents",
|
||||
"registration_line": 409
|
||||
},
|
||||
{
|
||||
"phase": "INCIDENTS_AND_EVENTS",
|
||||
"handler_id": "simulation_runtime.defense",
|
||||
"function": "_advance_defense",
|
||||
"registration_line": 414
|
||||
},
|
||||
{
|
||||
"phase": "INCIDENTS_AND_EVENTS",
|
||||
"handler_id": "simulation_runtime.relationship_events",
|
||||
"function": "_advance_relationship_events",
|
||||
"registration_line": 419
|
||||
}
|
||||
],
|
||||
"behavior": "String-sorted authority_incidents:8551 → defense:8577 → relationship_events:8615; after completion/charging."
|
||||
},
|
||||
{
|
||||
"priority": 9,
|
||||
"phase": "FACILITY_QUEUES",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "FACILITY_QUEUES",
|
||||
"handler_id": "simulation_runtime.guest_queues",
|
||||
"function": "_advance_guest_queues",
|
||||
"registration_line": 404
|
||||
}
|
||||
],
|
||||
"behavior": "_advance_guest_queues:8502 releases closed queues first (_release_closed_business_queues:12624); closed queues spend no patience (:8516–8517)."
|
||||
},
|
||||
{
|
||||
"priority": 10,
|
||||
"phase": "AI_DECISIONS",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "AI_DECISIONS",
|
||||
"handler_id": "simulation_runtime.staff_ai",
|
||||
"function": "_advance_staff_ai",
|
||||
"registration_line": 424
|
||||
}
|
||||
],
|
||||
"behavior": "_advance_staff_ai:8658: prune elevator waits, elevators, rescue, staff_service, prune waits, staff_commute (shift handover), staffing sync, cleaning, fatigue, rescue and staffing sync again, then _advance_guest_ai_decisions:8738. DECIDING PLANNED_EXIT → LEAVING; despawn occurs only on later minute (:8760–8762)."
|
||||
},
|
||||
{
|
||||
"priority": 11,
|
||||
"phase": "PUBLISH_SNAPSHOT",
|
||||
"status": "observed-current",
|
||||
"handlers": [
|
||||
{
|
||||
"phase": "PUBLISH_SNAPSHOT",
|
||||
"handler_id": "simulation_runtime.snapshot",
|
||||
"function": "_publish_snapshot",
|
||||
"registration_line": 374
|
||||
},
|
||||
{
|
||||
"phase": "PUBLISH_SNAPSHOT",
|
||||
"handler_id": "simulation_runtime.zz_save_checkpoints",
|
||||
"function": "_process_save_checkpoints",
|
||||
"registration_line": 431
|
||||
}
|
||||
],
|
||||
"behavior": "snapshot:12476 then zz_save_checkpoints:4514; persistence follows publication."
|
||||
}
|
||||
],
|
||||
"safety_cases": [
|
||||
{
|
||||
"item": "No charge while paused NO_POWER or RELATED",
|
||||
"status": "original",
|
||||
"phase": "FACILITY_COMPLETION",
|
||||
"source": "FacilityService _prepare_service_for_tick:853, ACTIVE-only gate:569, _complete_service:895",
|
||||
"priority": "Preparation before advance/completion/payment",
|
||||
"proof": "R/s4.json isolated power; I C and R/s2a.json dependency hold",
|
||||
"approval": "Dependency hold approved; both D05(a) options preserve safety"
|
||||
},
|
||||
{
|
||||
"item": "Double-settlement idempotency",
|
||||
"status": "original",
|
||||
"phase": "TIME_BOUNDARIES",
|
||||
"source": "coordinator _process_daily_close:1125; _day_summaries replay:1127–1130; daily-close:N:1137",
|
||||
"priority": "Before facility completion",
|
||||
"proof": "I C; R/s2a.json same-boundary replay and separate-PID restore, unchanged accounting"
|
||||
},
|
||||
{
|
||||
"item": "Orphan reservation release",
|
||||
"status": "original",
|
||||
"phase": "APPLY_COMMANDS / FACILITY_QUEUES",
|
||||
"source": "Runtime _execute_leave_facility_queue:7553 (release keys:7565–7569); _leave_guest_queue_boundary:9178; _release_closed_business_queues:12624; _release_closed_business_request:12642",
|
||||
"priority": "Command release before completion; closed-queue release afterward; closed patience not spent",
|
||||
"proof": "R/s3.json B2a/B2b/B3/B4b; I C; R/s2a.json reservation/service identity and restore"
|
||||
}
|
||||
],
|
||||
"proof_legend": {
|
||||
"label": "Root-measured",
|
||||
"R": "B/audit-support/p04-raw-collect-r22",
|
||||
"I": "B/p04-evidence/index.json schema2; native_bundle/raw_references/versions/source_map/environment bind exact proofs",
|
||||
"pins": "REPAIR29_STATIC_SOURCE.json proof_pins; R/MANIFEST.json pins series and relocation, series retain raw paths/hashes"
|
||||
},
|
||||
"authority_statuses": {
|
||||
"original": [
|
||||
"P04-01 safety acceptance",
|
||||
"BASELINE:64,67,71,72,183"
|
||||
],
|
||||
"approved": [
|
||||
"A01 midnight ownership upkeep",
|
||||
"D05-P04-DEPENDENCY",
|
||||
"D05-P04-SHIFT-1800",
|
||||
"D-034 direct business closure"
|
||||
],
|
||||
"pending D05": [
|
||||
"a power vs closure/dependency",
|
||||
"b destruction",
|
||||
"c exit",
|
||||
"d cost time/day beyond A01 and18:00"
|
||||
],
|
||||
"observed-current": "All phase and source behavior observations; not approval"
|
||||
},
|
||||
"full178_applicability_context": "REPAIR29_STATIC_SOURCE.json full_source_static_comparison: full178 selected1339 includes f5; one test-source mismatch (test_required_kitchen.gd), no game-source mismatch; preserve Runner applicability binding, no blanket1338 identity or a61 full proof."
|
||||
}
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,95 @@
|
||||
# P04-01 S3 code-ready preparation
|
||||
|
||||
変更は本ディレクトリのGD、Python wrapper、本書の3本のみ。製品修正0。
|
||||
本提出は原P04-01の残る5条件の検証コード準備であり、原成果の加点は0。
|
||||
原7領域、3安全結果、15条件＋EV、30/88、部分点0を維持する。
|
||||
S1r02、S2ar03、S2b native r02は保持し再実行しない。
|
||||
|
||||
## 固定入力と6実ケース
|
||||
|
||||
最初に供給SOURCE_MANIFEST.jsonの7ファイルについて全byte SHA256とbyte数の一致を確認した。
|
||||
manifest自体のSHAは `d4993398f7619ca37bcd64c32b79bdee892d44e31f332cc0dd5f31fb7bc28314`。
|
||||
wrapperは同manifest、7供給ファイル、Rootの現行source audit、S2bの3ファイル、本3ファイルをpinする。
|
||||
選択rootの全sourceもsource_refsでpinし、その後にQAを1件だけ明示overrideする。
|
||||
override先はS2bと同じ `tests/s3/test_runtime_staff_assignment.gd`。
|
||||
これはprivate stageだけのoverrideで、継承先ActorHardeningを置き換えない。
|
||||
|
||||
| case | seed | 境界と検証対象 |
|
||||
| --- | --- | --- |
|
||||
| B1 | 420410 | 959に開始済Aと実queue B。960に有限mana枯渇と対象への直接休業。960/961はAの進捗・同じ予約を保持し課金0、Bはrelease・在庫返却・忍耐不消費。元reserveへ公開復旧し、休業のまま962にAだけ1回課金。963で重複なし。 |
|
||||
| B2a | 420430 | 原定義のduration/priceで960完了・課金後に通常退出、961 Despawnで二重課金なし。 |
|
||||
| B2b | 420431 | 959の実queueを960の公開leaveでadmission前にrelease。961通常退出、962 Despawn。課金0。 |
|
||||
| B3 | 420435 | 元traveler.base_patience、実サーバー不足queue。template同様にfixture時刻＋base_patienceを境界とし、通常tickで枯渇。ABANDONING→DECIDING→LEAVING→Despawn、返却1回・課金0。planned_exitは元templateの境界値。 |
|
||||
| B4a | 420420 | 元diagnostic automatic DEFENSE Event、foreground=false、durability=0。960の完了・1回課金が後段Event破壊に先行。961で重複なし。 |
|
||||
| B4b | 420421 | 元durationの入場offset1。960は進捗後にEvent破壊、961でFAILED・release・返却1回、課金0。 |
|
||||
|
||||
7件目は作らない。各caseはfresh Runtime/Clock/GameState、厨房は現行ActorHardeningと
|
||||
required_kitchen_setupの物理配置FLEX fixture。自然hire/unlockの証拠ではない。
|
||||
サービス価格・時間は定義取得、capacity/staff_min変更なし、忍耐・elapsedの直接変更なし。
|
||||
旧1299 wrapper、未承認18:00 predicate、本番Operations enableは使用しない。
|
||||
|
||||
D-034（供給DESIGN_DECISIONS.md 252–262行、特に258行）の直接休業では開始済を継続する。
|
||||
関連厨房不稼働によるpauseとは区別する。interruption_reasonは実snapshotのまま残し、
|
||||
RELATED_FACILITY_INACTIVEをNO_POWERへ置換しない。
|
||||
enum snapshotは各create_snapshotのString定義に従い、stateをintへ変換しない。
|
||||
|
||||
## Rawと正式保存
|
||||
|
||||
Writerの各before/after/next、B1 recovered/duplicate_guard、B2b/B3 despawnを正式保存する（計22slot）。
|
||||
各点の全Runtime typed snapshot、入力・seed・serial・実ID・Guest/wallet/planned_exit、
|
||||
service/request/reservation、在庫、ledger、Event instanceを無加工の.varとJSONで一度だけ保存する。
|
||||
各tickの全11phase開始点も同様に保存し、phase順と境界内部の状態を残す。
|
||||
case/indexはrawのpath/SHAを参照し、巨大snapshotのaggregate多重コピーを作らない。
|
||||
全体rawをobsolete 500000-byte capに合わせて省略・圧縮しない。
|
||||
public command入力と結果、継承fixture分を含むcommand_completed結果をcase別rawに保存する。
|
||||
fixture自身の公開command入力・IDは全Runtime command queue履歴にも残る。
|
||||
Operationsは正式snapshotのdisabled/coordinator={}と実coordinator不在を別々に記録し、無関係なgetterを呼ばない。
|
||||
|
||||
公開SaveService.save_snapshot/inspect_snapshotの成功・全typed一致・live Runtime不変を確認する。
|
||||
Readerは別PID/profileで22slotの全member（journal.log/manifest.json/thumbnail.png/world.bin）をコピーし、
|
||||
原/copyの全SHA、load/replay後の両者不変を確認する。余分なmember/directoryは失敗する。
|
||||
全点を公開load/restoreしてWriterの全Runtime typed bytesと一致させる。
|
||||
さらに各beforeをfresh loadし、通常clockで同じ全境界を再生する。
|
||||
B1のfuture recoveryについてserial、idempotency key、command ID、issue minute、元reserveをbeforeに保存する。
|
||||
Readerはserial0から始め、保存済probe入力を復元して未来コマンドだけを実行する。setup keyを再利用しない。
|
||||
全pointとphaseのtyped比較からフィールドを削除せず、JSON正規化や要約への置換も行わない。
|
||||
再生中のphaseはWriterと同じ順・全typed状態、pointは入力・receiptまで含む全typed一致を必須とする。
|
||||
|
||||
## Root手順
|
||||
|
||||
Rootだけが現行製品1338でfresh plan→nativeを1回実行する。
|
||||
worker checkout planを製品nativeへ転用しない。既存plan/outputは上書きしない。
|
||||
|
||||
```sh
|
||||
export BUILD_OUTPUT_DIR='/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build'
|
||||
export PYTHONDONTWRITEBYTECODE=1
|
||||
python3 docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py --check-only --plan "$BUILD_OUTPUT_DIR/p04-s3-root-plan-r01.json" --output "$BUILD_OUTPUT_DIR/p04-s3-native-r01"
|
||||
python3 docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py --plan "$BUILD_OUTPUT_DIR/p04-s3-root-plan-r01.json" --output "$BUILD_OUTPUT_DIR/p04-s3-native-r01"
|
||||
```
|
||||
|
||||
製品root既定値: `/Users/korizatou114/Projects/とりにく工房ゲーム制作部`。
|
||||
出力先: `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s3-native-r01/`。
|
||||
一つのprivate stage/cacheでimport1回、parse1回、Writer1回、別PID Reader1回。
|
||||
S2bのstrict guard、policy/watchdog、marker/diagnostic/ownership/audio gateを踏襲する。
|
||||
source/cacheは別inode、owned finally後に全source/default profile/private source/pin/original cacheを検査する。
|
||||
Writer formal slot不変も失敗時を含めて検査し、4phase・4実PIDの終了とreceipt PIDを必須とする。
|
||||
check-onlyはengine0、private/default profileアクセス0、所有helper未読込。cache receiptの実読取エラーはplanに残しnativeを拒否する。
|
||||
|
||||
## 残gapとworker検証
|
||||
|
||||
workerはpy_compile、check-only、型/参照の静的確認だけを行う。
|
||||
Godot parse・native・全回帰・Runner操作・git書込み・他agent起動は0。
|
||||
GDの正式parseと6ケースの実成立、全正式Save/Load/replay一致はRoot nativeまで未実証。
|
||||
S3 raw取得後のcollector/A仕上げ、原15＋EV全証拠の適用性照合、D05の原未確定規約、
|
||||
必要なOS別条件、正式独立レビュー・統合は本提出で確定しない。
|
||||
未知の原規約を新たに作らずpendingとし、P04全体完成を主張しない。
|
||||
|
||||
worker実施記録: py_compile成功（出力はtask buildのp04-s3-worker-pycompile.pyc）。
|
||||
GDの明示型変数・loop・関数戻り値、禁止されたpatience/elapsed直接代入なし、継承先literal参照、
|
||||
15のservice method参照、Runtime method/signal参照、括弧整合を静的確認した。Godot parseの代替ではない。
|
||||
製品rootでのcheck-onlyはtools/run_all_tests.py読取りがPermissionErrorでexit2。
|
||||
明示worktree rootではcheck-only成功（source1300、QA1、fixed pins18、engine0）。
|
||||
終了済cacheのrunner-ended.jsonはPermissionErrorであり、planのcache_accessに実path/errorを記録した。
|
||||
製品1338のcheck-only成功やcache再利用の成立は主張しない。Rootが自身の環境で確認する。
|
||||
初回worktree planはbuild/p04-s3-worker-check-r01.json。最終3ファイルのpin確認にはfreshな
|
||||
build/p04-s3-worker-check-r02.jsonを使用し、r01は保持する。
|
||||
+480
@@ -0,0 +1,480 @@
|
||||
extends "res://tests/s3/test_runtime_actor_hardening.gd"
|
||||
|
||||
const CASES: Array[String] = ["B1", "B2a", "B2b", "B3", "B4a", "B4b"]
|
||||
const SEEDS: Dictionary = {"B1": 420410, "B2a": 420430, "B2b": 420431, "B3": 420435, "B4a": 420420, "B4b": 420421}
|
||||
const GUEST: StringName = &"p04.s3.guest.a"
|
||||
const REQUEST: StringName = &"p04.s3.request.a"
|
||||
const QUEUED_GUEST: StringName = &"p04.s3.guest.b"
|
||||
const QUEUED_REQUEST: StringName = &"p04.s3.request.b"
|
||||
const SERVERS: Array[StringName] = [&"p04.order.server.a", &"p04.order.server.b"]
|
||||
var _evidence_dir: String = ""
|
||||
var _mode: String = ""
|
||||
var _case: String = ""
|
||||
var _serial: int = 0
|
||||
var _facility_id: StringName = &""
|
||||
var _service_id: StringName = &""
|
||||
var _boundary: int = 960
|
||||
var _price: int = 0
|
||||
var _duration: int = 0
|
||||
var _patience: int = 0
|
||||
var _reserve: int = 0
|
||||
var _recovery: Dictionary = {}
|
||||
var _commands: Array = []
|
||||
var _results: Array = []
|
||||
var _receipts: Array = []
|
||||
var _phases: Array = []
|
||||
var _points: Dictionary = {}
|
||||
var _branches: Dictionary = {}
|
||||
var _slots: Dictionary = {}
|
||||
|
||||
func _run() -> void:
|
||||
_evidence_dir = OS.get_environment("THE_TREE_S3_EVIDENCE")
|
||||
_mode = OS.get_environment("THE_TREE_S3_MODE")
|
||||
if _evidence_dir.is_empty() or _mode not in ["writer", "reader"]:
|
||||
quit(2)
|
||||
return
|
||||
_expect(DirAccess.make_dir_recursive_absolute(_evidence_dir) == OK, "external evidence directory")
|
||||
if _mode == "writer":
|
||||
for branch: String in CASES:
|
||||
_case = branch
|
||||
_writer_case()
|
||||
else:
|
||||
_reader()
|
||||
_write(_mode, {&"pid": OS.get_process_id(), &"profile": OS.get_user_data_dir(), &"slots": _slots,
|
||||
&"branches": _branches, &"checks": _checks, &"failures": _failures,
|
||||
&"whole_goal_accepted": false, &"unit_accepted": false}, true)
|
||||
_cleanup()
|
||||
print("S3 closure: %d checks, %d failures" % [_checks, _failures])
|
||||
quit(1 if _failures else 0)
|
||||
|
||||
func _fresh() -> void:
|
||||
_serial = 0
|
||||
_facility_id = &""
|
||||
_service_id = &""
|
||||
_boundary = 960
|
||||
_price = 0
|
||||
_duration = 0
|
||||
_patience = 0
|
||||
_reserve = 0
|
||||
_recovery = {}
|
||||
_commands = []
|
||||
_results = []
|
||||
_receipts = []
|
||||
_phases = []
|
||||
_points = {}
|
||||
_reset_runtime(SEEDS[_case])
|
||||
_runtime.configure_save_policy({&"enabled": false, &"daily_checkpoint_enabled": false})
|
||||
_runtime.command_completed.connect(func(result: CommandResult) -> void:
|
||||
_results.append({&"minute": _clock.absolute_minute, &"result": result.to_dictionary()})
|
||||
_expect(result.is_success(), "actual public command completion " + str(result.command_id))
|
||||
)
|
||||
|
||||
func _cmd(kind: StringName, payload: Dictionary, at: int = -1) -> CommandResult:
|
||||
_serial += 1
|
||||
var key: StringName = StringName("p04.s3.%s.command.%d" % [_case, _serial])
|
||||
var result: CommandResult = _runtime.submit_command(kind, payload, &"player", &"", 10, at, key)
|
||||
_commands.append({&"serial": _serial, &"kind": kind, &"payload": payload.duplicate(true),
|
||||
&"at": at, &"issued_at": _clock.absolute_minute, &"idempotency_key": key, &"result": result.to_dictionary()})
|
||||
_expect(result.is_success(), "public command " + String(kind))
|
||||
return result
|
||||
|
||||
func _queue(guest_id: StringName, request_id: StringName, exit_at: int) -> void:
|
||||
_cmd(&"spawn_guest", {&"guest_id": guest_id, &"guest_type_id": &"traveler", &"gold": _price * 2,
|
||||
&"options": {&"state": GuestRuntime.State.DECIDING, &"current_cell": Vector3i.ZERO, &"planned_exit_at": exit_at}})
|
||||
_cmd(&"create_service_request", {&"facility_id": _facility_id, &"request_id": request_id, &"guest_ids": [guest_id]})
|
||||
var guest: GuestRuntime = _runtime.guest_service.get_guest(guest_id)
|
||||
var request: ServiceRequest = _runtime.facility_service.get_request(request_id)
|
||||
_expect(guest != null and request != null, "actual Guest and request exist")
|
||||
if guest == null or request == null: return
|
||||
_expect(guest.state == GuestRuntime.State.QUEUING and guest.queue_request_id == request_id, "actual queued ownership before advancing clock")
|
||||
_expect(request.quoted_price == _price and request.service_minutes == _duration and request.reserved_inventory_ids.size() == 1, "definition price/duration and one meal reservation")
|
||||
for id: StringName in request.reserved_inventory_ids:
|
||||
var reservation: InventoryReservation = _runtime.inventory_service.get_reservation(id)
|
||||
_expect(reservation != null and reservation.is_active() and reservation.requester_id == request_id, "public queue actually reserves meal")
|
||||
|
||||
func _prepare() -> bool:
|
||||
_fresh()
|
||||
var facility: FacilityInstance = _build_cafeteria(true)
|
||||
if facility == null: return false
|
||||
_facility_id = facility.instance_id
|
||||
var definition: FacilityDefinition = _runtime.definition_registry.get_facility(facility.definition_id)
|
||||
var traveler: GuestDefinition = _runtime.guest_service.get_definition(&"traveler")
|
||||
_price = definition.base_price
|
||||
_duration = definition.base_service_minutes
|
||||
_patience = traveler.base_patience
|
||||
if _case == "B3":
|
||||
_expect(_patience > 1 and _patience < 240, "original patience precedes reservation expiry")
|
||||
if _patience <= 1 or _patience >= 240: return false
|
||||
_boundary = _clock.absolute_minute + _patience
|
||||
_expect(facility.operator_open and facility.is_within_opening_hours(_clock.absolute_minute) and facility.related_facility_operating and facility.active_staff_ids.size() < facility.staff_min, "real no-server queue with operating kitchen")
|
||||
else:
|
||||
for id: StringName in SERVERS:
|
||||
_cmd(&"register_staff", {&"staff_id": id, &"role_id": &"server", &"options": {&"state": StaffRuntime.State.OFF_DUTY, &"current_cell": Vector3i.ZERO}})
|
||||
_cmd(&"set_staff_work_assignment", {&"staff_id": id, &"template_id": &"DAY", &"facility_id": _facility_id})
|
||||
var queue_at: int = 959 if _case == "B2b" else 960 - _duration - 1 + (1 if _case == "B4b" else 0)
|
||||
_expect(queue_at > _clock.absolute_minute, "normal ticks reach queue time")
|
||||
_clock.advance_minutes(queue_at - _clock.absolute_minute)
|
||||
_expect(facility.active_staff_ids == SERVERS, "unchanged real server attendance")
|
||||
for id: StringName in SERVERS:
|
||||
var worker: StaffRuntime = _runtime.staff_service.get_staff(id)
|
||||
_expect(_runtime.staff_service.requires_attendance(id) and StaffCommuteService.is_at_facility(worker, facility) and worker.current_cell != Vector3i.ZERO, "ordinary public server commute")
|
||||
if _case in ["B4a", "B4b"]:
|
||||
var action: EventAction = EventAction.new().configure(&"p04.destroy.action", EventAction.Type.SET_FACILITY_STATE, {&"facility_id": _facility_id, &"conditions": {&"durability": 0, &"suspension_reason": &"DESTROYED"}})
|
||||
_cmd(&"register_event_definition", {&"definition": {&"event_id": &"p04.destroy.event", &"category": &"DEFENSE", &"foreground": false, &"transaction_policy": &"ROLLBACK_ALL", &"automatic_actions": [action.create_snapshot()]}})
|
||||
_expect(_stock(facility.local_inventory_id, &"ingredient/basic_meal", 1, &"p04.order.shift.stock"), "original public stock helper")
|
||||
var exit_at: int = _boundary if _case in ["B2a", "B2b", "B3"] else _boundary + _duration
|
||||
_queue(GUEST, REQUEST, exit_at)
|
||||
if _case == "B3":
|
||||
_clock.advance_minutes(_patience - 1)
|
||||
var guest: GuestRuntime = _runtime.guest_service.get_guest(GUEST)
|
||||
_expect(guest.state == GuestRuntime.State.QUEUING and guest.patience_remaining == 1 and _runtime.facility_service.get_active_services(_facility_id).is_empty(), "normal ticks exhaust original patience, no manual mutation")
|
||||
elif _case == "B2b":
|
||||
_cmd(&"leave_facility_queue", {&"facility_id": _facility_id, &"request_id": REQUEST}, 960)
|
||||
else:
|
||||
_clock.advance_one_minute()
|
||||
var active: Array = _runtime.facility_service.get_active_services(_facility_id)
|
||||
_expect(active.size() == 1, "one public service starts")
|
||||
if active.size() != 1: return false
|
||||
var service: ServiceInstance = active[0]
|
||||
_service_id = service.service_id
|
||||
var offset: int = 1 if _case == "B4b" else 0
|
||||
_expect(service.duration_minutes == _duration and service.price_snapshot == _price and service.started_at + _duration == 960 + offset, "original service completion alignment")
|
||||
_clock.advance_minutes(959 - _clock.absolute_minute)
|
||||
_expect(service.elapsed_minutes == _duration - 1 - offset, "measured boundary-before progress")
|
||||
if _case == "B1":
|
||||
_expect(_stock(facility.local_inventory_id, &"ingredient/basic_meal", 1, &"p04.s3.stock.b"), "second actual meal at 959")
|
||||
_queue(QUEUED_GUEST, QUEUED_REQUEST, 960 + _duration)
|
||||
_reserve = _state.get_resource(&"mana")
|
||||
_expect(_reserve > 0, "original positive finite mana reserve")
|
||||
_cmd(&"change_resources", {&"deltas": {&"mana": -_reserve}}, 960)
|
||||
_cmd(&"set_facility_policy", {&"facility_id": _facility_id, &"patch": {&"business_open": false}}, 960)
|
||||
var snapshot: Dictionary = _runtime.create_snapshot()
|
||||
_recovery = {&"serial": _serial + 1, &"kind": &"change_resources", &"payload": {&"deltas": {&"mana": _reserve}},
|
||||
&"idempotency_key": StringName("p04.s3.%s.command.%d" % [_case, _serial + 1]),
|
||||
&"command_id": snapshot[&"systems"][&"runtime"][&"next_command_id"], &"at": -1, &"issue_minute": 961}
|
||||
if _case in ["B4a", "B4b"]:
|
||||
_cmd(&"enqueue_event", {&"event_id": &"p04.destroy.event", &"actor_ids": [], &"options": {&"event_instance_id": &"p04.destroy.instance"}})
|
||||
_expect(_clock.absolute_minute == _boundary - 1, "exact boundary-before time")
|
||||
return _clock.absolute_minute == _boundary - 1
|
||||
|
||||
func _connect_observations() -> void:
|
||||
_runtime.economy_service.transaction_posted.connect(func(id: StringName, entries: Array) -> void:
|
||||
var rows: Array = []
|
||||
for entry: LedgerEntry in entries: rows.append(entry.to_dictionary())
|
||||
_receipts.append({&"id": id, &"minute": _clock.absolute_minute, &"entries": rows})
|
||||
)
|
||||
_clock.tick_phase_started.connect(func(phase: int, minute: int) -> void:
|
||||
var label: String = "phase-%d-%s" % [minute, SimulationKernel.TickPhase.keys()[phase]]
|
||||
var row: Dictionary = _capture()
|
||||
row[&"phase"] = SimulationKernel.TickPhase.keys()[phase]
|
||||
_assert_phase(row)
|
||||
_phases.append(_write(label, row))
|
||||
)
|
||||
|
||||
func _assert_phase(point: Dictionary) -> void:
|
||||
if point[&"minute"] != _boundary: return
|
||||
var phase: String = point[&"phase"]
|
||||
if _case in ["B4a", "B4b"]:
|
||||
if phase == "INCIDENTS_AND_EVENTS":
|
||||
_expect(point[&"facility"][&"durability"] > 0 and point[&"event"][&"state"] == "QUEUED", "facility phase precedes diagnostic destruction")
|
||||
_expect(point[&"service"][&"state"] == ("COMPLETED" if _case == "B4a" else "ACTIVE"), "actual service state before Event phase")
|
||||
_expect(point[&"receipts"].size() == (1 if _case == "B4a" else 0), "completion payment occurs before destruction, not while stopped")
|
||||
if phase == "FACILITY_QUEUES":
|
||||
_expect(point[&"facility"][&"durability"] == 0 and point[&"event"][&"state"] == "COMPLETED", "Event committed before queue phase")
|
||||
if _case == "B3" and phase == "AI_DECISIONS":
|
||||
var guest: Dictionary = point[&"guests"][String(GUEST)]
|
||||
_expect(guest[&"state"] == "ABANDONING" and guest[&"patience_remaining"] == 0 and guest[&"queue_request_id"].is_empty(), "actual auto-abandon before AI redecision")
|
||||
if _case == "B2b" and phase == "FACILITY_COMPLETION":
|
||||
_expect(point[&"requests"][String(REQUEST)].is_empty() and point[&"active_services"] == 0 and point[&"available_meals"] == 1, "scheduled leave released before admission")
|
||||
if _case == "B1" and phase == "AI_DECISIONS":
|
||||
var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
|
||||
_expect(not queued.is_empty() and queued[&"queue_request_id"].is_empty() and queued[&"patience_remaining"] == _patience, "direct closure releases B before AI with no patience penalty")
|
||||
|
||||
func _capture() -> Dictionary:
|
||||
var snapshot: Dictionary = _runtime.create_snapshot()
|
||||
var operations: Dictionary = snapshot[&"systems"][&"runtime"][&"operations"]
|
||||
var facility: FacilityInstance = _runtime.facility_service.get_instance(_facility_id)
|
||||
var service: ServiceInstance = _runtime.facility_service.get_service(_service_id)
|
||||
var event: EventInstance = _runtime.event_service.get_instance(&"p04.destroy.instance")
|
||||
var actors: Dictionary = {}
|
||||
var requests: Dictionary = {}
|
||||
var wallets: Dictionary = {}
|
||||
for id: StringName in [GUEST, QUEUED_GUEST]:
|
||||
var guest: GuestRuntime = _runtime.guest_service.get_guest(id)
|
||||
actors[String(id)] = guest.create_snapshot() if guest != null else {}
|
||||
wallets[String(id)] = _runtime.economy_service.get_balance(StringName("GUEST_WALLET:" + String(id)))
|
||||
for id: StringName in [REQUEST, QUEUED_REQUEST]:
|
||||
var request: ServiceRequest = _runtime.facility_service.get_request(id)
|
||||
requests[String(id)] = request.create_snapshot() if request != null else {}
|
||||
var reservations: Array = []
|
||||
for reservation: InventoryReservation in _runtime.inventory_service.get_reservations(false): reservations.append(reservation.create_snapshot())
|
||||
var ledger: Array = []
|
||||
for entry: LedgerEntry in _runtime.economy_service.get_entries(): ledger.append(entry.to_dictionary())
|
||||
return {&"snapshot": snapshot, &"minute": _clock.absolute_minute,
|
||||
&"inputs": {&"case": _case, &"seed": SEEDS[_case], &"serial": _serial, &"facility_id": _facility_id, &"service_id": _service_id,
|
||||
&"boundary": _boundary, &"price": _price, &"duration": _duration, &"patience": _patience, &"reserve": _reserve, &"recovery": _recovery.duplicate(true),
|
||||
&"kitchen_premise": "ActorHardening physical FLEX fixture; not natural hire/unlock"},
|
||||
&"facility": facility.create_snapshot(), &"service": service.create_snapshot() if service != null else {},
|
||||
&"event": event.create_snapshot() if event != null else {}, &"guests": actors, &"requests": requests, &"wallets": wallets,
|
||||
&"reservations": reservations, &"ledger": ledger, &"receipts": _receipts.duplicate(true),
|
||||
&"player_cash": _runtime.economy_service.get_balance(_runtime.PLAYER_CASH_ACCOUNT),
|
||||
&"available_meals": _runtime.inventory_service.available_quantity(facility.local_inventory_id, &"ingredient/basic_meal"),
|
||||
&"active_services": _runtime.facility_service.get_active_services(_facility_id).size(),
|
||||
&"operations_enabled": operations[&"enabled"], &"saved_coordinator": operations[&"coordinator"],
|
||||
&"actual_coordinator_absent": _runtime.operations_coordinator == null, &"unrelated_getters_called": false}
|
||||
|
||||
func _labels() -> Array[String]:
|
||||
if _case == "B1": return ["before", "after", "next", "recovered", "duplicate_guard"]
|
||||
if _case in ["B2b", "B3"]: return ["before", "after", "next", "despawn"]
|
||||
return ["before", "after", "next"]
|
||||
|
||||
func _advance(label: String) -> void:
|
||||
if label == "recovered":
|
||||
_expect(_serial + 1 == _recovery[&"serial"] and _clock.absolute_minute == _recovery[&"issue_minute"], "saved future recovery serial and issue minute")
|
||||
var result: CommandResult = _cmd(_recovery[&"kind"], _recovery[&"payload"], _recovery[&"at"])
|
||||
var command: Dictionary = _commands.back()
|
||||
_expect(result.command_id == _recovery[&"command_id"] and command[&"idempotency_key"] == _recovery[&"idempotency_key"], "same future public recovery command ID/key")
|
||||
_clock.advance_one_minute()
|
||||
|
||||
func _writer_case() -> void:
|
||||
if not _prepare(): return
|
||||
_connect_observations()
|
||||
var before: Dictionary = _capture()
|
||||
_assert_before(before)
|
||||
_save_point("before", before)
|
||||
for label: String in _labels():
|
||||
if label == "before": continue
|
||||
_advance(label)
|
||||
var actual: Dictionary = _capture()
|
||||
_assert_outcome(before, actual)
|
||||
_save_point(label, actual)
|
||||
var branch: Dictionary = {&"points": _points.duplicate(true), &"phases": _phases.duplicate(true),
|
||||
&"commands": _write("commands", {&"submitted": _commands, &"completed_including_fixture": _results})}
|
||||
_branches[_case] = _write("case", branch)
|
||||
|
||||
func _assert_before(point: Dictionary) -> void:
|
||||
_expect(not point[&"operations_enabled"] and point[&"actual_coordinator_absent"] and point[&"saved_coordinator"] == {}, "Operations disabled and actual absence measured")
|
||||
var guest: Dictionary = point[&"guests"][String(GUEST)]
|
||||
_expect(guest[&"planned_exit_at"] >= _boundary, "planned exit does not short-circuit queue/service")
|
||||
var expected_count: int = 2 if _case == "B1" else 1
|
||||
_expect(point[&"reservations"].size() == expected_count, "only actual requested meals reserved")
|
||||
for reservation: Dictionary in point[&"reservations"]:
|
||||
_expect(reservation[&"state"] == "ACTIVE" and reservation[&"purpose"] == "facility_service", "actual ACTIVE reservation before boundary")
|
||||
_expect(point[&"available_meals"] == 0, "all stocked meals are reserved")
|
||||
if _case == "B1":
|
||||
var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
|
||||
_expect(queued[&"state"] == "QUEUING" and queued[&"patience_remaining"] == _patience, "B exists at 959 with unchanged original patience")
|
||||
|
||||
func _assert_reservation(before: Dictionary, point: Dictionary, request_id: StringName, state: String, terminal: int) -> void:
|
||||
var prior: Array = []
|
||||
var current: Array = []
|
||||
for row: Dictionary in before[&"reservations"]:
|
||||
if row[&"requester_id"] == String(request_id): prior.append(row)
|
||||
for row: Dictionary in point[&"reservations"]:
|
||||
if row[&"requester_id"] == String(request_id): current.append(row)
|
||||
_expect(prior.size() == 1 and current.size() == 1, "one original reservation per request")
|
||||
if prior.size() != 1 or current.size() != 1: return
|
||||
_expect(prior[0][&"reservation_id"] == current[0][&"reservation_id"] and current[0][&"state"] == state and current[0][&"terminal_at"] == terminal, "same reservation ID/state/terminal time; no second release")
|
||||
if state == "ACTIVE":
|
||||
_expect(var_to_bytes(prior[0]) == var_to_bytes(current[0]), "entire held reservation unchanged")
|
||||
var request: Dictionary = point[&"requests"][String(request_id)]
|
||||
_expect(not request.is_empty() and request[&"reserved_inventory_ids"].has(current[0][&"reservation_id"]), "active reservation has live request owner")
|
||||
else:
|
||||
_expect(point[&"requests"][String(request_id)].is_empty(), "terminal reservation has no orphan request")
|
||||
if state == "RELEASED":
|
||||
var release_count: int = 0
|
||||
var inventory: Dictionary = point[&"snapshot"][&"systems"][&"runtime"][&"inventory"]
|
||||
for operation: Dictionary in inventory[&"idempotency_results"]:
|
||||
var result: Dictionary = operation[&"result"]
|
||||
if operation[&"action"] == "release" and String(result.get(&"reservation_id", "")) == current[0][&"reservation_id"]:
|
||||
release_count += 1
|
||||
_expect(bool(result.get(&"ok", false)) and result.get(&"quantity", 0) == current[0][&"quantity"], "release returned actual reserved quantity, not an orphan repair/retry")
|
||||
_expect(release_count == 1, "one raw inventory release operation for original reservation")
|
||||
|
||||
func _assert_outcome(before: Dictionary, point: Dictionary) -> void:
|
||||
var minute: int = point[&"minute"]
|
||||
var service: Dictionary = point[&"service"]
|
||||
var guest: Dictionary = point[&"guests"][String(GUEST)]
|
||||
var paid: bool = _case in ["B2a", "B4a"] or (_case == "B1" and minute >= 962)
|
||||
_expect(point[&"wallets"][String(GUEST)] == _price * (1 if paid else 2), "actual wallet delta follows boundary")
|
||||
_expect(point[&"receipts"].size() == (1 if paid else 0), "actual payment notification exactly once or zero")
|
||||
_expect(point[&"player_cash"] == before[&"player_cash"] + (_price if paid else 0), "actual player cash delta exactly matches single price")
|
||||
if not paid:
|
||||
_expect(var_to_bytes(point[&"ledger"]) == var_to_bytes(before[&"ledger"]), "zero ledger charge while stopped or abandoned")
|
||||
if paid:
|
||||
var expected_ledger: Array = before[&"ledger"].duplicate(true)
|
||||
for receipt: Dictionary in point[&"receipts"]: expected_ledger.append_array(receipt[&"entries"])
|
||||
_expect(var_to_bytes(point[&"ledger"]) == var_to_bytes(expected_ledger), "whole ledger delta is exactly actual payment receipt, no extra posting")
|
||||
var completed_at: int = 962 if _case == "B1" else 960
|
||||
_expect(service[&"state"] == "COMPLETED" and service[&"completed_at"] == completed_at, "one actual completion")
|
||||
_assert_reservation(before, point, REQUEST, "CONSUMED", completed_at)
|
||||
_expect(point[&"active_services"] == 0, "completed service releases active slot")
|
||||
if _case == "B1":
|
||||
_expect(not point[&"facility"][&"operator_open"], "direct closure remains in force including recovery")
|
||||
_assert_reservation(before, point, QUEUED_REQUEST, "RELEASED", 960)
|
||||
var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
|
||||
if minute == 960: _expect(not queued.is_empty(), "released B measured on closure tick")
|
||||
if not queued.is_empty():
|
||||
_expect(queued[&"queue_request_id"].is_empty() and queued[&"patience_remaining"] == before[&"guests"][String(QUEUED_GUEST)][&"patience_remaining"], "closure releases B without patience consumption; later natural Despawn is allowed")
|
||||
_expect(point[&"wallets"][String(QUEUED_GUEST)] == _price * 2 and point[&"available_meals"] == 1, "B stock returned once and wallet unchanged")
|
||||
if not paid:
|
||||
_expect(not point[&"facility"][&"power_available"] and service[&"state"] == "PAUSED" and service[&"elapsed_minutes"] == before[&"service"][&"elapsed_minutes"], "outage holds original progress; actual interruption_reason retained in raw")
|
||||
_assert_reservation(before, point, REQUEST, "ACTIVE", -1)
|
||||
elif _case in ["B2b", "B3"]:
|
||||
_assert_reservation(before, point, REQUEST, "RELEASED", _boundary)
|
||||
_expect(point[&"active_services"] == 0 and point[&"available_meals"] == 1, "no service/orphan and exact stock return")
|
||||
if minute == _boundary:
|
||||
_expect(not guest.is_empty() and guest[&"state"] == "DECIDING" and guest[&"queue_request_id"].is_empty(), "automatic redecision after release")
|
||||
if _case == "B3": _expect(guest[&"patience_remaining"] == 0, "normal queue tick exhausted original patience")
|
||||
elif minute == _boundary + 1:
|
||||
_expect(not guest.is_empty() and guest[&"state"] == "LEAVING", "normal next-minute exit")
|
||||
else: _expect(guest.is_empty(), "normal Despawn boundary")
|
||||
elif _case == "B2a":
|
||||
_expect(point[&"available_meals"] == 0, "completed meal consumed")
|
||||
if minute == 960: _expect(not guest.is_empty() and guest[&"state"] == "LEAVING" and guest[&"state_entered_at"] == 960, "completion precedes normal planned exit")
|
||||
else: _expect(guest.is_empty(), "next-tick despawn without second payment")
|
||||
else:
|
||||
_expect(point[&"facility"][&"durability"] == 0 and point[&"facility"][&"state"] == "BROKEN" and point[&"event"][&"state"] == "COMPLETED", "actual automatic destruction Event committed")
|
||||
if _case == "B4a": _expect(point[&"available_meals"] == 0, "completion before destruction consumes meal")
|
||||
elif minute == 960:
|
||||
_expect(service[&"state"] == "ACTIVE" and service[&"elapsed_minutes"] == _duration - 1, "late Event follows facility completion phase")
|
||||
_assert_reservation(before, point, REQUEST, "ACTIVE", -1)
|
||||
else:
|
||||
_expect(service[&"state"] == "FAILED" and service[&"elapsed_minutes"] == _duration - 1 and point[&"available_meals"] == 1 and point[&"active_services"] == 0, "next facility tick fails without progress or payment")
|
||||
_assert_reservation(before, point, REQUEST, "RELEASED", 961)
|
||||
# Any remaining active reservation must still belong to the same live request
|
||||
# and started service. Terminal history is retained, never filtered away.
|
||||
for reservation: Dictionary in point[&"reservations"]:
|
||||
if reservation[&"state"] != "ACTIVE": continue
|
||||
var request: Dictionary = point[&"requests"].get(reservation[&"requester_id"], {})
|
||||
_expect(not request.is_empty() and request[&"reserved_inventory_ids"].has(reservation[&"reservation_id"]) and not service.is_empty() and service[&"inventory_reservations"].has(reservation[&"reservation_id"]), "no active reservation orphan")
|
||||
|
||||
func _save_point(label: String, point: Dictionary) -> void:
|
||||
_points[label] = _write(label, point)
|
||||
var path: String = "user://saves/p04_s3/" + _case + "-" + label
|
||||
var saved: Dictionary = SaveService.save_snapshot(path, point[&"snapshot"])
|
||||
var inspected: Dictionary = SaveService.inspect_snapshot(path)
|
||||
_expect(bool(saved.get(&"ok", false)) and bool(inspected.get(&"ok", false)) and bool(inspected.get(&"read_only", false)), "public formal save/inspect")
|
||||
_expect(var_to_bytes(inspected.get(&"snapshot", {})) == var_to_bytes(point[&"snapshot"]), "all typed fields preserved by formal package")
|
||||
_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(point[&"snapshot"]), "formal saving leaves Runtime unchanged")
|
||||
_slots[_case + "-" + label] = ProjectSettings.globalize_path(path)
|
||||
# Snapshot bytes exist once in point raw and once in the required formal
|
||||
# package; indexes do not embed inspection/load copies of those bytes.
|
||||
|
||||
func _write(label: String, value: Variant, global_name: bool = false) -> Dictionary:
|
||||
var name: String = label if global_name else _mode + "-" + _case + "-" + label
|
||||
var reference: Dictionary = {}
|
||||
for extension: String in ["var", "json"]:
|
||||
var path: String = _evidence_dir.path_join(name + "." + extension)
|
||||
_expect(not FileAccess.file_exists(path), "raw point written exactly once " + name)
|
||||
var file: FileAccess = FileAccess.open(path, FileAccess.WRITE)
|
||||
_expect(file != null, "raw file " + name)
|
||||
if file == null: continue
|
||||
if extension == "var": file.store_buffer(var_to_bytes(value))
|
||||
else: file.store_string(JSON.stringify(value, "\t"))
|
||||
file.flush()
|
||||
file.close()
|
||||
reference[extension] = {&"path": path, &"sha256": FileAccess.get_sha256(path)}
|
||||
return reference
|
||||
|
||||
func _read(reference: Dictionary) -> Dictionary:
|
||||
var item: Dictionary = reference["var"]
|
||||
var path: String = item["path"]
|
||||
_expect(FileAccess.get_sha256(path) == item["sha256"], "raw typed SHA")
|
||||
var json_ref: Dictionary = reference["json"]
|
||||
_expect(FileAccess.get_sha256(json_ref["path"]) == json_ref["sha256"], "raw JSON SHA")
|
||||
var file: FileAccess = FileAccess.open(path, FileAccess.READ)
|
||||
_expect(file != null, "typed input readable")
|
||||
if file == null: return {}
|
||||
var value: Variant = bytes_to_var(file.get_buffer(file.get_length()))
|
||||
file.close()
|
||||
_expect(value is Dictionary, "typed input dictionary")
|
||||
return value if value is Dictionary else {}
|
||||
|
||||
func _restore_inputs(point: Dictionary) -> void:
|
||||
var inputs: Dictionary = point[&"inputs"]
|
||||
_expect(_serial == 0, "Reader starts with serial zero before importing external inputs")
|
||||
_serial = inputs[&"serial"]
|
||||
_facility_id = inputs[&"facility_id"]
|
||||
_service_id = inputs[&"service_id"]
|
||||
_boundary = inputs[&"boundary"]
|
||||
_price = inputs[&"price"]
|
||||
_duration = inputs[&"duration"]
|
||||
_patience = inputs[&"patience"]
|
||||
_reserve = inputs[&"reserve"]
|
||||
_recovery = inputs[&"recovery"].duplicate(true)
|
||||
|
||||
func _load_point(path: String, expected: Dictionary) -> bool:
|
||||
_fresh()
|
||||
_restore_inputs(expected)
|
||||
var loaded: Dictionary = SaveService.load_snapshot(path)
|
||||
_expect(bool(loaded.get(&"ok", false)), "public formal load")
|
||||
if not bool(loaded.get(&"ok", false)): return false
|
||||
_expect(var_to_bytes(loaded[&"snapshot"]) == var_to_bytes(expected[&"snapshot"]), "all saved typed fields equal Writer")
|
||||
var restored: bool = _runtime.restore_snapshot(loaded[&"snapshot"])
|
||||
_expect(restored, "public Runtime restore")
|
||||
_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(expected[&"snapshot"]), "all restored typed fields equal Writer")
|
||||
return restored
|
||||
|
||||
func _reader() -> void:
|
||||
var file: FileAccess = FileAccess.open(_evidence_dir.path_join("writer.json"), FileAccess.READ)
|
||||
_expect(file != null, "Writer receipt")
|
||||
if file == null: return
|
||||
var writer: Dictionary = JSON.parse_string(file.get_as_text())
|
||||
file.close()
|
||||
_expect(int(writer["pid"]) != OS.get_process_id() and writer["profile"] != OS.get_user_data_dir(), "independent Reader PID/profile")
|
||||
for branch: String in CASES:
|
||||
_case = branch
|
||||
var writer_case: Dictionary = _read(writer["branches"][branch])
|
||||
var hashes: Dictionary = {}
|
||||
var restored_refs: Dictionary = {}
|
||||
for label: String in _labels():
|
||||
var key: String = branch + "-" + label
|
||||
var original: String = writer["slots"][key]
|
||||
var target: String = ProjectSettings.globalize_path("user://saves/p04_s3/" + key)
|
||||
_expect(DirAccess.make_dir_recursive_absolute(target) == OK, "private Reader formal slot")
|
||||
var directory: DirAccess = DirAccess.open(original)
|
||||
_expect(directory != null, "Writer formal slot readable")
|
||||
if directory == null: return
|
||||
var members: PackedStringArray = directory.get_files()
|
||||
members.sort()
|
||||
_expect(directory.get_directories().is_empty() and members == PackedStringArray(["journal.log", "manifest.json", "thumbnail.png", "world.bin"]), "all formal members enumerated")
|
||||
var member_hashes: Dictionary = {}
|
||||
for member: String in members:
|
||||
var sha: String = FileAccess.get_sha256(original.path_join(member))
|
||||
_expect(DirAccess.copy_absolute(original.path_join(member), target.path_join(member)) == OK, "copy every formal member")
|
||||
var copied_sha: String = FileAccess.get_sha256(target.path_join(member))
|
||||
_expect(not sha.is_empty() and sha == copied_sha, "original/copy member SHA equality")
|
||||
member_hashes[member] = {&"original_before": sha, &"copy_before": copied_sha}
|
||||
hashes[key] = {&"original": original, &"copy": target, &"members": member_hashes}
|
||||
_slots[key] = target
|
||||
var expected: Dictionary = _read(writer_case[&"points"][label])
|
||||
if not _load_point(target, expected): return
|
||||
restored_refs[label] = _write(label + "-restored", _capture())
|
||||
var before: Dictionary = _read(writer_case[&"points"]["before"])
|
||||
if not _load_point(_slots[branch + "-before"], before): return
|
||||
_assert_before(_capture())
|
||||
_connect_observations()
|
||||
var replay_refs: Dictionary = {}
|
||||
for label: String in _labels():
|
||||
if label == "before": continue
|
||||
_advance(label)
|
||||
var actual: Dictionary = _capture()
|
||||
var expected: Dictionary = _read(writer_case[&"points"][label])
|
||||
_expect(var_to_bytes(actual) == var_to_bytes(expected), "replay complete typed point including Runtime, inputs, receipts " + label)
|
||||
_assert_outcome(before, actual)
|
||||
replay_refs[label] = _write(label + "-replay", actual)
|
||||
var expected_phases: Array = writer_case[&"phases"]
|
||||
_expect(_phases.size() == expected_phases.size(), "complete phase count")
|
||||
if _phases.size() == expected_phases.size():
|
||||
for index: int in range(_phases.size()):
|
||||
_expect(var_to_bytes(_read(_phases[index])) == var_to_bytes(_read(expected_phases[index])), "same phase order and all typed phase state")
|
||||
for key: String in hashes:
|
||||
var row: Dictionary = hashes[key]
|
||||
for member: String in row[&"members"]:
|
||||
var item: Dictionary = row[&"members"][member]
|
||||
item[&"original_after"] = FileAccess.get_sha256(String(row[&"original"]).path_join(member))
|
||||
item[&"copy_after"] = FileAccess.get_sha256(String(row[&"copy"]).path_join(member))
|
||||
_expect(item[&"original_before"] == item[&"original_after"] and item[&"copy_before"] == item[&"copy_after"], "original/copy unchanged after all loads and replay")
|
||||
_branches[branch] = _write("case", {&"restored": restored_refs, &"replay": replay_refs, &"phases": _phases,
|
||||
&"member_hashes": hashes, &"recovery_commands": _commands, &"replay_completed_commands": _results})
|
||||
@@ -0,0 +1,293 @@
|
||||
#!/usr/bin/env python3
|
||||
"""S3-only native entry. --check-only never loads ownership helpers or starts Godot."""
|
||||
from pathlib import Path
|
||||
import argparse
|
||||
import hashlib
|
||||
import importlib.util
|
||||
import json
|
||||
import os
|
||||
import shutil
|
||||
import subprocess
|
||||
import sys
|
||||
sys.dont_write_bytecode = True
|
||||
|
||||
HERE = Path(__file__).resolve().parent
|
||||
BUILD = Path("/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build")
|
||||
PRODUCT = Path("/Users/korizatou114/Projects/とりにく工房ゲーム制作部")
|
||||
CACHE_RUN = Path("/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence")
|
||||
TEST = "tests/s3/test_runtime_staff_assignment.gd"
|
||||
QA = HERE / "p04_s3_closure_probe.gd"
|
||||
ENGINE = Path("/Applications/Godot.app/Contents/MacOS/Godot")
|
||||
MANIFEST = BUILD / "audit-support/p04-s3-existing-source-r01/SOURCE_MANIFEST.json"
|
||||
MANIFEST_SHA = "d4993398f7619ca37bcd64c32b79bdee892d44e31f332cc0dd5f31fb7bc28314"
|
||||
AUDIT = BUILD / "audit-support/p04-whole-closure-r01/ROOT_S2B_EXISTING_SOURCE_AUDIT.json"
|
||||
CASES = ["B1", "B2a", "B2b", "B3", "B4a", "B4b"]
|
||||
LABELS = {"B1": ["before", "after", "next", "recovered", "duplicate_guard"],
|
||||
"B2a": ["before", "after", "next"], "B2b": ["before", "after", "next", "despawn"],
|
||||
"B3": ["before", "after", "next", "despawn"],
|
||||
"B4a": ["before", "after", "next"], "B4b": ["before", "after", "next"]}
|
||||
SLOTS = sorted(case + "-" + label for case in CASES for label in LABELS[case])
|
||||
MATERIALS = [MANIFEST, AUDIT, HERE.parent / "s2b/run_s2b_native.py",
|
||||
HERE.parent / "s2b/p04_s2b_shift_probe.gd", HERE.parent / "s2b/S2B_ROOT_RUN.md"]
|
||||
|
||||
def template_guard(root):
|
||||
if pin(MANIFEST)["sha256"] != MANIFEST_SHA:
|
||||
raise ValueError("supplied seven-source manifest changed")
|
||||
manifest = json.loads(MANIFEST.read_text())
|
||||
if len(manifest["files"]) != 7:
|
||||
raise ValueError("exact seven source files required")
|
||||
for row in manifest["files"]:
|
||||
actual = pin(row["supplied"])
|
||||
if (actual["bytes"], actual["sha256"]) != (row["bytes"], row["sha256"]):
|
||||
raise ValueError("supplied template SHA mismatch: " + row["supplied"])
|
||||
audit = json.loads(AUDIT.read_text())
|
||||
for row in audit["source_pins"]:
|
||||
actual = pin(root / row["path"])
|
||||
if (actual["bytes"], actual["sha256"]) != (row["production_bytes"], row["production_sha256"]):
|
||||
raise ValueError("Root source audit mismatch: " + row["path"])
|
||||
probe = QA.read_text()
|
||||
if ":=" in probe:
|
||||
raise ValueError("probe requires explicit typed declarations")
|
||||
import re
|
||||
if re.search(r"\bvar\s+\w+\s*=", probe) or re.search(r"\bfor\s+\w+\s+in\b", probe):
|
||||
raise ValueError("untyped declaration/loop")
|
||||
if re.search(r"\.(?:patience_remaining|elapsed_minutes)\s*=(?!=)", probe):
|
||||
raise ValueError("manual patience/progress mutation")
|
||||
for forbidden in ["._update_shift_states(", ".record_duty_minute(", "get_day_summary(",
|
||||
"configure_operations("]:
|
||||
if forbidden in probe:
|
||||
raise ValueError("out-of-scope mutation/getter: " + forbidden)
|
||||
|
||||
|
||||
def module(name, path):
|
||||
spec = importlib.util.spec_from_file_location(name, path)
|
||||
value = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(value)
|
||||
return value
|
||||
|
||||
def pin(path):
|
||||
path = Path(path)
|
||||
if path.is_symlink() or not path.is_file():
|
||||
raise ValueError("missing exact input: " + str(path))
|
||||
data = path.read_bytes()
|
||||
return dict(path=str(path), bytes=len(data), sha256=hashlib.sha256(data).hexdigest())
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument("--project-root", type=Path, default=PRODUCT)
|
||||
parser.add_argument("--output", type=Path, default=BUILD / "p04-s3-native-r01")
|
||||
parser.add_argument("--plan", type=Path, default=BUILD / "p04-s3-plan-r01.json")
|
||||
parser.add_argument("--cache-run", type=Path, default=CACHE_RUN)
|
||||
parser.add_argument("--godot", type=Path, default=ENGINE)
|
||||
parser.add_argument("--check-only", action="store_true")
|
||||
args = parser.parse_args()
|
||||
root = args.project_root.resolve()
|
||||
out = args.output.resolve()
|
||||
if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
|
||||
raise ValueError("plan/output must stay in task build")
|
||||
r = module("s3_standard_runner", root / "tools/run_all_tests.py")
|
||||
# Preserve the reviewed source_refs -> exactly one QA override order.
|
||||
source_before = r.source_refs(root)
|
||||
refs = dict(source_before)
|
||||
refs[TEST] = pin(QA)
|
||||
template_guard(root)
|
||||
expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
|
||||
fixed = [pin(p) for p in MATERIALS + [Path(row["supplied"]) for row in json.loads(MANIFEST.read_text())["files"]] + [
|
||||
QA, Path(__file__), HERE / "S3_ROOT_RUN.md",
|
||||
root / "tests/transport/test_runtime_transport.gd",
|
||||
root / "tests/staff/test_rescue_elevator.gd",
|
||||
root / "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
|
||||
]]
|
||||
selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
|
||||
cache_note = None
|
||||
cache_receipts = []
|
||||
for leaf in ["runner-ended.json", "runner-input.json"]:
|
||||
path = args.cache_run / leaf
|
||||
try:
|
||||
cache_receipts.append(pin(path))
|
||||
except OSError as caught:
|
||||
cache_note = dict(path=str(path), error=type(caught).__name__ + ": " + str(caught),
|
||||
required_before_native=True)
|
||||
break
|
||||
plan = dict(protocol="p04-s3-preparation-v1", project_root=str(root), output=str(out),
|
||||
source_before=source_before, selected_source_map=selected["map"],
|
||||
QA_overrides=[TEST], fixed_input_pins=fixed, cache_run=str(args.cache_run),
|
||||
cache_receipts=cache_receipts, cache_access=cache_note,
|
||||
phases=["import", "parse", "writer", "reader"],
|
||||
native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
|
||||
# Check-only only reads source/materials and writes the plan in task build.
|
||||
# It deliberately does not read default-player data, inspect processes or stat Godot.
|
||||
if args.check_only:
|
||||
args.plan.parent.mkdir(parents=True, exist_ok=True)
|
||||
if args.plan.exists():
|
||||
r.require(r.read(args.plan) == plan, "existing plan differs; use a fresh plan path")
|
||||
else:
|
||||
r.write(args.plan, plan)
|
||||
print(json.dumps(dict(check_only=True, engines=0, source_files=len(source_before),
|
||||
QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
|
||||
plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
|
||||
return 0
|
||||
r.require(root == PRODUCT.resolve() and len(source_before) == 1338, "Root native requires product 1338; worker plan is not native evidence")
|
||||
r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
|
||||
def fixed_guard():
|
||||
template_guard(root)
|
||||
for value in fixed + cache_receipts:
|
||||
r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
|
||||
fixed_guard()
|
||||
# Native admission is Root-only and fails closed on unreadable cache.
|
||||
r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
|
||||
old = args.cache_run
|
||||
r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
|
||||
old_map = r.read(old / "runner-input.json")["selected_source_map"]
|
||||
current_map = {n: p["sha256"] for n, p in source_before.items()}
|
||||
r.require(old_map == current_map, "ended cache selected source must equal current product")
|
||||
protected = r.default_player(root)
|
||||
outer = module("s3_owned_outer", r.SUPPORT / "owned_outer.py")
|
||||
r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
|
||||
engine = args.godot.resolve()
|
||||
r.require(engine.is_file(), "Root native Godot path")
|
||||
r.require(shutil.disk_usage(out.parent).free >= 1024**3 + engine.stat().st_size + 136*1024**2,
|
||||
"reviewed native disk admission")
|
||||
r.require(not out.exists(), "fresh output required; preserve previous attempts")
|
||||
out.mkdir()
|
||||
stage = out / "stage"
|
||||
stage.mkdir()
|
||||
(out / "starters").mkdir()
|
||||
(out / "bootstrap").mkdir()
|
||||
phases = []
|
||||
previous = {}
|
||||
error = None
|
||||
guards = []
|
||||
cleanup = []
|
||||
cleanup_errors = []
|
||||
cache_before = None
|
||||
formal_before = None
|
||||
formal_after = None
|
||||
original_phase = outer.run_phase
|
||||
def run_phase(argv, folder, timeout, env, **kwargs):
|
||||
env = dict(env)
|
||||
if folder.name in ["writer", "reader"]:
|
||||
env.update(THE_TREE_S3_EVIDENCE=str(out / "raw"), THE_TREE_S3_MODE=folder.name)
|
||||
return original_phase(argv, folder, timeout, env, **kwargs)
|
||||
outer.run_phase = run_phase
|
||||
r.write(out / "runner-started.json", dict(started=r.now(), owner_runner_pid=os.getpid(),
|
||||
plan=pin(args.plan), engines_launched=0))
|
||||
try:
|
||||
r.write(out / "source_before.json", source_before)
|
||||
r.write(out / "selected-source-map.json", refs)
|
||||
# Private source stage first, then literal reviewed bootstrap.
|
||||
for name, value in refs.items():
|
||||
target = stage / name
|
||||
target.parent.mkdir(parents=True, exist_ok=True)
|
||||
r.copy_source(Path(value["path"]), target)
|
||||
r.require(r.inventory(stage, stage=True) == expected, "whole private source")
|
||||
for name, value in r.read(r.SUPPORT / "bootstrap-scripts.json").items():
|
||||
data = value["text"].encode()
|
||||
r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
|
||||
(out / "bootstrap" / name).write_bytes(data)
|
||||
cache = old / "stage/.godot"
|
||||
cache_before = r.inventory(cache)
|
||||
r.require(bool(cache_before), "nonempty ended cache")
|
||||
for name in cache_before:
|
||||
src = cache / name
|
||||
dst = stage / ".godot" / name
|
||||
dst.parent.mkdir(parents=True, exist_ok=True)
|
||||
subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
|
||||
r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
|
||||
"cache clone is a separate inode")
|
||||
r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
|
||||
r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
|
||||
whole_cache=cache_before, independent_inode=True,
|
||||
ordinary_import_required=True, ordinary_parse_required=True))
|
||||
paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
|
||||
r.write(out / "parse-paths.json", paths)
|
||||
markers = module("s3_markers", root / "tools/strict_test_markers.py")
|
||||
contracts = markers.load_contracts(root / "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json")
|
||||
contracts[TEST] = dict(test=TEST, template="S3 closure: <checks> checks, <failures> failures", required=True)
|
||||
policy = r.read(r.SUPPORT / "suite-policy.json")
|
||||
r.require(TEST not in policy["suite_policies"], "no normal suite watchdog/policy override")
|
||||
r.write(out / "contracts.json", contracts)
|
||||
r.write(out / "runner-input.json", dict(plan, owner_runner_pid=os.getpid(),
|
||||
wrapper_sha256=r.sha(__file__), QA=pin(QA), runner_sha256=r.sha(root / "tools/run_all_tests.py"),
|
||||
default_player_before=protected, fixed_input_pins=fixed,
|
||||
functional_watchdog_seconds=1200, source_adoption=False))
|
||||
diagnostics = module("s3_diagnostics", r.SUPPORT / "diagnostic_gate.py")
|
||||
owners = module("s3_owners", r.SUPPORT / "ordinary_proof_gate.py")
|
||||
audio = module("s3_audio", r.SUPPORT / "audio_evidence_gate.py")
|
||||
public = (stage / "project.godot").read_bytes()
|
||||
for phase, test in [("import", None), ("parse", None), ("writer", TEST), ("reader", TEST)]:
|
||||
if phase == "reader":
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(sorted(formal_before) == SLOTS, "all 22 formal points for six fresh cases")
|
||||
row = r.execute_phase(str(engine), stage, out, phase, test, selected, expected,
|
||||
previous, policy, contracts, paths, public, protected, root,
|
||||
outer, markers, diagnostics, owners, audio)
|
||||
phases.append(row)
|
||||
# execute_phase uses the same test log name; retain each phase's exact log too.
|
||||
if test and row.get("log"):
|
||||
(out / (phase + "-combined-raw.log")).write_bytes((out / row["log"]).read_bytes())
|
||||
row["strict_runner_log_path"] = row["log"]
|
||||
row["log"] = phase + "-combined-raw.log"
|
||||
r.write(out / (phase + "-actual-phase.json"), row)
|
||||
print(json.dumps(dict(phase=phase, passed=row["passed"], error=row.get("validation_error"))), flush=True)
|
||||
r.require(row["passed"], "first strict phase failure: " + phase)
|
||||
if phase in ["writer", "reader"]:
|
||||
receipt = r.read(out / ("raw/" + phase + ".json"))
|
||||
r.require(receipt["checks"] > 0 and receipt["failures"] == 0,
|
||||
"S3 actual outcome receipt")
|
||||
r.require(sorted(receipt["branches"]) == CASES,
|
||||
"exact six independent Writer/Reader cases")
|
||||
r.require(sorted(receipt["slots"]) == SLOTS, "all formal point slots")
|
||||
r.require(receipt["pid"] == row["actual_pid"], "actual native PID/receipt")
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
reader = r.read(out / "raw/reader.json")
|
||||
r.require(writer["pid"] != reader["pid"] and writer["profile"] != reader["profile"], "distinct formal processes")
|
||||
formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(formal_before == formal_after, "Reader leaves Writer packages unchanged")
|
||||
except BaseException as caught:
|
||||
error = type(caught).__name__ + ": " + str(caught)
|
||||
finally:
|
||||
cleanup, cleanup_errors = outer.finish_captured(outer.OWNED)
|
||||
try:
|
||||
r.write(out / "outer-owned-finally.json", dict(cleanup=cleanup, errors=cleanup_errors))
|
||||
except BaseException as caught:
|
||||
guards.append("finally receipt: " + type(caught).__name__ + ": " + str(caught))
|
||||
# Fixed guard always follows ownership cleanup, even if setup or an engine failed.
|
||||
try:
|
||||
fixed_guard()
|
||||
after = r.source_refs(root)
|
||||
r.write(out / "source_after.json", after)
|
||||
r.require(after == source_before, "whole product source unchanged")
|
||||
r.require(r.default_player(root) == protected, "default player unchanged")
|
||||
if (stage / "project.godot").exists():
|
||||
r.require(r.inventory(stage, stage=True) == dict(expected, **previous), "whole private source unchanged")
|
||||
if cache_before is not None:
|
||||
r.require(r.inventory(old / "stage/.godot") == cache_before, "original cache unchanged")
|
||||
if formal_before is not None:
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(formal_before == formal_after, "Writer formal packages unchanged after Reader, including failure")
|
||||
except BaseException as caught:
|
||||
guards.append(type(caught).__name__ + ": " + str(caught))
|
||||
pids = [p.pid for p in outer.OWNED]
|
||||
passed = (error is None and not guards and not cleanup_errors and len(phases) == 4
|
||||
and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
|
||||
and all(p["engine_ended"] for p in cleanup))
|
||||
execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
|
||||
actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
|
||||
formal_before=formal_before, formal_after=formal_after,
|
||||
whole_goal_accepted=False, unit_accepted=False)
|
||||
r.write(out / "raw-inventory.json", r.inventory(out / "raw"))
|
||||
r.write(out / "PID-set.json", dict(owner_runner_pid=os.getpid(), engine_PIDs=pids))
|
||||
r.write(out / "execution.json", execution)
|
||||
r.write(out / "runner-ended.json", dict(execution, ended=r.now()))
|
||||
print(json.dumps(dict(passed=passed, error=error, guard_errors=guards, output=str(out))))
|
||||
return 0 if passed else 1
|
||||
|
||||
if __name__ == "__main__":
|
||||
try:
|
||||
raise SystemExit(main())
|
||||
except Exception as caught:
|
||||
print(type(caught).__name__ + ": " + str(caught), file=sys.stderr)
|
||||
raise SystemExit(2)
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"status": "NOTRUN",
|
||||
"task_id": "P04-01",
|
||||
"starting_submission": "55f1fb49aaefa5c1b86de1c3eda72392ef6b58f2",
|
||||
"source": "audit-support/p04-s4-source-r28",
|
||||
"plan": "p04-s4-plan-r28.json",
|
||||
"native": "p04-s4-native-r28",
|
||||
"regression_status": "NOTRUN",
|
||||
"native_status": "NOTRUN",
|
||||
"unit_complete": false,
|
||||
"D05": "pending",
|
||||
"files": {
|
||||
"s4/p04_s4_power_probe.gd": {
|
||||
"bytes": 26912,
|
||||
"sha256": "56f8e2786e3aff82097baa06afb4cd13e6e7c06c3d1afa43b9ee35c78a25a999"
|
||||
},
|
||||
"s4/run_s4_native.py": {
|
||||
"bytes": 23233,
|
||||
"sha256": "2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b"
|
||||
},
|
||||
"s4/S4_ROOT_RUN.md": {
|
||||
"bytes": 21862,
|
||||
"sha256": "ff463e1e6ce8847f658eddc91f1cec3eab3bb8bcadd9a75272138e06083116a2"
|
||||
},
|
||||
"s4/phase_cut_regression.py": {
|
||||
"bytes": 3919,
|
||||
"sha256": "1362078fdd819d057f1f1bab369b9629a11e089a3453da8af4ce21cec251dbad"
|
||||
},
|
||||
"s4/receipt_lifecycle_fixtures.py": {
|
||||
"bytes": 12340,
|
||||
"sha256": "629571495787fdcda82a6a74d98649d4ea424d6fc9c27c5cafa55d4b2881c71f"
|
||||
},
|
||||
"p04_native_series.py": {
|
||||
"bytes": 75900,
|
||||
"sha256": "c1cc5d49dbf4c8422a2208297c665fde8abd569e2c9f8239603d8218ae1ed8fb"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,305 @@
|
||||
# S4 finite Root collection r28 — NOT RUN
|
||||
|
||||
This adds only the existing `power_stop` evidence obligation. It adds no counted
|
||||
condition, product change, acceptance or priority approval. Run once after this
|
||||
source batch is auto-submitted. Do not rerun C/S1/S2a/S2b/S3. Do not run the full
|
||||
product suite now. Preserve all existing raw and REPAIR17–21 history.
|
||||
|
||||
From the clean auto-submitted checkout, stage these three exact reviewed files
|
||||
in the fresh own-B source directory. Run the installed executable directly; do not stage or copy it. This staging is a Root action, not a worker
|
||||
execution. The wrapper refuses QA outside own B. QA and fixed inputs stay within registered B; only the exact installed engine is external; external manifest paths are lookup keys and
|
||||
provenance only. Never open their original production locations.
|
||||
|
||||
```sh
|
||||
export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
|
||||
export E=docs/plans/original-completion-2026-10-02/execution/p04-01
|
||||
export PYTHONDONTWRITEBYTECODE=1
|
||||
python3 "$E/s4/engine_identity_negative_fixtures.py"
|
||||
python3 "$E/s4/receipt_lifecycle_fixtures.py"
|
||||
mkdir "$B/audit-support/p04-s4-source-r28"
|
||||
cp "$E/s4/run_s4_native.py" "$E/s4/p04_s4_power_probe.gd" "$E/s4/S4_ROOT_RUN.md" "$B/audit-support/p04-s4-source-r28/"
|
||||
python3 "$B/audit-support/p04-s4-source-r28/run_s4_native.py" \
|
||||
--project-root "$B/audit-support/p04-r17-full-inputs-r01/product" \
|
||||
--output "$B/p04-s4-native-r28" --plan "$B/p04-s4-plan-r28.json" \
|
||||
--godot /Applications/Godot.app/Contents/MacOS/Godot --check-only
|
||||
python3 "$B/audit-support/p04-s4-source-r28/run_s4_native.py" \
|
||||
--project-root "$B/audit-support/p04-r17-full-inputs-r01/product" \
|
||||
--output "$B/p04-s4-native-r28" --plan "$B/p04-s4-plan-r28.json" \
|
||||
--godot /Applications/Godot.app/Contents/MacOS/Godot
|
||||
```
|
||||
|
||||
Root must stop if either fixture or check-only fails; the commands are not an
|
||||
unconditional batch. Both fixtures start zero engines. The check-only invocation
|
||||
only prepares the pinned plan: zero engine launches. The final invocation
|
||||
is one collection, exactly four sequential owned processes: import,
|
||||
parse, Writer, Reader. Each retains the framework's native diagnostics,
|
||||
ownership, exit/end checks, full stream SHA, default-player protection, private
|
||||
profiles, source-before/after guards and cleanup. Failure stops the collection;
|
||||
do not overwrite or silently repeat it. The ordinary framework creates its
|
||||
normal private user profiles; these are process outputs, not external source
|
||||
inputs. Reader uses only the existing IO1 formal package mapping.
|
||||
|
||||
Exact input footprints:
|
||||
|
||||
- Historical wrapper hashes do not pin this repair. The fresh plan pins
|
||||
its exact bytes and Stage R checks them against the current source checkout.
|
||||
- `B/audit-support/p04-r17-full-inputs-r01/MANIFEST.json`, SHA256
|
||||
`a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8`.
|
||||
- All 1338 files below that relocation's `product/`, each matched to the
|
||||
manifest by bytes/SHA. No source is omitted and no old path is followed.
|
||||
- Its `fixed/6ce6b28c5985e8a4f13b78bfeb1f1e09f6216d874fb01e0656ec1633bfa01cd7/completion_marker_contracts.json`.
|
||||
- `B/audit-support/p04-review-repair22-r01/ACTUAL_CURRENT_PUBLIC_POWER_FUNCTIONS.json`.
|
||||
- The three staged S4 files above, pinned by the plan, and the installed executable
|
||||
`/Applications/Godot.app/Contents/MacOS/Godot`, pinned directly against the
|
||||
constant SHA before launch, during collection, and explicitly after cleanup.
|
||||
Runner-input retains an immutable initial descriptor and observation prefix;
|
||||
execution and engine-identity retain the final before/during/after identity. The only stage override
|
||||
is `tests/s3/test_runtime_staff_assignment.gd` with the S4 probe. Harness and
|
||||
kitchen fixture are the unchanged product files; inherited sources are
|
||||
included in the full1338 map. The parse roster is all316 `.gd` inputs.
|
||||
- Fresh mode is the default: no cache receipt or cache directory is accessed,
|
||||
read or cloned. The private `stage/.godot` must be absent immediately before
|
||||
the actual full import. All316 scripts are parsed before Writer and Reader.
|
||||
- The engine SHA256 is
|
||||
`c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`,
|
||||
required directly of the installed executable. Fresh mode does not obtain engine identity from a cache.
|
||||
- Optional `--cache-run` retains the registered path, passed-run, complete-source
|
||||
and engine identity guards. The known red run remains ineligible. The commands
|
||||
above use no cache. Preserve the old r22 staging and plan unchanged. r22 is an immutable failed
|
||||
proof and remains ineligible. Its diagnostics are at
|
||||
`audit-support/p04-root-d393-s4-r01/ENGINE_STAGING_DIAGNOSTICS.json`.
|
||||
|
||||
Exact output footprints are `B/p04-s4-plan-r28.json` and the fresh
|
||||
`B/p04-s4-native-r28/**`: private selected source stage, complete phase receipts
|
||||
and logs, raw JSON/Variant points and all phase observations, full source maps,
|
||||
PID and cleanup receipts. `formal/{writer,reader}/S4-{boundary,held,recovered}/`
|
||||
mirrors all four formal members (`journal.log`, `manifest.json`, `thumbnail.png`,
|
||||
`world.bin`) with a provenance-only `formal-relocation.json`. R reads these
|
||||
own-B mirrors, never profile paths from old manifests.
|
||||
|
||||
Scenario and source-derived timing:
|
||||
|
||||
1. Use the existing public cafeteria + physical FLEX kitchen fixture and normal
|
||||
DAY server commute. Queue using the definition's original price and duration;
|
||||
advance naturally to duration−1 at959. Derive the cafeteria's sole neighbour
|
||||
from the actual graph and call public `disconnect_nodes` on exactly that edge.
|
||||
2. Advance normally to960. The source's modulo10 evaluation finds an isolated
|
||||
consumer with zero generation/storage. Normal `mana_power_projection.apply`
|
||||
makes only the cafeteria unpowered; preparation reaches `NO_POWER` with its
|
||||
dependency operating. Save **boundary** at960, then **held** at961. Mana stays
|
||||
positive; operator stays open; linked kitchen is Facility `OPEN` and network
|
||||
consumer `ACTIVE`. No closure, damage, shift or exit triggers accompany outage.
|
||||
3. At961 reconnect the same edge. Verify the complete original edge set and
|
||||
graph invariants. Advance each minute, retaining full phase raw. The saved
|
||||
hold deadline is960+10=970; the next permitted normal evaluation is970.
|
||||
Progress, reservation and sale stay held through969. Save **recovered** at970
|
||||
after one completion/payment. Resend connect_nodes on the same edge at970,
|
||||
comparing the complete Runtime before/after;971 is the duplicate guard. Ordinary guest
|
||||
redecision/despawn after completed service is retained in raw, never forced
|
||||
or suppressed; the outage and held service have no exit confound.
|
||||
4. A distinct Reader copies all four members at each point. Normal SaveService
|
||||
load and Runtime restore must reproduce the full typed snapshot, including
|
||||
graph and all unrelated fields. No canonicalization, dropped fields, forced
|
||||
evaluation or hold bypass. Replay from the960 formal boundary through961,
|
||||
reconnect,970 and971; compare complete typed points and phase states. No
|
||||
additional condition is credited for this formal preservation check.
|
||||
|
||||
`REPAIR22_SOURCE_FACTS.json` contains full actual source bodies and graph restore
|
||||
invariants. The source normalizes saved node IDs/reasons, checks valid endpoints,
|
||||
rebuilds symmetric edges, preserves revision/evaluation time and checks storage
|
||||
capacity and consumer allocation. Transient `_last_report` is cleared on normal
|
||||
restore and is not part of Runtime snapshot equality. The derived
|
||||
`related_facility_operating` flag is measured separately and checked after restore.
|
||||
|
||||
This source-only dispatch authorizes no worker execution. Root stages the three
|
||||
files, creates the r28 plan with --check-only, then collects once to the fresh
|
||||
r28 output. Do not read or write r24 outputs, cleanup, stages or plans.
|
||||
Do not rerun S1-S3, C or full178. No engine copy, signing, xattr,
|
||||
codesign call or security-setting change is part of this procedure.
|
||||
Native evidence, registered validation, independent review, support53cb rebind
|
||||
and formal acceptance remain pending. D05 remains pending.
|
||||
|
||||
## REPAIR26 receipt lifecycle audit (static; NOT RUN)
|
||||
|
||||
All names below are relative to the fresh output unless marked otherwise.
|
||||
`r.write` is the unchanged exclusive `open('x')` writer in
|
||||
`tools/run_all_tests.py`. No retry, overwrite, replace or atomic rename is used
|
||||
for a JSON proof. A write attempt may fail or leave a partial file; it is never
|
||||
retried. “At most once” describes wrapper control flow, not a durability claim.
|
||||
The initial input is serialized once with `engine=engine_descriptor`,
|
||||
`engine_identity_before=engine_descriptor` and a deep-copied initial identity.
|
||||
`repin()` itself is unchanged (it returns None); each per-phase receipt uses
|
||||
the descriptor it just appended and the index of that exact observation.
|
||||
|
||||
| Writer / destination | Maximum attempts per run / uniqueness | Success and failure reachability |
|
||||
| --- | --- | --- |
|
||||
| `r.write(args.plan)` outside output | 1, check-only branch returns immediately | Native branch only reads the exact plan; existing plan rejected in check-only |
|
||||
| `runner-started.json` | 1 | First write inside protected setup; exception enters cleanup |
|
||||
| `source_before.json` | 1 | Setup before source copy; no fallback write |
|
||||
| `selected-source-map.json` | 1 | Setup before source copy; no fallback write |
|
||||
| `r.copy_source` to `stage/<source name>` | 1 per unique source-map key | Fresh stage; loop stops on setup failure; source files are not proof receipts |
|
||||
| `write_bytes` to `bootstrap/<name>` | 1 per pinned bootstrap key | The reviewed map names `profile_guard.gd` and `parse_full_dependencies.gd`; setup only |
|
||||
| `/bin/cp -c` to `stage/.godot/<name>` | 1 per cache inventory key | Optional eligible-cache branch only; fresh mode never accesses cache |
|
||||
| `cache-reuse.json` | 0 or 1 | Only after all optional cache clones and guards |
|
||||
| `parse-paths.json` | 1 | Setup after 316-script guard |
|
||||
| `contracts.json` | 1 | Setup after unchanged suite-policy guard |
|
||||
| `runner-input.json` | 1 | Setup; no final read/rewrite; absent if earlier setup fails |
|
||||
| `engine-identity-before-<phase>.json` | 1 each for import, parse, writer, reader | Immediately after that phase's repin; failure stops loop, never resumes it |
|
||||
| `write_bytes` to `writer-combined-raw.log`, `reader-combined-raw.log` | 1 each | Binary copy immediately after returned phase row, even a failed row if it has a log; later phases never reuse names |
|
||||
| `<phase>-actual-phase.json` | 1 each for four unique phases | Before `require(row['passed'])`; mid-loop failure retains its row and stops later phases |
|
||||
| `outer-owned-finally.json` | 1 | Single finally after setup/loop success or failure; cleanup called once; cleanup exception recorded; receipt write exception becomes guard error |
|
||||
| `source_after.json` | 0 or 1 | Single post-cleanup guarded block, after fixed_guard/source_refs succeed; later guard failure does not re-enter or retry the write |
|
||||
| `shutil.copyfile` to `formal/<role>/<slot>/<member>` | 1 per tuple | Only preliminary pass; two unique roles, unique slot map keys, four unique member keys, fresh target directory; exception stops collection |
|
||||
| `formal-relocation.json` | 0 or 1 | Only after successful complete formal mirror |
|
||||
| `raw-inventory.json` | 0 or 1 | Once after mirror branch, including setup/phase/cleanup failure; earlier output-collection exception can skip it |
|
||||
| `PID-set.json` | 0 or 1 | Once after raw inventory; earlier output-collection exception can skip it |
|
||||
| `engine-identity.json` | 1 | One final attempt after cleanup and both after-cleanup/after-output-collection repin attempts, including caught setup/phase/cleanup/collection failures; own write failure records guard error and makes both passed fields false |
|
||||
| `execution.json` | 1 | After identity attempt, with final observations, identity and guard errors |
|
||||
| `runner-ended.json` | 1 | After execution; no retry if final receipt storage itself fails |
|
||||
|
||||
The wrapper has no `write_text` call. The unchanged `execute_phase` dependency
|
||||
also writes the following. Its shared text log is an explicit exception to
|
||||
write-once naming, and is not presented as two independent phase proofs.
|
||||
|
||||
| Dependency destination | Writer and lifecycle |
|
||||
| --- | --- |
|
||||
| `<phase>-startup-profile-before.json` | Exclusive `write`, once per distinct phase before engine start |
|
||||
| `<phase>-profile.json` | Guard report path for parse/writer/reader, one per phase; actual Guard checks file absence before writing |
|
||||
| `starters/<phase>.gd` | `write_text`, once each for writer/reader |
|
||||
| `<phase>/combined-raw.log` | `write_text`, once each for import/parse |
|
||||
| `tests__s3__test_runtime_staff_assignment.gd.log` (general `out/<test>.log`) | Both writer and reader call `write_text` on this same per-test name; reader replaces the shared text. Wrapper preserves separate binary copies as `writer-combined-raw.log` and `reader-combined-raw.log`, retaining `strict_runner_log_path` and the original log hash |
|
||||
| `<phase>-receipt.json` | Exclusive `write`, once per phase after its finally and guards |
|
||||
| `stage/project.godot` | `write_bytes` for private startup settings and restoration in each phase finally; mutable private source, not immutable proof |
|
||||
| `<phase>/**`, private profiles, raw QA outputs | Delegated owned-native capture/engine/QA outputs; not wrapper `r.write`/`write_bytes`/`write_text` calls; their existing ownership/diagnostic/formal guards remain unchanged |
|
||||
|
||||
Path coverage: success traverses each distinct phase once. A failed parse row is
|
||||
recorded, then `require(row['passed'])` jumps to the single finally; no writer or
|
||||
reader names are used. A protected setup failure also enters that finally, then
|
||||
attempts post-cleanup guards and final identity/execution/end receipts. Cleanup
|
||||
exceptions are caught separately, set `cleanup_errors`, and do not prevent final
|
||||
receipts. A post-cleanup fixed/source guard failure is caught without retrying
|
||||
`source_after`; formal/output-collection exceptions now become guard errors and
|
||||
still reach the final repin and identity receipt. A final identity write failure
|
||||
is caught without touching existing bytes and forces failure in execution/end.
|
||||
|
||||
Admission failures before the protected setup (invalid plan/product/engine,
|
||||
live engine, insufficient disk, existing output, directory creation failure)
|
||||
remain fail-closed and do not promise final receipts. They have no repeated
|
||||
wrapper proof write. Persistent storage failure writing execution/end can still
|
||||
prevent a complete terminal receipt pair; no code can guarantee receipt storage
|
||||
when that storage fails. Such runs cannot provide accepted evidence.
|
||||
|
||||
## Fixture scope and remaining gaps
|
||||
|
||||
`receipt_lifecycle_fixtures.py` imports the real wrapper and standard writer.
|
||||
It builds 1338 synthetic source entries including 316 scripts in resolved fresh
|
||||
temporary paths; engine identity, template_guard, disk/default-player, helpers
|
||||
and phase execution are mocked. Four distinct fake PIDs and complete synthetic
|
||||
formal slot members exercise wrapper guards and copying without starting an
|
||||
engine. The actual identity section of `S4Series.__init__` is compiled from its
|
||||
AST, and actual `verify_s4_engine` checks a non-executable temporary data file
|
||||
under fixture-only patched constants. Other verifier sections are not claimed
|
||||
as covered by this synthetic fixture.
|
||||
|
||||
Cases cover success after check-only, parse failure, cleanup exception, setup
|
||||
copy failure, post-cleanup collection failure and final identity write failure.
|
||||
Every exclusive write attempt is counted. Input bytes are compared with their
|
||||
creation bytes before negative mutation. Fresh-output refusal, each missing or
|
||||
tampered phase receipt and mismatched initial-before are negative checks. The
|
||||
fixture's deliberate proof mutations are confined to its disposable temporary
|
||||
files. No registered plan/output/stage is read or changed.
|
||||
|
||||
Reasoning only about the 7af6 wrapper: import writes `engine-identity.json` via
|
||||
exclusive create. Before parse, the same name raises FileExistsError, so the
|
||||
four-phase success assertion cannot pass. After cleanup the old final write
|
||||
tries that same name again and escapes main, preventing final execution/end.
|
||||
Even if that collision alone were removed, the old runner-input final rewrite
|
||||
would hit the exclusive writer, and the required initial/per-phase receipts
|
||||
are absent. No 7af6 execution was performed to establish this reasoning.
|
||||
|
||||
Worker performed source inspection and file edits only: no fixtures, check-only,
|
||||
tests, Git, engines, Runner, agents or commits. Root still must run both fixtures
|
||||
and check-only before any native r27 collection, then exact-version verification
|
||||
and independent review. The registered validation gate remains unchanged at
|
||||
7af6, exit 2, fresh MANIFEST missing; this is the supplied gate record, not a new
|
||||
worker run. Native/product proof, full formal checks, D05 and original P04-01
|
||||
acceptance remain pending. This repair is submitted preparation, not completion.
|
||||
|
||||
|
||||
## REPAIR27 snapshot staff expectation (source-only; NOT RUN)
|
||||
|
||||
Root supplied the r26 result: 15 failures of 934 S4 checks, all at
|
||||
no shift confound; engine-identity/lifecycle fixtures and cleanup passed.
|
||||
This is supplied history, not a worker execution. Preserve r26 raw output,
|
||||
formal records, logs, source stage and plan unchanged.
|
||||
|
||||
The r27 probe SHA256 is `b5e5c81a0762427880416759e30e0a0144ce26749f1db1f26837c3287eeecf35`.
|
||||
FacilityInstance.create_snapshot serializes active_staff_ids through
|
||||
_names_to_strings as Array[String]. The snapshot expectation is now explicit
|
||||
SNAPSHOT_SERVERS: Array[String], containing exactly server a then server b.
|
||||
Runtime registration and attendance still use unchanged SERVERS:
|
||||
Array[StringName]. No values are normalized, fields dropped or invariants
|
||||
relaxed. Inspection of all S4 StringName constant uses found no other snapshot
|
||||
comparison with this mismatch; reservation IDs already compare with
|
||||
String(request_id). S3 lines 111–118 compare live runtime values and remain
|
||||
unchanged.
|
||||
|
||||
The wrapper dynamically pins QA bytes through pin(QA) into the plan and
|
||||
selected source map. S4Series dynamically hashes the current probe and checks
|
||||
the exact receipt/map binding; only its RUNS['s4'] binding advances to r27.
|
||||
The documented hash does not replace dynamic verification.
|
||||
Engine identity and receipt lifecycle logic, the a61 checker, frozen C and all
|
||||
1338 product inputs remain unchanged. The lifecycle mock's disposable output
|
||||
and plan names advance to r27; its behavior is unchanged.
|
||||
|
||||
Worker performed source inspection, edits and SHA256 calculation only. No
|
||||
fixtures, tests, check-only, Git, engine, Runner, agents or commits were run.
|
||||
Root re-runs only the fresh S4 collection and any needed fixture validation,
|
||||
using the r27 commands above. Exact-version evidence, registered validation,
|
||||
independent review, D05 and original acceptance remain pending; this is
|
||||
submitted preparation, not completion.
|
||||
|
||||
## REPAIR28 phase cut (source-only; NOTRUN)
|
||||
|
||||
Root's supplied r27 own-B diagnosis is preserved as history: import, parse and
|
||||
Writer passed (934 checks, zero failures); Reader ran 1445 checks with exactly
|
||||
one failure, complete phase count. ACTUAL_TYPED_PHASE_DIAGNOSIS.json reports
|
||||
all 121 actual Reader phase .var files byte-identical to matching Writer files.
|
||||
This worker did not open or rerun those raw materials. Keep all r27 failed raw,
|
||||
formals, logs, source stages, plans and diagnosis unchanged.
|
||||
|
||||
The kernel applies commands at the old minute, advances absolute_minute, then
|
||||
emits TIME_BOUNDARIES and the remaining phases. The new helper includes minute
|
||||
960 APPLY_COMMANDS using the enum key expression used by the Writer. It also
|
||||
includes all later rows. Before byte comparison the probe asserts the exact
|
||||
121-entry kernel roster, uniqueness, and Writer order. Both existing complete
|
||||
phase count and complete typed var_to_bytes equality checks remain unchanged.
|
||||
Writer row data, typed staff fix, runtime SERVERS, Clock and raw format stay
|
||||
unchanged.
|
||||
|
||||
The current RUNS s4 binding, wrapper defaults and disposable lifecycle fixture
|
||||
path names use r28. Only these path strings change in the wrapper and lifecycle
|
||||
fixture; their engine/lifecycle behavior is unchanged. Stage the three current
|
||||
files using the commands at the top to create fresh source-r28, plan-r28 and
|
||||
native-r28 paths. Do not reuse r27 as passing evidence.
|
||||
|
||||
Regression control status: NOTRUN. Root supplies full paths to ALL 132 actual
|
||||
r27 Writer phase .var files and ALL 121 actual Reader phase .var files:
|
||||
python3 "$E/s4/phase_cut_regression.py" --writer <full Writer phase paths...> --reader <full Reader phase paths...>
|
||||
Use actual own-B raw paths supplied by Root, not fabricated fixtures or old
|
||||
external provenance paths. Paths may be in any argument order; the control
|
||||
reconstructs kernel order from typed minute/phase, checks the complete Writer
|
||||
and Reader rosters, then compares unchanged full bytes. It requires old cut
|
||||
120/rejected, new cut 121/equal, deleted boundary APPLY_COMMANDS/rejected and
|
||||
duplicate/rejected. Mutations are in-memory lists only. Its result is a raw
|
||||
regression control, never an engine/native/acceptance PASS. Missing raw paths
|
||||
remain a Root execution input, not a worker-generated substitute.
|
||||
|
||||
Worker made source edits and calculated bindings only; no tests, fixtures,
|
||||
Git, engine, Runner, agents or commits. The normal validation on submitted
|
||||
55f1fb49aaefa5c1b86de1c3eda72392ef6b58f2 ran once and exited 2 because the current
|
||||
MANIFEST is missing (Root-supplied history). The gate, checker a61, 1338 inputs,
|
||||
C/S1-3/full178 artifacts, five carried formal review findings, and frozen
|
||||
original 13/88 main 9b remain unchanged. D05, independent review, exact-version
|
||||
native proof and original unit acceptance remain pending. This repair does
|
||||
not complete the unit.
|
||||
+56
@@ -0,0 +1,56 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Root-only engine identity controls; tests NOT RUN by worker."""
|
||||
import copy
|
||||
import importlib.util
|
||||
import json
|
||||
from pathlib import Path
|
||||
import sys
|
||||
from unittest.mock import patch
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
HERE = Path(__file__).resolve().parent
|
||||
spec = importlib.util.spec_from_file_location("series", HERE.parent / "p04_native_series.py")
|
||||
series = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(series)
|
||||
spec = importlib.util.spec_from_file_location("s4", HERE / "run_s4_native.py")
|
||||
s4 = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(s4)
|
||||
|
||||
|
||||
def run():
|
||||
# Read only the real installed executable. Never copy or write an engine.
|
||||
pin = s4.engine_pin(s4.ENGINE)
|
||||
identity = dict(before=pin, during=[pin], after=pin)
|
||||
results = []
|
||||
|
||||
def reject(label, action):
|
||||
try:
|
||||
action()
|
||||
except (ValueError, OSError, KeyError, TypeError) as caught:
|
||||
results.append(dict(case=label, result="rejected", error=str(caught)))
|
||||
else:
|
||||
raise AssertionError("negative accepted: " + label)
|
||||
|
||||
# Same bytes/SHA cannot admit an own-B bare copy or another outside-B path.
|
||||
for label, path in [
|
||||
("copied bare engine in B with same SHA", s4.BUILD / "audit-support/p04-s4-source-r26/Godot"),
|
||||
("other outside-B path", Path("/Applications/OtherGodot.app/Contents/MacOS/Godot")),
|
||||
]:
|
||||
other = dict(pin, path=str(path))
|
||||
reject(label, lambda other=other: series.verify_s4_engine(other, identity))
|
||||
reject(label + " wrapper", lambda path=path: s4.engine_pin(path))
|
||||
reject("SHA mismatch", lambda: series.verify_s4_engine(dict(pin, sha256="0" * 64), identity))
|
||||
with patch.object(s4, "ENGINE_SHA256", "0" * 64):
|
||||
reject("wrapper SHA mismatch", lambda: s4.engine_pin(s4.ENGINE))
|
||||
changed = copy.deepcopy(identity)
|
||||
changed["after"]["inode"] += 1
|
||||
reject("after-identity mismatch", lambda: series.verify_s4_engine(pin, changed))
|
||||
reject("wrapper after-identity mismatch",
|
||||
lambda: s4.engine_pin(s4.ENGINE, dict(pin, inode=pin["inode"] + 1)))
|
||||
series.verify_s4_engine(pin, identity)
|
||||
results.append(dict(case="exact installed path", result="accepted"))
|
||||
return dict(scope="read-only engine identity fixtures", results=results, formal_acceptance=False)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
print(json.dumps(run(), indent=2, sort_keys=True))
|
||||
@@ -0,0 +1,452 @@
|
||||
extends "res://tests/s3/test_runtime_actor_hardening.gd"
|
||||
|
||||
const CASES: Array[String] = ["S4"]
|
||||
const SEEDS: Dictionary = {"S4": 420440}
|
||||
const GUEST: StringName = &"p04.s4.guest.a"
|
||||
const REQUEST: StringName = &"p04.s4.request.a"
|
||||
const QUEUED_GUEST: StringName = &"p04.s4.guest.b"
|
||||
const QUEUED_REQUEST: StringName = &"p04.s4.request.b"
|
||||
const SERVERS: Array[StringName] = [&"p04.order.server.a", &"p04.order.server.b"]
|
||||
const SNAPSHOT_SERVERS: Array[String] = ["p04.order.server.a", "p04.order.server.b"]
|
||||
var _evidence_dir: String = ""
|
||||
var _mode: String = ""
|
||||
var _case: String = ""
|
||||
var _serial: int = 0
|
||||
var _facility_id: StringName = &""
|
||||
var _service_id: StringName = &""
|
||||
var _boundary: int = 960
|
||||
var _price: int = 0
|
||||
var _duration: int = 0
|
||||
var _patience: int = 0
|
||||
var _reserve: int = 0
|
||||
var _recovery: Dictionary = {}
|
||||
var _commands: Array = []
|
||||
var _results: Array = []
|
||||
var _receipts: Array = []
|
||||
var _phases: Array = []
|
||||
var _points: Dictionary = {}
|
||||
var _branches: Dictionary = {}
|
||||
var _slots: Dictionary = {}
|
||||
|
||||
func _run() -> void:
|
||||
_evidence_dir = OS.get_environment("THE_TREE_S4_EVIDENCE")
|
||||
_mode = OS.get_environment("THE_TREE_S4_MODE")
|
||||
if _evidence_dir.is_empty() or _mode not in ["writer", "reader"]:
|
||||
quit(2)
|
||||
return
|
||||
_expect(DirAccess.make_dir_recursive_absolute(_evidence_dir) == OK, "external evidence directory")
|
||||
if _mode == "writer":
|
||||
for branch: String in CASES:
|
||||
_case = branch
|
||||
_writer_case()
|
||||
else:
|
||||
_reader()
|
||||
_write(_mode, {&"pid": OS.get_process_id(), &"profile": OS.get_user_data_dir(), &"slots": _slots,
|
||||
&"branches": _branches, &"checks": _checks, &"failures": _failures,
|
||||
&"whole_goal_accepted": false, &"unit_accepted": false}, true)
|
||||
_cleanup()
|
||||
print("S4 power: %d checks, %d failures" % [_checks, _failures])
|
||||
quit(1 if _failures else 0)
|
||||
|
||||
func _fresh() -> void:
|
||||
_serial = 0
|
||||
_facility_id = &""
|
||||
_service_id = &""
|
||||
_boundary = 960
|
||||
_price = 0
|
||||
_duration = 0
|
||||
_patience = 0
|
||||
_reserve = 0
|
||||
_recovery = {}
|
||||
_commands = []
|
||||
_results = []
|
||||
_receipts = []
|
||||
_phases = []
|
||||
_points = {}
|
||||
_reset_runtime(SEEDS[_case])
|
||||
_runtime.configure_save_policy({&"enabled": false, &"daily_checkpoint_enabled": false})
|
||||
_runtime.command_completed.connect(func(result: CommandResult) -> void:
|
||||
_results.append({&"minute": _clock.absolute_minute, &"result": result.to_dictionary()})
|
||||
_expect(result.is_success(), "actual public command completion " + str(result.command_id))
|
||||
)
|
||||
|
||||
func _cmd(kind: StringName, payload: Dictionary, at: int = -1) -> CommandResult:
|
||||
_serial += 1
|
||||
var key: StringName = StringName("p04.s4.%s.command.%d" % [_case, _serial])
|
||||
var result: CommandResult = _runtime.submit_command(kind, payload, &"player", &"", 10, at, key)
|
||||
_commands.append({&"serial": _serial, &"kind": kind, &"payload": payload.duplicate(true),
|
||||
&"at": at, &"issued_at": _clock.absolute_minute, &"idempotency_key": key, &"result": result.to_dictionary()})
|
||||
_expect(result.is_success(), "public command " + String(kind))
|
||||
return result
|
||||
|
||||
func _queue(guest_id: StringName, request_id: StringName, exit_at: int) -> void:
|
||||
_cmd(&"spawn_guest", {&"guest_id": guest_id, &"guest_type_id": &"traveler", &"gold": _price * 2,
|
||||
&"options": {&"state": GuestRuntime.State.DECIDING, &"current_cell": Vector3i.ZERO, &"planned_exit_at": exit_at}})
|
||||
_cmd(&"create_service_request", {&"facility_id": _facility_id, &"request_id": request_id, &"guest_ids": [guest_id]})
|
||||
var guest: GuestRuntime = _runtime.guest_service.get_guest(guest_id)
|
||||
var request: ServiceRequest = _runtime.facility_service.get_request(request_id)
|
||||
_expect(guest != null and request != null, "actual Guest and request exist")
|
||||
if guest == null or request == null: return
|
||||
_expect(guest.state == GuestRuntime.State.QUEUING and guest.queue_request_id == request_id, "actual queued ownership before advancing clock")
|
||||
_expect(request.quoted_price == _price and request.service_minutes == _duration and request.reserved_inventory_ids.size() == 1, "definition price/duration and one meal reservation")
|
||||
for id: StringName in request.reserved_inventory_ids:
|
||||
var reservation: InventoryReservation = _runtime.inventory_service.get_reservation(id)
|
||||
_expect(reservation != null and reservation.is_active() and reservation.requester_id == request_id, "public queue actually reserves meal")
|
||||
|
||||
func _prepare() -> bool:
|
||||
_fresh()
|
||||
var facility: FacilityInstance = _build_cafeteria(true)
|
||||
if facility == null: return false
|
||||
_facility_id = facility.instance_id
|
||||
var definition: FacilityDefinition = _runtime.definition_registry.get_facility(facility.definition_id)
|
||||
_price = definition.base_price
|
||||
_duration = definition.base_service_minutes
|
||||
_patience = _runtime.guest_service.get_definition(&"traveler").base_patience
|
||||
for id: StringName in SERVERS:
|
||||
_cmd(&"register_staff", {&"staff_id": id, &"role_id": &"server", &"options": {&"state": StaffRuntime.State.OFF_DUTY, &"current_cell": Vector3i.ZERO}})
|
||||
_cmd(&"set_staff_work_assignment", {&"staff_id": id, &"template_id": &"DAY", &"facility_id": _facility_id})
|
||||
_clock.advance_minutes(_boundary - _duration - 1 - _clock.absolute_minute)
|
||||
_expect(facility.active_staff_ids == SERVERS, "normal public staff attendance")
|
||||
_expect(_stock(facility.local_inventory_id, &"ingredient/basic_meal", 1, &"p04.s4.stock"), "one actual meal")
|
||||
_queue(GUEST, REQUEST, _boundary + _duration)
|
||||
_clock.advance_one_minute()
|
||||
var active: Array = _runtime.facility_service.get_active_services(_facility_id)
|
||||
_expect(active.size() == 1, "one started service")
|
||||
if active.size() != 1: return false
|
||||
var service: ServiceInstance = active[0]
|
||||
_service_id = service.service_id
|
||||
_expect(service.started_at + _duration == _boundary, "source definition duration aligns completion")
|
||||
_clock.advance_minutes(_boundary - 1 - _clock.absolute_minute)
|
||||
var graph: Dictionary = _runtime.mana_network_service.create_snapshot()
|
||||
var adjacent: Array = []
|
||||
for edge: Array in graph[&"edges"]:
|
||||
if edge.has(String(_facility_id)):
|
||||
adjacent.append(edge[1] if edge[0] == String(_facility_id) else edge[0])
|
||||
_expect(adjacent.size() == 1, "actual sole cafeteria neighbour")
|
||||
if adjacent.size() != 1: return false
|
||||
_recovery = {&"neighbour": StringName(adjacent[0]), &"original_graph": graph,
|
||||
&"interval": ManaNetworkService.EVALUATION_INTERVAL_MINUTES,
|
||||
&"hold": ManaNetworkService.MINIMUM_OFF_HOLD_MINUTES}
|
||||
_expect(_boundary % int(_recovery[&"interval"]) == 0, "boundary is normal evaluation")
|
||||
_expect(_runtime.mana_network_service.disconnect_nodes(_facility_id, _recovery[&"neighbour"]), "public disconnect exact existing edge")
|
||||
_expect(_runtime.mana_network_service.validate_invariants()[&"valid"], "symmetric cut graph invariants")
|
||||
_reserve = _state.get_resource(&"mana")
|
||||
_expect(_reserve > 0 and service.elapsed_minutes == _duration - 1, "positive mana and natural duration-1 progress")
|
||||
return _clock.absolute_minute == _boundary - 1
|
||||
|
||||
func _connect_observations() -> void:
|
||||
_runtime.economy_service.transaction_posted.connect(func(id: StringName, entries: Array) -> void:
|
||||
var rows: Array = []
|
||||
for entry: LedgerEntry in entries: rows.append(entry.to_dictionary())
|
||||
_receipts.append({&"id": id, &"minute": _clock.absolute_minute, &"entries": rows})
|
||||
)
|
||||
_clock.tick_phase_started.connect(func(phase: int, minute: int) -> void:
|
||||
var label: String = "phase-%d-%s" % [minute, SimulationKernel.TickPhase.keys()[phase]]
|
||||
var row: Dictionary = _capture()
|
||||
row[&"phase"] = SimulationKernel.TickPhase.keys()[phase]
|
||||
_assert_phase(row)
|
||||
_phases.append(_write(label, row))
|
||||
)
|
||||
|
||||
func _assert_phase(point: Dictionary) -> void:
|
||||
# Every phase is retained as complete typed raw; semantics are checked at points.
|
||||
_expect(point[&"snapshot"][&"game_state"][&"resources"][&"mana"] > 0, "no global depletion")
|
||||
|
||||
func _capture() -> Dictionary:
|
||||
var snapshot: Dictionary = _runtime.create_snapshot()
|
||||
var operations: Dictionary = snapshot[&"systems"][&"runtime"][&"operations"]
|
||||
var facility: FacilityInstance = _runtime.facility_service.get_instance(_facility_id)
|
||||
var service: ServiceInstance = _runtime.facility_service.get_service(_service_id)
|
||||
var event: EventInstance = _runtime.event_service.get_instance(&"p04.destroy.instance")
|
||||
var kitchen: FacilityInstance = _runtime.facility_service.get_instance(facility.related_facility_id)
|
||||
var actors: Dictionary = {}
|
||||
var requests: Dictionary = {}
|
||||
var wallets: Dictionary = {}
|
||||
for id: StringName in [GUEST, QUEUED_GUEST]:
|
||||
var guest: GuestRuntime = _runtime.guest_service.get_guest(id)
|
||||
actors[String(id)] = guest.create_snapshot() if guest != null else {}
|
||||
wallets[String(id)] = _runtime.economy_service.get_balance(StringName("GUEST_WALLET:" + String(id)))
|
||||
for id: StringName in [REQUEST, QUEUED_REQUEST]:
|
||||
var request: ServiceRequest = _runtime.facility_service.get_request(id)
|
||||
requests[String(id)] = request.create_snapshot() if request != null else {}
|
||||
var reservations: Array = []
|
||||
for reservation: InventoryReservation in _runtime.inventory_service.get_reservations(false): reservations.append(reservation.create_snapshot())
|
||||
var ledger: Array = []
|
||||
for entry: LedgerEntry in _runtime.economy_service.get_entries(): ledger.append(entry.to_dictionary())
|
||||
return {&"snapshot": snapshot, &"minute": _clock.absolute_minute,
|
||||
&"inputs": {&"case": _case, &"seed": SEEDS[_case], &"serial": _serial, &"facility_id": _facility_id, &"service_id": _service_id,
|
||||
&"boundary": _boundary, &"price": _price, &"duration": _duration, &"patience": _patience, &"reserve": _reserve, &"recovery": _recovery.duplicate(true),
|
||||
&"kitchen_premise": "ActorHardening physical FLEX fixture; not natural hire/unlock"},
|
||||
&"related_facility_operating": facility.related_facility_operating, &"kitchen": kitchen.create_snapshot(), &"graph_invariants": _runtime.mana_network_service.validate_invariants(),
|
||||
&"facility": facility.create_snapshot(), &"service": service.create_snapshot() if service != null else {},
|
||||
&"event": event.create_snapshot() if event != null else {}, &"guests": actors, &"requests": requests, &"wallets": wallets,
|
||||
&"reservations": reservations, &"ledger": ledger, &"receipts": _receipts.duplicate(true),
|
||||
&"player_cash": _runtime.economy_service.get_balance(_runtime.PLAYER_CASH_ACCOUNT),
|
||||
&"available_meals": _runtime.inventory_service.available_quantity(facility.local_inventory_id, &"ingredient/basic_meal"),
|
||||
&"active_services": _runtime.facility_service.get_active_services(_facility_id).size(),
|
||||
&"operations_enabled": operations[&"enabled"], &"saved_coordinator": operations[&"coordinator"],
|
||||
&"actual_coordinator_absent": _runtime.operations_coordinator == null, &"unrelated_getters_called": false}
|
||||
|
||||
func _labels() -> Array[String]:
|
||||
return ["boundary", "held", "recovered"]
|
||||
|
||||
func _advance(label: String) -> void:
|
||||
if label == "duplicate_guard":
|
||||
var before_replay: Dictionary = _runtime.create_snapshot()
|
||||
var accepted: bool = _runtime.mana_network_service.connect_nodes(_facility_id, _recovery[&"neighbour"])
|
||||
var after_replay: Dictionary = _runtime.create_snapshot()
|
||||
_expect(accepted and var_to_bytes(before_replay) == var_to_bytes(after_replay), "public reconnect replay changes no Runtime field")
|
||||
_write("reconnect-replay", {&"before": before_replay, &"after": after_replay, &"accepted": accepted})
|
||||
if label == "recovered":
|
||||
_expect(_clock.absolute_minute == _boundary + 1, "reconnect only after held observation")
|
||||
_expect(_runtime.mana_network_service.connect_nodes(_facility_id, _recovery[&"neighbour"]), "reconnect exact cut edge")
|
||||
var graph: Dictionary = _runtime.mana_network_service.create_snapshot()
|
||||
_expect(var_to_bytes(graph[&"edges"]) == var_to_bytes(_recovery[&"original_graph"][&"edges"]), "all original edges restored")
|
||||
_expect(_runtime.mana_network_service.validate_invariants()[&"valid"], "reconnected graph invariants")
|
||||
var node: Dictionary = _runtime.mana_network_service.get_node(_facility_id)
|
||||
var resume_at: int = int(node[&"hold_until"])
|
||||
var interval: int = int(_recovery[&"interval"])
|
||||
while resume_at % interval != 0: resume_at += 1
|
||||
_expect(resume_at > _clock.absolute_minute and resume_at < _boundary + _duration, "finite normal hold/evaluation recovery before exit")
|
||||
while _clock.absolute_minute < resume_at:
|
||||
_clock.advance_one_minute()
|
||||
if _clock.absolute_minute < resume_at: _assert_stopped(_capture())
|
||||
else:
|
||||
_clock.advance_one_minute()
|
||||
|
||||
func _writer_case() -> void:
|
||||
if not _prepare(): return
|
||||
var before: Dictionary = _capture()
|
||||
_assert_before(before)
|
||||
_points["before"] = _write("before", before)
|
||||
_connect_observations()
|
||||
for label: String in _labels():
|
||||
_advance(label)
|
||||
var actual: Dictionary = _capture()
|
||||
_assert_outcome(before, actual)
|
||||
_save_point(label, actual)
|
||||
_advance("duplicate_guard")
|
||||
var guard: Dictionary = _capture()
|
||||
_assert_outcome(before, guard)
|
||||
_points["duplicate_guard"] = _write("duplicate_guard", guard)
|
||||
_branches[_case] = _write("case", {&"points": _points.duplicate(true), &"phases": _phases.duplicate(true),
|
||||
&"commands": _write("commands", {&"submitted": _commands, &"completed_including_fixture": _results})})
|
||||
|
||||
func _assert_before(point: Dictionary) -> void:
|
||||
_assert_unconfounded(point)
|
||||
_expect(point[&"service"][&"state"] == "ACTIVE" and point[&"facility"][&"power_available"], "before normal projection remains powered")
|
||||
_expect(point[&"service"][&"elapsed_minutes"] == _duration - 1 and point[&"reservations"].size() == 1, "natural duration-1 and one reservation")
|
||||
|
||||
func _assert_unconfounded(point: Dictionary) -> void:
|
||||
_expect(not point[&"operations_enabled"] and point[&"actual_coordinator_absent"], "existing isolated fixture")
|
||||
_expect(point[&"facility"][&"operator_open"] and point[&"related_facility_operating"], "open operator and operating dependency")
|
||||
_expect(point[&"facility"][&"durability"] > 0 and point[&"event"].is_empty(), "no destruction event")
|
||||
_expect(point[&"kitchen"][&"power_available"] and point[&"kitchen"][&"state"] == "OPEN", "kitchen stays active/powered")
|
||||
_expect(point[&"snapshot"][&"game_state"][&"resources"][&"mana"] > 0, "positive global reserve")
|
||||
_expect(point[&"facility"][&"active_staff_ids"] == SNAPSHOT_SERVERS, "no shift confound")
|
||||
if point[&"service"][&"state"] != "COMPLETED":
|
||||
_expect(point[&"guests"][String(GUEST)][&"planned_exit_at"] > point[&"minute"] and point[&"guests"][String(GUEST)][&"state"] == "RECEIVING_SERVICE", "no exit at outage/hold")
|
||||
_expect(point[&"graph_invariants"][&"valid"], "graph allocation/storage/symmetry valid")
|
||||
_expect(_runtime.mana_network_service.get_consumer_state(StringName(point[&"kitchen"][&"instance_id"])) == ManaNetworkService.ConsumerState.ACTIVE, "kitchen network consumer ACTIVE")
|
||||
|
||||
func _assert_stopped(point: Dictionary) -> void:
|
||||
_assert_unconfounded(point)
|
||||
_expect(not point[&"facility"][&"power_available"] and point[&"service"][&"state"] == "PAUSED" and point[&"service"][&"interruption_reason"] == "NO_POWER", "actual isolated NO_POWER path")
|
||||
_expect(point[&"service"][&"elapsed_minutes"] == _duration - 1 and point[&"receipts"].is_empty(), "stopped progress held and no payment")
|
||||
|
||||
func _assert_reservation(before: Dictionary, point: Dictionary, request_id: StringName, state: String, terminal: int) -> void:
|
||||
var prior: Array = []
|
||||
var current: Array = []
|
||||
for row: Dictionary in before[&"reservations"]:
|
||||
if row[&"requester_id"] == String(request_id): prior.append(row)
|
||||
for row: Dictionary in point[&"reservations"]:
|
||||
if row[&"requester_id"] == String(request_id): current.append(row)
|
||||
_expect(prior.size() == 1 and current.size() == 1, "one original reservation per request")
|
||||
if prior.size() != 1 or current.size() != 1: return
|
||||
_expect(prior[0][&"reservation_id"] == current[0][&"reservation_id"] and current[0][&"state"] == state and current[0][&"terminal_at"] == terminal, "same reservation ID/state/terminal time; no second release")
|
||||
if state == "ACTIVE":
|
||||
_expect(var_to_bytes(prior[0]) == var_to_bytes(current[0]), "entire held reservation unchanged")
|
||||
var request: Dictionary = point[&"requests"][String(request_id)]
|
||||
_expect(not request.is_empty() and request[&"reserved_inventory_ids"].has(current[0][&"reservation_id"]), "active reservation has live request owner")
|
||||
else:
|
||||
_expect(point[&"requests"][String(request_id)].is_empty(), "terminal reservation has no orphan request")
|
||||
if state == "RELEASED":
|
||||
var release_count: int = 0
|
||||
var inventory: Dictionary = point[&"snapshot"][&"systems"][&"runtime"][&"inventory"]
|
||||
for operation: Dictionary in inventory[&"idempotency_results"]:
|
||||
var result: Dictionary = operation[&"result"]
|
||||
if operation[&"action"] == "release" and String(result.get(&"reservation_id", "")) == current[0][&"reservation_id"]:
|
||||
release_count += 1
|
||||
_expect(bool(result.get(&"ok", false)) and result.get(&"quantity", 0) == current[0][&"quantity"], "release returned actual reserved quantity, not an orphan repair/retry")
|
||||
_expect(release_count == 1, "one raw inventory release operation for original reservation")
|
||||
|
||||
func _assert_outcome(before: Dictionary, point: Dictionary) -> void:
|
||||
_assert_unconfounded(point)
|
||||
var service: Dictionary = point[&"service"]
|
||||
_expect(service[&"service_id"] == before[&"service"][&"service_id"], "same service ID")
|
||||
var paid: bool = service[&"state"] == "COMPLETED"
|
||||
if not paid:
|
||||
_assert_stopped(point)
|
||||
_expect(var_to_bytes(point[&"ledger"]) == var_to_bytes(before[&"ledger"]), "zero stopped ledger delta")
|
||||
_assert_reservation(before, point, REQUEST, "ACTIVE", -1)
|
||||
else:
|
||||
var node: Dictionary = _runtime.mana_network_service.get_node(_facility_id)
|
||||
_expect(point[&"facility"][&"power_available"] and service[&"elapsed_minutes"] == _duration and service[&"completed_at"] >= int(node[&"hold_until"]), "resume and complete after hold")
|
||||
_expect(point[&"receipts"].size() == 1, "one payment only")
|
||||
var expected: Array = before[&"ledger"].duplicate(true)
|
||||
for receipt: Dictionary in point[&"receipts"]: expected.append_array(receipt[&"entries"])
|
||||
_expect(var_to_bytes(expected) == var_to_bytes(point[&"ledger"]), "whole ledger exactly one receipt")
|
||||
_assert_reservation(before, point, REQUEST, "CONSUMED", service[&"completed_at"])
|
||||
_expect(point[&"wallets"][String(GUEST)] == _price * (1 if paid else 2) and point[&"player_cash"] == before[&"player_cash"] + (_price if paid else 0), "exact one price or zero")
|
||||
|
||||
func _save_point(label: String, point: Dictionary) -> void:
|
||||
_points[label] = _write(label, point)
|
||||
var path: String = "user://saves/p04_s4/" + _case + "-" + label
|
||||
var saved: Dictionary = SaveService.save_snapshot(path, point[&"snapshot"])
|
||||
var inspected: Dictionary = SaveService.inspect_snapshot(path)
|
||||
_expect(bool(saved.get(&"ok", false)) and bool(inspected.get(&"ok", false)) and bool(inspected.get(&"read_only", false)), "public formal save/inspect")
|
||||
_expect(var_to_bytes(inspected.get(&"snapshot", {})) == var_to_bytes(point[&"snapshot"]), "all typed fields preserved by formal package")
|
||||
_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(point[&"snapshot"]), "formal saving leaves Runtime unchanged")
|
||||
_slots[_case + "-" + label] = ProjectSettings.globalize_path(path)
|
||||
# Snapshot bytes exist once in point raw and once in the required formal
|
||||
# package; indexes do not embed inspection/load copies of those bytes.
|
||||
|
||||
func _write(label: String, value: Variant, global_name: bool = false) -> Dictionary:
|
||||
var name: String = label if global_name else _mode + "-" + _case + "-" + label
|
||||
var reference: Dictionary = {}
|
||||
for extension: String in ["var", "json"]:
|
||||
var path: String = _evidence_dir.path_join(name + "." + extension)
|
||||
_expect(not FileAccess.file_exists(path), "raw point written exactly once " + name)
|
||||
var file: FileAccess = FileAccess.open(path, FileAccess.WRITE)
|
||||
_expect(file != null, "raw file " + name)
|
||||
if file == null: continue
|
||||
if extension == "var": file.store_buffer(var_to_bytes(value))
|
||||
else: file.store_string(JSON.stringify(value, "\t"))
|
||||
file.flush()
|
||||
file.close()
|
||||
reference[extension] = {&"path": path, &"sha256": FileAccess.get_sha256(path)}
|
||||
return reference
|
||||
|
||||
func _read(reference: Dictionary) -> Dictionary:
|
||||
var item: Dictionary = reference["var"]
|
||||
var path: String = item["path"]
|
||||
_expect(FileAccess.get_sha256(path) == item["sha256"], "raw typed SHA")
|
||||
var json_ref: Dictionary = reference["json"]
|
||||
_expect(FileAccess.get_sha256(json_ref["path"]) == json_ref["sha256"], "raw JSON SHA")
|
||||
var file: FileAccess = FileAccess.open(path, FileAccess.READ)
|
||||
_expect(file != null, "typed input readable")
|
||||
if file == null: return {}
|
||||
var value: Variant = bytes_to_var(file.get_buffer(file.get_length()))
|
||||
file.close()
|
||||
_expect(value is Dictionary, "typed input dictionary")
|
||||
return value if value is Dictionary else {}
|
||||
|
||||
func _restore_inputs(point: Dictionary) -> void:
|
||||
var inputs: Dictionary = point[&"inputs"]
|
||||
_expect(_serial == 0, "Reader starts with serial zero before importing external inputs")
|
||||
_serial = inputs[&"serial"]
|
||||
_facility_id = inputs[&"facility_id"]
|
||||
_service_id = inputs[&"service_id"]
|
||||
_boundary = inputs[&"boundary"]
|
||||
_price = inputs[&"price"]
|
||||
_duration = inputs[&"duration"]
|
||||
_patience = inputs[&"patience"]
|
||||
_reserve = inputs[&"reserve"]
|
||||
_recovery = inputs[&"recovery"].duplicate(true)
|
||||
|
||||
func _load_point(path: String, expected: Dictionary) -> bool:
|
||||
_fresh()
|
||||
_restore_inputs(expected)
|
||||
var loaded: Dictionary = SaveService.load_snapshot(path)
|
||||
_expect(bool(loaded.get(&"ok", false)), "public formal load")
|
||||
if not bool(loaded.get(&"ok", false)): return false
|
||||
_expect(var_to_bytes(loaded[&"snapshot"]) == var_to_bytes(expected[&"snapshot"]), "all saved typed fields equal Writer")
|
||||
var restored: bool = _runtime.restore_snapshot(loaded[&"snapshot"])
|
||||
_expect(restored, "public Runtime restore")
|
||||
_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(expected[&"snapshot"]), "all restored typed fields equal Writer")
|
||||
return restored
|
||||
|
||||
func _is_replayed_phase(row: Dictionary) -> bool:
|
||||
return int(row[&"minute"]) > _boundary or (int(row[&"minute"]) == _boundary and row[&"phase"] == SimulationKernel.TickPhase.keys()[SimulationKernel.TickPhase.APPLY_COMMANDS])
|
||||
|
||||
func _assert_expected_phase_roster(references: Array) -> void:
|
||||
var expected_pairs: Array = []
|
||||
for minute: int in range(_boundary, _boundary + 11):
|
||||
for phase: int in range(SimulationKernel.TickPhase.size()):
|
||||
expected_pairs.append([minute if phase == SimulationKernel.TickPhase.APPLY_COMMANDS else minute + 1, SimulationKernel.TickPhase.keys()[phase]])
|
||||
var actual_pairs: Array = []
|
||||
var seen: Dictionary = {}
|
||||
for reference: Dictionary in references:
|
||||
var row: Dictionary = _read(reference)
|
||||
var pair: Array = [int(row[&"minute"]), row[&"phase"]]
|
||||
_expect(not seen.has(pair), "expected phase roster has no duplicate minute/phase")
|
||||
seen[pair] = true
|
||||
actual_pairs.append(pair)
|
||||
_expect(references.size() == 121 and expected_pairs.size() == 121, "expected phase roster exactly 11 phases x 11 replayed minutes")
|
||||
_expect(actual_pairs == expected_pairs, "expected phase roster in Writer/kernel order with no missing minute/phase")
|
||||
|
||||
func _reader() -> void:
|
||||
var file: FileAccess = FileAccess.open(_evidence_dir.path_join("writer.json"), FileAccess.READ)
|
||||
_expect(file != null, "Writer receipt")
|
||||
if file == null: return
|
||||
var writer: Dictionary = JSON.parse_string(file.get_as_text())
|
||||
file.close()
|
||||
_expect(int(writer["pid"]) != OS.get_process_id() and writer["profile"] != OS.get_user_data_dir(), "independent Reader PID/profile")
|
||||
for branch: String in CASES:
|
||||
_case = branch
|
||||
var writer_case: Dictionary = _read(writer["branches"][branch])
|
||||
var hashes: Dictionary = {}
|
||||
var restored_refs: Dictionary = {}
|
||||
for label: String in _labels():
|
||||
var key: String = branch + "-" + label
|
||||
var original: String = writer["slots"][key]
|
||||
var target: String = ProjectSettings.globalize_path("user://saves/p04_s4/" + key)
|
||||
_expect(DirAccess.make_dir_recursive_absolute(target) == OK, "private Reader formal slot")
|
||||
var directory: DirAccess = DirAccess.open(original)
|
||||
_expect(directory != null, "Writer formal slot readable")
|
||||
if directory == null: return
|
||||
var members: PackedStringArray = directory.get_files()
|
||||
members.sort()
|
||||
_expect(directory.get_directories().is_empty() and members == PackedStringArray(["journal.log", "manifest.json", "thumbnail.png", "world.bin"]), "all formal members enumerated")
|
||||
var member_hashes: Dictionary = {}
|
||||
for member: String in members:
|
||||
var sha: String = FileAccess.get_sha256(original.path_join(member))
|
||||
_expect(DirAccess.copy_absolute(original.path_join(member), target.path_join(member)) == OK, "copy every formal member")
|
||||
var copied_sha: String = FileAccess.get_sha256(target.path_join(member))
|
||||
_expect(not sha.is_empty() and sha == copied_sha, "original/copy member SHA equality")
|
||||
member_hashes[member] = {&"original_before": sha, &"copy_before": copied_sha}
|
||||
hashes[key] = {&"original": original, &"copy": target, &"members": member_hashes}
|
||||
_slots[key] = target
|
||||
var expected: Dictionary = _read(writer_case[&"points"][label])
|
||||
if not _load_point(target, expected): return
|
||||
restored_refs[label] = _write(label + "-restored", _capture())
|
||||
var before: Dictionary = _read(writer_case[&"points"]["before"])
|
||||
var boundary: Dictionary = _read(writer_case[&"points"]["boundary"])
|
||||
if not _load_point(_slots[branch + "-boundary"], boundary): return
|
||||
_assert_stopped(_capture())
|
||||
_connect_observations()
|
||||
var replay_refs: Dictionary = {}
|
||||
for label: String in ["held", "recovered", "duplicate_guard"]:
|
||||
_advance(label)
|
||||
var actual: Dictionary = _capture()
|
||||
var expected: Dictionary = _read(writer_case[&"points"][label])
|
||||
_expect(var_to_bytes(actual) == var_to_bytes(expected), "replay complete typed point including Runtime, inputs, receipts " + label)
|
||||
_assert_outcome(before, actual)
|
||||
replay_refs[label] = _write(label + "-replay", actual)
|
||||
var expected_phases: Array = []
|
||||
for reference: Dictionary in writer_case[&"phases"]:
|
||||
if _is_replayed_phase(_read(reference)): expected_phases.append(reference)
|
||||
_assert_expected_phase_roster(expected_phases)
|
||||
_expect(_phases.size() == expected_phases.size(), "complete phase count")
|
||||
if _phases.size() == expected_phases.size():
|
||||
for index: int in range(_phases.size()):
|
||||
_expect(var_to_bytes(_read(_phases[index])) == var_to_bytes(_read(expected_phases[index])), "same phase order and all typed phase state")
|
||||
for key: String in hashes:
|
||||
var row: Dictionary = hashes[key]
|
||||
for member: String in row[&"members"]:
|
||||
var item: Dictionary = row[&"members"][member]
|
||||
item[&"original_after"] = FileAccess.get_sha256(String(row[&"original"]).path_join(member))
|
||||
item[&"copy_after"] = FileAccess.get_sha256(String(row[&"copy"]).path_join(member))
|
||||
_expect(item[&"original_before"] == item[&"original_after"] and item[&"copy_before"] == item[&"copy_after"], "original/copy unchanged after all loads and replay")
|
||||
_branches[branch] = _write("case", {&"restored": restored_refs, &"replay": replay_refs, &"phases": _phases,
|
||||
&"member_hashes": hashes, &"recovery_commands": _commands, &"replay_completed_commands": _results})
|
||||
@@ -0,0 +1,83 @@
|
||||
"""Read actual r27 phase .var paths only; no engine, fixtures or acceptance claim.
|
||||
|
||||
Root supplies every Writer and Reader phase file via --writer and --reader.
|
||||
Argument order is immaterial: observation order is reconstructed from kernel
|
||||
phase/minute keys, never from lexicographic filenames. Typed bytes stay intact.
|
||||
"""
|
||||
import argparse
|
||||
import hashlib
|
||||
import json
|
||||
from pathlib import Path
|
||||
import sys
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
|
||||
from p04_native_series import require, variant
|
||||
|
||||
PHASES = ('APPLY_COMMANDS', 'TIME_BOUNDARIES', 'MANA', 'CONSTRUCTION',
|
||||
'LOGISTICS', 'FACILITY_COMPLETION', 'VITALS_AND_ENVIRONMENT',
|
||||
'INCIDENTS_AND_EVENTS', 'FACILITY_QUEUES', 'AI_DECISIONS', 'PUBLISH_SNAPSHOT')
|
||||
BOUNDARY = 960
|
||||
ROSTER = [(minute if phase == PHASES[0] else minute + 1, phase)
|
||||
for minute in range(BOUNDARY, BOUNDARY + 11) for phase in PHASES]
|
||||
|
||||
|
||||
def load(paths, role):
|
||||
rows, pins = [], []
|
||||
for path in paths:
|
||||
require(path.is_absolute() and path.is_file() and not path.is_symlink(), 'full regular raw path required')
|
||||
require(path.name.startswith(role + '-S4-phase-') and path.suffix == '.var', 'actual role phase .var required')
|
||||
raw = path.read_bytes()
|
||||
node = variant(raw)
|
||||
minute, phase = node.at('minute'), node.at('phase')
|
||||
require(minute.kind == 2 and phase.kind == 4 and phase.value in PHASES, 'typed minute/phase')
|
||||
rows.append(((minute.value, phase.value), raw))
|
||||
pins.append(dict(path=str(path), bytes=len(raw), sha256=hashlib.sha256(raw).hexdigest()))
|
||||
rows.sort(key=lambda row: (row[0][0] + (row[0][1] == PHASES[0]), PHASES.index(row[0][1])))
|
||||
return rows, pins
|
||||
|
||||
|
||||
def validate(expected, reader):
|
||||
require(len(expected) == len(reader) == 121, 'complete phase count')
|
||||
require([key for key, _ in expected] == ROSTER, 'Writer roster missing/duplicate/order')
|
||||
require([key for key, _ in reader] == ROSTER, 'Reader roster missing/duplicate/order')
|
||||
require(all(a == b for a, b in zip(expected, reader)), 'same phase order and all typed phase bytes')
|
||||
|
||||
|
||||
def rejected(expected, reader):
|
||||
try:
|
||||
validate(expected, reader)
|
||||
except ValueError:
|
||||
return True
|
||||
raise ValueError('negative control unexpectedly accepted')
|
||||
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--writer', nargs='+', type=Path, required=True)
|
||||
parser.add_argument('--reader', nargs='+', type=Path, required=True)
|
||||
args = parser.parse_args()
|
||||
writer, wpins = load(args.writer, 'writer')
|
||||
reader, rpins = load(args.reader, 'reader')
|
||||
require(len(writer) == 132 and len({key for key, _ in writer}) == 132, 'complete unique actual Writer input')
|
||||
require([key for key, _ in writer] ==
|
||||
[(minute if phase == PHASES[0] else minute + 1, phase)
|
||||
for minute in range(BOUNDARY - 1, BOUNDARY + 11) for phase in PHASES],
|
||||
'full Writer kernel roster')
|
||||
old = [row for row in writer if row[0][0] > BOUNDARY]
|
||||
new = [row for row in writer if row[0][0] > BOUNDARY or
|
||||
(row[0][0] == BOUNDARY and row[0][1] == PHASES[0])]
|
||||
require(len(old) == 120, 'old cut must produce 120')
|
||||
old_rejected = rejected(old, reader)
|
||||
validate(new, reader)
|
||||
require(new[0][0] == (BOUNDARY, PHASES[0]), 'boundary APPLY_COMMANDS first')
|
||||
deleted_rejected = rejected(new[1:], reader)
|
||||
duplicated_rejected = rejected([new[0], *new], reader)
|
||||
print(json.dumps(dict(status='CONTROL_CONFIRMED', engine_run=False, acceptance=False,
|
||||
old_count=len(old), old_rejected=old_rejected, new_count=len(new),
|
||||
all_typed_bytes_in_order=True, deleted_apply_rejected=deleted_rejected,
|
||||
duplicate_rejected=duplicated_rejected, writer=wpins, reader=rpins), indent=2))
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
+255
@@ -0,0 +1,255 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Root-only synthetic receipt lifecycle fixtures. No engine/process is started.
|
||||
|
||||
Uses the real main, exclusive JSON writer, source_refs and inventories. The
|
||||
identity section is compiled directly from S4Series.__init__, not reimplemented.
|
||||
This is not native/product/ownership/formal acceptance evidence.
|
||||
"""
|
||||
import ast
|
||||
from collections import Counter
|
||||
from contextlib import ExitStack, redirect_stdout
|
||||
import copy
|
||||
import importlib.util
|
||||
import io
|
||||
import json
|
||||
from pathlib import Path
|
||||
import shutil
|
||||
import sys
|
||||
import tempfile
|
||||
from types import SimpleNamespace
|
||||
from unittest.mock import patch
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
HERE = Path(__file__).resolve().parent
|
||||
ROOT = next(p for p in HERE.parents if (p / 'tools/run_all_tests.py').is_file())
|
||||
|
||||
|
||||
def load(name, path):
|
||||
spec = importlib.util.spec_from_file_location(name, path)
|
||||
value = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(value)
|
||||
return value
|
||||
|
||||
|
||||
s4 = load('receipt_s4', HERE / 'run_s4_native.py')
|
||||
r = load('receipt_standard', ROOT / 'tools/run_all_tests.py')
|
||||
series = load('receipt_series', HERE.parent / 'p04_native_series.py')
|
||||
|
||||
|
||||
def identity_code():
|
||||
tree = ast.parse((HERE.parent / 'p04_native_series.py').read_text())
|
||||
cls = next(n for n in tree.body if isinstance(n, ast.ClassDef) and n.name == 'S4Series')
|
||||
init = next(n for n in cls.body if isinstance(n, ast.FunctionDef) and n.name == '__init__')
|
||||
start = next(i for i, n in enumerate(init.body) if isinstance(n, ast.Expr) and
|
||||
isinstance(n.value, ast.Call) and isinstance(n.value.func, ast.Name) and
|
||||
n.value.func.id == 'verify_s4_engine')
|
||||
end = next(i for i in range(start + 1, len(init.body))
|
||||
if "execution['error']" in ast.unparse(init.body[i]))
|
||||
return compile(ast.Module(body=init.body[start:end], type_ignores=[]), '<real S4 identity section>', 'exec')
|
||||
|
||||
|
||||
def verify_identity(out, descriptor):
|
||||
# The real engine verifier reads only the synthetic ordinary file here.
|
||||
# Production constants/functions on disk are never changed.
|
||||
with patch.object(series, 'S4_ENGINE_PATH', descriptor['path']), \
|
||||
patch.object(series, 'S4_ENGINE_SHA256', descriptor['sha256']):
|
||||
namespace = dict(vars(series), inputs=r.read(out / 'runner-input.json'),
|
||||
execution=r.read(out / 'execution.json'),
|
||||
self=SimpleNamespace(read=lambda name: (out / name).read_bytes()))
|
||||
exec(identity_code(), namespace)
|
||||
|
||||
|
||||
def rejected(action):
|
||||
try:
|
||||
action()
|
||||
except (ValueError, AssertionError, OSError, KeyError, TypeError):
|
||||
return
|
||||
raise AssertionError('negative fixture was accepted')
|
||||
|
||||
|
||||
def case(base, failure=None):
|
||||
product = base / 'product'
|
||||
support = base / 'support'
|
||||
staged = base / 'source'
|
||||
for path in (product, support, staged):
|
||||
path.mkdir(parents=True)
|
||||
|
||||
def put(path, data):
|
||||
path.parent.mkdir(parents=True, exist_ok=True)
|
||||
path.write_bytes(data)
|
||||
|
||||
# Real 1338-entry source_refs and 316-entry script roster, synthetic bytes.
|
||||
scripts = [s4.TEST, 'tests/transport/test_runtime_transport.gd',
|
||||
'tests/staff/test_rescue_elevator.gd']
|
||||
scripts += ['scripts/fixture_%03d.gd' % i for i in range(313)]
|
||||
for name in scripts:
|
||||
put(product / name, b'extends Node\n')
|
||||
for name in ('project.godot', 'export_presets.cfg', 'Makefile', 'AGENTS.md'):
|
||||
put(product / name, b'fixture\n')
|
||||
put(product / 'tools/run_all_tests.py', (ROOT / 'tools/run_all_tests.py').read_bytes())
|
||||
for i in range(1017):
|
||||
put(product / ('data/fixture_%04d.txt' % i), b'fixture\n')
|
||||
assert len(r.source_refs(product)) == 1338
|
||||
qa = staged / 'p04_s4_power_probe.gd'
|
||||
put(qa, b'extends Node\n# synthetic override\n')
|
||||
put(staged / 'run_s4_native.py', (HERE / 'run_s4_native.py').read_bytes())
|
||||
put(staged / 'S4_ROOT_RUN.md', b'synthetic fixture material\n')
|
||||
contracts = base / 'contracts.json'
|
||||
r.write(contracts, {})
|
||||
material = base / 'material.json'
|
||||
r.write(material, {})
|
||||
r.write(support / 'suite-policy.json', {'suite_policies': {}})
|
||||
r.write(support / 'bootstrap-scripts.json', {
|
||||
'parse_full_dependencies.gd': {'text': 'fixture\n', 'sha256': r.sha(product / 'Makefile')}})
|
||||
engine = base / 'synthetic-engine-data'
|
||||
put(engine, b'not an executable; never launched\n')
|
||||
st = engine.stat()
|
||||
descriptor = dict(path=str(engine), resolved_path=str(engine), bytes=st.st_size,
|
||||
sha256=r.sha(engine), mtime_ns=st.st_mtime_ns, mode=st.st_mode,
|
||||
device=st.st_dev, inode=st.st_ino, ctime_ns=st.st_ctime_ns)
|
||||
out = base / 'p04-s4-native-r28'
|
||||
plan = base / 'p04-s4-plan-r28.json'
|
||||
attempts, created, phases = Counter(), {}, []
|
||||
cleanup_calls = []
|
||||
real_write, real_inventory = r.write, r.inventory
|
||||
protected = dict(path=str(base / 'default-player'), existed=False, files={}, logs_and_locks_included=True)
|
||||
|
||||
def write(path, value):
|
||||
path = Path(path)
|
||||
attempts[path] += 1
|
||||
if failure == 'identity-write' and path == out / 'engine-identity.json':
|
||||
raise OSError('injected final identity write error')
|
||||
real_write(path, value) # unchanged open('x'), including collisions
|
||||
created[path] = path.read_bytes()
|
||||
|
||||
def finish(owned):
|
||||
cleanup_calls.append(list(owned))
|
||||
if failure == 'cleanup':
|
||||
raise RuntimeError('injected cleanup error')
|
||||
return [dict(pid=p.pid, engine_ended=True) for p in owned], []
|
||||
|
||||
outer = SimpleNamespace(native=SimpleNamespace(helper={'live_engines': lambda: []}),
|
||||
OWNED=[SimpleNamespace(pid=91001+i) for i in range(4)],
|
||||
finish_captured=finish, run_phase=lambda *a, **k: None)
|
||||
|
||||
def execute(engine_arg, stage, output, phase, test, selected, expected, previous,
|
||||
policy, contracts_arg, paths, public, player, root, *helpers):
|
||||
phases.append(phase)
|
||||
assert engine_arg == str(engine) and output == out and player == protected
|
||||
assert r.source_refs(root) == selected['root_before']
|
||||
assert r.inventory(stage, stage=True) == dict(expected, **previous)
|
||||
pid = outer.OWNED[len(phases)-1].pid
|
||||
row = dict(phase=phase, passed=not (failure == 'parse' and phase == 'parse'), actual_pid=pid)
|
||||
if test:
|
||||
slots = {}
|
||||
for slot in s4.SLOTS:
|
||||
directory = base / 'profiles' / phase / slot
|
||||
for member in ('journal.log', 'manifest.json', 'thumbnail.png', 'world.bin'):
|
||||
put(directory / member, (slot + '/' + member).encode())
|
||||
slots[slot] = str(directory)
|
||||
(out / 'raw').mkdir(exist_ok=True)
|
||||
write(out / ('raw/' + phase + '.json'), dict(checks=1, failures=0, branches=['S4'],
|
||||
slots=slots, pid=pid, profile=str(base / 'profiles' / phase)))
|
||||
# Reproduce the runner's shared text log and let main copy its bytes.
|
||||
log = test.replace('/', '__') + '.log'
|
||||
(out / log).write_text(phase + '\n')
|
||||
row['log'] = log
|
||||
return row
|
||||
|
||||
def inventory(path, **kwargs):
|
||||
if failure == 'output' and Path(path) == out / 'raw':
|
||||
raise OSError('injected post-cleanup inventory error')
|
||||
return real_inventory(path, **kwargs)
|
||||
|
||||
def copy_source(source, target):
|
||||
if failure == 'setup':
|
||||
raise OSError('injected setup copy error')
|
||||
shutil.copyfile(source, target)
|
||||
|
||||
def modules(name, path):
|
||||
if name == 's4_standard_runner':
|
||||
return r
|
||||
if name == 's4_owned_outer':
|
||||
return outer
|
||||
if name == 's4_markers':
|
||||
return SimpleNamespace(load_contracts=lambda path: {})
|
||||
if name in ('s4_diagnostics', 's4_owners', 's4_audio'):
|
||||
return SimpleNamespace()
|
||||
raise AssertionError('unexpected helper import: ' + name)
|
||||
|
||||
with ExitStack() as stack:
|
||||
for obj, values in [(s4, dict(BUILD=base, PRODUCT=product, HERE=staged, QA=qa,
|
||||
ENGINE=engine, CONTRACTS=contracts, MATERIALS=[material],
|
||||
__file__=str(staged / 'run_s4_native.py'), module=modules)),
|
||||
(r, dict(SUPPORT=support, write=write, execute_phase=execute,
|
||||
copy_source=copy_source, inventory=inventory))]:
|
||||
for key, value in values.items():
|
||||
stack.enter_context(patch.object(obj, key, value))
|
||||
pin_mock = stack.enter_context(patch.object(s4, 'engine_pin', return_value=descriptor))
|
||||
guard_mock = stack.enter_context(patch.object(s4, 'template_guard', return_value=None))
|
||||
player_mock = stack.enter_context(patch.object(r, 'default_player', return_value=protected))
|
||||
disk_mock = stack.enter_context(patch.object(s4.shutil, 'disk_usage',
|
||||
return_value=SimpleNamespace(free=10 * 1024**3)))
|
||||
stack.enter_context(redirect_stdout(io.StringIO()))
|
||||
argv = ['run_s4_native.py', '--project-root', str(product), '--output', str(out),
|
||||
'--plan', str(plan), '--godot', str(engine)]
|
||||
with patch.object(sys, 'argv', argv + ['--check-only']):
|
||||
assert s4.main() == 0
|
||||
assert not phases and not cleanup_calls and not out.exists()
|
||||
with patch.object(sys, 'argv', argv):
|
||||
result = s4.main()
|
||||
rejected(s4.main) # same output must be rejected before any new writes
|
||||
assert pin_mock.called and guard_mock.called and player_mock.called and disk_mock.called
|
||||
|
||||
assert result == (0 if failure is None else 1)
|
||||
assert len(cleanup_calls) == 1
|
||||
assert all(count == 1 for count in attempts.values()), attempts
|
||||
for leaf in ('outer-owned-finally.json', 'engine-identity.json', 'execution.json', 'runner-ended.json'):
|
||||
assert attempts[out / leaf] == 1
|
||||
if failure != 'identity-write' or leaf != 'engine-identity.json':
|
||||
assert (out / leaf).is_file()
|
||||
if failure != 'setup':
|
||||
assert (out / 'runner-input.json').read_bytes() == created[out / 'runner-input.json']
|
||||
assert r.read(out / 'runner-input.json')['engine_identity_initial']['after'] is None
|
||||
execution = r.read(out / 'execution.json')
|
||||
assert execution['passed'] is (failure is None)
|
||||
assert 'FileExistsError' not in json.dumps(execution)
|
||||
assert phases == ([] if failure == 'setup' else ['import', 'parse'] if failure == 'parse'
|
||||
else ['import', 'parse', 'writer', 'reader'])
|
||||
if failure == 'cleanup':
|
||||
assert execution['cleanup_errors'] == ['injected cleanup error']
|
||||
if failure in ('output', 'identity-write'):
|
||||
assert execution['guard_errors']
|
||||
if failure is None:
|
||||
assert len(list(out.glob('engine-identity*.json'))) == 5
|
||||
verify_identity(out, descriptor)
|
||||
assert (out / 'writer-combined-raw.log').read_bytes() == b'writer\n'
|
||||
assert (out / 'reader-combined-raw.log').read_bytes() == b'reader\n'
|
||||
# Mutations below affect only this disposable fixture's synthetic proofs.
|
||||
for phase in ('import', 'parse', 'writer', 'reader'):
|
||||
path = out / ('engine-identity-before-' + phase + '.json')
|
||||
original = path.read_bytes()
|
||||
path.write_text('{}')
|
||||
rejected(lambda: verify_identity(out, descriptor))
|
||||
path.unlink()
|
||||
rejected(lambda: verify_identity(out, descriptor))
|
||||
path.write_bytes(original)
|
||||
path = out / 'runner-input.json'
|
||||
initial = r.read(path)
|
||||
changed = copy.deepcopy(initial)
|
||||
changed['engine_identity_initial']['before']['inode'] += 1
|
||||
path.write_text(json.dumps(changed))
|
||||
rejected(lambda: verify_identity(out, descriptor))
|
||||
path.write_bytes(created[path])
|
||||
verify_identity(out, descriptor)
|
||||
return dict(case=failure or 'success', passed=True, native_engine_launches=0)
|
||||
|
||||
|
||||
def run():
|
||||
with tempfile.TemporaryDirectory(prefix='s4-receipt-fixtures-') as temporary:
|
||||
return [case(Path(temporary).resolve() / (failure or 'success'), failure)
|
||||
for failure in (None, 'parse', 'cleanup', 'setup', 'output', 'identity-write')]
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
print(json.dumps(dict(results=run(), formal_acceptance=False), indent=2))
|
||||
@@ -0,0 +1,405 @@
|
||||
#!/usr/bin/env python3
|
||||
"""S4-only native entry. --check-only never loads ownership helpers or starts Godot."""
|
||||
from pathlib import Path
|
||||
import argparse
|
||||
import copy
|
||||
import hashlib
|
||||
import importlib.util
|
||||
import json
|
||||
import os
|
||||
import shutil
|
||||
import subprocess
|
||||
import stat
|
||||
import sys
|
||||
sys.dont_write_bytecode = True
|
||||
|
||||
HERE = Path(__file__).resolve().parent
|
||||
BUILD = Path("/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build")
|
||||
PRODUCT = BUILD / "audit-support/p04-r17-full-inputs-r01/product"
|
||||
CACHE_RUN = BUILD / "p04-final-product-full-r01"
|
||||
TEST = "tests/s3/test_runtime_staff_assignment.gd"
|
||||
QA = HERE / "p04_s4_power_probe.gd"
|
||||
ENGINE = Path("/Applications/Godot.app/Contents/MacOS/Godot")
|
||||
ENGINE_SHA256 = "c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf"
|
||||
MANIFEST = BUILD / "audit-support/p04-r17-full-inputs-r01/MANIFEST.json"
|
||||
MANIFEST_SHA = "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8"
|
||||
CONTRACTS = BUILD / "audit-support/p04-r17-full-inputs-r01/fixed/6ce6b28c5985e8a4f13b78bfeb1f1e09f6216d874fb01e0656ec1633bfa01cd7/completion_marker_contracts.json"
|
||||
CASES = ["S4"]
|
||||
LABELS = {"S4": ["boundary", "held", "recovered"]}
|
||||
SLOTS = ["S4-" + label for label in sorted(LABELS["S4"])]
|
||||
MATERIALS = [MANIFEST, BUILD / "audit-support/p04-review-repair22-r01/ACTUAL_CURRENT_PUBLIC_POWER_FUNCTIONS.json"]
|
||||
|
||||
def template_guard(root):
|
||||
if root != PRODUCT.resolve() or not HERE.is_relative_to(BUILD.resolve()):
|
||||
raise ValueError("Root must stage this exact QA/wrapper/plan inside own B")
|
||||
if pin(MANIFEST)["sha256"] != MANIFEST_SHA:
|
||||
raise ValueError("immutable full R17 relocation manifest")
|
||||
manifest = json.loads(MANIFEST.read_text())
|
||||
for name, source in manifest["product_source"].items():
|
||||
# Old absolute paths are lookup keys only. Never open them.
|
||||
row = manifest["original_to_relocated"][source["path"]]
|
||||
actual = pin(root / name)
|
||||
if Path(row["relocated"]).resolve() != root / name or any(
|
||||
actual[k] != source[k] or actual[k] != row[k] for k in ("bytes", "sha256")):
|
||||
raise ValueError("relocated product differs: " + name)
|
||||
probe = QA.read_text()
|
||||
import re
|
||||
if ":=" in probe or re.search(r"\bvar\s+\w+\s*=", probe) or re.search(r"\bfor\s+\w+\s+in\b", probe):
|
||||
raise ValueError("explicit typed declarations/loops required")
|
||||
if re.search(r"\.(?:patience_remaining|elapsed_minutes|power_available|capacity|hold_until)\s*=(?!=)", probe):
|
||||
raise ValueError("forbidden direct state mutation")
|
||||
for forbidden in ["evaluate_now(", "configure_operations(", "._update_shift_states(", ".record_duty_minute("]:
|
||||
if forbidden in probe:
|
||||
raise ValueError("forbidden bypass: " + forbidden)
|
||||
# Constants and public bodies are read from the actual selected source, not a memo.
|
||||
mana = (root / "scripts/mana/mana_network_service.gd").read_text()
|
||||
for key in ("EVALUATION_INTERVAL_MINUTES", "MINIMUM_OFF_HOLD_MINUTES"):
|
||||
if not re.search(r"const " + key + r" := 10\b", mana):
|
||||
raise ValueError("source timing changed: " + key)
|
||||
|
||||
|
||||
def module(name, path):
|
||||
spec = importlib.util.spec_from_file_location(name, path)
|
||||
value = importlib.util.module_from_spec(spec)
|
||||
spec.loader.exec_module(value)
|
||||
return value
|
||||
|
||||
def pin(path):
|
||||
path = Path(path)
|
||||
if path.is_symlink() or not path.is_file():
|
||||
raise ValueError("missing exact input: " + str(path))
|
||||
data = path.read_bytes()
|
||||
return dict(path=str(path), bytes=len(data), sha256=hashlib.sha256(data).hexdigest())
|
||||
|
||||
def engine_pin(path, expected=None):
|
||||
path = Path(path)
|
||||
if path != ENGINE or any(p.is_symlink() for p in (path, *path.parents)):
|
||||
raise ValueError("exact installed engine required; no symlink or relocated input")
|
||||
if path.resolve(strict=True) != ENGINE:
|
||||
raise ValueError("installed engine resolved path changed")
|
||||
before = path.stat()
|
||||
if not stat.S_ISREG(before.st_mode):
|
||||
raise ValueError("installed engine must be regular")
|
||||
digest = hashlib.sha256(path.read_bytes()).hexdigest()
|
||||
after = path.stat()
|
||||
fields = ("st_dev", "st_ino", "st_size", "st_mtime_ns", "st_ctime_ns", "st_mode")
|
||||
if any(getattr(before, k) != getattr(after, k) for k in fields):
|
||||
raise ValueError("engine changed while hashing")
|
||||
if any(p.is_symlink() for p in (path, *path.parents)) or path.resolve(strict=True) != ENGINE:
|
||||
raise ValueError("engine path changed while hashing")
|
||||
value = dict(path=str(path), resolved_path=str(path.resolve(strict=True)),
|
||||
bytes=after.st_size, mtime_ns=after.st_mtime_ns, mode=after.st_mode,
|
||||
device=after.st_dev, inode=after.st_ino, ctime_ns=after.st_ctime_ns, sha256=digest)
|
||||
if digest != ENGINE_SHA256:
|
||||
raise ValueError("engine differs from installed engine constant")
|
||||
if expected is not None and value != expected:
|
||||
raise ValueError("engine identity changed")
|
||||
return value
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument("--project-root", type=Path, default=PRODUCT)
|
||||
parser.add_argument("--output", type=Path, default=BUILD / "p04-s4-native-r28")
|
||||
parser.add_argument("--plan", type=Path, default=BUILD / "p04-s4-plan-r28.json")
|
||||
parser.add_argument("--cache-run", type=Path, default=None,
|
||||
help="optional passed registered cache; default is fresh, without cache access")
|
||||
parser.add_argument("--godot", type=Path, default=ENGINE)
|
||||
parser.add_argument("--check-only", action="store_true")
|
||||
args = parser.parse_args()
|
||||
engine_descriptor = engine_pin(args.godot)
|
||||
if args.cache_run is not None and args.cache_run.resolve() != CACHE_RUN.resolve():
|
||||
raise ValueError("only registered own-B full-run cache")
|
||||
root = args.project_root.resolve()
|
||||
out = args.output.resolve()
|
||||
if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
|
||||
raise ValueError("plan/output must stay in task build")
|
||||
if out.exists() or out.is_symlink():
|
||||
raise ValueError("fresh output required")
|
||||
if args.check_only and (args.plan.exists() or args.plan.is_symlink()):
|
||||
raise ValueError("fresh plan required")
|
||||
r = module("s4_standard_runner", root / "tools/run_all_tests.py")
|
||||
# Preserve the reviewed source_refs -> exactly one QA override order.
|
||||
source_before = r.source_refs(root)
|
||||
refs = dict(source_before)
|
||||
refs[TEST] = pin(QA)
|
||||
template_guard(root)
|
||||
expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
|
||||
fixed = [pin(p) for p in MATERIALS + [
|
||||
QA, Path(__file__), HERE / "S4_ROOT_RUN.md",
|
||||
root / "tests/transport/test_runtime_transport.gd",
|
||||
root / "tests/staff/test_rescue_elevator.gd",
|
||||
CONTRACTS,
|
||||
]]
|
||||
selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
|
||||
cache_note = None
|
||||
cache_receipts = []
|
||||
if args.cache_run is not None:
|
||||
# Reject failed caches before reading their inputs or cache contents.
|
||||
r.require(r.read(args.cache_run / "runner-ended.json")["passed"] is True,
|
||||
"failed cache is ineligible")
|
||||
for leaf in (["runner-ended.json", "runner-input.json"] if args.cache_run is not None else []):
|
||||
path = args.cache_run / leaf
|
||||
try:
|
||||
cache_receipts.append(pin(path))
|
||||
except OSError as caught:
|
||||
cache_note = dict(path=str(path), error=type(caught).__name__ + ": " + str(caught),
|
||||
required_before_native=True)
|
||||
break
|
||||
plan = dict(protocol="p04-s4-preparation-v1", project_root=str(root), output=str(out), engine_path=str(args.godot.resolve()),
|
||||
source_before=source_before, selected_source_map=selected["map"],
|
||||
QA_overrides=[TEST], fixed_input_pins=fixed,
|
||||
cache_run=str(args.cache_run) if args.cache_run is not None else None,
|
||||
import_mode="cache" if args.cache_run is not None else "fresh",
|
||||
engine_sha256=ENGINE_SHA256, engine=engine_descriptor,
|
||||
cache_receipts=cache_receipts, cache_access=cache_note,
|
||||
phases=["import", "parse", "writer", "reader"],
|
||||
native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
|
||||
# Check-only only reads source/materials and writes the plan in task build.
|
||||
# Reads engine identity; never launches Godot or inspects players/processes.
|
||||
if args.check_only:
|
||||
args.plan.parent.mkdir(parents=True, exist_ok=True)
|
||||
r.write(args.plan, plan)
|
||||
print(json.dumps(dict(check_only=True, engines=0, source_files=len(source_before),
|
||||
QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
|
||||
plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
|
||||
return 0
|
||||
r.require(root == PRODUCT.resolve() and len(source_before) == 1338, "Root native requires product 1338; worker plan is not native evidence")
|
||||
r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
|
||||
engine_observations = []
|
||||
engine_identity = dict(before=engine_descriptor, during=[], after=None)
|
||||
def repin(label):
|
||||
try:
|
||||
value = engine_pin(args.godot, engine_descriptor)
|
||||
engine_observations.append(dict(stage=label, descriptor=value))
|
||||
if label == "after-cleanup":
|
||||
engine_identity["after"] = value
|
||||
else:
|
||||
engine_identity["during"].append(value)
|
||||
except BaseException as caught:
|
||||
engine_observations.append(dict(stage=label, error=str(caught)))
|
||||
raise
|
||||
def fixed_guard():
|
||||
repin("cleanup-fixed-guard")
|
||||
template_guard(root)
|
||||
for value in fixed + cache_receipts:
|
||||
r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
|
||||
fixed_guard()
|
||||
old = args.cache_run
|
||||
if old is not None:
|
||||
# Native cache admission remains Root-only and fails closed.
|
||||
r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
|
||||
r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
|
||||
cache_input = r.read(old / "runner-input.json")
|
||||
r.require(cache_input["engine_sha256"] == ENGINE_SHA256, "cache engine identity")
|
||||
old_map = cache_input["selected_source_map"]
|
||||
current_map = {n: p["sha256"] for n, p in source_before.items()}
|
||||
r.require({k: v for k, v in old_map.items() if k != "tools/check_p04_order_evidence.py"} == current_map and len(old_map) == 1339, "immutable full cache: all 1338 product inputs equal; checker is not parsed/executed by product suites")
|
||||
protected = r.default_player(root)
|
||||
outer = module("s4_owned_outer", r.SUPPORT / "owned_outer.py")
|
||||
r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
|
||||
engine = ENGINE
|
||||
repin("native-admission")
|
||||
r.require(shutil.disk_usage(out.parent).free >= 1024**3 + engine.stat().st_size + 136*1024**2,
|
||||
"reviewed native disk admission")
|
||||
r.require(not out.exists(), "fresh output required; preserve previous attempts")
|
||||
out.mkdir()
|
||||
stage = out / "stage"
|
||||
stage.mkdir()
|
||||
(out / "starters").mkdir()
|
||||
(out / "bootstrap").mkdir()
|
||||
phases = []
|
||||
previous = {}
|
||||
error = None
|
||||
guards = []
|
||||
cleanup = []
|
||||
cleanup_errors = []
|
||||
cache_before = None
|
||||
formal_before = None
|
||||
formal_after = None
|
||||
original_phase = outer.run_phase
|
||||
def run_phase(argv, folder, timeout, env, **kwargs):
|
||||
env = dict(env)
|
||||
if folder.name in ["writer", "reader"]:
|
||||
env.update(THE_TREE_S4_EVIDENCE=str(out / "raw"), THE_TREE_S4_MODE=folder.name)
|
||||
return original_phase(argv, folder, timeout, env, **kwargs)
|
||||
outer.run_phase = run_phase
|
||||
try:
|
||||
r.write(out / "runner-started.json", dict(started=r.now(), owner_runner_pid=os.getpid(),
|
||||
plan=pin(args.plan), engines_launched=0))
|
||||
r.write(out / "source_before.json", source_before)
|
||||
r.write(out / "selected-source-map.json", refs)
|
||||
# Private source stage first, then literal reviewed bootstrap.
|
||||
for name, value in refs.items():
|
||||
target = stage / name
|
||||
target.parent.mkdir(parents=True, exist_ok=True)
|
||||
r.copy_source(Path(value["path"]), target)
|
||||
r.require(r.inventory(stage, stage=True) == expected, "whole private source")
|
||||
for name, value in r.read(r.SUPPORT / "bootstrap-scripts.json").items():
|
||||
data = value["text"].encode()
|
||||
r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
|
||||
(out / "bootstrap" / name).write_bytes(data)
|
||||
if old is not None:
|
||||
cache = old / "stage/.godot"
|
||||
cache_before = r.inventory(cache)
|
||||
r.require(bool(cache_before), "nonempty ended cache")
|
||||
for name in cache_before:
|
||||
src = cache / name
|
||||
dst = stage / ".godot" / name
|
||||
dst.parent.mkdir(parents=True, exist_ok=True)
|
||||
subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
|
||||
r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
|
||||
"cache clone is a separate inode")
|
||||
r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
|
||||
r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
|
||||
whole_cache=cache_before, independent_inode=True,
|
||||
ordinary_import_required=True, ordinary_parse_required=True))
|
||||
paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
|
||||
r.require(len(paths) == 316, "complete 316-script parse roster")
|
||||
r.write(out / "parse-paths.json", paths)
|
||||
markers = module("s4_markers", root / "tools/strict_test_markers.py")
|
||||
contracts = markers.load_contracts(CONTRACTS)
|
||||
contracts[TEST] = dict(test=TEST, template="S4 power: <checks> checks, <failures> failures", required=True)
|
||||
policy = r.read(r.SUPPORT / "suite-policy.json")
|
||||
r.require(TEST not in policy["suite_policies"], "no normal suite watchdog/policy override")
|
||||
r.write(out / "contracts.json", contracts)
|
||||
r.write(out / "runner-input.json", dict(plan, owner_runner_pid=os.getpid(),
|
||||
wrapper_sha256=r.sha(__file__), QA=pin(QA), engine=engine_descriptor,
|
||||
engine_identity_before=engine_descriptor, engine_identity_initial=copy.deepcopy(engine_identity),
|
||||
runner_sha256=r.sha(root / "tools/run_all_tests.py"),
|
||||
default_player_before=protected, fixed_input_pins=fixed,
|
||||
functional_watchdog_seconds=1200, source_adoption=False))
|
||||
diagnostics = module("s4_diagnostics", r.SUPPORT / "diagnostic_gate.py")
|
||||
owners = module("s4_owners", r.SUPPORT / "ordinary_proof_gate.py")
|
||||
audio = module("s4_audio", r.SUPPORT / "audio_evidence_gate.py")
|
||||
public = (stage / "project.godot").read_bytes()
|
||||
for phase, test in [("import", None), ("parse", None), ("writer", TEST), ("reader", TEST)]:
|
||||
if phase == "reader":
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(sorted(formal_before) == SLOTS, "exact three formal points for isolated power case")
|
||||
if phase == "import" and old is None:
|
||||
r.require(not (stage / ".godot").exists() and not (stage / ".godot").is_symlink(),
|
||||
"fresh private .godot absent at actual import")
|
||||
repin("before-" + phase)
|
||||
r.write(out / ("engine-identity-before-" + phase + ".json"),
|
||||
dict(engine_observations[-1], observation_index=len(engine_observations)-1))
|
||||
row = r.execute_phase(str(engine), stage, out, phase, test, selected, expected,
|
||||
previous, policy, contracts, paths, public, protected, root,
|
||||
outer, markers, diagnostics, owners, audio)
|
||||
phases.append(row)
|
||||
# execute_phase writer/reader share out/<test>.log via write_text.
|
||||
# Keep binary per-phase copies under these existing unique names.
|
||||
# The shared runner log is not write-once; see S4_ROOT_RUN.md.
|
||||
if test and row.get("log"):
|
||||
(out / (phase + "-combined-raw.log")).write_bytes((out / row["log"]).read_bytes())
|
||||
row["strict_runner_log_path"] = row["log"]
|
||||
row["log"] = phase + "-combined-raw.log"
|
||||
r.write(out / (phase + "-actual-phase.json"), row)
|
||||
print(json.dumps(dict(phase=phase, passed=row["passed"], error=row.get("validation_error"))), flush=True)
|
||||
r.require(row["passed"], "first strict phase failure: " + phase)
|
||||
if phase in ["writer", "reader"]:
|
||||
receipt = r.read(out / ("raw/" + phase + ".json"))
|
||||
r.require(receipt["checks"] > 0 and receipt["failures"] == 0,
|
||||
"S4 actual outcome receipt")
|
||||
r.require(sorted(receipt["branches"]) == CASES,
|
||||
"exact one independent Writer/Reader case")
|
||||
r.require(sorted(receipt["slots"]) == SLOTS, "all formal point slots")
|
||||
r.require(receipt["pid"] == row["actual_pid"], "actual native PID/receipt")
|
||||
repin("after-collection")
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
reader = r.read(out / "raw/reader.json")
|
||||
r.require(writer["pid"] != reader["pid"] and writer["profile"] != reader["profile"], "distinct formal processes")
|
||||
formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(formal_before == formal_after, "Reader leaves Writer packages unchanged")
|
||||
except BaseException as caught:
|
||||
error = type(caught).__name__ + ": " + str(caught)
|
||||
finally:
|
||||
try:
|
||||
cleanup, cleanup_errors = outer.finish_captured(outer.OWNED)
|
||||
except BaseException as caught:
|
||||
cleanup_errors.append(str(caught))
|
||||
try:
|
||||
r.write(out / "outer-owned-finally.json", dict(cleanup=cleanup, errors=cleanup_errors))
|
||||
except BaseException as caught:
|
||||
guards.append("finally receipt: " + type(caught).__name__ + ": " + str(caught))
|
||||
# Explicit re-pin after cleanup is independent of other fixed-input guards.
|
||||
try:
|
||||
repin("after-cleanup")
|
||||
except BaseException as caught:
|
||||
guards.append(type(caught).__name__ + ": " + str(caught))
|
||||
# Fixed guard always follows ownership cleanup, even if setup or an engine failed.
|
||||
try:
|
||||
fixed_guard()
|
||||
after = r.source_refs(root)
|
||||
r.write(out / "source_after.json", after)
|
||||
r.require(after == source_before, "whole product source unchanged")
|
||||
r.require(r.default_player(root) == protected, "default player unchanged")
|
||||
if (stage / "project.godot").exists():
|
||||
r.require(r.inventory(stage, stage=True) == dict(expected, **previous), "whole private source unchanged")
|
||||
if cache_before is not None:
|
||||
r.require(r.inventory(old / "stage/.godot") == cache_before, "original cache unchanged")
|
||||
if formal_before is not None:
|
||||
writer = r.read(out / "raw/writer.json")
|
||||
formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
|
||||
r.require(formal_before == formal_after, "Writer formal packages unchanged after Reader, including failure")
|
||||
except BaseException as caught:
|
||||
guards.append(type(caught).__name__ + ": " + str(caught))
|
||||
pids = [p.pid for p in outer.OWNED]
|
||||
passed = (error is None and not guards and not cleanup_errors and len(phases) == 4
|
||||
and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
|
||||
and all(p["engine_ended"] for p in cleanup))
|
||||
execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
|
||||
actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
|
||||
formal_before=formal_before, formal_after=formal_after,
|
||||
whole_goal_accepted=False, unit_accepted=False)
|
||||
# IO1 has already copied all four members into a separate Reader profile.
|
||||
# Mirror those exact complete directories to own B for read-only R verification.
|
||||
# Original profile paths are provenance after this step, never verifier inputs.
|
||||
try:
|
||||
if passed:
|
||||
relocated = {}
|
||||
for role in ("writer", "reader"):
|
||||
receipt = r.read(out / ("raw/" + role + ".json"))
|
||||
relocated[role] = {}
|
||||
for slot, original in receipt["slots"].items():
|
||||
target = out / "formal" / role / slot
|
||||
target.mkdir(parents=True)
|
||||
members = r.inventory(Path(original))
|
||||
r.require(set(members) == {"journal.log", "manifest.json", "thumbnail.png", "world.bin"}, "all formal members")
|
||||
for member in members:
|
||||
shutil.copyfile(Path(original) / member, target / member)
|
||||
r.require(r.inventory(target) == members == formal_before[slot], "whole formal mirror")
|
||||
relocated[role][slot] = dict(provenance=original, relative=str(target.relative_to(out)), members=members)
|
||||
r.write(out / "formal-relocation.json", relocated)
|
||||
r.write(out / "raw-inventory.json", r.inventory(out / "raw"))
|
||||
r.write(out / "PID-set.json", dict(owner_runner_pid=os.getpid(), engine_PIDs=pids))
|
||||
except BaseException as caught:
|
||||
guards.append("output collection: " + type(caught).__name__ + ": " + str(caught))
|
||||
passed = False
|
||||
execution["passed"] = False
|
||||
try:
|
||||
repin("after-output-collection")
|
||||
except BaseException as caught:
|
||||
guards.append(str(caught))
|
||||
passed = False
|
||||
execution["passed"] = False
|
||||
try:
|
||||
r.write(out / "engine-identity.json",
|
||||
dict(observations=engine_observations, identity=engine_identity))
|
||||
except BaseException as caught:
|
||||
guards.append("engine identity receipt: " + type(caught).__name__ + ": " + str(caught))
|
||||
passed = False
|
||||
execution["passed"] = False
|
||||
execution["engine_observations"] = engine_observations
|
||||
execution["engine_identity"] = engine_identity
|
||||
r.write(out / "execution.json", execution)
|
||||
r.write(out / "runner-ended.json", dict(execution, ended=r.now()))
|
||||
print(json.dumps(dict(passed=passed, error=error, guard_errors=guards, output=str(out))))
|
||||
return 0 if passed else 1
|
||||
|
||||
if __name__ == "__main__":
|
||||
try:
|
||||
raise SystemExit(main())
|
||||
except Exception as caught:
|
||||
print(type(caught).__name__ + ": " + str(caught), file=sys.stderr)
|
||||
raise SystemExit(2)
|
||||
@@ -15,6 +15,7 @@ import subprocess
|
||||
import sys
|
||||
import tempfile
|
||||
|
||||
sys.dont_write_bytecode = True
|
||||
ROOT = Path(__file__).resolve().parents[1]
|
||||
SPEC = ROOT / 'docs/spec/acceptance/P04-01.json'
|
||||
SPEC_HASH = '9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881'
|
||||
@@ -24,7 +25,8 @@ REGISTERED_COMMIT = 'deb1bcb2374eb378b840ca345db952bd8572cb6e'
|
||||
EXECUTION_ORIGIN = '9767b0a28ca8d252520307dbbac60a1d8cfb87ab'
|
||||
CHECKER_PATH = 'tools/check_p04_order_evidence.py'
|
||||
DOC_SCOPE = 'docs/plans/original-completion-2026-10-02/execution/p04-01/'
|
||||
MAIN_ANCHOR = '9694f50ee63750192376ca69bc7dda3f884784c5'
|
||||
MAIN_ANCHOR = '9b1a18c1eb25ca1300dcd59da78423c0dda2f498'
|
||||
TESTED_PRODUCT = '5f6bc11d6bb6e92d22d787989b219fef3a435bc1'
|
||||
SELECTION_SHA = '320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4'
|
||||
_GIT_ENV = None
|
||||
# Fixed membership, never supplied by the evidence index.
|
||||
@@ -135,10 +137,55 @@ def literal(a, b):
|
||||
|
||||
|
||||
def git_bytes(*args):
|
||||
env = _GIT_ENV if _GIT_ENV is not None else dict(os.environ, GIT_OPTIONAL_LOCKS='0')
|
||||
env = _GIT_ENV if _GIT_ENV is not None else git_environment()
|
||||
return subprocess.check_output(['git', '--no-replace-objects', *args], cwd=ROOT, env=env)
|
||||
|
||||
|
||||
def parse_blob_batch(stdout, oids):
|
||||
"""Decode length-framed output without splitting binary payloads into lines."""
|
||||
result = {}
|
||||
offset = 0
|
||||
for oid in oids:
|
||||
end = stdout.find(b'\n', offset)
|
||||
require(end >= 0, 'truncated blob batch header')
|
||||
header = stdout[offset:end].split(b' ')
|
||||
require(len(header) == 3 and header[0] == oid.encode('ascii')
|
||||
and header[1] == b'blob' and re.fullmatch(rb'[0-9]+', header[2]) is not None,
|
||||
'invalid blob batch header: ' + oid)
|
||||
size = int(header[2])
|
||||
start = end + 1
|
||||
end = start + size
|
||||
require(end < len(stdout) and stdout[end:end + 1] == b'\n',
|
||||
'truncated blob batch payload or missing LF: ' + oid)
|
||||
result[oid] = stdout[start:end]
|
||||
offset = end + 1
|
||||
require(offset == len(stdout), 'extra blob batch output')
|
||||
return result
|
||||
|
||||
|
||||
def read_blobs(oids):
|
||||
"""One process per request; no cache can cross object namespaces."""
|
||||
requested = list(oids)
|
||||
require(all(isinstance(oid, str) and re.fullmatch('[0-9a-f]{40}', oid) is not None
|
||||
for oid in requested), 'invalid full blob OID')
|
||||
requested = sorted(set(requested))
|
||||
if not requested:
|
||||
return {}
|
||||
env = _GIT_ENV if _GIT_ENV is not None else git_environment()
|
||||
# Inherit stderr and raise on nonzero status, exactly as git_bytes does.
|
||||
stdout = subprocess.check_output(['git', '--no-replace-objects', 'cat-file', '--batch'],
|
||||
input=('\n'.join(requested) + '\n').encode('ascii'),
|
||||
cwd=ROOT, env=env)
|
||||
return parse_blob_batch(stdout, requested)
|
||||
|
||||
|
||||
def git_environment():
|
||||
env = {k: v for k, v in os.environ.items() if not k.startswith('GIT_')}
|
||||
env.update(GIT_OPTIONAL_LOCKS='0', GIT_NO_REPLACE_OBJECTS='1', GIT_CONFIG_NOSYSTEM='1',
|
||||
GIT_CONFIG_GLOBAL=os.devnull)
|
||||
return env
|
||||
|
||||
|
||||
@contextmanager
|
||||
def isolated_objects():
|
||||
"""merge-tree writes only disposable objects; canonical refs/index stay untouched.
|
||||
@@ -149,11 +196,9 @@ def isolated_objects():
|
||||
global _GIT_ENV
|
||||
require(_GIT_ENV is None, 'nested object store')
|
||||
objects = git_bytes('rev-parse', '--path-format=absolute', '--git-path', 'objects').decode().strip()
|
||||
with tempfile.TemporaryDirectory(prefix='p04-object-audit-') as temporary:
|
||||
env = dict(os.environ)
|
||||
for key in ('GIT_OBJECT_DIRECTORY', 'GIT_ALTERNATE_OBJECT_DIRECTORIES',
|
||||
'GIT_INDEX_FILE', 'GIT_QUARANTINE_PATH'):
|
||||
env.pop(key, None)
|
||||
build = Path(os.environ['BUILD_OUTPUT_DIR']).resolve(strict=True)
|
||||
with tempfile.TemporaryDirectory(prefix='p04-object-audit-', dir=build) as temporary:
|
||||
env = git_environment()
|
||||
env.update(GIT_OBJECT_DIRECTORY=temporary, GIT_ALTERNATE_OBJECT_DIRECTORIES=objects,
|
||||
GIT_OPTIONAL_LOCKS='0', GIT_NO_REPLACE_OBJECTS='1')
|
||||
_GIT_ENV = env
|
||||
@@ -190,9 +235,11 @@ def allowed_path(path):
|
||||
|
||||
def product_manifest(entries):
|
||||
result = {}
|
||||
blobs = read_blobs(oid for path, (_, oid) in entries.items()
|
||||
if selected_path(path) and path != CHECKER_PATH)
|
||||
for path, (_, oid) in sorted(entries.items()):
|
||||
if selected_path(path) and path != CHECKER_PATH:
|
||||
data = git_bytes('cat-file', 'blob', oid)
|
||||
data = blobs[oid]
|
||||
result[path] = {'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest()}
|
||||
return result
|
||||
|
||||
@@ -208,7 +255,7 @@ def supplied_file(directory, descriptor):
|
||||
if path.is_absolute():
|
||||
support = directory / 'audit-support'
|
||||
roots = [support / n for n in ('p04-whole-closure-r01', 'native-first-current',
|
||||
'p04-current-native-series-r01')]
|
||||
'p04-current-native-series-r01', 'p04-r17-full-inputs-r01')]
|
||||
matches = [root for root in roots if path.is_relative_to(root)]
|
||||
require(len(matches) == 1, 'unsupplied external material: ' + name)
|
||||
path = safe(matches[0], path.relative_to(matches[0]).as_posix())
|
||||
@@ -304,6 +351,129 @@ def verify_product_target(index, directory, checker_commit):
|
||||
'tested_product': tested, 'product_target': target}
|
||||
|
||||
|
||||
def ancestor(older, newer):
|
||||
# merge-base's nonzero status is data only for the ordinary non-ancestor case.
|
||||
try:
|
||||
git_bytes('merge-base', '--is-ancestor', older, newer)
|
||||
return True
|
||||
except subprocess.CalledProcessError as exc:
|
||||
require(exc.returncode == 1, 'cannot determine ancestry')
|
||||
return False
|
||||
|
||||
|
||||
def submission_role(commit):
|
||||
require(ancestor(REGISTERED_COMMIT, commit) and not ancestor(MAIN_ANCHOR, commit),
|
||||
'invalid submission ancestry')
|
||||
changed = git_bytes('diff', '--no-ext-diff', '--no-renames', '--name-only', '-z',
|
||||
REGISTERED_COMMIT, commit).split(b'\0')
|
||||
require(all(allowed_path(p.decode()) for p in changed if p), 'submission outside allowed_paths')
|
||||
|
||||
|
||||
def actual_checkout():
|
||||
"""Bind the executing modules and every worktree file to the actual HEAD."""
|
||||
commit = git_bytes('rev-parse', '--verify', 'HEAD^{commit}').decode().strip()
|
||||
tree = git_bytes('rev-parse', 'HEAD^{tree}').decode().strip()
|
||||
entries = tree_entries(tree)
|
||||
require(not git_bytes('status', '--porcelain=v1', '--untracked-files=all',
|
||||
'--ignore-submodules=none'), 'checkout is not clean')
|
||||
require(not git_bytes('ls-files', '--others', '-z'), 'untracked/ignored substitution')
|
||||
blobs = read_blobs(oid for _, oid in entries.values())
|
||||
for path, (mode, oid) in entries.items():
|
||||
actual = safe(ROOT, path)
|
||||
require(actual.read_bytes() == blobs[oid], 'HEAD/tree/FS bytes: ' + path)
|
||||
require(('100755' if actual.stat().st_mode & 0o111 else '100644') == mode,
|
||||
'HEAD/tree/FS mode: ' + path)
|
||||
# Also reject untracked directory symlinks, including ones ignored by Git.
|
||||
for parent, directories, files in os.walk(ROOT, followlinks=False):
|
||||
if Path(parent) == ROOT:
|
||||
directories[:] = [p for p in directories if p != '.git']
|
||||
files = [p for p in files if p != '.git']
|
||||
for name in directories + files:
|
||||
require(not (Path(parent) / name).is_symlink(), 'worktree symlink')
|
||||
require(Path(__file__).resolve() == safe(ROOT, CHECKER_PATH), 'checker module location')
|
||||
return commit, tree, entries
|
||||
|
||||
|
||||
def verify_roles(index, directory):
|
||||
"""Infer roles from Git, never from an index or a caller's stage label."""
|
||||
require(not ({'candidate_commit', 'candidate_tree', 'code_only', 'candidate', 'phase'} & index.keys()),
|
||||
'candidate/code-only/phase declarations are not evidence')
|
||||
commit, actual_tree, actual = actual_checkout()
|
||||
require(_GIT_ENV is not None, 'isolated object store required')
|
||||
if not ancestor(MAIN_ANCHOR, commit):
|
||||
submission_role(commit)
|
||||
submitted, main, role = commit, MAIN_ANCHOR, 'prospective composition'
|
||||
else:
|
||||
parents = git_bytes('show', '-s', '--format=%P', commit).decode().split()
|
||||
require(len(parents) == 2, 'integration/final requires a two-parent no-ff merge')
|
||||
main, submitted = parents
|
||||
require(ancestor(MAIN_ANCHOR, main), 'merge main ancestry')
|
||||
submission_role(submitted)
|
||||
role = 'integration/final'
|
||||
composed = git_bytes('-c', 'rerere.enabled=false', 'merge-tree', '--write-tree',
|
||||
main, submitted).decode().strip()
|
||||
require(re.fullmatch('[0-9a-f]{40}', composed) is not None, 'conflicted composition')
|
||||
main_entries, patch, target = [tree_entries(t) for t in (main, submitted, composed)]
|
||||
anchor_entries = tree_entries(MAIN_ANCHOR)
|
||||
for path in main_entries.keys() | target.keys():
|
||||
require(main_entries.get(path) == target.get(path) or allowed_path(path),
|
||||
'composition changed game/unknown source: ' + path)
|
||||
# Metadata membership comes from the real main anchor, never a declared exclusion.
|
||||
metadata = sorted(p for p in anchor_entries if not selected_path(p))
|
||||
for path in target:
|
||||
require(selected_path(path) or allowed_path(path) or path in metadata,
|
||||
'unknown source hidden as metadata: ' + path)
|
||||
if role == 'integration/final':
|
||||
require(actual_tree == composed and actual == target, 'actual merge differs from composition')
|
||||
require(target[CHECKER_PATH] == patch[CHECKER_PATH] == actual[CHECKER_PATH],
|
||||
'checker blob differs from submission')
|
||||
for path in patch:
|
||||
if allowed_path(path):
|
||||
require(target.get(path) == patch[path], 'reviewed patch differs in merge: ' + path)
|
||||
binding = index['product_binding']
|
||||
require(set(binding) == {'tested_product', 'runner_inputs'}, 'unknown product role/metadata declaration')
|
||||
require(binding['tested_product'] == TESTED_PRODUCT, 'wrong tested revision')
|
||||
product = product_manifest(target)
|
||||
tested_entries = tree_entries(TESTED_PRODUCT)
|
||||
expected = product_manifest(tested_entries)
|
||||
require(len(product) == 1338 and product == expected and
|
||||
product_manifest(main_entries) == expected and product_manifest(anchor_entries) == expected,
|
||||
'complete 1338-file native product mismatch')
|
||||
require(all(target[p][0] == main_entries[p][0] == tested_entries[p][0] for p in product),
|
||||
'native product mode mismatch')
|
||||
require(index['source_map'] == {p: v['sha256'] for p, v in product.items()}, 'stale pin: source map')
|
||||
runner_paths = set()
|
||||
for descriptor in binding['runner_inputs']:
|
||||
path = supplied_file(directory, descriptor)
|
||||
require(path not in runner_paths, 'duplicate runner input')
|
||||
runner_paths.add(path)
|
||||
native = load(path)
|
||||
before = native['source_before']
|
||||
require(set(before) == set(product) and all(
|
||||
{'bytes': v['bytes'], 'sha256': v['sha256']} == product[p] for p, v in before.items()),
|
||||
'runner complete source map mismatch')
|
||||
require(native['runner_sha256'] == product['tools/run_all_tests.py']['sha256'], 'runner source pin')
|
||||
overrides = native['QA_overrides']
|
||||
require(len(overrides) == 1 and overrides[0].startswith('tests/') and overrides[0] in product,
|
||||
'QA override membership')
|
||||
selected = {p: v['sha256'] for p, v in product.items()}
|
||||
selected[overrides[0]] = native['QA']['sha256']
|
||||
require(native['selected_source_map'] == selected, 'selected QA source map')
|
||||
needed = native.get('fixed_input_pins', []) + [native['QA']]
|
||||
require(set(descriptor['materials']) == {p['path'] for p in needed}, 'input material membership')
|
||||
for pin in needed:
|
||||
material = supplied_file(directory, descriptor['materials'][pin['path']])
|
||||
require(material.stat().st_size == pin['bytes'] and sha(material) == pin['sha256'], 'input bytes')
|
||||
require(sha(supplied_file(directory, descriptor['wrapper'])) == native['wrapper_sha256'], 'wrapper bytes')
|
||||
require(runner_paths, 'runner inputs missing')
|
||||
require(index['versions'] == {'registered': REGISTERED_COMMIT, 'execution_origin': EXECUTION_ORIGIN,
|
||||
'tested': TESTED_PRODUCT}, 'evidence version roles')
|
||||
return composed, {'role': role, 'actual_head': commit, 'actual_tree': actual_tree,
|
||||
'submission': submitted, 'main': main, 'existing_metadata': metadata,
|
||||
'manifest_sha256': manifest_digest(product), 'runner_paths': runner_paths,
|
||||
'tested_product': TESTED_PRODUCT}
|
||||
|
||||
|
||||
def function_bytes(data):
|
||||
"""Top-level named func through next named func, preserving every raw byte.
|
||||
|
||||
@@ -366,6 +536,10 @@ def boundary_conditions(path, function):
|
||||
|
||||
|
||||
def applicability(index, spec, source, head):
|
||||
tested = index.get('versions', {}).get('tested')
|
||||
require(isinstance(tested, str) and tree_entries(tested) and
|
||||
product_manifest(tree_entries(tested)) == product_manifest(tree_entries(head)),
|
||||
'wrong tested revision')
|
||||
registered = spec['current_source_pins']
|
||||
require(index.get('registered_pins') == registered, 'registered pin declaration')
|
||||
for path, digest in registered.items():
|
||||
@@ -805,6 +979,151 @@ def verify_native(base):
|
||||
verified_conditions=['dependency_stop', 'recovery_completion', 'paused_midnight'])
|
||||
|
||||
|
||||
def verify_shift_completion(base):
|
||||
"""C's first 18:00 transaction, never the paid-midnight 1442 sale."""
|
||||
for row in load(safe(base, 'SOURCE_MANIFEST.json'))['files']:
|
||||
native_file(base, row['copy'], row)
|
||||
require(native_applicability(base) == TESTED_PRODUCT, 'shift tested revision')
|
||||
pids = native_ownership(base)
|
||||
shift_pids = [pids['actual-native/' + phase] for phase in NATIVE_RUNS['actual-native']]
|
||||
require(len(shift_pids) == len(set(shift_pids)) == 3, 'shift ended PID identity')
|
||||
inputs = load(safe(base, 'actual-native/runner-input.json'))
|
||||
expected = product_manifest(tree_entries(TESTED_PRODUCT))
|
||||
require(len(inputs['source_before']) == 1338 and
|
||||
{p: {'bytes': v['bytes'], 'sha256': v['sha256']} for p, v in inputs['source_before'].items()}
|
||||
== expected, 'shift complete native source')
|
||||
prefix = 'actual-native/order-evidence/'
|
||||
observations = load(safe(base, prefix + 'observations.json'))
|
||||
labels = ['first-before-17-59', 'first-18-00-before-facility', 'first-18-00-after-facility',
|
||||
'first-18-00-after-staff', 'first-18-00-tick-complete', 'first-18-01-tick-complete']
|
||||
points = []
|
||||
previous_ledger = None
|
||||
service_id = None
|
||||
paid_rows = None
|
||||
original_service = None
|
||||
completed_service = None
|
||||
transaction_id = None
|
||||
for i, label in enumerate(labels):
|
||||
rows = [r for r in observations['observations'] if r['label'] == label]
|
||||
require(len(rows) == 1, 'shift phase membership')
|
||||
observation = rows[0]
|
||||
snapshot = load(safe(base, prefix + label + '.json'))
|
||||
minute = [1079, 1080, 1080, 1080, 1080, 1081][i]
|
||||
require(snapshot['clock']['absolute_minute'] == observation['minute'] == minute, 'shift phase clock')
|
||||
state = snapshot['systems']['runtime']
|
||||
service = observation['service']
|
||||
if i == 0:
|
||||
service_id = service['service_id']
|
||||
original_service = service
|
||||
identity = ('service_id', 'request_id', 'facility_id', 'guest_ids', 'inventory_reservations',
|
||||
'price_snapshot', 'duration_minutes', 'started_at', 'staff_ids')
|
||||
require(all(service[k] == original_service[k] for k in identity), 'shift original service identity')
|
||||
require(service['service_id'] == service_id and service['elapsed_minutes'] == (44 if i < 2 else 45)
|
||||
and service['duration_minutes'] == 45 and service['price_snapshot'] == 25,
|
||||
'shift service identity/progress')
|
||||
candidates = state['facilities']['service_history'] + [s for f in state['facilities']['instances']
|
||||
for s in f['active_services']]
|
||||
require([s for s in candidates if s['service_id'] == service_id] == [service], 'shift raw service join')
|
||||
require(observation['reservations'] == state['inventory'], 'shift inventory join')
|
||||
reserved = [r for r in state['inventory']['reservations'] if r['reservation_id'] in service['inventory_reservations']]
|
||||
require(reserved and len(reserved) == len(service['inventory_reservations']) and all(
|
||||
r['requester_id'] == service['request_id'] and r['state'] == ('ACTIVE' if i < 2 else 'CONSUMED')
|
||||
and r['terminal_at'] == (-1 if i < 2 else 1080) for r in reserved), 'shift reservation join')
|
||||
day2 = ['p04.order.server.a', 'p04.order.server.b']
|
||||
require(observation['active_staff'] == (day2 if i < 3 else []), 'shift DAY2 before/after handover')
|
||||
facility = [f for f in state['facilities']['instances'] if f['instance_id'] == service['facility_id']]
|
||||
require(len(facility) == 1 and facility[0]['active_staff_ids'] == observation['active_staff'],
|
||||
'shift full-state active staff join')
|
||||
require([w['staff']['staff_id'] for w in observation['workers']] == day2, 'shift worker identity set')
|
||||
for worker in observation['workers']:
|
||||
require(worker['staff'] in state['staff']['staff'],
|
||||
'shift worker raw join')
|
||||
if i < 3:
|
||||
require(worker['shift'] in state['staff']['shifts'] and worker['is_present'] is True and worker['shift']['kind'] == 'DAY' and
|
||||
worker['shift']['end_at'] == 1080 and worker['shift']['actual_ended_at'] == -1,
|
||||
'shift original DAY worker present')
|
||||
else:
|
||||
ended = [r for r in state['staff']['shifts'] if r['staff_id'] == worker['staff']['staff_id']]
|
||||
require(worker['shift'] == {} and worker['is_present'] is False and
|
||||
worker['staff']['state'] == 'OFF_DUTY' and len(ended) == 1 and
|
||||
ended[0]['actual_ended_at'] == ended[0]['end_at'] == 1080,
|
||||
'shift normal handover history')
|
||||
ledger = state['economy']['entries']
|
||||
sale = [r for r in ledger if r['category'] == 'SERVICE_SALE']
|
||||
if i < 2:
|
||||
require(sale == [] and observation['receipts'] == [], 'shift precompletion charge')
|
||||
else:
|
||||
require(service['state'] == 'COMPLETED' and service['completed_at'] == 1080 and len(sale) == 1,
|
||||
'shift single completion')
|
||||
transaction = sale[0]
|
||||
if transaction_id is None:
|
||||
transaction_id = transaction['transaction_id']
|
||||
require(transaction['transaction_id'] == transaction_id and transaction['amount'] == service['price_snapshot'] and
|
||||
transaction['absolute_minute'] == 1080 and transaction['source_entity_id'] == service['facility_id']
|
||||
and transaction['credit_account'] == 'GUEST_WALLET:' + service['guest_ids'][0], 'shift sale identity')
|
||||
receipts = receipt_rows(observation['receipts'])
|
||||
require(receipts == [r for r in ledger if r['transaction_id'] == transaction_id], 'shift receipt raw join')
|
||||
require([r for r in state['economy']['idempotency'] if r['key'] == 'service.payment.' + service_id]
|
||||
== [{'key': 'service.payment.' + service_id, 'transaction_id': transaction_id}],
|
||||
'shift idempotency join')
|
||||
if i == 2:
|
||||
completed_service = service
|
||||
paid_rows = observation['receipts']
|
||||
require(paid_rows == observations['first_receipts'] and paid_rows[0]['staff_at_receipt'] == day2,
|
||||
'shift receipt precedes handover')
|
||||
else:
|
||||
require(service == completed_service and ledger == previous_ledger and
|
||||
observation['receipts'] == paid_rows, 'shift extra charge/completion')
|
||||
previous_ledger = ledger
|
||||
points.append(label)
|
||||
return {'verified_conditions': ['shift_completion'], 'phases': points, 'transaction_id': transaction_id}
|
||||
|
||||
|
||||
def combine_native_series(directory, native):
|
||||
"""Independent R composition; rerun raw checks, never trust condition scalars.
|
||||
|
||||
The C verifier and its fixtures remain unchanged. This function does not
|
||||
establish candidate applicability, and cannot grant a successful whole gate.
|
||||
"""
|
||||
import importlib.util
|
||||
module_path = ROOT / DOC_SCOPE / 'p04_native_series.py'
|
||||
module_spec = importlib.util.spec_from_file_location('p04_series', module_path)
|
||||
series = importlib.util.module_from_spec(module_spec)
|
||||
module_spec.loader.exec_module(series)
|
||||
c_base = directory / 'audit-support/native-first-current'
|
||||
require(native == verify_native(c_base), 'C result must be recomputed from raw')
|
||||
base = directory / 'audit-support/p04-raw-collect-r22'
|
||||
manifest_path = safe(base, 'MANIFEST.json')
|
||||
manifest = load(manifest_path)
|
||||
require(manifest['protocol'] == 'p04-native-series-collection-v1' and
|
||||
manifest['relocation_manifest_sha256'] == series.MANIFEST_SHA256,
|
||||
'series relocation binding')
|
||||
require(set(manifest['series']) == set(series.RUNS), 'series manifest membership')
|
||||
shift = verify_shift_completion(c_base)
|
||||
verified = set(native['verified_conditions']) | set(shift['verified_conditions'])
|
||||
bindings = {}
|
||||
for name in series.RUNS:
|
||||
binding = manifest['series'][name]
|
||||
path = safe(base, binding['path'])
|
||||
require(path.name == name + '.json' and sha(path) == binding['sha256'] and
|
||||
path.stat().st_size == binding['bytes'] and
|
||||
binding['relocation_manifest_sha256'] == series.MANIFEST_SHA256, 'series manifest SHA binding')
|
||||
recorded = load(path)
|
||||
require(recorded['verifier_sha256'] == sha(module_path), 'series verifier changed since collection')
|
||||
actual = getattr(series, 'verify_' + name)(directory)
|
||||
require({k: v for k, v in recorded.items() if k != 'verifier_sha256'} == actual,
|
||||
'series raw result/reference drift')
|
||||
verified.update(actual['verified_conditions'])
|
||||
bindings[name] = binding['sha256']
|
||||
return {'verified_conditions': sorted(verified), 'series_manifest_sha256': sha(manifest_path),
|
||||
'C_source_manifest_sha256': sha(safe(c_base, 'SOURCE_MANIFEST.json')),
|
||||
'C_provenance_sha256': sha(safe(c_base, 'OWNERSHIP_RAW_PROVENANCE.json')),
|
||||
'series_bindings': bindings, 'relocation_manifest_sha256': series.MANIFEST_SHA256,
|
||||
'missing_conditions': sorted((set(REQUIRED) | {'EV'}) - verified),
|
||||
'nativeWindows': {name: 'pending' for name in sorted(set(REQUIRED) | {'EV'})},
|
||||
'stage_A': 'candidate binding stage A pending', 'formal_acceptance': False}
|
||||
|
||||
|
||||
def verify(directory):
|
||||
# Contract hashes the supplied spec string, while the checked-in JSON has
|
||||
# one final LF. Accept only that exact representation difference.
|
||||
@@ -812,14 +1131,23 @@ def verify(directory):
|
||||
require(sha(SPEC) == SPEC_HASH or (spec_bytes.endswith(b'\n') and
|
||||
hashlib.sha256(spec_bytes[:-1]).hexdigest() == SPEC_HASH), 'dispatch spec pin mismatch')
|
||||
spec = load(SPEC)
|
||||
evidence = directory / 'p04-evidence'
|
||||
evidence = Path(os.environ.get('P04_EVIDENCE_DIR', str(directory / 'p04-evidence'))).absolute()
|
||||
require(not evidence.is_symlink(), 'symlink evidence directory')
|
||||
index = load(safe(evidence, 'index.json'))
|
||||
require(type(index.get('schema_version')) is int and index['schema_version'] == 1, 'schema_version')
|
||||
require(type(index.get('schema_version')) is int and index['schema_version'] in (1, 2), 'schema_version')
|
||||
require(index.get('task_id') == 'P04-01' and index.get('formal_acceptance') is False, 'task/acceptance')
|
||||
checker_commit = git_bytes('rev-parse', 'HEAD').decode().strip()
|
||||
require(index.get('candidate_commit') == checker_commit, 'checker invocation commit mismatch')
|
||||
head, target_result = verify_product_target(index, directory, checker_commit)
|
||||
head, target_result = verify_roles(index, directory)
|
||||
if index['schema_version'] == 2:
|
||||
import importlib.util
|
||||
module_path = ROOT / DOC_SCOPE / 'build_p04_index.py'
|
||||
module_spec = importlib.util.spec_from_file_location('p04_index', module_path)
|
||||
builder = importlib.util.module_from_spec(module_spec)
|
||||
module_spec.loader.exec_module(builder)
|
||||
expected = builder.payload(directory, sys.modules[__name__])
|
||||
require(index == expected, 'forged index/raw mapping differs from recomputation')
|
||||
require(not index['raw_conditions']['missing_conditions'], 'uncollected original boundaries: ' +
|
||||
', '.join(index['raw_conditions']['missing_conditions']))
|
||||
return target_result
|
||||
source = index.get('source_map')
|
||||
applicability(index, spec, source, head)
|
||||
oldmap = load(ROOT / 'docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/historical-source-map.json')
|
||||
@@ -903,23 +1231,37 @@ def verify(directory):
|
||||
require(native['production_commit'] == target_result['tested_product'], 'native production role mismatch')
|
||||
# This adapter covers only the supplied dependency/formal series. Never
|
||||
# promote it to the missing original scenarios through scalar booleans.
|
||||
missing = (set(REQUIRED) | {'EV'}) - set(native['verified_conditions'])
|
||||
combined = combine_native_series(directory, native)
|
||||
missing = set(combined['missing_conditions'])
|
||||
require(not missing, 'uncollected original boundaries: ' + ', '.join(sorted(missing)) +
|
||||
'; formal_original_credit=0')
|
||||
return target_result
|
||||
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(description=__doc__)
|
||||
parser.add_argument('--verify-only', action='store_true', required=True)
|
||||
parser.parse_args()
|
||||
mode = parser.add_mutually_exclusive_group(required=True)
|
||||
mode.add_argument('--verify-only', action='store_true')
|
||||
mode.add_argument('--verify-series-only', action='store_true', help='Read-only Stage R composition; always leaves Stage A pending')
|
||||
args = parser.parse_args()
|
||||
try:
|
||||
require(bool(os.environ.get('BUILD_OUTPUT_DIR')), 'BUILD_OUTPUT_DIR required')
|
||||
if args.verify_series_only:
|
||||
directory = Path(os.environ['BUILD_OUTPUT_DIR']).absolute()
|
||||
native = verify_native(directory / 'audit-support/native-first-current')
|
||||
result = combine_native_series(directory, native)
|
||||
result.update(task_id='P04-01', machine_verified=False,
|
||||
error='candidate binding stage A pending; uncollected original boundaries: ' +
|
||||
', '.join(result['missing_conditions']))
|
||||
print(json.dumps(result, ensure_ascii=False, sort_keys=True))
|
||||
return 1
|
||||
with isolated_objects():
|
||||
verify(Path(os.environ['BUILD_OUTPUT_DIR']).resolve())
|
||||
result = verify(Path(os.environ['BUILD_OUTPUT_DIR']).resolve())
|
||||
except (ValueError, OSError, KeyError, TypeError, IndexError, AttributeError, subprocess.SubprocessError) as exc:
|
||||
print(json.dumps({'task_id': 'P04-01', 'machine_verified': False, 'formal_acceptance': False, 'error': str(exc)}, ensure_ascii=False))
|
||||
return 1
|
||||
print(json.dumps({'task_id': 'P04-01', 'machine_verified': True, 'formal_acceptance': False}))
|
||||
print(json.dumps({'task_id': 'P04-01', 'machine_verified': True, 'formal_acceptance': False,
|
||||
'role': result['role'], 'actual_head': result['actual_head']}))
|
||||
return 0
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user