D-DR256-WHERE: capstone, DR64³ inventory, P2 Quack-path lab, evidence reconciliation, D-NFR-1 ownership correction

.claude/board/INTEGRATION_PLANS.md

@@ -1,3 +1,6 @@
+## 2026-10-26 — D-DR256-WHERE population-masked reads, thought amortization, DuckDB harvest → `.claude/plans/dr256-where-capstone-v1.md`
+
+**Status:** P0 census DONE, P1 lab DONE (reported, not gated); P2–P5 PROPOSED, NOT AUTHORIZED. **Board entry:** [D-DR256-WHERE](entries/2026-10-26-dr256-where-capstone.md). Smallest gap: exact occupancy over a `Keep` mask; multi-property gain is dead-block skipping, measured at ndarray level only. No runtime, ABI, planner, writer or WAL change; the scatter survival condition stays in force.
 ## 2026-10-26 — D-DQM Appendix A: DR64 ↔ DuckDB ↔ Lance 13 capability crosswalk → `.claude/plans/duckdb-dr-quack-machine-room-reuse-v1.md` § Appendix A
 
 **Status:** DOCUMENTATION ONLY, follow-up to merged #1787. **Board entry:** [coresearch](entries/2026-10-26-coresearch-lance13-masked-read-dr64.md). Source-backed crosswalk of 17 DuckDB capabilities (pinned @`1641475`) against DR64/Quack/mask-risc/ndarray/DRF/Lance 13, re-audit of September gaps G1–G8 (G1 u8, G2 unsigned, G4, G6 CLOSED), Lance 13 masked read (H14c #1573 / H14d #1575) as an existing layer, coordinate-domain table, cost ledger over five paths, missing-feature register (wiring vs code vs intentional exclusion), probes P1–P5. Recommends one probe PR (P1, offline chunk-touched estimator vs committed H14c/H14d bytes), no implementation. OPEN: seam S-INGRESS (copy status of words → Lance `RowAddrMask`), one coordinate→`_rowid` authority. Corrects: the M2 input's "handoff must stay a fold"; September R6 (K3 planes exist) and R5 (hex tenant superseded).

.claude/board/entries/2026-10-26-dr256-where-capstone.md

@@ -0,0 +1,83 @@
+# 2026-10-26 — D-DR256-WHERE capstone: P0 census + P1 occupancy / shared-schedule lab
+
+**Status:** P0 DONE, P1 DONE (lab, reported not gated). P2–P5 PROPOSED, NOT AUTHORIZED. Amendment A (DR64³ gap inventory): `2026-10-26-dr64-cubed-amendment.md`. Amendment B (P2 Quack-path lab, DONE): see the plan § Amendment B.
+Plan: `.claude/plans/dr256-where-capstone-v1.md`. Lab: `crates/drf-focus-probe/examples/where_occupancy.rs`.
+
+- WHERE, COUNT, ANY, gated predicates, witnessed range reads, exact fk semijoin and single-property
+  masked reads all exist in Quack / mask-risc today (file:line in the plan, §2).
+- Correction to an earlier note: `Terminal::Any` does not exit early on the generic tile path
+  (`exec.rs:1793`); only the fused ternlog path does (`exec.rs:1049`, `:1204`).
+- Smallest real gap: exact occupancy (active 64-row words, active 256-row blocks). Scalar lab cost is
+  about 240 ns above `popcount_batch_u64` (≈100 ns) per 8 KiB mask.
+- Multi-property reads: a shared block schedule gives B/S from 0.017 (one active block) to ≈1.0 (all 256
+  blocks), roughly flat in P. The gain is dead-block skipping, not sharing R's walk. The two 4,096
+  fixtures (dense 0.24–0.33, scattered 0.63–0.95) show cardinality alone does not predict it.
+- P=64 over dense selections exceeds 1,000 µs on both arms: failed gate.
+- ndarray-level only; the Quack-path measurement is P2.
+
+OPEN: P2 (real Quack path); whether any consumer reads occupancy to choose a strategy; the #1791
+contract; S-INGRESS and the joint witness (#1788).
+
+## P2 (2026-10-26, Amendment B)
+
+- Reusing a kept R (`Keep` → `Plane`) costs 0.05–0.60 of recomputing R per property. It is available today.
+- mask-risc does not skip dead 256-row blocks in mask ops or folds. A block schedule is 0.02–0.39 of the
+  Quack reuse path at sparse selections and 0.63–1.08 at full occupancy.
+- Building R costs ~20 µs regardless of size; COUNT without a mask costs the same.
+- Stale codebook, scope change and selection change all run silently stale through Quack. relalg refuses
+  by version value.
+- `BindStore` occurs in no file in any branch's history; the binding store is proposal only (D-QSP, D-NFR S5).
+
+## Compiler compatibility (2026-10-26)
+
+Plan § "Future mathematical compiler compatibility". It references D-DRMC-0, D-NFR / D-NFC, D-ONNX-RELALG-CAP,
+D-DR3 and D-RPR rather than restating them.
+
+Existing lab precedents:
+- #1701 / #1708: typed DR64 binding.
+- #1703: law ≠ recipe ≠ binding.
+- #1740: a certified recipe reused on a fresh frame, 0 egglog calls.
+- #1666: `Pop` refuses stale populations by witness.
+- #1659: zero-copy relation lanes.
+
+Correction to P2: a witnessed kept population exists in the lab (#1666); a Quack `Keep` plane still has no
+witness. P2 scope is unchanged.
+
+## Evidence reconciliation (2026-10-26, plan § D)
+
+- Binding store: the generalized Quack Binding Store is PLANNED / UNBUILT. Quack numeric binding is
+  IMPLEMENTED. RelAlg let reuse is IMPLEMENTED (type in the contract, executor lab). Witnessed DR
+  populations, typed DR method binding and compiled recipes are IMPLEMENTED IN LAB. Source-attested
+  production integration is MISSING.
+- Spine linked with source: #1649, #1653, #1659, #1666, #1681, #1685, #1693, #1694 (via #1696 / #1698),
+  #1701 / #1703 (via #1708), #1707, #1740.
+- New falsifier: a predicate-dependent property mutation leaves a reused R2 at 1,032 rows vs 31 fresh,
+  silently.
+- Smallest seams: D-NFR-1 frame (needs NFR-OP-1); an input-generation dependency witness for kept planes
+  (binding store; NFR-OP-3 for the type); D-NFR-2 codebook generation.
+
+## D-NFR-1 ownership correction (2026-10-26, plan Part E)
+
+- In-borrow execution needs no frame: views, `Planes<'_>` and `LaneRef<'a>` are borrows, and #1755's
+  `compile_fail` tests already forbid an overlapping owner write. D-NFR-1 inside a borrow is a thin adapter.
+- Escaped reuse is a real gap, shown by counterexample: `escaped_reuse.rs` (raw setter and same-cycle
+  `write_row` change the answer without moving `current_cycle` or `last_write_cycle`; a later-cycle write
+  moves both) and `an_escaped_mask_is_not_witnessed_by_the_packet_cycle` (the packet cycle is caller-supplied).
+  Disable runs red-then-green, one per test.
+- P2's 1,032-vs-31 shows a detached `Keep` has no dependency witness, not that a borrow can see a mutation.
+- NFR-OP-1 narrowed: answered for in-borrow (source owner) and persisted (`QueryReference::at`); open only
+  for an owner-issued generation that every write path advances.
+
+## D-NFR-1 ownership amendment (2026-10-26, plan Part E.5–E.9)
+
+- PROVEN: safe immutable owner borrows exclude overlapping safe owner mutation (#1755).
+- PROVEN: current cycle and write stamps cannot validate escaped masks. New falsifiers: direct public-field
+  write (`mb.entity_type[1] = A`), `reset_row` + same-cycle `write_row` restoring both stamps over new data,
+  two owners with equal stamps and different answers, one `QueryReference::at(5, 0)` admitting different rows
+  from two sources. Each disable-verified; one non-binding disable recorded.
+- PROVEN: Quack, cypher-quack and mask-risc reference no `MailboxSoA` / `SoaEnvelope` type.
+- NOT YET PROVEN: that one generation comparison suffices for escaped reuse. Every `MailboxSoA` column and
+  both stamps are `pub` fields, so method-local bumps would miss direct writes.
+- OPEN: complete mutation-path ownership; physical snapshot attestation (`QueryReference` names no dataset;
+  `checkout_version` is a separate, unrecorded step); the escaped-reuse authority contract (NFR-OP-1).
+- Until then: recompute R under a new borrow or refuse escaped reuse.

.claude/board/entries/2026-10-26-dr64-cubed-amendment.md

@@ -0,0 +1,19 @@
+# 2026-10-26 — D-DR64C-A: DR64³ holographic binding gap inventory (Amendment A to D-DR256-WHERE)
+
+**Status:** GAP INVENTORY, documentation only. Plan: `.claude/plans/dr256-where-capstone-v1.md` § Amendment A.
+Builds on D-NFR-0 (S1–S17a), D-RMAP-1A, D-DRAV-1, D-DRF-1, D-RPR-0, D-QR-CAP.
+
+- DR #1 sealed focus, DR #2 typed property axis, DR #3 typed (Identity, Property) register, frame/focus/scope
+  guards: all LAB (`dr-math-binding-probe`, `dir-rmap-probe`, `drf-focus-probe`). Production has the Quack
+  binding membrane, `CompiledProgram`, ClassView presence masks and the masked terminals.
+- Named intermediates map onto four existing lifetimes; the only missing link is a frame on a bound Quack
+  query (D-NFR-1, not a new PR).
+- mask-risc already folds exact grouped cross moments (`GroupCrossPowerSumsI32`, i128/u128); Quack has no
+  `Agg` route to them. That is the cheapest Properties × Properties gap.
+- An inverse relation read is an access path, not a bit: admitted only with a declared inverse and an eligible
+  reverse path in the same frame.
+- `PrefetchDepth` is a schema visibility tier, not a physical prefetch.
+- Locality cannot be predicted (P1 #1789 FAILED), so no strategy policy may claim it.
+
+OPEN: per-property population presence planes (no production source found); typed inverse declaration;
+NFR-OP-1/2/3; #1791 contract; S-INGRESS.

.claude/board/entries/README.md

@@ -25,10 +25,12 @@ index row, (3) no duplicate entry id. Checks 1 and 2 are deliberately
 opposite directions; the stranding this convention prevents shows up in
 exactly one of them, never both.
 
-480 entries, 2026-08-06 .. 2026-10-26.
+482 entries, 2026-08-06 .. 2026-10-26.
 
 | date | entry id | finding | file |
 |---|---|---|---|
+| 2026-10-26 | `D-DR64C-A` |  | [2026-10-26-dr64-cubed-amendment.md](2026-10-26-dr64-cubed-amendment.md) |
+| 2026-10-26 | `D-DR256-WHERE` |  | [2026-10-26-dr256-where-capstone.md](2026-10-26-dr256-where-capstone.md) |
 | 2026-10-26 | `D-DR256-OD` |  | [2026-10-26-dr256-on-demand-l1.md](2026-10-26-dr256-on-demand-l1.md) |
 | 2026-10-26 | `D-DR256` |  | [2026-10-26-dr256-global-union-lab.md](2026-10-26-dr256-global-union-lab.md) |
 | 2026-10-26 | `D-DQM` | FAIL | [2026-10-26-dqm-p1-chunk-touched.md](2026-10-26-dqm-p1-chunk-touched.md) |

.claude/plans/d-native-repr-contract-v1.md

@@ -101,7 +101,7 @@ No step adds a runtime.
 
 | id | question | owner | status |
 |---|---|---|---|
-| NFR-OP-1 | who owns the production frame store (S6): Quack, ClassView, or the source owner? | operator | OPEN |
+| NFR-OP-1 | who owns the production frame store (S6): Quack, ClassView, or the source owner? Narrowed 2026-10-26 (`dr256-where-capstone-v1.md` Part E): in-borrow execution needs none (the source owner, through the borrow); persisted reuse has a horizon (`QueryReference::at`) but no physical snapshot identity; physical snapshot attestation is open; open for the escaped-reuse authority contract (source/owner identity, complete mutation witness over every entrance incl. public fields, focus, scope, codebook, multi-source snapshot consistency; Part E.5 B, E.9) | operator / mailbox write-path owner | OPEN (narrowed) |
 | NFR-OP-2 | what the DR64³ third axis indexes: relation ordinal, property ordinal, or palette plane | DR owner | OPEN |
 | NFR-OP-3 | whether `dir-rmap-probe`'s `Witness` and `dr-math-binding-probe`'s `Frame` become one type | DR owner | OPEN |
 | NFR-OP-4 | the exact-versus-approximate admission rule for palette values inside a native fold | bgz owner | OPEN |