[AdaWorldAPI]

DRAFT / PROPOSED / NOT IN FORCE. This PR adds documentation only. It grants no admission and authorizes no implementation.

It records the operator decision packet for EXO-140 / EXO-46 that follows the D-BAG-FOLD evidence in #1937, #1938 and #1939.

Changes

• .claude/probes/2026-11-03-d-bag-fold/DECISION-PACKET.md (new).
• .claude/probes/2026-11-03-d-bag-fold/README.md: one inventory row for the packet.

Nothing else changes: no production code, probes, board files or Linear statuses.

What the packet states

• Authority is not integrity. OrderedLaneWitness::forged is public, so an ordered-lane witness or a digest is never an authorization token. A certified lens needs issuer-controlled construction and immutable provenance; dr::Frame is the existing model for that pattern. The packet classifies the seven callers of forged. All are tests, and two of them (in Quack and NAL) depend on it being pub. Its visibility is not changed here.
• The pointer and presence lifetimes are separate. The pointer lens depends on the coordinates revision and presence attestation on the source revision. A source-only mutation needs to retire only the presence evidence. Today, FrameStore::check retires the whole frame. A per-axis, issuer-side check is a proposal: public FrameRevisions counters are not authority. The binding that forces presence writers to advance the source revision does not exist and is marked blocked.
• Recommended rulings, not enacted. A same-table, coordinate-derived, issuer-certified $i should be eligible for classification as co-addressed execution, even though it lowers to MaskOp::Gather. That holds only with resident planes, verified provenance, correct frame and scope, bounds, generation, and in-program gating. Value-derived Gather, reuse of produced masks, copied presence projections and scattered intermediates stay prohibited. ADMISSION B's wording must be reconciled by the operator before this reading can bind.
• Ownership gates are kept separate.
  • The operator owns the EXO-140 / EXO-46 interpretation and its scope.
  • The contract owner owns the certified lens and presence-attestation types.
  • The DT64 owner owns the issuer-side per-axis check, and later the method-binding admission.
  • The Quack owner owns candidate-gated lowering.

Next step

The next step is an explicit owner decision. No engineering step follows until those rulings are made.

---

Generated by Claude Code

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: cb6a066c-008f-4853-9144-7f81e36ac1d8

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-03T15:53:48.672125Z	b02a795	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.