AdaWorldAPI · Nov 4, 2026 · Nov 4, 2026 · Nov 4, 2026 · Nov 4, 2026 · Nov 4, 2026
diff --git a/.claude/board/INTEGRATION_PLANS.md b/.claude/board/INTEGRATION_PLANS.md
@@ -1,3 +1,7 @@
+## 2026-11-04 — D-DRIVER-ZC-0: virtual access driver instead of 17,000 per-call copy audits
+
+**Status:** PROPOSED / DOCS ONLY. [Master](../plans/d-driver-zc-virtual-bus-contract-v1.md) · [staged PR charter](../plans/d-driver-zc-staged-pr-charter-v1.md) · [47 falsifiers](../plans/d-driver-zc-falsifier-matrix-v1.md) · [board entry](entries/2026-11-04-d-driver-zc-0-virtual-bus-contract.md) · [STATUS_BOARD](STATUS_BOARD.md) D-DRIVER-ZC · [EXO-154](https://linear.app/exo-red/issue/EXO-154) / [EXO-153](https://linear.app/exo-red/issue/EXO-153) / [EXO-50](https://linear.app/exo-red/issue/EXO-50). **Architecture move:** apply ndarray SIMD polyfill's facade-and-parity law to a single local/foreign/data-owner *address-access membrane*. Five virtual XX/XY/XZ/YY/ZZ lenses share one witnessed canonical SoA address; typed ClassView and Quack/mask-risc/ndarray execute without default copied values/row reconstruction. BIND→PROJECT→STREAM→EXECUTE→RELEASE; strict local borrow vs disk ingress vs remote message distinction; no new ISA/ALU/hash index or driver runtime. Co-addressed selections and once-per-frame routing first; foreign hops remain EXO-46/89/151/140-gated; D4/S-INGRESS and oracle-lifetime owners open. A 47-case matrix separates semantic results, representation bytes, reachability enforcement and end-to-end economics. #1953/#1955/#1956 already merged; the 8 ZC stages are independent, only ZC-0 documented now. "Thinking Hard Drive" is a proposed restricted theorem schema, not an assertion that disks perform computation or every query takes O(1). **Explicit defer:** no cognitive-shader-driver/Ladybug/P64/StreamDTO/BusDTO/PerturbationDTO stack investigation or consolidation during this PR.
+
 ## 2026-11-04 — D-DRISA decision memos after the local register proof → `.claude/plans/d-drisa-decision-memos-v1.md`
 
 **Status:** PROPOSED, owned by this session (EXO-153 stages 1 and 3). **Board:** [STATUS_BOARD](STATUS_BOARD.md) D-DRISA-1-LAB, D-DRISA-3-LAB, D-DRISA-M1..M7; [entry](entries/2026-11-04-d-drisa-1-register-proof.md). Architecture: #1953 (D-DRISA-0, a GPT-session plan adopted after review). Seven owner questions the local proof leaves open: a layout witness on the SoA (the first missing connection), a global id → tile index or co-addressed selections, result-register lifetime, source-location receipt, DR → Lance authority, the carry words as ALU, async loopback.

diff --git a/.claude/board/STATUS_BOARD.md b/.claude/board/STATUS_BOARD.md
@@ -1,3 +1,22 @@
+## D-DRIVER-ZC — one zero-copy access membrane and virtual bus (2026-11-04)
+
+**Status:** D-DRIVER-ZC-0 PROPOSED / DOCS ONLY. [Master](../plans/d-driver-zc-virtual-bus-contract-v1.md) · [staged PR charter](../plans/d-driver-zc-staged-pr-charter-v1.md) · [47 independent falsifiers](../plans/d-driver-zc-falsifier-matrix-v1.md) · [entry](entries/2026-11-04-d-driver-zc-0-virtual-bus-contract.md) · [EXO-154](https://linear.app/exo-red/issue/EXO-154) · [EXO-153](https://linear.app/exo-red/issue/EXO-153) · [EXO-50](https://linear.app/exo-red/issue/EXO-50). **No driver implementation or production access rule shipped.**
+
+**Updated predecessor status:** [D-DRISA #1953](https://github.com/AdaWorldAPI/lance-graph/pull/1953) merged docs; [#1955](https://github.com/AdaWorldAPI/lance-graph/pull/1955) merged local borrowed register lab; [#1956](https://github.com/AdaWorldAPI/lance-graph/pull/1956) merged ALU semantics lab, carry 1.5–4.8× slower than native in eight measured shapes. Earlier D-DRISA entries are historical plans, not the current PR state.
+
+| D-id | Stage | Status / owner |
+| --- | --- | --- |
+| D-DRIVER-ZC-0 | One witnessed bind/project/stream/execute/release access contract, bus roles, proof matrix | THIS DOCS PR, proposed |
+| D-DRIVER-ZC-1 | Local sealed borrowed-lens membrane, compile-fail misuse probes | FUTURE LAB, DT64/source/mask-risc review |
+| D-DRIVER-ZC-2 | Typed XX/XY/XZ/YY/ZZ views and in-program composition, no owned bus arrays | FUTURE LAB, Quack/DT64 |
+| D-DRIVER-ZC-3 | Bind-once across local tiles; admitted foreign global→local reuse | LOCAL LAB; FOREIGN **BLOCKED EXO-46/89/151/140** |
+| D-DRIVER-ZC-4 | D-DRISA-2/4 async compatibility only, no parallel driver | GATED source-owner/security/transport |
+| D-DRIVER-ZC-5 | Lance disk-backed source + truthful I/O/copy accounting | **BLOCKED D4/S-INGRESS**, EXO-114 |
+| D-DRIVER-ZC-6 | Sealed migrated caller firewall with explicit reachability coverage | FUTURE policy lab, EXO-104/105/109 |
+| D-DRIVER-ZC-7 | Thinking Hard Drive semantic, representation and whole-query verdict | FUTURE independent review; no theorem proof claimed |
+
+**Law:** existing [zero-copy lens doctrine](../knowledge/zero-copy-lens-law.md) prohibits implicit source payload materialization; local borrow only with live source/layout/scope witness. Existing ndarray SIMD facade is the model: one admitted access vocabulary, multiple implementations without bypassing semantics. Virtual buses are typed same-address views, not stored arrays. O(1) is limited to a fixed number of already-resolved resident row reads, never arbitrary K-row output, all-pairs joins, storage I/O or RPC. Legacy ~17,000-call premise is operator context, not audited coverage. Do **not** inspect/consolidate migrated ladybug/P64/StreamDTO/BusDTO/PerturbationDTO/cognitive-shader-driver yet.
+
 ## D-DRISA — DR remote register + Abakus cognitive shader (2026-11-04)
 
 **Status: D-DRISA-0 PROPOSED / DOCS ONLY.** [Master architecture](../plans/d-drisa-remote-register-shader-v1.md) · [staged PR charter](../plans/d-drisa-staged-pr-charter-v1.md) · [57 falsifiers](../plans/d-drisa-falsifier-matrix-v1.md) · [board entry](entries/2026-11-04-d-drisa-0-remote-register-contract.md) · [EXO-153 owner tracking](https://linear.app/exo-red/issue/EXO-153) · [EXO-50 append-only handoff](https://linear.app/exo-red/issue/EXO-50). **No remote driver, API, copied payload cache, new map or performance measurement is implemented by this plan.**

diff --git a/.claude/board/entries/2026-11-04-d-driver-zc-0-virtual-bus-contract.md b/.claude/board/entries/2026-11-04-d-driver-zc-0-virtual-bus-contract.md
@@ -0,0 +1,44 @@
+# D-DRIVER-ZC-0 — virtual zero-copy driver, address-preserving XY/XZ/XX/YY/ZZ bus
+
+**Date:** 2026-11-04. **Status:** ARCHITECTURE / FALSIFIER PRE-REGISTRATION ONLY; no new source pointer/driver/API/codec/ISA/remote server and no numeric performance result.
+
+**Operator:** Apply the `ndarray::simd` polyfill pattern to DR's **data access**, not by auditing approximately 17,000 calls one by one. One admissible `BIND → PROJECT → STREAM → EXECUTE → RELEASE` membrane over witnessed source-owned DR coordinates should make implicit canonical value copying impossible for **migrated sealed consumer paths**. It should expose typed virtual buses `XX, XY, XZ, YY, ZZ` over *one* canonical SoA rather than storing additional bus arrays or constructing `PSCustomObject`-like rows. Foreign global→local navigation happens only under owner admission, and can amortize once per witnessed frame. Local borrowing and data-owner remote execution are separate realizations, not an exported Rust pointer.
+
+**Plans:** [D-DRIVER-ZC master](../../plans/d-driver-zc-virtual-bus-contract-v1.md) · [staged PR charter](../../plans/d-driver-zc-staged-pr-charter-v1.md) · [47 falsifier rows](../../plans/d-driver-zc-falsifier-matrix-v1.md).
+
+**Linear:** [EXO-154](https://linear.app/exo-red/issue/EXO-154) owner issue; [EXO-153](https://linear.app/exo-red/issue/EXO-153) existing D-DRISA stages; [EXO-50](https://linear.app/exo-red/issue/EXO-50) append-only agent handoff.
+
+## Exact reuse
+
+- [Zero-copy lens law](../../knowledge/zero-copy-lens-law.md) remains operator ruling. No hidden source value array, tuple enumeration or row reconstruction in the admitted fold. An array is already a ClassView projection; source stride may be borrowed where layout permits.
+- [#1955](https://github.com/AdaWorldAPI/lance-graph/pull/1955) **MERGED LAB**: sealed DR register with local owned test-SoA, scope/frame/layout/source witnesses, borrow semantics, route-once. It does not prove a virtual bus or remote/disk execution.
+- [#1956](https://github.com/AdaWorldAPI/lance-graph/pull/1956) **MERGED LAB**: Abakus carry-word correctness for k-of-n/Kleene/Bag, but 1.5–4.8× slower than native arms in eight measured shapes; carry is not a forced driver ALU.
+- [#1950](https://github.com/AdaWorldAPI/lance-graph/pull/1950) **MERGED LAB**: real Lance mask ingress costs; prepared-binding timings include copied value lanes, and DR→Lance `BLOCKED_D4`.
+- [#1953](https://github.com/AdaWorldAPI/lance-graph/pull/1953) **MERGED DOCS**: D-DRISA async register research architecture and stages; new plan does not build a second async runtime.
+
+## Staged PRs (NONE of ZC-1..ZC-7 opened here)
+
+| D-id | Deliverable | Status / gate |
+| --- | --- | --- |
+| D-DRIVER-ZC-0 | master architecture, 47 falsifiers, staged charter, board/EXO map | THIS DOCS PR, no runtime |
+| D-DRIVER-ZC-1 | local borrowed-lens membrane over merged D-DRISA-1 | FUTURE LAB, source/DT64 owners |
+| D-DRIVER-ZC-2 | five virtual bus roles with address-preserving lens composition | FUTURE LAB, Quack/DT64 semantic owners |
+| D-DRIVER-ZC-3 | co-addressed/reused tiles; foreign global→local amortization | LOCAL LAB possible; FOREIGN BLOCKED EXO-46/89/151/140 |
+| D-DRIVER-ZC-4 | async source-owner descriptor **compatibility** (not new driver) | GATED D-DRISA-2/4, security owner |
+| D-DRIVER-ZC-5 | physical Lance source / disk-backed no-owned-intermediate proof | **BLOCKED D4/S-INGRESS**, EXO-114 |
+| D-DRIVER-ZC-6 | typed read access firewall, compile-fail and incremental caller coverage | FUTURE scoped policy lab; EXO-104/105/109 |
+| D-DRIVER-ZC-7 | "Thinking Hard Drive" representation/semantic/economic verdict | FUTURE REVIEW, not theorem certified |
+
+## Critical guarantees and refusals
+
+- **Resident ZC-A:** zero *newly owned source value payload bytes* in migrated admitted hot execution; legitimate scratch/selection/result bytes counted separately. A one-time source I/O/decode still costs data movement.
+- **Virtual ZC-B:** no physical bus arrays for XY/XZ/XX/YY/ZZ; an already-bound fixed-size row lens costs O(1) loads in row count, but arbitrary foreign joins, K-row folds and output are not universally O(1).
+- **Remote ZC-C:** source owner performs local borrow/compute; remote client sends typed instruction and receives a measured result, not a raw pointer. **No network/RDMA zero-copy claim.**
+- **No universal historical certification:** the ~17k calls are operator context, not an enumerated call graph. CI can enforce a sealed migrated scope; bypass coverage remains a separate measurement.
+- **Theorem remains PROPOSED:** parity + owned-payload representation bound + scope/layout/lifetime validity + exact physical I/O accounting. A zero-allocation wrong-answer path is a failure.
+
+**Owner gates:** [EXO-46](https://linear.app/exo-red/issue/EXO-46), [EXO-89](https://linear.app/exo-red/issue/EXO-89), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-140](https://linear.app/exo-red/issue/EXO-140), [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-114](https://linear.app/exo-red/issue/EXO-114), [EXO-104](https://linear.app/exo-red/issue/EXO-104), [EXO-105](https://linear.app/exo-red/issue/EXO-105), [EXO-109](https://linear.app/exo-red/issue/EXO-109). No owner decision is made by these plans.
+
+**Deferred:** no audit or consolidation now of cognitive-shader-driver, former ladybug-rs, P64, StreamDTO, BusDTO, PerturbationDTO. Eventual one-canonical-surface choice belongs to a separate operator decision.
+
+**STOP:** copying canonical payload values in the admitted hot path; inventing another hash map or row authority; foreign/local ordinal confusion; relabeling physical disk/network copies as free; new public ISA or "GPU shader"; completing full caller coverage without a defensible reachability census; automatic merge.
diff --git a/.claude/board/entries/README.md b/.claude/board/entries/README.md
@@ -25,10 +25,11 @@ index row, (3) no duplicate entry id. Checks 1 and 2 are deliberately
 opposite directions; the stranding this convention prevents shows up in
 exactly one of them, never both.
 
-575 entries, 2026-08-06 .. 2026-11-04.
+576 entries, 2026-08-06 .. 2026-11-04.
 
 | date | entry id | finding | file |
 |---|---|---|---|
+| 2026-11-04 | `D-DRIVER-ZC-0` |  | [2026-11-04-d-driver-zc-0-virtual-bus-contract.md](2026-11-04-d-driver-zc-0-virtual-bus-contract.md) |
 | 2026-11-04 | `D-DRISA-3` |  | [2026-11-04-d-drisa-3-alu-semantics.md](2026-11-04-d-drisa-3-alu-semantics.md) |
 | 2026-11-04 | `D-DRISA-1` |  | [2026-11-04-d-drisa-1-register-proof.md](2026-11-04-d-drisa-1-register-proof.md) |
 | 2026-11-04 | `D-DRISA-0` |  | [2026-11-04-d-drisa-0-remote-register-contract.md](2026-11-04-d-drisa-0-remote-register-contract.md) |