Repository navigation
AUD-C2-TORUS-REJECTION-01: five omission controls accept unrelated exit-1 failures #335
Description
Confirmed engineering finding — separate from #330 and the completed QS repair
Dylan Roy — delegated AI engineering audit. Actual performer OpenAI / GPT-6 Astra Pro, qs320-parent-reconciliation-20261006-r2, pickup #322/6008749325. Scientific effect NONE; same-account/provider organizational-independence credit 0. This is a workflow-protocol counterexample, not a mathematical counterexample or a new review of the C2 theorem.
Exact affected source
Source cut: 07ff1191f3f99987060517b6413417287b5adf21.
.github/workflows/c2-torus-transfer.yml: 3957 bytes, Git blob f19cc875eb17ea69a6e02a3bebbca227c36f2856, SHA256 50d99bfdf2fa2b49270bd48a445f4e54cd32b3acec322e272bd618a3b52824aa. The complete locally reconstructed YAML was authenticated against the native Git blob before execution.
The five background mutant children (no-image, no-theta, drop-ratio, eta-half, fp-const) have combined output saved in /tmp/mutant_$m.log, but acceptance inspects only /tmp/mutant_$m.rc == 1. The output is shown only when the exit differs from 1. Therefore an unrelated exception, silent exit1, or wrong-reason exit1 is counted as a successful omission control.
Fresh full-shell reproduction
Executed both original YAML run blocks unchanged, not a rewritten matcher, in real disposable committed Git repositories. The synthetic packet has a complete flat manifest with bytes/SHA256/Git-blob checks, a nonempty required upstream pin, and a byte-identical copy. The first original source-validation step and final original clean-Git checks remain active. Each child is a real CPython subprocess; no subprocess mock. Separate external trace files prove that all five mutant stages, the baseline and controls.py actually executed. Fixed /tmp paths are checked for preexisting files before each case and only this fixture's files are removed.
Actual runtime CPython 3.13.5 / Bash 5.2.37, not the hosted 3.11.16 pin. Every case was run with -B -S and -B -O -S:
| Scenario | Cases | Observed whole-workflow result |
|---|---|---|
| Valid synthetic baseline/controls/intended mutants | 2 | exit0, correct |
| Nonempty consumed source changed after pin creation, then committed | 2 | first step fails; no child executes, correct |
| One selected mutant exits0 | 10 | workflow rejects, correct |
| One selected mutant raises unrelated RuntimeError | 10 | workflow exits0, false acceptance |
| One selected mutant exits1 silently | 10 | workflow exits0, false acceptance |
| One selected mutant exits1 with wrong-reason text | 10 | workflow exits0, false acceptance |
Total 44 full-shell cases, 30 false acceptances, 14 correctly behaving controls. Every repository remained clean. The --require-safe diagnostic command exits1 as intended (RED) because the 30 unsafe cases were accepted; its stderr is empty. Raw shell stdout/stderr, each mutant's combined stream/exit file, stage traces and case reports are retained in the owner delivery. These are synthetic protocol tests; they do not execute the authentic numerical C2 pipeline or prove that it has ever crashed in hosted execution.
Repair boundary
Do not fold this into #330's frozen local/far/C6 JSON-helper review, rewrite stored proofs/checkers/RESULTS/manifests, or reopen #307's completed adoption/integration. The annulus workflow was also source-inspected but is not declared defective by this report. A broad search candidate set is not a confirmed defect count.
Native transfer.py is blob 05dc3fba1d1f1399519569f113911ed043a67fba. Its driver emits MISMATCH against RESULTS.json for a completed mismatching computation, but it also has explicit require(...): raise AssertionError(...) calls and imports ball.py, pseries.py, and exact.py. Do not assume all five authentic mutants share the driver's mismatch diagnostic. First authenticate the complete original inputs and capture the genuine per-mutant exit/stdout/stderr in both pinned modes, distinguishing expected numerical mismatch or source-local assertion from unrelated process failure. Then implement source-bound intended-reason contracts with success, crash, silence, wrong reason, wrong exit, source-tamper and full-shell regression controls. Preserve current-base dedicated/general checks and a nonauthor source-bound engineering review before normal separate integration.
Ownership
This report completes the bounded falsification under #322/6008749325. The diagnostic/audit lane is released; no production repair branch is claimed. A repairer must record an actual scoped pickup after checking new contenders. No source/ref/readiness/merge mutation or CI rerun has been made by this audit. This finding does not create a global freeze or change scientific acceptance.
Activity
d6g8k5htny-coder commentedon Oct 6, 2026
@claude One bounded original-CLI characterization and source-preserving repair is requested for Dylan Roy, under the existing autonomy. First check newer comments/claims and post an actual pickup identifying performer/model/session and exact current source. Do not take #307/#317 integration, #330's frozen JSON repair, #331/#332 forensic reviews, or RF-GATE.
Scope:
.github/workflows/c2-torus-transfer.ymland a separately named protocol helper/test only as justified. Authenticate the unchanged C2 packet and consumed source pins, then run its original baseline and the5 actual omission mutants in normal/optimized pinned Python, retaining exact exit/stdout/stderr and intended source-local rejection reasons. The44-case whole-shell synthetic false-acceptance result above is already delivered; do not recast it as genuine numerical execution or repeat the theorem review. In particular, do not assume a universalMISMATCHline or accept arbitrary AssertionError/exit1: determine each authentic control contract first.After that characterization, repair only the workflow protocol and tests in an isolated proposal; preserve original checker/proof/RESULTS/manifest/copy bytes and original failures. Tests must distinguish unrelated crash, silence, wrong reason, wrong exit, source corruption before children, and valid controls at every stage, plus real current-base dedicated/general execution. Retain deterministic expected diagnostics as reviewed source, not an oracle generated by the child being checked. Publish exact bytes and request the normal nonauthor scoped engineering read; do not self-merge. If the authentic replay cannot be obtained, deliver the exact missing evidence rather than weakening acceptance. One finite task, no recursive workers, timers, global lock or renewed owner-approval requirement. This offer is not an observed pickup or completion.
d6g8k5htny-coder commentedon Oct 6, 2026
PICKUP — authentic C2 rejection-contract characterization and bounded repair preparation
Dylan Roy — delegated AI engineering. Actual performer OpenAI / GPT-6 Astra Pro, session
qs320-c2-contract-continuation-20261006-r3; continuation of the finder/audit lane, source-exposed, organizational-independence credit0, scientific effect NONE.Fresh #335 comments contain only request6008853001 and no actual repair pickup. The current main ref is 532bc63; current AGENTS and workflow rules reread, and the recent main229 window checked for a competing C2 claim. I take the unclaimed prerequisite: authenticate the existing C2 packet and inputs, recover or execute the authentic baseline and five intended mutants, and establish exact per-mutant exit/stdout/stderr contracts. Only after that evidence, prepare a test-first, isolated workflow/helper/test repair if feasible. The prior44-case synthetic audit is reused, not counted as new genuine numerical evidence.
No change to C2 proofs, numerical checkers, RESULTS, manifests, mathematical review, formal package or scientific status. No write to another lane's branch or merge slot. #317/#330/#331/RF-GATE owners remain undisturbed. Direct git access currently fails DNS in this container; connector-recovered bytes must be hash-authenticated before execution, and a missing genuine/pinned-runtime replay will be stated rather than weakening the matcher. An actual simultaneous earlier pickup takes precedence. This finite claim ends with evidence and release in this session, not a timer or unattended continuation.
d6g8k5htny-coder commentedon Oct 6, 2026
Publication stopped — observation prerequisite remains local; claim released
Dylan Roy — delegated AI engineering. Actual performer OpenAI / GPT-6 Astra Pro,
qs320-c2-contract-continuation-20261006-r3, completing pickup6009295614; scientific effect NONE, organizational-independence credit0.The original C2 workflow at current source cut532bc63f0c926a056950199b819cf29280f95fc3 still has blobf19cc875eb17ea69a6e02a3bebbca227c36f2856. I recovered its exact bytes from the prior verified owner delivery. Direct Git checkout failed DNS; the available local interpreter is3.13.5, not the hosted3.11.16 pin.
Prepared an isolated observation-only prerequisite: a recorder, nine real-process tests and a separate read-only two-mode workflow. It preserves the original numerical packet and original workflow, executes the exact hash-bound original source guard, retains raw stdout/stderr plus actual process states, and explicitly keeps intended_rejection_verified=false. Nine intended missing-implementation assertions were observed first; final9/9 pass normally and optimized. This is local boundary testing, NOT genuine C2 numerical execution or a new accepted rejection contract.
The FIRST create_blob publication attempt was refused with the exact message: “This tool call was blocked by OpenAI's safety checks. Please double check what you are sending.” No blob SHA was returned. I did not retry, rephrase the write, change endpoint, request a proxy publisher, create a branch/PR, or launch CI. Local candidate source identities and all test logs are retained in the owner report. This is not an uploaded/tested GitHub candidate and does not repair335.
Release: this finite preparation claim is released; no production or integration slot is held. The exact remaining evidence is authentic per-mutant diagnostics on the source-bound pinned runtime, followed by a reviewed intended-reason repair and current checks. No new mathematical review, old-review substitution, hidden bypass or owner-permission queue is requested.
d6g8k5htny-coder commentedon Oct 6, 2026
PICKUP — bounded C2 omission-control characterization after explicit release
Dylan Roy — delegated AI engineering. Actual performer xAI / Grok 4.7, this chat session. Session identifier UNKNOWN. GitHub actions use
d6g8k5htny-coder. Organizational-independence credit 0. Scientific effect NONE.Fresh public discussion shows request 6008853001, Astra pickup 6009295614, and explicit release 6009360058. No later pickup was visible. I am not continuing that Astra session and I did not author the original workflow. The earlier publication stop is retained: that local recorder was not uploaded and is not this candidate.
Claim
.github/workflows/c2-torus-transfer.yml, last recorded blobf19cc875eb17ea69a6e02a3bebbca227c36f2856. Live main will be reread before any write.Existing #316 final-integration claim 6015493107 remains separate and still waits on the Codex #359 tip lock.
d6g8k5htny-coder commentedon Oct 21, 2026
PICKUP —
C2-CONTRACT-CHARACTERIZATION-01CZ-20261021: data support only, the characterization step requested in 6008853001. I will record the genuine baseline and per-mutant outcomes of the C2 torus-transfer omission controls on current Math-main. No file, branch, workflow or PR change. Anthropic Claude, Claude Code sessionsession_01Cz7WZybv8znP64SpPj6sWY(01Cz). Dylan Roy — delegated AI engineering. Credit 0. Scientific effect NONE..github/workflows/c2-torus-transfer.ymlorfrontiers/c2_torus_transfer_20261001/; I read all 32.session_015wNj8LPTKXsaT68G3DgPPh), not me. I had no earlier role on this packet, its workflow or this issue.coefficients/side24_v1/PROOF.md. I authored an unrelated SIDE24 recovery crosswalk (recovery row §9); this stage does not use it.main27606578e1e189c027552ec46835b3095dbfbea5. Workflow blob819f104633f6d002cac0b0da07d91d9f041e1c62, which still accepts any exit status 1 as a rejection.transfer.pyis blob05dc3fba1d1f1399519569f113911ed043a67fba.transfer.py --check,controls.pyandtransfer.py --mutantfor each ofno-image,no-theta,drop-ratio,eta-halfandfp-const. Run each in-B -Sand-B -O -S, and keep the exact exit status, stdout, stderr and wall time.requireshould catch it. Then compare that with what actually happened. This is a contract read from the source, not one learned from the child under test.RESULTS.jsonor manifest, and no repair proposal under this pickup.Generated by Claude Code
d6g8k5htny-coder commentedon Oct 21, 2026
DATA RECORD + RELEASE —
C2-CONTRACT-CHARACTERIZATION-01CZ-20261021: all five C2 omission mutants exit 1 through the finalRESULTS.jsoncomparison, in both modes. An uncaught exception also exits 1, and the workflow's check cannot tell the two apart.This completes my pickup 6328350180. Anthropic Claude, Claude Code session
session_01Cz7WZybv8znP64SpPj6sWY(01Cz). Data only: not a repair, a review or a verdict on the C2 theorem. Credit 0. Scientific effect NONE.Source and run
main27606578e1e189c027552ec46835b3095dbfbea5, extracted withgit archive. Workflow blob819f104633f6d002cac0b0da07d91d9f041e1c62.transfer.py05dc3fba1d1f1399519569f113911ed043a67fba,controls.py863023c256c209715d46bd4e0a05395a3c1f3ba8,RESULTS.json919a567b295b46ccc35b37cea1349c5d6f79fd6a.runstep (manifest, pins and copies), extracted byte for byte from the YAML, printedmanifest, pins and copies verified.PYTHONDONTWRITEBYTECODE=1, under-B -Sand-B -O -S. stdout and stderr were kept separately. Four children ran at a time, not all at once. Afterwards every file in the extracted tree still had its git blob hash.Outcomes (identical in both modes)
transfer.py --checkcheck passed(13 B,c6b9ef18…)controls.py90247407…), last linecontrols: 0 failures--mutant no-imageMISMATCH against RESULTS.json(30 B,800a127a…)--mutant no-theta--mutant drop-ratio--mutant eta-half--mutant fp-constcontrols.pystdouts.no-imageis fast because its radiustheta1·abs(ref)is exactly zero wherever the reference jet is zero. Those entries become exact zeros, and the algebra is sparser (for d = 3,n_monomials_Hdrops from 1006 to 552).Intended reason, from the source
main()runs--mutant NAMEthrough the--checkpath with the mutant set. Its only intended rejection is the final comparison: it printsMISMATCH against RESULTS.json, then callssys.exit(1).require()raisesAssertionError. That also exits 1, but with a traceback on stderr. Norequire()fired in any mutant run.assertstatements, so-Ostrips nothing from it. That matches the identical outputs in both modes.transfer.MUTANT, calledcompute()and compared the result withRESULTS.json. It ran aspython3 -B -S -I(normal mode only).no-imageImages.jetcov: radius drops the per-jet image sumimage(abs(g), g), keepstheta1·abs(ref)Delta0,Delta_int,dDelta_w,e_kappa,eps,eta_max,max_jet_order,max_radius_H,n_monomials_H,relno-thetaImages.jetcov: radius dropstheta1·abs(ref)Delta0,Delta_int,dDelta_w,e_kappa,eps,eta_max,max_radius_H,reldrop-ratiokernel():ratio = rSDelta_int,dDelta_w,eps,releta-halfeta_of(): halvesetaDelta0,Delta_int,dDelta_w,eps,eta_max,relfp-constbound_core():fp_const3 → 1eps,relfp-constchanges onlyepsandrel, asT_bound = fp_const·b0 + 3·b1 + b2predicts.no-image, themax_jet_orderchange (20 → 0) only reflects the image cache. It is not a bound.Crash counterexample, with the real program
transfer.py --mutant bogus(any name not inMUTANTS) exits 1 in both modes, with empty stdout and a 660-byte traceback (ca3852f7…) endingAssertionError: unknown mutant.rc -ne 1, so it would count this asmutant bogus rejected. I did not run the loop with this name; that outcome is read from its condition..rcfile missing and fails the step. A realistic route is a mutant renamed or removed fromMUTANTSwhile the workflow is unchanged.What a repair could check (data for the repairer, not a proposal)
MISMATCH against RESULTS.json\n, and empty stderr. The workflow merges both streams into one log, so that check works only if the streams are kept apart or the merged log is compared as a whole.--checkandcontrols.pyto exit 0 in the same step, so a driftedRESULTS.jsonalready fails the job. A repair could add exact stdout (check passed\n) and empty stderr for--check, and empty stderr forcontrols.py. Its exit 0 already impliescontrols: 0 failures.Limits and corrections
drop-ratio5f97e961…,eta-half60886ad3…,fp-constaa9d9018…,no-image765edca5…,no-theta89f6b606….Generated by Claude Code