Spectral cluster closure: unique fixed-d count law via orthogonal soft-layer domination

.github/workflows/c6-cluster-law.yml

@@ -0,0 +1,70 @@
+name: C6 cluster-law checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_cluster_law_20260929/**'
+      - '.github/workflows/c6-cluster-law.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify sources, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/c6_cluster_law_20260929').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json'])
+          if present != expected_names:
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          pins = json.loads((root / 'SOURCE_MAP.json').read_text())
+          for entry in pins['inputs'] + pins['planar_sources_behind_DL']:
+              data = pathlib.Path(entry['path']).read_bytes()
+              blob = hashlib.sha1(b'blob %d\0' % len(data) + data).hexdigest()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or blob != entry['git_blob']:
+                  raise ValueError('consumed source identity mismatch on this tree: ' + entry['path'])
+          script = str(root / 'cluster_law_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          mutants = ['pins-not-critical', 'wrong-pin-hessian', 'drop-sigma-jacobian', 'three-extra-points', 'shear-drop-cubic', 's-bound-constant',
+                     'cross-term-not-small', 'window-closed', 'index-sign']
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script],
+                                   check=True, capture_output=True, timeout=600).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in mutants:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m],
+                                      capture_output=True, timeout=600).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+              rc = subprocess.run([sys.executable, *flags, script, '--mutant', 'unknown'],
+                                  capture_output=True, timeout=600).returncode
+              if rc != 2:
+                  raise RuntimeError('unknown mutant not rejected with rc 2')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code

.github/workflows/c6-marked-fourier.yml

@@ -0,0 +1,50 @@
+name: C6 marked Fourier controls
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_marked_fourier_20260929/**'
+      - '.github/workflows/c6-marked-fourier.yml'
+      - 'frontiers/c6_fourier_cutoff_20260929/PROOF.md'
+      - 'frontiers/c6_palm_route_20260929/PROOF.md'
+      - 'frontiers/c6_palm_route_20260929/SOURCE_MAP.json'
+      - 'frontiers/d5_dimension_lift_20260929/PROOF.md'
+      - 'frontiers/elder_dimension_lift_20260928/PROOF.md'
+      - 'frontiers/c6_rare_cluster_laws_20260929/PROOF.md'
+  push:
+    branches: [main]
+    paths:
+      - 'frontiers/c6_marked_fourier_20260929/**'
+      - '.github/workflows/c6-marked-fourier.yml'
+      - 'frontiers/c6_fourier_cutoff_20260929/PROOF.md'
+      - 'frontiers/c6_palm_route_20260929/PROOF.md'
+      - 'frontiers/c6_palm_route_20260929/SOURCE_MAP.json'
+      - 'frontiers/d5_dimension_lift_20260929/PROOF.md'
+      - 'frontiers/elder_dimension_lift_20260928/PROOF.md'
+      - 'frontiers/c6_rare_cluster_laws_20260929/PROOF.md'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-marked:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Both-mode controls and exact upstream custody
+        run: |
+          set -euo pipefail
+          packet=frontiers/c6_marked_fourier_20260929
+          python -B -S "$packet/verify.py" --output "${RUNNER_TEMP}/marked-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
+          python -B -S -m unittest discover -s "$packet" -p test_sources.py -v
+          python -B -O -S -m unittest discover -s "$packet" -p test_sources.py -v
+          python -B -S "$packet/source_check.py" --repo "${GITHUB_WORKSPACE}"
+          git diff --exit-code

.github/workflows/cluster-exponential-weight.yml

@@ -0,0 +1,40 @@
+name: Cluster exponential weight controls
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/cluster_exponential_weight_20260930/**'
+      - '.github/workflows/cluster-exponential-weight.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'frontiers/cluster_exponential_weight_20260930/**'
+      - '.github/workflows/cluster-exponential-weight.yml'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  exact-exponential:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Finite controls and immutable source custody (not proof acceptance)
+        run: |
+          set -euo pipefail
+          packet=frontiers/cluster_exponential_weight_20260930
+          python -B -S "$packet/verify_packet.py"
+          python -B -O -S "$packet/verify_packet.py"
+          python -B -S "$packet/finite_checks.py" > /tmp/exponential-normal.json
+          python -B -O -S "$packet/finite_checks.py" > /tmp/exponential-optimized.json
+          cmp /tmp/exponential-normal.json /tmp/exponential-optimized.json
+          python -B -S -m unittest discover -s "$packet" -p 'test_*.py' -v
+          python -B -O -S -m unittest discover -s "$packet" -p 'test_*.py' -v
+          git fetch --no-tags origin cbb2f978f9b3e8e2eaca94f3b359b18d7c144f1b 7a44130b41b827577424a73c4feac4cde20b5568
+          python -B -S "$packet/verify_sources.py" --repo-root "$GITHUB_WORKSPACE"
+          git diff --exit-code

.github/workflows/gpdata114-inert-custody.yml

@@ -0,0 +1,52 @@
+name: GP DATA 114 inert custody
+'on':
+  pull_request:
+    paths:
+      - 'imports/gp_data_114_embedded_20260930/**'
+      - '.github/workflows/gpdata114-inert-custody.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'imports/gp_data_114_embedded_20260930/**'
+      - '.github/workflows/gpdata114-inert-custody.yml'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  inert-custody:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify inert bytes and decoder controls only
+        run: |
+          set -euo pipefail
+          packet=imports/gp_data_114_embedded_20260930
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, urllib.parse, urllib.request
+          packet = pathlib.Path('imports/gp_data_114_embedded_20260930')
+          source = json.loads((packet / 'SOURCES.json').read_text())['wrapper']
+          url = 'https://raw.githubusercontent.com/' + source['repository'] + '/' + source['commit'] + '/' + urllib.parse.quote(source['path'], safe='/')
+          raw = urllib.request.urlopen(url, timeout=30).read(65537)
+          if len(raw) != source['bytes'] or hashlib.sha256(raw).hexdigest() != source['sha256']:
+              raise SystemExit('exact public wrapper identity mismatch')
+          pathlib.Path('/tmp/gpdata114-wrapper.txt').write_bytes(raw)
+          PY
+          python -B -S "$packet/verify_packet.py" --packet "$packet" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-packet-normal.json
+          python -B -O -S "$packet/verify_packet.py" --packet "$packet" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-packet-optimized.json
+          cmp /tmp/gpdata114-packet-normal.json /tmp/gpdata114-packet-optimized.json
+          python -B -S "$packet/test_verify_packet.py" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-packet-tests-normal.json
+          python -B -O -S "$packet/test_verify_packet.py" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-packet-tests-optimized.json
+          cmp /tmp/gpdata114-packet-tests-normal.json /tmp/gpdata114-packet-tests-optimized.json
+          python -B -S "$packet/inert_decoder.py" --wrapper-input /tmp/gpdata114-wrapper.txt --verify-existing "$packet" > /tmp/gpdata114-normal.json
+          python -B -O -S "$packet/inert_decoder.py" --wrapper-input /tmp/gpdata114-wrapper.txt --verify-existing "$packet" > /tmp/gpdata114-optimized.json
+          cmp /tmp/gpdata114-normal.json /tmp/gpdata114-optimized.json
+          python -B -S "$packet/test_inert_decoder.py" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-tests-normal.json
+          python -B -O -S "$packet/test_inert_decoder.py" --wrapper-input /tmp/gpdata114-wrapper.txt > /tmp/gpdata114-tests-optimized.json
+          cmp /tmp/gpdata114-tests-normal.json /tmp/gpdata114-tests-optimized.json
+          git diff --exit-code

.github/workflows/planar-cubic-cluster.yml

@@ -0,0 +1,31 @@
+name: Planar cubic cluster checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/planar_cubic_cluster_20260929/**'
+      - '.github/workflows/planar-cubic-cluster.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify packet, both sources and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/planar_cubic_cluster_20260929/verify.py
+          git diff --exit-code

.github/workflows/spectral-cluster-closure.yml

@@ -0,0 +1,36 @@
+name: Spectral cluster closure checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/spectral_cluster_closure_20260929/**'
+      - '.github/workflows/spectral-cluster-closure.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public non-main source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags --depth=1 origin bfcc67dc8957b3ed1fbb789e5a0305e98d7359c8
+          git fetch --no-tags --depth=1 origin f0d11805854b1938a2f89235ec590a37b04a7cb9
+      - name: Verify every source and replay both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/spectral_cluster_closure_20260929/verify.py
+          git diff --exit-code