Identify planar elder partners and their failure lifetime law

.github/workflows/c6-cluster-coefficients-numerics.yml

@@ -0,0 +1,62 @@
+name: C6 cluster coefficient numerics (replay)
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_cluster_coefficients_numerics_20260930/**'
+      - '.github/workflows/c6-cluster-coefficients-numerics.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-controls-and-replay:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify manifest and main-resident pins, replay exact controls and GH40, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/c6_cluster_coefficients_numerics_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          if present != sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json']):
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          pins = json.loads((root / 'SOURCE_MAP.json').read_text())
+          for entry in pins['sources']:
+              if not entry['current_required']:
+                  continue
+              data = pathlib.Path(entry['path']).read_bytes()
+              blob = hashlib.sha1(b'blob %d\0' % len(data) + data).hexdigest()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or blob != entry['git_blob']:
+                  raise ValueError('consumed source identity mismatch on this tree: ' + entry['path'])
+          script = str(root / 'coefficients.py')
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script, '--check'], cwd=root, capture_output=True, timeout=900)
+              if out.returncode != 0:
+                  raise RuntimeError('check failed under ' + ' '.join(flags) + ': ' + out.stdout.decode()[-400:])
+              for m in ['cubic-sign', 'antiderivative', 'typed-boundary']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--check', '--mutant', m], cwd=root, capture_output=True, timeout=900).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'certified': False}))
+          PY
+          git diff --exit-code

.github/workflows/c6-remote-coefficient-numerics.yml

@@ -0,0 +1,67 @@
+name: C6 remote coefficient numerics (replay)
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_remote_coefficient_numerics_20260930/**'
+      - '.github/workflows/c6-remote-coefficient-numerics.yml'
+      - 'imports/lifetime_parent_20260925/UNIFORM_MATRIX_CAP_AND_LIFETIME.md'
+      - 'frontiers/remote_window_20260924/PROOF.md'
+      - 'frontiers/c6_cluster_law_20260929/PROOF.md'
+      - 'frontiers/remote_collision_20260928/PROOF.md'
+      - 'frontiers/c6_cluster_coefficients_numerics_20260930/RESULTS.json'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-controls-and-replay:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify manifest and main-resident pins, replay exact controls and sample kernels, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/c6_remote_coefficient_numerics_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          if present != sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json']):
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          pins = json.loads((root / 'SOURCE_MAP.json').read_text())
+          for entry in pins['sources']:
+              if not entry['current_required']:
+                  continue
+              data = pathlib.Path(entry['path']).read_bytes()
+              blob = hashlib.sha1(b'blob %d\0' % len(data) + data).hexdigest()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or blob != entry['git_blob']:
+                  raise ValueError('consumed source identity mismatch on this tree: ' + entry['path'])
+          script = str(root / 'remote.py')
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script, '--check'], cwd=root, capture_output=True, timeout=900)
+              if out.returncode != 0:
+                  raise RuntimeError('check failed under ' + ' '.join(flags) + ': ' + out.stdout.decode()[-400:])
+              for m in ['hermite-sign', 'det-abs', 'weight-indicator']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--check', '--mutant', m], cwd=root, capture_output=True, timeout=900).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'certified': False}))
+          PY
+          git diff --exit-code

.github/workflows/c6-residual-closure.yml

@@ -0,0 +1,72 @@
+name: C6 residual closure checks
+
+'on':
+  pull_request:
+    paths:
+      - 'reviews/c6_residual_closure_20260930/**'
+      - '.github/workflows/c6-residual-closure.yml'
+      - 'frontiers/spectral_cluster_closure_20260929/PROOF.md'
+      - 'frontiers/spectral_cluster_closure_20260929/REVIEW_RECORD.md'
+      - 'frontiers/spectral_cluster_closure_20260929/README.md'
+      - 'frontiers/c6_cluster_law_20260929/PROOF.md'
+      - 'frontiers/c6_cluster_law_20260929/README.md'
+      - 'frontiers/c6_cluster_law_20260929/SOURCE_MAP.json'
+      - 'frontiers/c6_palm_route_20260929/PROOF.md'
+      - 'frontiers/two_scale_cluster_geometry_20260929/TWO_SCALE_LAW.md'
+      - 'frontiers/two_scale_cluster_geometry_20260929/REVIEW_RECORD.md'
+      - 'frontiers/two_scale_cluster_geometry_20260929/REVIEW_RECORD.json'
+      - 'frontiers/downstream_gate_20260925/GRAPH.json'
+      - 'frontiers/downstream_gate_20260925/SELECTOR_REGION.json'
+      - 'frontiers/downstream_gate_20260925/hard_gate.py'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify sources, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('reviews/c6_residual_closure_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json'])
+          if present != expected_names:
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          script = str(root / 'residual_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          mutants = ['allow-symlink', 'no-hash', 'stale-fingerprint', 'drop-required-edge', 'executed-flag', 'controlling-true', 'tail-reversed', 'pair-identity-broken', 'route-c-broken', 'drop-review-needle', 'installed-drift', 'snapshot-omitted', 'record-unreviewed', 'reviewed-text-drift']
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script],
+                                   check=True, capture_output=True, timeout=300).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in mutants:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m],
+                                      capture_output=True, timeout=300).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code

.github/workflows/c6-witness-collision-reconciliation.yml

@@ -0,0 +1,74 @@
+name: C6 witness-collision reconciliation checks
+
+'on':
+  pull_request:
+    paths:
+      - 'reviews/c6_witness_collision_reconciliation_20260929/**'
+      - '.github/workflows/c6-witness-collision-reconciliation.yml'
+      - 'frontiers/c6_*/**'
+      - 'frontiers/d5_dimension_lift_20260929/**'
+      - 'frontiers/elder_dimension_lift_20260928/**'
+      - 'frontiers/remote_collision_20260928/**'
+      - 'frontiers/remote_window_20260924/**'
+      - 'frontiers/downstream_gate_20260925/GRAPH.json'
+      - 'frontiers/downstream_gate_20260925/SELECTOR_REGION.json'
+      - 'imports/lifetime_parent_20260925/**'
+      - 'reviews/d5_reconciliation_20260929/**'
+      - 'reviews/c6_fourier_completion_20260929/**'
+      - 'reviews/elder_dimension_lift_claude_20260928/**'
+      - 'reviews/d5_remote_collision_grok_20260928/**'
+      - 'reviews/d5_offpin_second_moment_20260928/**'
+      - 'PROOF_INDEX.md'
+      - 'reviews/candidates_pending_20260928/CANDIDATES.md'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify sources, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('reviews/c6_witness_collision_reconciliation_20260929').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json'])
+          if present != expected_names:
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          script = str(root / 'reconciliation_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          mutants = ['allow-symlink', 'no-hash', 'drop-edge', 'stale-fingerprint', 'executed-flag', 'close-residual', 'drop-lower-bound', 'regional-strict', 'clone-live-node', 'open-cell-left']
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script],
+                                   check=True, capture_output=True, timeout=300).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in mutants:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m],
+                                      capture_output=True, timeout=300).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code

.github/workflows/d2-remainder-fulldepth-review.yml

@@ -0,0 +1,64 @@
+name: D2 remainder full-depth nonauthor review checks
+
+'on':
+  pull_request:
+    paths:
+      - 'reviews/d2_remainder_full_depth_claude_20260930/**'
+      - '.github/workflows/d2-remainder-fulldepth-review.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify record tree, reviewed source identities, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('reviews/d2_remainder_full_depth_claude_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest['files']] + ['SOURCE_FILES.json'])
+          if present != expected_names:
+              raise ValueError('record tree differs from manifest: ' + repr(present))
+          for entry in manifest['files']:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular file required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('record file identity mismatch: ' + entry['path'])
+          for entry in manifest['reviewed_sources']:
+              data = pathlib.Path(entry['path']).read_bytes()
+              framed = b'blob ' + str(len(data)).encode() + b'\0' + data
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or hashlib.sha1(framed).hexdigest() != entry['blob']:
+                  raise ValueError('reviewed source drifted: ' + entry['path'])
+          script = str(root / 'remainder_review_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script], check=True, capture_output=True, timeout=300).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in manifest['mutants']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m], capture_output=True, timeout=300).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+              rc = subprocess.run([sys.executable, *flags, script, '--mutant', 'M9'], capture_output=True, timeout=300).returncode
+              if rc != 2:
+                  raise RuntimeError('unknown mutant label not rejected with exit 2')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code

.github/workflows/extreme-cluster-sampling.yml

@@ -0,0 +1,38 @@
+name: Extreme whole-cluster sampling checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/extreme_cluster_sampling_20260930/**'
+      - '.github/workflows/extreme-cluster-sampling.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 382c0f9ff2281f43651ddbdf2e9b36dd52e2c6bf
+          git fetch --no-tags origin bfcc67dc8957b3ed1fbb789e5a0305e98d7359c8
+      - name: Verify historical sources, packet and exact controls
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/extreme_cluster_sampling_20260930/verify.py
+          git diff --exit-code