Derive the elder-selected radius–lifetime law at the exact parent interface

.github/workflows/c6-remote-coefficient-numerics.yml

@@ -0,0 +1,67 @@
+name: C6 remote coefficient numerics (replay)
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_remote_coefficient_numerics_20260930/**'
+      - '.github/workflows/c6-remote-coefficient-numerics.yml'
+      - 'imports/lifetime_parent_20260925/UNIFORM_MATRIX_CAP_AND_LIFETIME.md'
+      - 'frontiers/remote_window_20260924/PROOF.md'
+      - 'frontiers/c6_cluster_law_20260929/PROOF.md'
+      - 'frontiers/remote_collision_20260928/PROOF.md'
+      - 'frontiers/c6_cluster_coefficients_numerics_20260930/RESULTS.json'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-controls-and-replay:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify manifest and main-resident pins, replay exact controls and sample kernels, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/c6_remote_coefficient_numerics_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          if present != sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json']):
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          pins = json.loads((root / 'SOURCE_MAP.json').read_text())
+          for entry in pins['sources']:
+              if not entry['current_required']:
+                  continue
+              data = pathlib.Path(entry['path']).read_bytes()
+              blob = hashlib.sha1(b'blob %d\0' % len(data) + data).hexdigest()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or blob != entry['git_blob']:
+                  raise ValueError('consumed source identity mismatch on this tree: ' + entry['path'])
+          script = str(root / 'remote.py')
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script, '--check'], cwd=root, capture_output=True, timeout=900)
+              if out.returncode != 0:
+                  raise RuntimeError('check failed under ' + ' '.join(flags) + ': ' + out.stdout.decode()[-400:])
+              for m in ['hermite-sign', 'det-abs', 'weight-indicator']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--check', '--mutant', m], cwd=root, capture_output=True, timeout=900).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'certified': False}))
+          PY
+          git diff --exit-code

.github/workflows/d2-remainder-fulldepth-review.yml

@@ -0,0 +1,64 @@
+name: D2 remainder full-depth nonauthor review checks
+
+'on':
+  pull_request:
+    paths:
+      - 'reviews/d2_remainder_full_depth_claude_20260930/**'
+      - '.github/workflows/d2-remainder-fulldepth-review.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify record tree, reviewed source identities, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('reviews/d2_remainder_full_depth_claude_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest['files']] + ['SOURCE_FILES.json'])
+          if present != expected_names:
+              raise ValueError('record tree differs from manifest: ' + repr(present))
+          for entry in manifest['files']:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular file required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('record file identity mismatch: ' + entry['path'])
+          for entry in manifest['reviewed_sources']:
+              data = pathlib.Path(entry['path']).read_bytes()
+              framed = b'blob ' + str(len(data)).encode() + b'\0' + data
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or hashlib.sha1(framed).hexdigest() != entry['blob']:
+                  raise ValueError('reviewed source drifted: ' + entry['path'])
+          script = str(root / 'remainder_review_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script], check=True, capture_output=True, timeout=300).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in manifest['mutants']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m], capture_output=True, timeout=300).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+              rc = subprocess.run([sys.executable, *flags, script, '--mutant', 'M9'], capture_output=True, timeout=300).returncode
+              if rc != 2:
+                  raise RuntimeError('unknown mutant label not rejected with exit 2')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code

.github/workflows/elder-partner-extremes.yml

@@ -0,0 +1,39 @@
+name: Elder-selected extreme partner checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/elder_partner_extremes_20260930/**'
+      - '.github/workflows/elder-partner-extremes.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source commits
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 56a7904f9ad7d409c31e23195c0e7eeab230613a
+          git fetch --no-tags origin 79f18f0cb318fceccd5bdf4e6dad29815165bc7d
+          git fetch --no-tags origin 9c6a73489c5ed2465a3cf65dcc950eeeae074b05
+      - name: Verify five source identities, packet and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/elder_partner_extremes_20260930/verify.py
+          git diff --exit-code

.github/workflows/extreme-cluster-sampling.yml

@@ -0,0 +1,38 @@
+name: Extreme whole-cluster sampling checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/extreme_cluster_sampling_20260930/**'
+      - '.github/workflows/extreme-cluster-sampling.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 382c0f9ff2281f43651ddbdf2e9b36dd52e2c6bf
+          git fetch --no-tags origin bfcc67dc8957b3ed1fbb789e5a0305e98d7359c8
+      - name: Verify historical sources, packet and exact controls
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/extreme_cluster_sampling_20260930/verify.py
+          git diff --exit-code

.github/workflows/fixed-r-inverse-lifetime.yml

@@ -0,0 +1,36 @@
+name: Fixed-r inverse-lifetime checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/fixed_r_inverse_lifetime_20260930/**'
+      - '.github/workflows/fixed-r-inverse-lifetime.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public parent model
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 7a1cb09a9d58d179393e6d29146252f714b9c9bf
+      - name: Verify source, packet and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/fixed_r_inverse_lifetime_20260930/verify.py
+          git diff --exit-code

.github/workflows/lifetime-moment-boundary.yml

@@ -0,0 +1,33 @@
+name: Lifetime and radial moment exact controls
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/lifetime_moment_boundary_20260930/**'
+      - 'reviews/radial_moment_corollaries_20260930/**'
+      - '.github/workflows/lifetime-moment-boundary.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'frontiers/lifetime_moment_boundary_20260930/**'
+      - 'reviews/radial_moment_corollaries_20260930/**'
+      - '.github/workflows/lifetime-moment-boundary.yml'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  exact-moments:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - run: python -B -S frontiers/lifetime_moment_boundary_20260930/verify.py
+      - name: Receipt and frozen-source regression controls
+        run: |
+          python -B -S -m unittest discover -s frontiers/lifetime_moment_boundary_20260930 -p 'test_*.py' -v
+          python -B -O -S -m unittest discover -s frontiers/lifetime_moment_boundary_20260930 -p 'test_*.py' -v
+      - run: git diff --exit-code

.github/workflows/radial-rate.yml

@@ -0,0 +1,38 @@
+name: Microscopic radial-rate checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/radial_rate_20260930/**'
+      - '.github/workflows/radial-rate.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 382c0f9ff2281f43651ddbdf2e9b36dd52e2c6bf
+          git fetch --no-tags origin 7a1cb09a9d58d179393e6d29146252f714b9c9bf
+      - name: Verify sources, packet and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/radial_rate_20260930/verify.py
+          git diff --exit-code

.github/workflows/remainder-vanishing.yml

@@ -0,0 +1,73 @@
+name: Remainder vanishing exact controls
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/remainder_vanishing_20260930/**'
+      - '.github/workflows/remainder-vanishing.yml'
+      # bound sources (consumed and cited_only in SOURCES.json)
+      - 'frontiers/three_fronts_20260924/LIFETIME_REMAINDER.md'
+      - 'imports/lifetime_parent_20260925/UNIFORM_MATRIX_CAP_AND_LIFETIME.md'
+      - 'imports/lifetime_parent_20260925/ERRATUM_CONGRUENCE.md'
+      - 'reviews/d1_section9_borel_repair_20260925/REPAIR.md'
+      - 'reviews/d1_chain_reconciliation_20260928/RECONCILIATION.md'
+      - 'frontiers/c7_total_bounded_20260929/PROOF.md'
+      - 'frontiers/unrestricted_selection_difference_20260929/PROOF.md'
+      - 'frontiers/c7_zero_gap_limit_20260929/PROOF.md'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-controls:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify sources, replay both modes, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/remainder_vanishing_20260930').resolve()
+          manifest = json.loads((root / 'SOURCES.json').read_text())
+          present = sorted(p.name for p in root.iterdir())
+          expected_names = sorted([e['path'] for e in manifest['files']] + ['SOURCES.json'])
+          if present != expected_names:
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest['files']:
+              path = root / entry['path']
+              if path.is_symlink():
+                  raise ValueError('symlink: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('packet file identity mismatch: ' + entry['path'])
+          for entry in manifest['consumed'] + manifest['cited_only']:
+              data = pathlib.Path(entry['path']).read_bytes()
+              framed = b'blob ' + str(len(data)).encode() + b'\0' + data
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or hashlib.sha1(framed).hexdigest() != entry['git_blob']:
+                  raise ValueError('merged source drifted: ' + entry['path'])
+          script = str(root / 'even_contact_check.py')
+          expected = (root / 'RESULTS.json').read_bytes()
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script], check=True, capture_output=True, timeout=600).stdout
+              if out != expected:
+                  raise RuntimeError('output differs from RESULTS.json under ' + ' '.join(flags))
+              for m in manifest['mutants']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--mutant', m], capture_output=True, timeout=600).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+              rc = subprocess.run([sys.executable, *flags, script, '--mutant', 'M9'], capture_output=True, timeout=600).returncode
+              if rc != 2:
+                  raise RuntimeError('unknown mutant label not rejected with exit 2')
+          print(json.dumps({'scientific_effect': 'NONE', 'mathematical_acceptance': False}))
+          PY
+          git diff --exit-code