Fixed-separation lifetime tail and sharp inverse-moment threshold 2/3

.github/workflows/c6-remote-coefficient-numerics.yml

@@ -0,0 +1,67 @@
+name: C6 remote coefficient numerics (replay)
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/c6_remote_coefficient_numerics_20260930/**'
+      - '.github/workflows/c6-remote-coefficient-numerics.yml'
+      - 'imports/lifetime_parent_20260925/UNIFORM_MATRIX_CAP_AND_LIFETIME.md'
+      - 'frontiers/remote_window_20260924/PROOF.md'
+      - 'frontiers/c6_cluster_law_20260929/PROOF.md'
+      - 'frontiers/remote_collision_20260928/PROOF.md'
+      - 'frontiers/c6_cluster_coefficients_numerics_20260930/RESULTS.json'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-controls-and-replay:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Verify manifest and main-resident pins, replay exact controls and sample kernels, reject mutants
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          python -B -S - <<'PY'
+          import hashlib, json, pathlib, subprocess, sys
+          root = pathlib.Path('frontiers/c6_remote_coefficient_numerics_20260930').resolve()
+          manifest = json.loads((root / 'SOURCE_FILES.json').read_text())['files']
+          present = sorted(p.name for p in root.iterdir())
+          if present != sorted([e['path'] for e in manifest] + ['SOURCE_FILES.json']):
+              raise ValueError('packet tree differs from manifest: ' + repr(present))
+          for entry in manifest:
+              path = root / entry['path']
+              if pathlib.PurePosixPath(entry['path']).name != entry['path'] or path.is_symlink():
+                  raise ValueError('flat regular source required: ' + entry['path'])
+              data = path.read_bytes()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256']:
+                  raise ValueError('source identity mismatch: ' + entry['path'])
+          pins = json.loads((root / 'SOURCE_MAP.json').read_text())
+          for entry in pins['sources']:
+              if not entry['current_required']:
+                  continue
+              data = pathlib.Path(entry['path']).read_bytes()
+              blob = hashlib.sha1(b'blob %d\0' % len(data) + data).hexdigest()
+              if len(data) != entry['bytes'] or hashlib.sha256(data).hexdigest() != entry['sha256'] or blob != entry['git_blob']:
+                  raise ValueError('consumed source identity mismatch on this tree: ' + entry['path'])
+          script = str(root / 'remote.py')
+          for flags in (['-B', '-S'], ['-B', '-O', '-S']):
+              out = subprocess.run([sys.executable, *flags, script, '--check'], cwd=root, capture_output=True, timeout=900)
+              if out.returncode != 0:
+                  raise RuntimeError('check failed under ' + ' '.join(flags) + ': ' + out.stdout.decode()[-400:])
+              for m in ['hermite-sign', 'det-abs', 'weight-indicator']:
+                  rc = subprocess.run([sys.executable, *flags, script, '--check', '--mutant', m], cwd=root, capture_output=True, timeout=900).returncode
+                  if rc != 1:
+                      raise RuntimeError('mutant ' + m + ' not rejected')
+          print(json.dumps({'scientific_effect': 'NONE', 'certified': False}))
+          PY
+          git diff --exit-code

.github/workflows/extreme-cluster-sampling.yml

@@ -0,0 +1,38 @@
+name: Extreme whole-cluster sampling checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/extreme_cluster_sampling_20260930/**'
+      - '.github/workflows/extreme-cluster-sampling.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 382c0f9ff2281f43651ddbdf2e9b36dd52e2c6bf
+          git fetch --no-tags origin bfcc67dc8957b3ed1fbb789e5a0305e98d7359c8
+      - name: Verify historical sources, packet and exact controls
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/extreme_cluster_sampling_20260930/verify.py
+          git diff --exit-code

.github/workflows/fixed-r-inverse-lifetime.yml

@@ -0,0 +1,36 @@
+name: Fixed-r inverse-lifetime checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/fixed_r_inverse_lifetime_20260930/**'
+      - '.github/workflows/fixed-r-inverse-lifetime.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public parent model
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 7a1cb09a9d58d179393e6d29146252f714b9c9bf
+      - name: Verify source, packet and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/fixed_r_inverse_lifetime_20260930/verify.py
+          git diff --exit-code

.github/workflows/radial-rate.yml

@@ -0,0 +1,38 @@
+name: Microscopic radial-rate checks
+
+'on':
+  pull_request:
+    paths:
+      - 'frontiers/radial_rate_20260930/**'
+      - '.github/workflows/radial-rate.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  exact-and-source:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        with:
+          python-version: '3.11.16'
+      - name: Fetch exact public source objects
+        run: |
+          set -euo pipefail
+          git fetch --no-tags origin 80059a97cd8eb32d1a17a0ad9cb22cb2a0d7b337
+          git fetch --no-tags origin 382c0f9ff2281f43651ddbdf2e9b36dd52e2c6bf
+          git fetch --no-tags origin 7a1cb09a9d58d179393e6d29146252f714b9c9bf
+      - name: Verify sources, packet and both Python modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+          GIT_NO_REPLACE_OBJECTS: '1'
+        run: |
+          set -euo pipefail
+          python -B -S frontiers/radial_rate_20260930/verify.py
+          git diff --exit-code