D0/D7 crosswalk allowlist — sandbox coordination (IDLE nav P1)

experiments/README.md

@@ -0,0 +1,14 @@
+# Private experiments
+
+Sandbox-only. **Scientific effect: NONE.** Do not export paths/hashes to public catalogs.
+
+| Path | Role |
+|---|---|
+| `cone_v1/` | Exploratory synthetic cone probe (`--self-check`); not enclosure |
+| `d0_crosswalk_allowlist_20260925/` | D0 CI unblock handoff for main PR87; prefer main #92 outside-packet |
+| `d7_drift_scan_20260925/` | D7 duplicate-surface / tip-drift scan after #86 dispatch |
+| `math_pr8_eligibility_fix_20260925/` | Portable fix for Math- PR8 fail-open controlling promotion |
+| `peer_status_20260925/` | Live peer PR check snapshot (`refresh_peer_status.py`) |
+| `hard_gate_v1/` | Pedagogical #90 gate + Math- PR8 peer probe; not the live register |
+
+Canonical eng hard-gate: [Math- PR #8](https://github.com/d6g8k5htny-coder/Math-/pull/8).

experiments/cone_v1/cone_probe.py

@@ -24,5 +24,26 @@ def run(samples=200000,seed=20260924):
             'role':'exploratory sanity check only','certified':False}
 
 
-if __name__=='__main__':
-    print(json.dumps(run(),indent=2,sort_keys=True))
+
+def self_check(tol_se=8.0):
+    """Bounded private sanity only. Not enclosure, not discharge, not review.
+    Requires |mean-reference| <= tol_se * sample_standard_error on the fixed seed.
+    """
+    out = run()
+    if out['certified'] is not False:
+        raise AssertionError('certified must remain false')
+    if out['role'] != 'exploratory sanity check only':
+        raise AssertionError('role drift')
+    gap = abs(out['mean'] - out['reference'])
+    budget = tol_se * out['sample_standard_error']
+    if gap > budget:
+        raise AssertionError(f'exploratory gap {gap} exceeds {budget}')
+    return {'ok': True, 'gap': gap, 'budget': budget, 'certified': False}
+
+
+if __name__ == '__main__':
+    import sys
+    if len(sys.argv) > 1 and sys.argv[1] == '--self-check':
+        print(json.dumps(self_check(), indent=2, sort_keys=True))
+    else:
+        print(json.dumps(run(), indent=2, sort_keys=True))

experiments/d0_crosswalk_allowlist_20260925/APPLY.md

@@ -0,0 +1,70 @@
+# Apply — unblock main PR #87 (`math_status_check`)
+
+# SUPERSEDED for primary path (2026-09-25)
+
+[main PR #87](https://github.com/d6g8k5htny-coder/main/pull/87) was **closed** by the owner
+as superseded by [main PR #92](https://github.com/d6g8k5htny-coder/main/pull/92)
+(outside-packet placement). Keep this allowlist patch only as historical
+fallback if a tip must retain the file inside `docs/math_status/`.
+
+
+**Scientific effect: NONE.** `lemma_closed` stays false. This is eng hygiene for
+issue [#86](https://github.com/d6g8k5htny-coder/main/issues/86) D0, not review
+acceptance and not certificate discharge.
+
+## Why
+
+ChatGPT draft [PR #87](https://github.com/d6g8k5htny-coder/main/pull/87) adds
+`docs/math_status/DOWNSTREAM_CROSSWALK_20260925.md`. `tools/math_status_check.py`
+fail-closes on unexpected packet files, so `verify` is red:
+
+`PROBLEM packet: unexpected files ['DOWNSTREAM_CROSSWALK_20260925.md']`
+
+A second trap: the sentence `None sets D3 lemma_closed=true.` matches the
+checker's `ASSIGN_TRUE` regex even as a negation.
+
+## Who should apply
+
+This Cursor sandbox run cannot push `main`/`trial` (App 403) and cannot post
+issue/PR comments (403). A peer with write on `main` — ideally the PR #87
+author (ChatGPT / Codex connector) or an owner durable `MAIN_PUSH_TOKEN` —
+should apply on branch `chatgpt/downstream-crosswalk-20260925`.
+
+## Steps
+
+```bash
+git clone https://github.com/d6g8k5htny-coder/main.git
+cd main
+git fetch origin chatgpt/downstream-crosswalk-20260925
+git checkout chatgpt/downstream-crosswalk-20260925
+git apply path/to/pr87_unblock.patch
+python3 tools/math_status_check.py
+# expect: problems=0 disposition=OPEN_HOLD lemma_closed=false
+git commit -am "eng: allow D0 crosswalk auxiliary without promotion"
+git push
+```
+
+## What the patch does
+
+1. Lists `DOWNSTREAM_CROSSWALK_20260925.md` as an explicit classification
+   auxiliary (not a transcription; no `PACKET.json` digest pin).
+2. Requires honesty phrases on that file.
+3. Rewords the negation so `ASSIGN_TRUE` does not false-positive.
+
+## Explicit non-claims
+
+- Does not merge PR #87.
+- Does not classify any historical wall as PROVED_REVIEWED.
+- Does not touch Drive vault `99_DO_NOT_OPEN` (#91 sole-auditor freeze).
+- Does not flip `lemma_closed`, `certified_C_H`, prizes, or FREEZE.
+
+## Preferred peer path (2026-09-25 update)
+
+A sibling Cursor rescue already opened:
+
+- [main PR #92](https://github.com/d6g8k5htny-coder/main/pull/92) — place crosswalk
+  **outside** `docs/math_status/` (preferred; keeps the closed packet closed)
+- [main PR #93](https://github.com/d6g8k5htny-coder/main/pull/93) — default-home nav pointer
+
+Use this allowlist patch only if #92 cannot land and the file must remain inside
+the packet. Do not race both approaches onto the same tip without coordination.

experiments/d0_crosswalk_allowlist_20260925/COORDINATION.json

@@ -0,0 +1,87 @@
+{
+  "as_of_utc": "2026-09-25T17:23:11Z",
+  "sandbox_run": "bc-01a0d95c-b9ca-70ce-864d-99d51b2a8fb0",
+  "sandbox_pr": "https://github.com/d6g8k5htny-coder/sandbox/pull/4",
+  "accepted_lane": {
+    "issue": "https://github.com/d6g8k5htny-coder/main/issues/86",
+    "lane": "Cursor / integration D0+D7",
+    "status": "accepted_this_run",
+    "evidence": "portable patch + local math_status_check problems=0 + sandbox PR2"
+  },
+  "peer_lanes": {
+    "chatgpt_codex": {
+      "active_surface": "main PR87 D0 crosswalk draft",
+      "blocker_found": "math_status_check unexpected file; peer Cursor #92 relocates crosswalk outside packet",
+      "handoff": "Prefer main PR #92/#93 (outside-packet + default-home nav). sandbox allowlist patch is alternate/fallback only.",
+      "note": "Do not race PR87 body rewrite; eng allowlist only"
+    },
+    "claude": {
+      "offered": "D1 (#63) or D2 (#67) analytic review",
+      "fresh_acceptance_seen": false
+    },
+    "codex_symbolic": {
+      "offered": "D5 Math- PR7 divided-difference ledger slice",
+      "fresh_acceptance_seen": false
+    }
+  },
+  "hard_gates": {
+    "issue_90": "downstream closure + reverse-impact before upstream promotion",
+    "issue_91": "99_DO_NOT_OPEN sole-auditor freeze \u2014 no sandbox agent vault browse/mutate"
+  },
+  "this_env_limits": {
+    "repos_in_environment": [
+      "github.com/d6g8k5htny-coder/sandbox"
+    ],
+    "can_push": [
+      "sandbox"
+    ],
+    "cannot_push": [
+      "main",
+      "trial",
+      "Math-",
+      "governance-",
+      "google-drive",
+      "meta-framework",
+      "query-"
+    ],
+    "cannot_comment_github": true
+  },
+  "scientific_effect": "NONE",
+  "lemma_closed": false,
+  "peer_cursor_rescue": {
+    "pr92": "https://github.com/d6g8k5htny-coder/main/pull/92",
+    "pr92_ci": "SUCCESS verify+navigation+loss-only @ db0645f",
+    "pr93": "closed",
+    "math_gate": "landed on Math- main with CONTROLLING_ELIGIBLE"
+  },
+  "hard_gate_prototype": {
+    "path": "experiments/hard_gate_v1",
+    "issue": 90,
+    "scientific_effect": "NONE",
+    "canonical": false,
+    "aligns_to": "Math- PR8"
+  },
+  "canonical_hard_gate": {
+    "math_pr": "https://github.com/d6g8k5htny-coder/Math-/pull/8",
+    "main_crosswalk_pr": "https://github.com/d6g8k5htny-coder/main/pull/92",
+    "main_nav_pr": "https://github.com/d6g8k5htny-coder/main/pull/93",
+    "sandbox_role": "pedagogical_negative_controls_only"
+  },
+  "unblock_strategies": {
+    "preferred_outside_packet": {
+      "main_pr": 92,
+      "companion_nav_pr": 93,
+      "status": "CI verify in_progress; nav/loss-only green; local math_status problems=0"
+    },
+    "allowlist_fallback_sandbox": {
+      "path": "experiments/d0_crosswalk_allowlist_20260925/pr87_unblock.patch",
+      "style": "AUXILIARY_CLASSIFICATION (no PACKET digest pin)"
+    },
+    "allowlist_math_pr8": {
+      "math_pr": 8,
+      "path_on_math": "frontiers/downstream_gate_20260925/D0_CI_UNBLOCK.md",
+      "style": "TRANSCRIPTION + PACKET digest pin",
+      "note": "Do not apply both allowlist styles without reconciling; prefer #92 outside-packet"
+    }
+  }
+}

experiments/d0_crosswalk_allowlist_20260925/README.md

@@ -0,0 +1,14 @@
+# Private eng package — D0 crosswalk allowlist (2026-09-25)
+
+Private sandbox handoff for multi-agent downstream-first work (#86 Cursor
+D0/D7 lane). **Not** a public catalog entry. **Not** research-status promotion.
+
+| File | Role |
+|---|---|
+| `APPLY.md` | Peer apply instructions for main PR #87 |
+| `pr87_unblock.patch` | Exact eng patch verified locally (`problems=0`) |
+| `VERIFY.json` | Machine-readable non-claims + scope |
+| `COORDINATION.json` | Peer lane status snapshot for this run |
+
+Keep sandbox private. Do not copy paths/hashes into public `google-drive`,
+`meta-framework`, or `query-`.

experiments/d0_crosswalk_allowlist_20260925/VERIFY.json

@@ -0,0 +1,24 @@
+{
+  "scientific_effect": "NONE",
+  "lemma_closed": false,
+  "certified_C_H": false,
+  "prizes_solved": false,
+  "independence_credit": 0,
+  "role": "engineering unblock for main PR87 / issue 86 D0 lane",
+  "target_repo": "d6g8k5htny-coder/main",
+  "target_pr": 87,
+  "target_issue": 86,
+  "target_branch": "chatgpt/downstream-crosswalk-20260925",
+  "target_head_sha": "3d4969ab40d36a38ebf6ea1c3608035a706a7576",
+  "local_math_status_check": {
+    "problems": 0,
+    "disposition": "OPEN_HOLD",
+    "lemma_closed": false
+  },
+  "sandbox_agent": "bc-01a0d95c-b9ca-70ce-864d-99d51b2a8fb0",
+  "write_scope": "sandbox_only_this_run",
+  "main_push": "403_cursor_bot",
+  "trial_push": "403_cursor_bot",
+  "issue_comment": "403_cursor_bot",
+  "note": "Peer with main write (ChatGPT PR87 author or durable MAIN_PUSH_TOKEN) should apply pr87_unblock.patch on the PR87 branch and re-run tools/math_status_check.py. Do not flip lemma_closed."
+}

experiments/d0_crosswalk_allowlist_20260925/apply_verify.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Local verify only. Does not push. Scientific effect NONE.
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")" && pwd)"
+WORK="${1:-/tmp/pr87-apply-verify}"
+TOKEN="${GH_TOKEN:-${GITHUB_TOKEN:-}}"
+if [[ -z "$TOKEN" ]]; then
+  TOKEN="$(gh auth token)"
+fi
+rm -rf "$WORK"
+git clone --depth 1 -b chatgpt/downstream-crosswalk-20260925 \
+  "https://x-access-token:${TOKEN}@github.com/d6g8k5htny-coder/main.git" "$WORK"
+cd "$WORK"
+echo "BEFORE:"
+python3 tools/math_status_check.py | tail -2 || true
+git apply "$ROOT/pr87_unblock.patch"
+echo "AFTER:"
+python3 tools/math_status_check.py | tee /tmp/math_status_after.txt
+grep -q 'problems=0' /tmp/math_status_after.txt
+grep -q 'lemma_closed=false' /tmp/math_status_after.txt
+echo "OK apply_verify; scientific_effect=NONE"

experiments/d0_crosswalk_allowlist_20260925/pr87_unblock.patch

@@ -0,0 +1,78 @@
+diff --git a/docs/math_status/DOWNSTREAM_CROSSWALK_20260925.md b/docs/math_status/DOWNSTREAM_CROSSWALK_20260925.md
+index ecc530f..0994315 100644
+--- a/docs/math_status/DOWNSTREAM_CROSSWALK_20260925.md
++++ b/docs/math_status/DOWNSTREAM_CROSSWALK_20260925.md
+@@ -37,7 +37,7 @@ A newer theorem can bypass a historical-route requirement only when its own stat
+ 3. RN-FIXED-REMOTE-WINDOW-20260924-v1 / main #76: actual three-determinant O(r^5) numerator and O(r^3) expected count for the between-pin height window at fixed positive spatial distance.
+ 4. RN-MESOSCOPIC-ANNULUS-REDUCTION-20260925-v1 / Math- PR7 draft: reduction for x=r y on fixed scaled annuli; exact divided-difference determinant ledger still open.
+
+-None is a replacement carrier for the historical ABSENT files. None sets D3 lemma_closed=true.
++None is a replacement carrier for the historical ABSENT files. None sets D3 lemma_closed to true.
+
+ ## Downstream consequence
+
+diff --git a/tools/math_status_check.py b/tools/math_status_check.py
+index 3522714..6e2c038 100644
+--- a/tools/math_status_check.py
++++ b/tools/math_status_check.py
+@@ -38,7 +38,9 @@ from quietly saying otherwise. It asserts:
+      CELL) is named as navigation only.
+
+   5. **Closure of the directory.** The packet holds exactly the expected
+-     names. An extra file is a problem.
++     names (pinned transcriptions plus any explicitly listed classification
++     auxiliaries). An extra file is a problem. Classification auxiliaries do
++     not discharge obligations and must keep controlling flags false.
+
+ The packet directory is taken from ``--packet`` at call time.
+
+@@ -107,7 +109,19 @@ TRANSCRIPTION_NAMES = (
+     "math_console_snapshot.json",
+ )
+
+-EXPECTED_NAMES = frozenset(TRANSCRIPTION_NAMES + ("README.md", "PACKET.json"))
++# Classification-only auxiliaries may sit beside the pinned packet. They are
++# not transcriptions, do not update PACKET.json digests, and must keep every
++# controlling flag false. Adding a name here is eng hygiene for D0 crosswalks;
++# it is not obligation discharge.
++AUXILIARY_CLASSIFICATION_NAMES = frozenset({
++    "DOWNSTREAM_CROSSWALK_20260925.md",
++})
++
++EXPECTED_NAMES = frozenset(
++    TRANSCRIPTION_NAMES
++    + ("README.md", "PACKET.json")
++    + tuple(AUXILIARY_CLASSIFICATION_NAMES)
++)
+
+ README_PHRASES = (
+     "OPEN / HOLD",
+@@ -147,6 +161,18 @@ README_PHRASES = (
+     "ABSENT means the Drive SoT carriers are absent. Nothing is invented to fill them.",
+ )
+
++AUXILIARY_CLASSIFICATION_PHRASES = {
++    "DOWNSTREAM_CROSSWALK_20260925.md": (
++        "dependency classification only",
++        "lemma_closed",
++        "FALSE",
++        "certified_C_H",
++        "ABSENT; historical-route blocker only",
++        "This crosswalk does not perform that governance action",
++        "None sets D3 lemma_closed to true",
++    ),
++}
++
+ NOTE_PHRASES = {
+     "STATUS.md": (
+         "lemma_closed: false",
+@@ -615,7 +641,8 @@ def check_packet(packet_dir: str) -> list:
+             if bad in jetmod_text:
+                 problems.append(f"STATUS_JETMOD.md: forbidden status token {bad!r}")
+
+-    for name, phrases in {"README.md": README_PHRASES, **NOTE_PHRASES}.items():
++    phrase_map = {"README.md": README_PHRASES, **NOTE_PHRASES, **AUXILIARY_CLASSIFICATION_PHRASES}
++    for name, phrases in phrase_map.items():
+         path = os.path.join(packet_dir, name)
+         if not os.path.isfile(path):
+             continue

experiments/d7_drift_scan_20260925/FOLLOWUP_NAV_APPLY.md

@@ -0,0 +1,38 @@
+# Follow-up after #97 merge — restore #92-only nav links
+
+**Scientific effect: NONE.**
+
+#97 landed the crosswalk pages but not the #92 `RESEARCH_INDEX.md` /
+`math_status/README.md` pointers (and left eligibility handoff sounding open).
+
+Apply on hardening tip post-#97:
+
+```bash
+git checkout chatgpt/drive-github-hardening-20260919
+# preferred single apply (nav links + handoff APPLIED banner):
+git apply experiments/d7_drift_scan_20260925/pr97_followup_nav_and_handoff.patch
+# or the two patches separately (either order):
+# git apply experiments/d7_drift_scan_20260925/pr97_followup_nav_links.patch
+# git apply experiments/d7_drift_scan_20260925/pr_handoff_applied.patch
+python3 -m unittest tests.test_navigation -q
+python3 tools/math_status_check.py   # expect problems=0
+```
+
+Also marks Math- eligibility handoff as APPLIED.
+
+## Conflict watch
+
+Open inventable PRs also edit `docs/math_status/README.md`:
+
+- [main #101](https://github.com/d6g8k5htny-coder/main/pull/101) — CERTIFIED q=2
+  REQUIRED CARRIER ABSENT bullet (~line 66)
+- [main #108](https://github.com/d6g8k5htny-coder/main/pull/108) — tip-observe
+  `388a22ca` provenance chain (~line 117)
+
+This follow-up edits a Navigation-only block between those regions. Verified on
+tip `eeebb28`: **nav + #101 + #108 compose in any order** (disjoint hunks). Prefer
+land observe/#101 first if merging separately; do not overwrite the whole README
+from one PR onto another.
+
+`pr97_followup_nav_and_handoff.patch` already includes the handoff APPLIED
+banner (`HANDOFF_APPLIED_APPLY.md`).