Publish stage symmetry witnesses and meter resident bank output

.github/ISSUE_SPECS/722-repair-resident-meter-structural-fixture-and-qualify-the-frozen-implementation.md

@@ -0,0 +1,239 @@
+## Authority and bounded outcome
+
+Parent finding: #559 RT10; lane-B delivery coordinator #560. Supersedes exhausted
+#714 after five candid failed attempts. Independent Astra XHIGH scoping PASS
+authorizes this qualification successor. #714 earns no SOURCE PASS or delivery
+credit; its frozen history and evidence remain intact. User routing is Astra LOW
+implementation and Astra XHIGH verification. At most two active issue slots;
+#710 delivery and this successor are the active pair.
+
+Adopt unchanged product identity ad9685fcfa6631a42123e2b5c2d90ab28e810c20,
+preserved at b0f80bc4fbf39c7a2121daa6caa3b9d4eb7283f9 and terminal checkpoint
+f51ea518. The smallest correction is exactly two test-only delimiter expressions
+in crates/graph/src/runtime.rs. Compose each existing reserved END delimiter
+from constant fragments, preserving its exact computed value while avoiding
+a raw reserved-marker occurrence in the test literal. The scanner currently
+sees eight real BEGIN/END pairs plus two test END matches and correctly refuses
+the resulting 8/10 inventory.
+
+## Ownership and prohibitions
+
+Owned source: only the two structural-test delimiter expressions in
+`crates/graph/src/runtime.rs`. No production dispatch, actual policy directive,
+structural assertion, policy script, marker floor, owner layout, allocation,
+DSP arithmetic, dependency or public API change. No other product repair is
+authorized. This is not a sixth implementation attempt on #714.
+
+The successor owns its numbered spec. Lane-B root additionally owns the
+existing delivery-only pin/lineage paths after #710 is delivered:
+
+- hosts/host-web/web/miso-engine-v1-audio-worklet-artifact.sha256
+- hosts/host-web/qualification/results.json
+- hosts/host-web/BROWSER_DEPLOYMENT_MATRIX.md
+
+All six original #714 feature paths enter integration only as the frozen,
+reviewed inherited implementation. Do not expand this successor into general
+feature work, new harnesses, benchmark campaigns, compiler captures or policy
+relaxation. Any production repair or resource redesign stops this scope.
+
+## Inherited evidence and finite gates
+
+The original #714 product contract and unearned acceptance obligations remain
+mandatory; this issue narrows editable scope, not product correctness. Inherit
+A4 evidence /tmp/issue714-attempt4-review-tll88otr and A5 evidence
+/tmp/issue714-attempt5-review-aj9srv1e, manifest SHA-256
+471ff0b7722872d670114f0499996bd379d3f2681cd889153f26dd237e616848.
+Successful behavior/reference tests, planar dispatch negative control, accepted
+and declined zero-allocation renders with live detector and queue overflow,
+268 tests in each debug/release profile, four strict Clippy suites, formatting
+and earlier policies remain individually earned. They do not retroactively
+turn exhausted #714 into SOURCE PASS. Prove inherited source identity first.
+
+1. Astra LOW changes only the two delimiter expressions. Run formatting, the
+   existing resident/admission/executor structural selectors in debug and
+   release-unwind, then realtime policy and its self-test. Preserve exact
+   commands/exits externally; stop on first unexpected failure. Pause when
+   focused checks pass for root exact-path commit/push and issue synchronization.
+2. Astra XHIGH verifies production bytes, actual directives and computed
+   delimiter are unchanged; the only source diff is the two expressions.
+   Reuse the existing physical admission/order controls to prove both violations
+   remain rejected and restore exact source. No new harness.
+3. Complete only the unrun mandatory checks: realtime audit-leak check/self-test,
+   unfused seal/self-test, native release libraries for rack/graph/builtins/
+   builtins-compiler, Wasm scalar and simd128 release builds using distinct
+   external targets and explicit flags, Wasm realtime atomics check/self-test,
+   existing per-target layout/resource reconciliation. Preserve the original
+   zero retained/peak/largest/allocation delta and one-byte cap-rejection gates.
+   Reuse existing A5 gate7/layout drivers after checking their paths and source
+   identity. No repeated full feature test campaign absent a new concern.
+4. XHIGH reviews inherited plus new evidence and records SOURCE PASS only after
+   every remaining obligation passes. The five-attempt ceiling applies to this
+   materially reduced scope; no automatic expansion after a failure.
+
+## Integration, artifact qualification and closure
+
+Wait for #710 to deliver, then integrate the frozen feature plus two-expression
+correction onto delivered main. Current-base XHIGH review and focused resident
+tests must establish compatibility; conflicts or product drift return to scope
+review before edits. Lane B alone owns artifact qualification and pinning.
+
+Use one existing-builder repin-report invocation; if needed checkpoint its
+observed digest as provisional. Build the ordinary six-file artifact once into
+a fresh external empty directory. Run existing static/render/boot, native/browser
+resource parity, hermetic host, SDK types/headless/package and Chromium/Firefox/
+WebKit qualification with the existing matrix recorder. Only actual successful
+results may update source/digest lineage; preserve non-Wasm payload identities,
+resource expectations and browser floors. No artifact rebuild retries, new
+framework, timing or registry publication.
+
+After independent XHIGH source/artifact PASS, require exact-head PR qualification,
+guarded current-base merge, successful exact-main qualification, synchronized
+issue closure and removal of clean delivered worktrees. Preserve branches,
+history and external evidence. Parent RT10 remains broader than this resident
+meter input slice; no load-elimination, speedup or full-RT10 claim follows.
+
+## Status
+
+Scoped before implementation. #714 is frozen at terminal FAIL; successor
+attempts have not started. Independent XHIGH scope PASS supports only this
+bounded correction and remaining qualification.
+
+## Attempt 1 focused checkpoint
+
+Astra LOW changed exactly the two test delimiter expressions to constant
+concatenations, preserving their computed value. Formatting, resident meter
+2/2, admission 1/1 and executor-order 1/1 selectors passed in both debug and
+release-unwind. Realtime policy and its self-test passed. Nine actual command
+receipts, argv/environment/exits and full outputs are preserved at
+`/tmp/issue722-attempt1-n4fv8jyj/`. Implementation paused for root checkpoint.
+No production or policy change and no SOURCE PASS is claimed. Independent
+XHIGH review and the listed remaining gates follow this pushed checkpoint.
+
+## Astra XHIGH SOURCE PASS
+
+Independent XHIGH accepts exact clean pushed48168771a9680542b6e6837772e7232e6dbe9a78.
+The two computed delimiters, production prefix, eight actual policy regions and
+other five inherited source paths are unchanged. A4/A5 manifests and all earned
+gates revalidated; exhausted #714 retains its failed verdicts.
+
+All remaining gates passed: external admission/order negatives and exact
+restored resident/admission/order checks; realtime audit-leak check/self-test;
+unfused seal/self-test (62 controls); native release libraries with unchanged
+AVX2/FMA flags; separate Wasm release libraries using explicit -simd128 and
++simd128; Wasm realtime atomic check/self-test; existing native/Wasm scalar/
+Wasm SIMD128 layout probes. All fifteen owner layouts match prior values on
+all three targets, with zero retained-total, prepare-peak, largest-allocation
+and allocation-count deltas. Existing cap/one-byte rejection evidence applies.
+No claim of zero static-code or transient-stack growth is made.
+
+Exact commands/flags, nineteen independent receipts (seventeen zero exits and
+two specifically expected negatives), inherited receipts, source identities,
+layout measurements and resource reconciliation are external at
+`/tmp/issue722-review-galtwo33/VERDICT.md` and adjacent records. Manifest SHA-256:
+677246c28c521cfbfe5ca33a3d1359e34188537caddb8aac4ad65d18d2c74324.
+No unexpected failure, new harness, full repeated campaign or compiler-IR
+capture. Integration, artifact qualification and required CI remain root's
+delivery steps. #710 is now delivered at878db254 with both required runs PASS.
+
+## Current-main combined delivery coordination
+
+User routing: Astra LOW implementation, Astra XHIGH scope/verification.
+Independent XHIGH scope PASS permits combined delivery with #722 from delivered
+main878db254. Admit only the separately accepted #709 and #722 deltas. #709's
+rack changes remain owned by #709 and are not repairs or expanded authority
+under exhausted #714 or qualification successor #722. All #722 production
+additions remain unchanged. Verify the shared rack file as the composition of
+accepted deltas; no additional production correction is authorized. Stop on
+conflicts or unexpected source drift. Preserve #713 resident-input machinery.
+
+Root checkpoints each history merge separately. Then run the existing rack
+suite, meter tests, graph resident/executor selectors and compiler resident
+selectors in debug and release-unwind, formatting and realtime policy. Retarget
+and rerun only the existing #709 and #722 allocation harnesses once to establish
+joint-checkout behavior, including live detectors. No new harness/full campaign.
+XHIGH integration PASS precedes one root-owned shared artifact qualification
+and PR/main pair. Each issue retains separate acceptance and closure evidence.
+No timing, full-RT10, nested-forwarding removal or publication claim.
+
+## Preserved-history joint integration checkpoint
+
+Accepted #722 history58a2cbc1 merged cleanly after #709 checkpoint9573fe16 on
+delivered878db254. Five non-rack source files exactly match accepted #722;
+rack contains exactly the accepted #709/#722 deltas with #713 machinery
+preserved. No conflict, new production correction or whitespace error. Both
+imports are separate recoverable checkpoints. Joint focused and allocation
+gates remain pending; no integration or delivery PASS is claimed here.
+
+## Joint current-main qualification checkpoint
+
+Joint source cbc3c4f7917d5704396fa904b68e0c5c021da610 passed all twelve focused
+commands. Each debug/release-unwind profile passed rack50, meter9, graph
+resident2, executor/order1 and compiler resident2 tests. Formatting and realtime
+policy passed. Existing #709 allocation harness proved detector3/3 and24
+allocation/free-free render calls. Existing #722 harness proved detector1/1,
+zero allocations/frees on accepted and declined paths, correct dispatch counts
+and queue overflow/publication counters. Copied harness sources/locks are
+unchanged; locked offline metadata resolves their local dependencies to the
+joint checkout. Actual commands, environments, exits and source identities
+are external at `/tmp/joint709722-gates-itstq384/`. No retry or source edit.
+
+Independent XHIGH SOURCE COMPOSITION PASS reconstructs9573fe16 as the disjoint
+union of accepted #709 and current-main/#713 edits, then removes the exact
+three #722 rack insertion blocks from joint source to recover9573fe16 byte
+for byte. Five other files exactly match accepted #722; merge parents and
+clean source verified. Final joint receipt review precedes shared artifact
+qualification and PR/main delivery.
+
+## Joint integration PASS and provisional artifact
+
+Independent Astra XHIGH accepts joint headb823abb0: exact source composition,
+all twelve focused gate receipts, both retargeted allocation harnesses and
+tested source identities verified without reruns. Root's single repin-report
+invocation then exited0 with digest `ea8f843b254bfc96c277f22d4946db0c33555a281113e221d17f8ec6067a468b`.
+This is recorded as a provisional, unqualified pin; ordinary six-file build
+and shared artifact qualification remain mandatory. Probe argv/environment,
+source head, status and full outputs are external at
+`/tmp/rack-meter-artifact-ydlz4bpc/probe.*`. No performance or delivery claim.
+
+## Shared artifact qualification checkpoint
+
+One ordinary build with repin mode unset reproduced ea8f843b254bfc96c277f22d4946db0c33555a281113e221d17f8ec6067a468b
+and the exact six-file set. All five non-Wasm payload hashes match delivered
+#710. Every existing qualification command passed once against this artifact.
+Let A=/tmp/rack-meter-artifact-ydlz4bpc/artifact:
+
+```sh
+bash scripts/build-web-audioworklet.sh "$A"
+bash scripts/check-web-audioworklet.sh "$A"
+python3 -B scripts/check-browser-expected-resources.py --artifacts "$A"
+bash scripts/test-web-audioworklet.sh
+bash scripts/check-sdk-types.sh
+bash scripts/check-sdk-headless.sh "$A"
+bash scripts/sdk-package.sh check "$A"
+npm --prefix hosts/host-web/qualification run qualify -- --artifacts "$A" --browser all --record-matrix --candidate-commit cbc3c4f7917d5704396fa904b68e0c5c021da610 --self-test-mutations
+node hosts/host-web/qualification/generate-matrix.mjs --check
+```
+
+Exact argv, source heads, external target/temp paths, exits, timestamps and
+full outputs are preserved at `/tmp/rack-meter-artifact-ydlz4bpc/`, including
+`qualification-commands.json` and `artifact-sha256.json`. Static render closure,
+boot memory budget, native/browser resource/PCM parity and26 resource negative
+controls passed. SDK headless188/188 and publishable-tarball gates passed.
+Chromium151.0.7922.34, Firefox153.0 and WebKit26.5 passed all existing gates.
+Matrix changes only source/digest lineage; browser floors, resource expectations
+and fixture digests are unchanged. No retry, new harness, compiler capture,
+performance or physical-device claim.
+
+Both #709/#722 cite this shared artifact evidence. Final XHIGH artifact review,
+exact-head PR qualification, guarded merge and exact-main qualification remain
+required before synchronized closure. No registry publication.
+
+## Independent shared artifact PASS
+
+Astra XHIGH accepts exact pushed401a09f4: product source unchanged from joint
+PASSb823abb0; all actual six-file hashes, probe/ordinary/pin agreement, five
+unchanged non-Wasm identities, eight successful qualification receipts and
+lineage-only matrix diff verified. Both live issue bodies matched the specs.
+No rerun or blocker. This appended verdict changes only decision records;
+required exact-head PR qualification, guarded merge and exact-main qualification
+remain before synchronized closure.